private void GetCaptcha() { #region Create DataTable DataTable dt = new DataTable(); DataColumn dc1 = new DataColumn("Question"); DataColumn dc2 = new DataColumn("Answer"); DataColumn dc3 = new DataColumn("Remark"); dt.Columns.Add(dc1); dt.Columns.Add(dc2); dt.Columns.Add(dc3); DataRow dr; #endregion #region Insert Data string fullPath = Server.MapPath(_tempFile); FileInfo fiTemp = new FileInfo(fullPath); if (fiTemp.Exists) { int i; string[] Line = File.ReadAllLines(fullPath); string[] Field; for (i = 0; i < Line.Length; i++) { Field = Line[i].Split(','); dr = dt.NewRow(); dt.Rows.Add(dr); dr["Question"] = Field[0]; dr["Answer"] = Field[1]; dr["Remark"] = Field[2]; dt.AcceptChanges(); } } #endregion if (dt != null && dt.Rows.Count > 0) { Random ran = new Random(); int id_ran = ran.Next(0, dt.Rows.Count - 1); lblCaptcha.Text = dt.Rows[id_ran]["Question"].ToString(); lblCaptchaRemark.Text = dt.Rows[id_ran]["Remark"].ToString(); hidCaptcha.Value = clsSecurity.Encrypt(dt.Rows[id_ran]["Answer"].ToString()); } }
protected void btSubmit_Click(object sender, EventArgs e) { #region Security if (!clsSecurity.LoginChecker()) { //clsDefault.Redirect("/Register", "กรุณาสมัครสมาชิก หรือ ล็อคอิน ก่อนเข้าใช้งาน"); ucColorBox1.Redirect("/Register", "กรุณาสมัครสมาชิก หรือ ล็อคอินก่อนเข้าใช้งาน"); } #endregion #region Variable StringBuilder strSQL = new StringBuilder(); string outSQL; string outError; string outPhotoName = "Photo"; #endregion #region Update #region Photo Upload if (fuPhoto.HasFile) { if (!clsIO.UploadPhoto(fuPhoto, pathPhoto, clsSecurity.LoginUID, 500, photoWidth, photoHeight, "", 0, out outError, out outPhotoName)) { //lblSQL.Text = clsDefault.AlertMessageColor("เกิดข้อผิดพลาดขณะอัพโหลดภาพ : " + outError, clsDefault.AlertType.Fail); ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล", "เกิดข้อผิดพลาดขณะอัพโหลดภาพ : " + outError, AlertImage: ucColorBox.Alerts.Fail); return; } else { outPhotoName = "'" + pathPhoto + outPhotoName + "'"; } } #endregion #region Check Data if (int.Parse(clsSQL.Return("SELECT COUNT(UID) FROM [USER] WHERE UID='" + clsSecurity.LoginUID + "' AND Password='******'", dbType, cs)) == 0) { //lblPassword.Text = clsDefault.AlertMessageColor("Password ที่คุณกรอกไม่ถูกต้อง", clsDefault.AlertType.Warn); ucColorBox1.Alert("ข้อมูลไม่ถูกต้อง", "Password ที่คุณกรอกไม่ถูกต้อง", AlertImage: ucColorBox.Alerts.Fail); lblPassword.Focus(); return; } #endregion #region SQL Update if (!clsSQL.Update( "[User]", new string[, ] { { "Password", txtPasswordChange.Text.Trim() != ""?"'" + clsSecurity.Encrypt(clsDefault.CodeFilter(txtPasswordChange.Text)) + "'":"Password" }, { "Photo", outPhotoName }, { "UserGroupUID", "'" + ddlUserGroup.SelectedItem.Value + "'" }, { "HN", "'" + clsDefault.CodeFilter(txtHN.Text) + "'" }, { "PName", ddlPName.SelectedItem.Value != "null"?"'" + ddlPName.SelectedItem.Value + "'":"null" }, { "FName", "'" + clsDefault.CodeFilter(txtFName.Text) + "'" }, { "LName", "'" + clsDefault.CodeFilter(txtLName.Text) + "'" }, { "BirthDate", ucDateTimeFlat1.DateTime != DateTime.MinValue?"'" + ucDateTimeFlat1.DateTime.ToString("yyyy-MM-dd HH:mm:ss") + "'":"null" }, { "Gender", rbGender.SelectedItem.Value != "null"?"'" + rbGender.SelectedItem.Value + "'":"null" }, { "Phone", "'" + clsDefault.CodeFilter(txtPhone.Text) + "'" }, { "Mobile", "'" + clsDefault.CodeFilter(txtMobile.Text) + "'" }, { "Email", "'" + clsDefault.CodeFilter(txtEMail.Text) + "'" }, { "Address", "'" + clsDefault.CodeFilter(txtAddress.Text) + "'" }, { "AddressDistrict", "'" + clsDefault.CodeFilter(txtAddressDistrict.Text) + "'" }, { "AddressPrefecture", "'" + clsDefault.CodeFilter(txtAddressPrefecture.Text) + "'" }, { "AddressProvince", "'" + clsDefault.CodeFilter(txtAddressProvince.Text) + "'" }, { "AddressPostal", "'" + clsDefault.CodeFilter(txtAddressPostal.Text) + "'" }, { "Profile", "'" + ucProfile.Text + "'" }, { "Signature", "'" + ucSignature.Text + "'" }, { "MUser", clsSecurity.LoginUID }, { "MWhen", "GETDATE()" }, { "Sort", clsDefault.CodeFilter(txtSort.Text) }, { "Active", cbActive.Checked?"'1'":"'0'" + "'" } }, new string[, ] { { "" + parameterChar + "UID", clsSecurity.LoginUID } }, "UID=" + parameterChar + "UID", dbType, cs, out outSQL )) { //lblSQL.Text = clsDefault.AlertMessageColor("เกิดข้อผิดพลาดขณะบันทึกลงฐานข้อมูล : " + outSQL, clsDefault.AlertType.Fail); ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล", "เกิดข้อผิดพลาดขณะบันทึกลงฐานข้อมูล : " + outSQL, AlertImage: ucColorBox.Alerts.Fail); return; } #endregion //clsDefault.Redirect("/", "บันทึกข้อมูลเรียบร้อยแล้ว"); ucColorBox1.Redirect("/", "บันทึกข้อมูลเรียบร้อยแล้ว"); #endregion }
protected void btSubmit_Click(object sender, EventArgs e) { #region Variable StringBuilder strSQL = new StringBuilder(); string outSQL; string outError; string outPhotoName = "null"; #endregion #region Check Data #region Find Username if (int.Parse(clsSQL.Return("SELECT COUNT(UID) FROM [User] WHERE Username='******'", dbType, cs)) > 0) { //lblUsername.Text = clsDefault.AlertMessageColor("Username นี้มีผู้ใช้งานแล้ว", clsDefault.AlertType.Warn); //lblUsername.Focus(); txtUsername.Focus(); ucColorBox1.Alert("ข้อมูลไม่ถูกต้อง", "Username นี้มีผู้ใช้งานแล้ว", AlertImage: ucColorBox.Alerts.Fail); return; } else { lblUsername.Text = ""; } #endregion #region Find Email if (int.Parse(clsSQL.Return("SELECT COUNT(UID) FROM [User] WHERE Email='" + clsDefault.CodeFilter(txtEMail.Text) + "'", dbType, cs)) > 0) { //lblEmail.Text = clsDefault.AlertMessageColor("Email นี้มีผู้ใช้งานแล้ว", clsDefault.AlertType.Warn); //lblEmail.Focus(); txtEMail.Focus(); ucColorBox1.Alert("ข้อมูลไม่ถูกต้อง", "E-Mail นี้มีผู้ใช้งานแล้ว", AlertImage: ucColorBox.Alerts.Fail); return; } else { lblEmail.Text = ""; } #endregion #region Find UID int UID = clsSQL.GetNewID("UID", "[User]", "", dbType, cs); if (UID == 0) { //lblSQL.Text = clsDefault.AlertMessageColor("เกิดข้อผิดพลาดขณะหา UID", clsDefault.AlertType.Fail); //lblSQL.Focus(); ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล", "ไม่สามารถหา UID ได้", AlertImage: ucColorBox.Alerts.Fail); return; } else { lblSQL.Text = ""; } #endregion #endregion #region Insert #region Photo Upload if (fuPhoto.HasFile) { if (!clsIO.UploadPhoto(fuPhoto, pathPhoto, clsSecurity.LoginUID, 500, photoWidth, photoHeight, "", 0, out outError, out outPhotoName)) { //lblSQL.Text = clsDefault.AlertMessageColor("เกิดข้อผิดพลาดขณะอัพโหลดภาพ : " + outError, clsDefault.AlertType.Fail); //lblSQL.Focus(); ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล", "เกิดข้อผิดพลาดขณะอัพโหลดภาพ", AlertImage: ucColorBox.Alerts.Fail); return; } else { outPhotoName = "'" + pathPhoto + outPhotoName + "'"; } } #endregion #region SQL Insert if (clsSQL.Insert( "[USER]", new string[, ] { { "UID", UID.ToString() }, { "UserGroupUID", "2" }, { "Username", "'" + clsDefault.CodeFilter(txtUsername.Text) + "'" }, { "Password", "'" + clsSecurity.Encrypt(clsDefault.CodeFilter(txtPassword.Text)) + "'" }, { "Photo", outPhotoName }, { "PName", ddlPName.SelectedItem.Value != "null"?"'" + ddlPName.SelectedItem.Value + "'":"null" }, { "FName", "'" + clsDefault.CodeFilter(txtFName.Text) + "'" }, { "LName", "'" + clsDefault.CodeFilter(txtLName.Text) + "'" }, { "HN", "'" + clsDefault.CodeFilter(HNConvert(txtHN.Text)) + "'" }, { "BirthDate", ucDateTimeFlat1.DateTime != DateTime.MinValue?"'" + ucDateTimeFlat1.DateTime.ToString("yyyy-MM-dd HH:mm:ss") + "'":"null" }, { "Gender", rbGender.SelectedItem.Value != "null"?"'" + rbGender.SelectedItem.Value + "'":"null" }, { "Phone", "'" + clsDefault.CodeFilter(txtPhone.Text) + "'" }, { "Mobile", "'" + clsDefault.CodeFilter(txtMobile.Text) + "'" }, { "Email", "'" + clsDefault.CodeFilter(txtEMail.Text) + "'" }, { "Address", "'" + clsDefault.CodeFilter(txtAddress.Text) + "'" }, { "AddressDistrict", "'" + clsDefault.CodeFilter(txtAddressDistrict.Text) + "'" }, { "AddressPrefecture", "'" + clsDefault.CodeFilter(txtAddressPrefecture.Text) + "'" }, { "AddressProvince", "'" + clsDefault.CodeFilter(txtAddressProvince.Text) + "'" }, { "AddressPostal", "'" + clsDefault.CodeFilter(txtAddressPostal.Text) + "'" }, { "Profile", "'" + ucProfile.Text + "'" }, { "Signature", "'" + ucSignature.Text + "'" }, { "CUser", UID.ToString() }, { "CWhen", "GETDATE()" }, { "MUser", UID.ToString() }, { "MWhen", "GETDATE()" }, { "Sort", clsDefault.CodeFilter(txtSort.Text) }, { "Active", "'0'" /*cbActive.Checked?"'1'":"'0'"+"'"*/ } }, new string[, ] { { } }, dbType, cs, out outSQL )) { clsMail clsMail = new clsMail(); string outMessage; string idEncode = Server.UrlEncode(clsSecurity.Encrypt(UID.ToString())); #region Mail to User if (!clsMail.SendTemplate( "UserRegisterConfirm", clsMail.GetEmailList("GlobalFrom"), txtEMail.Text, new string[, ] { { "[Username]", txtUsername.Text }, { "[UIDEncrypt]", idEncode } }, out outMessage)) { //lblSQL.Text = clsDefault.AlertMessageColor("เกิดข้อผิดพลาดขณะส่งเมล์ยืนยัน<br/>"+outMessage, clsDefault.AlertType.Fail); //lblSQL.Focus(); ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล", "เกิดข้อผิดพลาดขณะส่งเมล์ยืนยัน<br/>" + outMessage, AlertImage: ucColorBox.Alerts.Fail); return; } #endregion #region Mail to Admin if (!clsMail.SendTemplate( "UserRegisterAdmin", clsMail.GetEmailList("AutoSystemFrom"), clsMail.GetEmailList("AdminTo"), new string[, ] { { "[Username]", txtUsername.Text } }, out outMessage)) { ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล", "เกิดข้อผิดพลาดขณะส่งเมล์ยืนยัน<br/>" + outMessage, AlertImage: ucColorBox.Alerts.Fail); return; } #endregion } else { //lblSQL.Text = clsDefault.AlertMessageColor("เกิดข้อผิดพลาดขณะบันทึกลงฐานข้อมูล : " + outSQL, clsDefault.AlertType.Fail); //lblSQL.Focus(); ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล", "เกิดข้อผิดพลาดขณะบันทึกข้อมูลลงฐานข้อมูล : " + outSQL, AlertImage: ucColorBox.Alerts.Fail); return; } #endregion //clsDefault.Redirect("/", "บันทึกข้อมูลเรียบร้อยแล้ว"); ucColorBox1.Redirect("/"); #endregion }
protected void btSubmit_Click(object sender, EventArgs e) { #region Authorize if (!clsSecurity.LoginChecker("admin")) { ucColorBox1.Redirect("/", "กรุณาล็อคอินด้วยสิทธิ์ Admin"); return; } #endregion #region Variable var strSQL = new StringBuilder(); var id = 0; var outSQL = ""; var photoName = ""; #endregion #region Procedure try { #region Update if (Request.QueryString["id"] != null && clsDefault.QueryStringChecker("command") == "edit") { id = int.Parse(Request.QueryString["id"].ToString()); #region Photo Upload if (fuPhoto.HasFile) { var clsIO = new clsIO(); string outErrorMessage; string outFilename; #region Photo if (clsIO.UploadPhoto( fuPhoto, pathUpload, tableDefault + id.ToString(), out outErrorMessage, out outFilename, maxWidth: photoWidth, maxHeight: photoHeight)) { photoName = outFilename; } else { ucColorBox1.Alert("เกิดข้อผิดพลาด", "เกิดข้อผิดพลาดขณะอัพโหลดไฟล์รูปภาพ<br/>" + outErrorMessage, AlertImage: ucColorBox.Alerts.Fail); return; } #endregion } #endregion if (clsSQL.Update(tableDefault, new string[, ] { { "Photo", (!string.IsNullOrEmpty(photoName)?"'" + pathUpload + photoName + "'":"Photo") }, { "UserGroupUID", ddlUserGroup.SelectedItem.Value }, { "PName", "'" + ddlPName.SelectedItem.Value + "'" }, { "FName", "'" + txtFName.Text.SQLQueryFilter() + "'" }, { "LName", "'" + txtLName.Text.SQLQueryFilter() + "'" }, { "BirthDate", (ucBirthdate.Text != ""?"'" + ucBirthdate.DateTime.ToString("yyyy-MM-dd") + "'":"null") }, { "Gender", "'" + rbGender.SelectedItem.Value + "'" }, { "NID", "'" + txtNID.Text.SQLQueryFilter() + "'" }, { "Phone", "'" + txtPhone.Text.SQLQueryFilter() + "'" }, { "Mobile", "'" + txtMobile.Text.SQLQueryFilter() + "'" }, { "Email", "'" + txtEmail.Text.SQLQueryFilter() + "'" }, { "Address", "'" + txtAddress.Text.SQLQueryFilter() + "'" }, { "AddressDistrict", "'" + txtAddressDistrict.Text.SQLQueryFilter() + "'" }, { "AddressPrefecture", "'" + txtAddressPrefecture.Text.SQLQueryFilter() + "'" }, { "AddressProvince", "'" + txtAddressProvince.Text.SQLQueryFilter() + "'" }, { "AddressPostal", "'" + txtAddressPostal.Text.SQLQueryFilter() + "'" }, { "Profile", "'" + ucProfile.Text.SQLQueryFilter() + "'" }, { "Signature", "'" + ucSignature.Text.SQLQueryFilter() + "'" }, { "MUser", "'" + clsSecurity.LoginUID + "'" }, { "MWhen", functionGetDate }, { "Sort", clsSQL.CodeFilter(txtSort.Text) }, { "StatusFlag", "'" + (cbActive.Checked ? "A" : "I") + "'" } }, new string[, ] { { parameterChar + "UID", id.ToString() } }, "UID=" + parameterChar + "UID", out outSQL)) { ucColorBox1.ReloadParent(); } else { ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล<br/>", outSQL, AlertImage: ucColorBox.Alerts.Fail); } } #endregion #region Insert else { #region Photo Upload if (fuPhoto.HasFile) { var clsIO = new clsIO(); string outErrorMessage; string outFilename; #region Photo if (clsIO.UploadPhoto( fuPhoto, pathUpload, tableDefault + id.ToString(), out outErrorMessage, out outFilename, maxWidth: photoWidth, maxHeight: photoHeight)) { photoName = outFilename; } else { ucColorBox1.Alert("เกิดข้อผิดพลาด", "เกิดข้อผิดพลาดขณะอัพโหลดไฟล์รูปภาพ<br/>" + outErrorMessage, AlertImage: ucColorBox.Alerts.Fail); return; } #endregion } #endregion if (clsSQL.Insert(tableDefault, new string[, ] { { "UserGroupUID", ddlUserGroup.SelectedItem.Value }, { "[Username]", "'" + txtUsername.Text.SQLQueryFilter() + "'" }, { "Password", "'" + clsSecurity.Encrypt(txtPassword.Text) + "'" }, { "PName", "'" + ddlPName.SelectedItem.Value + "'" }, { "FName", "'" + txtFName.Text.SQLQueryFilter() + "'" }, { "LName", "'" + txtLName.Text.SQLQueryFilter() + "'" }, { "BirthDate", (ucBirthdate.Text != ""?"'" + ucBirthdate.DateTime.ToString("yyyy-MM-dd") + "'":"null") }, { "Gender", "'" + rbGender.SelectedItem.Value + "'" }, { "NID", "'" + txtNID.Text.SQLQueryFilter() + "'" }, { "Phone", "'" + txtPhone.Text.SQLQueryFilter() + "'" }, { "Mobile", "'" + txtMobile.Text.SQLQueryFilter() + "'" }, { "Email", "'" + txtEmail.Text.SQLQueryFilter() + "'" }, { "[Address]", "'" + txtAddress.Text.SQLQueryFilter() + "'" }, { "AddressDistrict", "'" + txtAddressDistrict.Text.SQLQueryFilter() + "'" }, { "AddressPrefecture", "'" + txtAddressPrefecture.Text.SQLQueryFilter() + "'" }, { "AddressProvince", "'" + txtAddressProvince.Text.SQLQueryFilter() + "'" }, { "AddressPostal", "'" + txtAddressPostal.Text.SQLQueryFilter() + "'" }, { "Profile", "'" + ucProfile.Text.SQLQueryFilter() + "'" }, { "Signature", "'" + ucSignature.Text.SQLQueryFilter() + "'" }, { "CUser", "'" + clsSecurity.LoginUID + "'" }, { "CWhen", functionGetDate }, { "MUser", "'" + clsSecurity.LoginUID + "'" }, { "MWhen", functionGetDate }, { "Sort", clsSQL.CodeFilter(txtSort.Text) }, { "StatusFlag", "'" + (cbActive.Checked ? "A" : "I") + "'" } }, new string[, ] { { } }, out outSQL)) { ucColorBox1.ReloadParent(); } else { ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล<br/>", outSQL, AlertImage: ucColorBox.Alerts.Fail); } } #endregion } catch (Exception ex) { lblSQL.Text = "<div style='color:red;'>เกิดข้อผิดพลาด : " + ex.Message + "</div>"; lblSQL.Focus(); } #endregion }
private void setSavePassword() { if (txtPassword.Text.Trim() != "") { var clsData = new clsDataNative(); var clsSecurity = new clsSecurity(); clsData.AppConfigUpdater("savePassword", clsSecurity.Encrypt(txtPassword.Text.Trim())); } }