//[ValidateAntiForgeryToken] public async Task<ActionResult> Login(LoginViewModel model, string returnUrl) { if (Request.Params["username"] != null && Request.Params["username"].Trim() != "") { int Id = Convert.ToInt32(Request.Params["username"]); string pwd = Request.Params["password"]; BLL.UserInfo bll = new BLL.UserInfo(); if (bll.GetRecordCount("Uid=" + Id.ToString() + " and Pwd='" + pwd + "'") == 1) { return Redirect("/MyCenter/Index"); } } if (!ModelState.IsValid) { return View(model); } // This doesn't count login failures towards account lockout // To enable password failures to trigger account lockout, change to shouldLockout: true var result = await SignInManager.PasswordSignInAsync(model.Email, model.Password, model.RememberMe, shouldLockout: false); switch (result) { case SignInStatus.Success: return RedirectToLocal(returnUrl); case SignInStatus.LockedOut: return View("Lockout"); case SignInStatus.RequiresVerification: return RedirectToAction("SendCode", new { ReturnUrl = returnUrl, RememberMe = model.RememberMe }); case SignInStatus.Failure: default: ModelState.AddModelError("", "Invalid login attempt."); return View(model); } }