Beispiel #1
0
 /// <summary>
 /// 判断管理员是否已经登录(解决Session超时问题)
 /// </summary>
 public bool IsAdminLogin()
 {
     //如果Session为Null
     if (Session[OSKeys.SESSION_ADMIN_INFO] != null)
     {
         return(true);
     }
     else
     {
         //检查Cookies
         string adminname = Utils.GetCookie("AdminName", "OS");
         string adminpwd  = Utils.GetCookie("AdminPwd", "OS");
         if (adminname != "" && adminpwd != "")
         {
             BLL.managers.manager   bll   = new BLL.managers.manager();
             Model.managers.manager model = bll.GetModel(adminname, adminpwd);
             if (model != null)
             {
                 Session[OSKeys.SESSION_ADMIN_INFO] = model;
                 return(true);
             }
         }
     }
     return(false);
 }
Beispiel #2
0
        private bool DoEdit(int _id)
        {
            bool result = false;

            BLL.managers.manager   bll   = new BLL.managers.manager();
            Model.managers.manager model = bll.GetModel(_id);

            model.role_id   = int.Parse(ddlRoleId.SelectedValue);
            model.role_type = new BLL.managers.manager_role().GetModel(model.role_id).role_type;
            if (cbIsLock.Checked == true)
            {
                model.is_lock = 0;
            }
            else
            {
                model.is_lock = 1;
            }
            //判断密码是否更改
            if (txtPassword.Text.Trim() != defaultpassword)
            {
                //获取用户已生成的salt作为密钥加密
                model.password = DESEncrypt.Encrypt(txtPassword.Text.Trim(), model.salt);
            }
            model.real_name = txtRealName.Text.Trim();
            model.telephone = txtTelephone.Text.Trim();
            model.email     = txtEmail.Text.Trim();

            if (bll.Update(model))
            {
                AddAdminLog(OSEnums.ActionEnum.Edit.ToString(), "修改管理员:" + model.user_name); //记录日志
                result = true;
            }

            return(result);
        }
Beispiel #3
0
 protected void Page_Load(object sender, EventArgs e)
 {
     if (!Page.IsPostBack)
     {
         Model.managers.manager admin_info = GetAdminInfo(); //管理员信息
         //登录信息
         if (admin_info != null)
         {
             BLL.managers.manager_log   bll    = new BLL.managers.manager_log();
             Model.managers.manager_log model1 = bll.GetModel(admin_info.user_name, 1, OSEnums.ActionEnum.Login.ToString());
             if (model1 != null)
             {
                 //本次登录
                 litIP.Text = model1.user_ip;
             }
             Model.managers.manager_log model2 = bll.GetModel(admin_info.user_name, 2, OSEnums.ActionEnum.Login.ToString());
             if (model2 != null)
             {
                 //上一次登录
                 litBackIP.Text   = model2.user_ip;
                 litBackTime.Text = model2.add_time.ToString();
             }
         }
     }
 }
Beispiel #4
0
 protected void Page_Load(object sender, EventArgs e)
 {
     if (!Page.IsPostBack)
     {
         admin_info = GetAdminInfo();
     }
 }
Beispiel #5
0
        protected void Page_Load(object sender, EventArgs e)
        {
            string _action = OSRequest.GetQueryString("action");

            if (!string.IsNullOrEmpty(_action) && _action == OSEnums.ActionEnum.Edit.ToString())
            {
                this.action = OSEnums.ActionEnum.Edit.ToString();//修改类型
                if (this.id == 0)
                {
                    PageErrorMsg("传输参数不正确");
                }
                if (!new BLL.managers.manager().Exists(this.id))
                {
                    PageErrorMsg("记录不存在或已被删除");
                }
            }
            if (!Page.IsPostBack)
            {
                ChkAdminLevel("manager", OSEnums.ActionEnum.View.ToString()); //检查权限
                Model.managers.manager model = GetAdminInfo();                //取得管理员信息
                RoleBind(ddlRoleId, model.role_type);
                if (action == OSEnums.ActionEnum.Edit.ToString())             //修改
                {
                    ShowInfo(this.id);
                }
            }
        }
Beispiel #6
0
 protected void Page_Load(object sender, EventArgs e)
 {
     if (!Page.IsPostBack)
     {
         admin_info = GetAdminInfo();
     }
 }
Beispiel #7
0
 protected void Page_Load(object sender, EventArgs e)
 {
     this.keywords = OSRequest.GetQueryString("keywords");
     if (!Page.IsPostBack)
     {
         ChkAdminLevel("manager_role", OSEnums.ActionEnum.View.ToString()); //检查权限
         Model.managers.manager model = GetAdminInfo();                     //取得当前管理员信息
         RptBind("role_type>=" + model.role_type + CombSqlTxt(this.keywords));
     }
 }
Beispiel #8
0
 protected void Page_Load(object sender, EventArgs e)
 {
     this.keywords = OSRequest.GetQueryString("keywords");
     this.pageSize = GetPageSize(10); //每页数量
     if (!Page.IsPostBack)
     {
         ChkAdminLevel("manager_log", OSEnums.ActionEnum.View.ToString()); //检查权限
         model = GetAdminInfo(); //取得当前管理员信息
         RptBind("id>0" + CombSqlTxt(keywords), "add_time desc,id desc");
     }
 }
Beispiel #9
0
 private void RoleTypeBind()
 {
     Model.managers.manager model = GetAdminInfo();
     ddlRoleType.Items.Clear();
     ddlRoleType.Items.Add(new ListItem("请选择类型...", ""));
     if (model.role_type < 2)
     {
         ddlRoleType.Items.Add(new ListItem("超级用户", "1"));
     }
     ddlRoleType.Items.Add(new ListItem("系统用户", "2"));
 }
Beispiel #10
0
 protected void Page_Load(object sender, EventArgs e)
 {
     this.keywords = OSRequest.GetQueryString("keywords");
     this.pageSize = GetPageSize(10); //每页数量
     if (!Page.IsPostBack)
     {
         ChkAdminLevel("manager_log", OSEnums.ActionEnum.View.ToString()); //检查权限
         model = GetAdminInfo();                                           //取得当前管理员信息
         RptBind("id>0" + CombSqlTxt(keywords), "add_time desc,id desc");
     }
 }
Beispiel #11
0
 /// <summary>
 /// 取得管理员信息
 /// </summary>
 public Model.managers.manager GetAdminInfo()
 {
     if (IsAdminLogin())
     {
         Model.managers.manager model = Session[OSKeys.SESSION_ADMIN_INFO] as Model.managers.manager;
         if (model != null)
         {
             return(model);
         }
     }
     return(null);
 }
Beispiel #12
0
        protected void btnSubmit_Click(object sender, EventArgs e)
        {
            string userName   = txtUserName.Text.Trim();
            string userPwd    = txtPassword.Text.Trim();
            string ManageCode = TxtManageCode.Text.Trim();

            if (ManageCode != OS.Web.UI.BasePage.config.emailnickname)
            {
                msgtip.InnerHtml = "管理认证码输入不正确";
                return;
            }
            if (userName.Equals("") || userPwd.Equals(""))
            {
                msgtip.InnerHtml = "请输入用户名或密码";
                return;
            }
            if (Session["AdminLoginSun"] == null)
            {
                Session["AdminLoginSun"] = 1;
            }
            else
            {
                Session["AdminLoginSun"] = Convert.ToInt32(Session["AdminLoginSun"]) + 1;
            }
            //判断登录错误次数
            if (Session["AdminLoginSun"] != null && Convert.ToInt32(Session["AdminLoginSun"]) > 5)
            {
                msgtip.InnerHtml = "错误超过5次,关闭浏览器重新登录!";
                return;
            }
            BLL.managers.manager   bll   = new BLL.managers.manager();
            Model.managers.manager model = bll.GetModel(userName, userPwd, true);
            if (model == null)
            {
                msgtip.InnerHtml = "用户名或密码有误,请重试!";
                return;
            }
            Session[OSKeys.SESSION_ADMIN_INFO] = model;
            Session.Timeout = 45;
            //写入登录日志
            Model.configs.siteconfig siteConfig = new BLL.configs.siteconfig().loadConfig();
            if (siteConfig.logstatus > 0)
            {
                new BLL.managers.manager_log().Add(model.id, model.user_name, OSEnums.ActionEnum.Login.ToString(), "用户登录");
            }
            //写入Cookies
            Utils.WriteCookie("LoginName", model.user_name, 14400);
            Utils.WriteCookie("AdminName", "OS", model.user_name);
            Utils.WriteCookie("AdminPwd", "OS", model.password);
            Response.Redirect("Main.aspx");
            return;
        }
Beispiel #13
0
 /// <summary>
 /// 写入管理日志
 /// </summary>
 /// <param name="action_type"></param>
 /// <param name="remark"></param>
 /// <returns></returns>
 public bool AddAdminLog(string action_type, string remark)
 {
     if (siteConfig.logstatus > 0)
     {
         Model.managers.manager model = GetAdminInfo();
         int newId = new BLL.managers.manager_log().Add(model.id, model.user_name, action_type, remark);
         if (newId > 0)
         {
             return(true);
         }
     }
     return(false);
 }
Beispiel #14
0
        /// <summary>
        /// 检查管理员权限
        /// </summary>
        /// <param name="nav_name">菜单名称</param>
        /// <param name="action_type">操作类型</param>
        public void ChkAdminLevel(string nav_name, string action_type)
        {
            Model.managers.manager    model = GetAdminInfo();
            BLL.managers.manager_role bll   = new BLL.managers.manager_role();
            bool result = bll.Exists(model.role_id, nav_name, action_type);

            if (!result)
            {
                //   string msgbox = "parent.jsdialog(\"错误提示\", \"您没有管理该页面的权限,请勿非法进入!\", \"back\", \"Error\")";
                PageErrorMsg("您没有管理该页面的权限,请勿非法进入!");
                //  Response.Write("<script type=\"text/javascript\">" + msgbox + "</script>");
                //   Response.End();
            }
        }
Beispiel #15
0
        /// <summary>
        /// 得到一个对象实体
        /// </summary>
        public Model.managers.manager GetModel(int id)
        {
            StringBuilder strSql = new StringBuilder();

            strSql.Append("select  top 1 id,role_id,role_type,user_name,password,salt,real_name,telephone,email,is_lock,add_time from " + databaseprefix + "manager ");
            strSql.Append(" where id=@id");
            SqlParameter[] parameters =
            {
                new SqlParameter("@id", SqlDbType.Int, 4)
            };
            parameters[0].Value = id;

            Model.managers.manager model = new Model.managers.manager();
            DataSet ds = DbHelperSQL.Query(strSql.ToString(), parameters);

            if (ds.Tables[0].Rows.Count > 0)
            {
                if (ds.Tables[0].Rows[0]["id"].ToString() != "")
                {
                    model.id = int.Parse(ds.Tables[0].Rows[0]["id"].ToString());
                }
                if (ds.Tables[0].Rows[0]["role_id"].ToString() != "")
                {
                    model.role_id = int.Parse(ds.Tables[0].Rows[0]["role_id"].ToString());
                }
                if (ds.Tables[0].Rows[0]["role_type"].ToString() != "")
                {
                    model.role_type = int.Parse(ds.Tables[0].Rows[0]["role_type"].ToString());
                }
                model.user_name = ds.Tables[0].Rows[0]["user_name"].ToString();
                model.password  = ds.Tables[0].Rows[0]["password"].ToString();
                model.salt      = ds.Tables[0].Rows[0]["salt"].ToString();
                model.real_name = ds.Tables[0].Rows[0]["real_name"].ToString();
                model.telephone = ds.Tables[0].Rows[0]["telephone"].ToString();
                model.email     = ds.Tables[0].Rows[0]["email"].ToString();
                if (ds.Tables[0].Rows[0]["is_lock"].ToString() != "")
                {
                    model.is_lock = int.Parse(ds.Tables[0].Rows[0]["is_lock"].ToString());
                }
                if (ds.Tables[0].Rows[0]["add_time"].ToString() != "")
                {
                    model.add_time = DateTime.Parse(ds.Tables[0].Rows[0]["add_time"].ToString());
                }
                return(model);
            }
            else
            {
                return(null);
            }
        }
Beispiel #16
0
        /// <summary>
        /// 更新一条数据
        /// </summary>
        public bool Update(Model.managers.manager model)
        {
            StringBuilder strSql = new StringBuilder();

            strSql.Append("update " + databaseprefix + "manager set ");
            strSql.Append("role_id=@role_id,");
            strSql.Append("role_type=@role_type,");
            strSql.Append("user_name=@user_name,");
            strSql.Append("password=@password,");
            strSql.Append("real_name=@real_name,");
            strSql.Append("telephone=@telephone,");
            strSql.Append("email=@email,");
            strSql.Append("is_lock=@is_lock,");
            strSql.Append("add_time=@add_time");
            strSql.Append(" where id=@id");
            SqlParameter[] parameters =
            {
                new SqlParameter("@id",        SqlDbType.Int,        4),
                new SqlParameter("@role_id",   SqlDbType.Int,        4),
                new SqlParameter("@role_type", SqlDbType.Int,        4),
                new SqlParameter("@user_name", SqlDbType.NVarChar, 100),
                new SqlParameter("@password",  SqlDbType.NVarChar, 100),
                new SqlParameter("@real_name", SqlDbType.NVarChar,  50),
                new SqlParameter("@telephone", SqlDbType.NVarChar,  30),
                new SqlParameter("@email",     SqlDbType.NVarChar,  30),
                new SqlParameter("@is_lock",   SqlDbType.Int,        4),
                new SqlParameter("@add_time",  SqlDbType.DateTime)
            };
            parameters[0].Value = model.id;
            parameters[1].Value = model.role_id;
            parameters[2].Value = model.role_type;
            parameters[3].Value = model.user_name;
            parameters[4].Value = model.password;
            parameters[5].Value = model.real_name;
            parameters[6].Value = model.telephone;
            parameters[7].Value = model.email;
            parameters[8].Value = model.is_lock;
            parameters[9].Value = model.add_time;

            int rows = DbHelperSQL.ExecuteSql(strSql.ToString(), parameters);

            if (rows > 0)
            {
                return(true);
            }
            else
            {
                return(false);
            }
        }
Beispiel #17
0
        /// <summary>
        /// 增加一条数据
        /// </summary>
        public int Add(Model.managers.manager model)
        {
            StringBuilder strSql = new StringBuilder();

            strSql.Append("insert into " + databaseprefix + "manager(");
            strSql.Append("role_id,role_type,user_name,password,salt,real_name,telephone,email,is_lock,add_time)");
            strSql.Append(" values (");
            strSql.Append("@role_id,@role_type,@user_name,@password,@salt,@real_name,@telephone,@email,@is_lock,@add_time)");
            strSql.Append(";select @@IDENTITY");
            SqlParameter[] parameters =
            {
                new SqlParameter("@role_id",   SqlDbType.Int,        4),
                new SqlParameter("@role_type", SqlDbType.Int,        4),
                new SqlParameter("@user_name", SqlDbType.NVarChar, 100),
                new SqlParameter("@password",  SqlDbType.NVarChar, 100),
                new SqlParameter("@salt",      SqlDbType.NVarChar,  20),
                new SqlParameter("@real_name", SqlDbType.NVarChar,  50),
                new SqlParameter("@telephone", SqlDbType.NVarChar,  30),
                new SqlParameter("@email",     SqlDbType.NVarChar,  30),
                new SqlParameter("@is_lock",   SqlDbType.Int,        4),
                new SqlParameter("@add_time",  SqlDbType.DateTime)
            };
            parameters[0].Value = model.role_id;
            parameters[1].Value = model.role_type;
            parameters[2].Value = model.user_name;
            parameters[3].Value = model.password;
            parameters[4].Value = model.salt;
            parameters[5].Value = model.real_name;
            parameters[6].Value = model.telephone;
            parameters[7].Value = model.email;
            parameters[8].Value = model.is_lock;
            parameters[9].Value = model.add_time;

            object obj = DbHelperSQL.GetSingle(strSql.ToString(), parameters);

            if (obj == null)
            {
                return(0);
            }
            else
            {
                return(Convert.ToInt32(obj));
            }
        }
Beispiel #18
0
        private bool DoAdd()
        {
            Model.managers.manager model = new Model.managers.manager();
            BLL.managers.manager   bll   = new BLL.managers.manager();
            model.role_id   = int.Parse(ddlRoleId.SelectedValue);
            model.role_type = new BLL.managers.manager_role().GetModel(model.role_id).role_type;
            if (cbIsLock.Checked == true)
            {
                model.is_lock = 0;
            }
            else
            {
                model.is_lock = 1;
            }
            //检测用户名是否重复
            if (bll.Exists(txtUserName.Text.Trim()))
            {
                return(false);
            }
            model.user_name = txtUserName.Text.Trim();
            //获得6位的salt加密字符串
            model.salt = Utils.GetCheckCode(6);
            //以随机生成的6位字符串做为密钥加密
            model.password  = DESEncrypt.Encrypt(txtPassword.Text.Trim(), model.salt);
            model.real_name = txtRealName.Text.Trim();
            model.telephone = txtTelephone.Text.Trim();
            model.email     = txtEmail.Text.Trim();
            model.add_time  = DateTime.Now;

            if (bll.Add(model) > 0)
            {
                AddAdminLog(OSEnums.ActionEnum.Add.ToString(), "添加管理员:" + model.user_name); //记录日志
                return(true);
            }
            return(false);
        }
Beispiel #19
0
 private void ShowInfo(int _id)
 {
     BLL.managers.manager   bll   = new BLL.managers.manager();
     Model.managers.manager model = bll.GetModel(_id);
     ddlRoleId.SelectedValue = model.role_id.ToString();
     if (model.is_lock == 0)
     {
         cbIsLock.Checked = true;
     }
     else
     {
         cbIsLock.Checked = false;
     }
     txtUserName.Text     = model.user_name;
     txtUserName.ReadOnly = true;
     txtUserName.Attributes.Remove("ajaxurl");
     if (!string.IsNullOrEmpty(model.password))
     {
         txtPassword.Attributes["value"] = txtPassword1.Attributes["value"] = defaultpassword;
     }
     txtRealName.Text  = model.real_name;
     txtTelephone.Text = model.telephone;
     txtEmail.Text     = model.email;
 }
Beispiel #20
0
        private bool DoAdd()
        {
            Model.managers.manager model = new Model.managers.manager();
            BLL.managers.manager bll = new BLL.managers.manager();
            model.role_id = int.Parse(ddlRoleId.SelectedValue);
            model.role_type = new BLL.managers.manager_role().GetModel(model.role_id).role_type;
            if (cbIsLock.Checked == true)
            {
                model.is_lock = 0;
            }
            else
            {
                model.is_lock = 1;
            }
            //检测用户名是否重复
            if (bll.Exists(txtUserName.Text.Trim()))
            {
                return false;
            }
            model.user_name = txtUserName.Text.Trim();
            //获得6位的salt加密字符串
            model.salt = Utils.GetCheckCode(6);
            //以随机生成的6位字符串做为密钥加密
            model.password = DESEncrypt.Encrypt(txtPassword.Text.Trim(), model.salt);
            model.real_name = txtRealName.Text.Trim();
            model.telephone = txtTelephone.Text.Trim();
            model.email = txtEmail.Text.Trim();
            model.add_time = DateTime.Now;

            if (bll.Add(model) > 0)
            {
                AddAdminLog(OSEnums.ActionEnum.Add.ToString(), "添加管理员:" + model.user_name); //记录日志
                return true;
            }
            return false;
        }
Beispiel #21
0
 /// <summary>
 /// 增加一条数据
 /// </summary>
 public int Add(Model.managers.manager model)
 {
     return(dal.Add(model));
 }
Beispiel #22
0
 /// <summary>
 /// 更新一条数据
 /// </summary>
 public bool Update(Model.managers.manager model)
 {
     return(dal.Update(model));
 }
Beispiel #23
0
        /// <summary>
        /// �õ�һ������ʵ��
        /// </summary>
        public Model.managers.manager GetModel(int id)
        {
            StringBuilder strSql = new StringBuilder();
            strSql.Append("select  top 1 id,role_id,role_type,user_name,password,salt,real_name,telephone,email,is_lock,add_time from " + databaseprefix + "manager ");
            strSql.Append(" where id=@id");
            SqlParameter[] parameters = {
                    new SqlParameter("@id", SqlDbType.Int,4)};
            parameters[0].Value = id;

            Model.managers.manager model = new Model.managers.manager();
            DataSet ds = DbHelperSQL.Query(strSql.ToString(), parameters);
            if (ds.Tables[0].Rows.Count > 0)
            {
                if (ds.Tables[0].Rows[0]["id"].ToString() != "")
                {
                    model.id = int.Parse(ds.Tables[0].Rows[0]["id"].ToString());
                }
                if (ds.Tables[0].Rows[0]["role_id"].ToString() != "")
                {
                    model.role_id = int.Parse(ds.Tables[0].Rows[0]["role_id"].ToString());
                }
                if (ds.Tables[0].Rows[0]["role_type"].ToString() != "")
                {
                    model.role_type = int.Parse(ds.Tables[0].Rows[0]["role_type"].ToString());
                }
                model.user_name = ds.Tables[0].Rows[0]["user_name"].ToString();
                model.password = ds.Tables[0].Rows[0]["password"].ToString();
                model.salt = ds.Tables[0].Rows[0]["salt"].ToString();
                model.real_name = ds.Tables[0].Rows[0]["real_name"].ToString();
                model.telephone = ds.Tables[0].Rows[0]["telephone"].ToString();
                model.email = ds.Tables[0].Rows[0]["email"].ToString();
                if (ds.Tables[0].Rows[0]["is_lock"].ToString() != "")
                {
                    model.is_lock = int.Parse(ds.Tables[0].Rows[0]["is_lock"].ToString());
                }
                if (ds.Tables[0].Rows[0]["add_time"].ToString() != "")
                {
                    model.add_time = DateTime.Parse(ds.Tables[0].Rows[0]["add_time"].ToString());
                }
                return model;
            }
            else
            {
                return null;
            }
        }