public ActionResult Register([Bind(Include = "UserID,Email,Password,FirstName,LastName,IsAdmin")] User user)
{
if (ModelState.IsValid)
{
using (GOLDBEntities database = new GOLDBEntities())
{
// Retrieve a user with the same username and password.
User login = database.Users.FirstOrDefault(u => u.Email == user.Email &&
u.Password == user.Password);
// If successful set the session variables and go to Member page.
if (login == null)
{
Session["Username"] = user.Email;
Session["Name"] = user.FirstName;
user.IsAdmin = false;
user.Password = Crypter.Blowfish.Crypt(user.Password);
db.Users.Add(user);
db.SaveChanges();
return(RedirectToAction("Index", "Home"));
}
}
}
return(View(user));
}
public ActionResult LoginPost([Bind(Include = "Email,Password")] User user)
{
/* UsersEntities is the name provided when you created your model
* if you changed yours during the creation of the model, then you
* will find the name of the entity in your Web.config file in the
* connection string. This object represents your database.*/
using (GOLDBEntities database = new GOLDBEntities())
{
// Retrieve a user with the same username and password.
//User login = database.Users.FirstOrDefault(u => u.Email == user.Email &&
// u.Password == user.Password);
User login = database.Users.FirstOrDefault(u => u.Email == user.Email);
// If successful set the session variables and go to Member page.
if (login != null && Crypter.CheckPassword(user.Password, login.Password))
{
Session["Username"] = login.Email;
Session["Name"] = login.FirstName;
return(RedirectToAction("Index", "Home"));
}
}
// Otherwise return them to the login page
return(View(user));
}
protected void Button1_Click(object sender, EventArgs e)
{
var email = Email.Text;
var password = Password.Text;
User user = new User {
Email = email, Password = password
};
using (GOLDBEntities database = new GOLDBEntities())
{
// Retrieve a user with the same username and password.
User login = database.Users.FirstOrDefault(u => u.Email == user.Email &&
u.Password == user.Password);
// If successful set the session variables and go to Member page.
if (login != null && login.IsAdmin)
{
Session["Username"] = login.Email;
Session["Name"] = login.FirstName;
//LoginResult.Text = "Login successful!";
//Server.Transfer("UserList.aspx");
Response.Redirect("UserList.aspx");
}
// TODO:
// redirect to a page
}
}
