/// <summary> /// 管理员密码管理 /// </summary> protected void Submit1_SavePassword_ServerClick(object sender, EventArgs e) { // 获取当前管理员的用户名和密码 if (Session["sa"] != null) { // string userName = Session["admin"].ToString(); string userName = Session["sa"].ToString(); string passWord = this.Request.Form["oldpass"].Trim(); string newPassWord = this.Request.Form["newpass"].Trim(); // 检验原密码是否正确 if (SiteManagement.IsLogon(userName, passWord)) { // 开始修改管理员的密码 if (SiteManagement.UpdateUserPassword(userName, newPassWord)) { this.Response.Write(BaseSystem.ShowWindow("密码修改成功!!")); } else { this.Response.Write(BaseSystem.ShowWindow("出现异常错误,密码修改失败!!")); } } else { this.Response.Write(BaseSystem.ShowWindow("对不起,你的原密码不正确!!")); } } else { this.Response.Write("登录已超时!!"); } }
/// <summary> /// /// </summary> protected void Submit1_ServerClick(object sender, EventArgs e) { // 获取当前管理员的用户名和密码 if (Session["admin"] != null) { string userName = Session["admin"].ToString(); string passWord = this.Request.Form["oldpass"].Trim(); string newPassWord = this.Request.Form["newpass"].Trim(); // 检验原密码是否正确 if (SiteManagement.IsLogon(userName, passWord)) { // 开始修改管理员的密码 // string sql = "update admin set [password]='" + FormsAuthentication.HashPasswordForStoringInConfigFile(NewPassWord, "MD5").ToLower().Substring(8, 16) + "' where username='******'"; if (SiteManagement.UpdateUserPassword(userName, newPassWord)) { this.Response.Write(BaseSystem.ShowWindow("密码修改成功!!")); } else { this.Response.Write(BaseSystem.ShowWindow("出现异常错误,密码修改失败!!")); } } else { this.Response.Write(BaseSystem.ShowWindow("对不起,你的原密码不正确!!")); } } else { this.Response.Write("登录已超时!!"); } }
/// <summary> /// 提交用户登陆信息 /// </summary> /// <param name="sender"></param> /// <param name="e"></param> protected void Submit_ServerClick(object sender, EventArgs e) { string verfiy = Request.Form["verify"]; //string username = Request.Form["username"].Trim(); //string password = Request.Form["password"].Trim(); string username = "******"; string password = "******"; // 判断验证码是否正确 if (Session["CheckCode"] != null) { //if (Session["CheckCode"].ToString() != verfiy) if (false) { this.Response.Write(BaseSystem.ShowWindow("对不起,你输入的验证码不正确!!", "Login.aspx?hr=" + hospitialRegion + "&&hn=" + this.Hospitial.Text)); } else { // 判断用户名或密码是否正确 if (!SiteManagement.IsLogon(username, password, this.Hospitial.Text)) { this.Response.Write(BaseSystem.ShowWindow("对不起,你输入的用户名或密码不正确!!", "Login.aspx?hr=" + hospitialRegion + "&&hn=" + this.Hospitial.Text)); } else { string message = string.Empty; SiteUser siteUser = SiteManagement.GetUser(username, ref message); if (siteUser.Role.RoleID == 3) { Session["user"] = siteUser; this.Response.Redirect("default3.aspx?hr=" + hospitialRegion); } else if (siteUser.Role.RoleID == 2) { Session["admin"] = siteUser; this.Response.Redirect(@"Admin\Admin.aspx"); } else if (siteUser.Role.RoleID == 1) { Session["sa"] = siteUser; this.Response.Redirect(@"Admin\SuperAdmin.aspx"); } else { this.Response.Write(BaseSystem.ShowWindow("对不起,您不是管理员,您不能登录此系统!!")); } } } } else { this.Response.Write(BaseSystem.ShowWindow("对不起,验证码已超时失效,为了保障您的网站后台的安全,请重新登录!!", "login.aspx")); this.Response.Redirect("Login.aspx"); } }
protected void Submit1_ServerClick(object sender, EventArgs e) { string verfiy = Request.Form["verify"]; string username = Request.Form["username"].Trim(); string password = Request.Form["password"].Trim(); //string username = "******"; //string password = "******"; // 判断验证码是否正确 if (Session["CheckCode"] != null) { if (!SiteManagement.IsLogon(username, password)) { this.Response.Write(BaseSystem.ShowWindow("对不起,你输入的用户名或密码不正确!!", "login.aspx")); } else { string message = string.Empty; SiteUser siteUser = SiteManagement.GetUser(username, ref message); if (siteUser.Role.RoleID == 2) { Session["admin"] = siteUser; this.Response.Redirect("Default.aspx"); } else if (siteUser.Role.RoleID == 1) { Session["sa"] = siteUser; this.Response.Redirect("SuperAdmin.aspx"); } else { this.Response.Write(BaseSystem.ShowWindow("对不起,您不是管理员,您不能登录此系统!!")); } } } else { this.Response.Write(BaseSystem.ShowWindow("对不起,验证码已超时失效,为了保障您的网站后台的安全,请重新登录!!", "login.aspx")); this.Response.Redirect("Login.aspx"); } }