protected void btnLogin_Click(object sender, System.EventArgs e)
{
int type = Int32.Parse(ddlType.SelectedItem.Value);
string user = txtUser.Text.Trim();
string inputkey = txtKey.Text.Trim();
string key = "";
string sql = "";
DataSet ds;
switch (type)
{
case 1: //学生
sql = "select SKey from Student where SId like '" + user + "'";
ds = Db.ExecuteSelectSql(sql);
if (ds != null && ds.Tables.Count > 0 && ds.Tables[0].Rows.Count > 0 && !ds.Tables[0].Rows[0].IsNull(0))
{
key = ds.Tables[0].Rows[0][0].ToString();
if (MyUtility.MD5(inputkey) == key) //密码正确登陆成功
{
Session["Id"] = user;
Session["Type"] = type;
//Response.Write(MyUtility.Alert("学生"+user+"登陆成功"));
Response.Redirect("StudentMain.aspx");
}
else //密码错误
{
Response.Redirect("Error.aspx?code=" + ErrorInfo.ERR_KEYERROR.ToString());
}
}
else //不存在该学生
{
Response.Redirect("Error.aspx?code=" + ErrorInfo.ERR_NOSTUDENT.ToString());
}
break;
case 2: //教师
sql = "select TKey from Teacher where TId like '" + user + "'";
ds = Db.ExecuteSelectSql(sql);
if (ds != null && ds.Tables.Count > 0 && ds.Tables[0].Rows.Count > 0 && !ds.Tables[0].Rows[0].IsNull(0))
{
key = ds.Tables[0].Rows[0][0].ToString();
if (MyUtility.MD5(inputkey) == key) //密码正确登陆成功
{
Session["Id"] = user;
Session["Type"] = type;
//Response.Write(MyUtility.Alert("教师"+user+"登陆成功"));
Response.Redirect("TeacherMain.aspx");
}
else
{
Response.Redirect("Error.aspx?code=" + ErrorInfo.ERR_KEYERROR.ToString());
}
}
else
{
Response.Redirect("Error.aspx?code=" + ErrorInfo.ERR_NOTEACHER.ToString());
}
break;
case 3: //系统管理员
sql = "select AKey from Admin where AId like '" + user + "'";
ds = Db.ExecuteSelectSql(sql);
if (ds != null && ds.Tables.Count > 0 && ds.Tables[0].Rows.Count > 0 && !ds.Tables[0].Rows[0].IsNull(0))
{
key = ds.Tables[0].Rows[0][0].ToString();
if (MyUtility.MD5(inputkey) != key) //密码正确登陆成功
{
Session["Id"] = user;
Session["Type"] = type;
// Response.Write(MyUtility.Alert("系统管理员"+user+"登陆成功"));
Response.Redirect("Admin.aspx");
}
else //密码错误
{
Response.Redirect("Error.aspx?code=" + ErrorInfo.ERR_KEYERROR.ToString());
//Console.WriteLine(MyUtility.MD5(inputkey));
}
}
else //不存在该系统管理员
{
Response.Redirect("Error.aspx?code=" + ErrorInfo.ERR_NOADMIN.ToString());
}
break;
default:
break;
}
}
