//I put methods here to clean up the forms
 public static bool login(string user, string pass, bool hash)
 {
     if (hash)
     {
         pass = Hash.passwordHash(pass);
     }
     try {
         MySqlDataReader reader = new MySqlCommand("SELECT * FROM teacher WHERE login_id = '" + user + "' and pass = '******';", conn).ExecuteReader();
         if (reader.HasRows)
         {
             reader.Read();
             admin = reader.GetBoolean("administrator");
             id    = reader.GetString("login_id");
             reader.Close();
             username = user;
             return(true);
         }
         else
         {
             reader.Close();
         }
     }catch (Exception e) {
         Console.WriteLine(e.StackTrace);
     }
     return(false);
 }
Exemple #2
0
 public static Account GetAccountFromDb(string ndc)
 {
     Locker.EnterReadLock();
     try
     {
         Account         account    = null;
         string          query      = "SELECT * FROM Accounts WHERE Username = '******'";
         MySqlDataReader dataReader = new MySqlCommand(query, AuthDatabaseProvider.Connection).ExecuteReader();
         while (dataReader.Read())
         {
             account                    = new Account();
             account.Username           = ndc;
             account.Password           = dataReader["Password"].ToString();
             account.Nickname           = dataReader["Nickname"].ToString();
             account.Role               = (ServerRoleEnum)dataReader.GetInt32("Role");
             account.Id                 = dataReader.GetInt32("Id");
             account.Banned             = dataReader.GetBoolean("Banned");
             account.MaxCharactersCount = dataReader.GetInt32("MaxCharactersCount");
             account.PointsCount        = dataReader.GetInt32("PointCount");
         }
         dataReader.Close();
         return(account);
     }
     finally
     {
         Locker.ExitReadLock();
     }
 }
Exemple #3
0
        private void FetchData()
        {
            try
            {
                var    S = new StatystykaSQL();
                string SqlString;
                SqlString  = S.SelectObsada(Settings.Default.IdSchool.ToString(), Settings.Default.SchoolYear, rbOkres.Tag.ToString() == "S"?EndOfSemester:EndOfSchoolYear);
                SqlString += S.SelectLiczbaOcen(Settings.Default.IdSchool.ToString(), Settings.Default.SchoolYear, rbOkres.Tag.ToString());
                SqlString += S.SelectStanKlasy(Settings.Default.IdSchool.ToString(), Settings.Default.SchoolYear, rbOkres.Tag.ToString() == "S" ? EndOfSemester : EndOfSchoolYear);
                SqlString += S.SelectStanKlasyWirtualnej(Settings.Default.IdSchool.ToString(), Settings.Default.SchoolYear, rbOkres.Tag.ToString() == "S" ? EndOfSemester : EndOfSchoolYear);
                SqlString += S.CountGroupMember(Settings.Default.IdSchool.ToString(), Settings.Default.SchoolYear);

                using (var R = new MySqlCommand(SqlString, conn).ExecuteReader())
                {
                    lstObsada.Clear();
                    while (R.Read())
                    {
                        lstObsada.Add(new SubjectStaff {
                            Class = new StaffUnit {
                                ID = R.GetInt32("Klasa"), Nazwa = R.GetString("Nazwa_Klasy")
                            },
                            Subject = new SubjectUnit {
                                ID = R.GetInt32("IdPrzedmiot"), Nazwa = R.GetString("Przedmiot"), IdSzkolaPrzedmiot = R.GetInt32("IdSzkolaPrzedmiot")
                            },
                            Teacher = new StaffUnit {
                                ID = R.GetInt32("IdNauczyciel"), Nazwa = R.GetString("Nauczyciel")
                            }, IsVirtual = R.GetBoolean("Virtual")
                        }
                                      );
                    }
                    R.NextResult();

                    lstLiczbaOcen.Clear();
                    while (R.Read())
                    {
                        lstLiczbaOcen.Add(new ScoreInfo {
                            ScoreCount = R.GetInt32("LiczbaOcen"), ScoreWeight = (int)R.GetFloat("Waga"), ClassID = R.GetInt32("Klasa"), SubjectID = R.GetInt32("IdPrzedmiot"), TeacherID = R.GetInt32("Nauczyciel")
                        });
                    }
                    R.NextResult();

                    lstLiczbaUczniow.Clear();
                    while (R.Read())
                    {
                        lstLiczbaUczniow.Add(new StudentCount {
                            ClassID = R.GetInt32("Klasa"), Count = R.GetInt32("StanKlasy")
                        });
                    }
                    R.NextResult();

                    lstLiczbaUczniowNI.Clear();
                    while (R.Read())
                    {
                        lstLiczbaUczniowNI.Add(new VirtualStudentCount {
                            ClassID = R.GetInt32("Klasa"), Count = R.GetInt32("StanKlasy"), SubjectID = R.GetInt32("IdPrzedmiot"), VirtualClassID = R.GetInt32("KlasaWirtualna")
                        });
                    }
                    R.NextResult();

                    lstLiczbaUczniowGrupa.Clear();
                    while (R.Read())
                    {
                        lstLiczbaUczniowGrupa.Add(new SubjectGroupCount {
                            ClassID = R.GetInt32("Klasa"), Count = R.GetInt32("StanGrupy"), SubjectID = R.GetInt32("IdPrzedmiot"), SubjectIdBySchool = R.GetInt32("IdSzkolaPrzedmiot")
                        });
                    }
                }
            }
            catch (Exception)
            {
                throw;
            }
        }
Exemple #4
0
            internal static Dictionary <string, object> Get(int CharacterID)
            {
                Dictionary <string, object> CharacterData = new Dictionary <string, object>();

                MySqlDataReader ResultReader;

                ResultReader = new MySqlCommand($"select * FROM usercharacter WHERE UserCharacterID = {CharacterID}")
                {
                    Connection = Connection
                }.ExecuteReader();

                ResultReader.Read();

                CharacterData.Add("CharacterID", ResultReader.GetInt64(0));
                CharacterData.Add("Name", ResultReader.GetString(2)); //The 0 here is an Ordinal
                CharacterData.Add("GuildID", ResultReader.GetInt64(3));
                CharacterData.Add("Credits", ResultReader.GetInt64(4));
                CharacterData.Add("LastInInstanceID", ResultReader.GetInt16(5));
                CharacterData.Add("LastInInstance", ResultReader.GetInt64(6));
                CharacterData.Add("PositionX", ResultReader.GetFloat(7));
                CharacterData.Add("PositionY", ResultReader.GetFloat(8));
                CharacterData.Add("Deleted", ResultReader.GetBoolean(10));

                ResultReader.Close();

                ResultReader = new MySqlCommand($"select * FROM usercharacterxp WHERE UserCharacterID = {CharacterID}")
                {
                    Connection = Connection
                }.ExecuteReader();

                ResultReader.Read();
                CharacterData.Add("MageXP", ResultReader.GetInt64(1));
                CharacterData.Add("HealerXP", ResultReader.GetInt64(2));
                CharacterData.Add("AttackerXP", ResultReader.GetInt64(3));
                CharacterData.Add("TankXP", ResultReader.GetInt64(4));
                CharacterData.Add("WoodcuttingXP", ResultReader.GetInt64(5));
                CharacterData.Add("CombatXP", ResultReader.GetInt64(6));

                ResultReader.Close();

                ResultReader = new MySqlCommand($"select * FROM usercharacteroutfit WHERE CharacterID = {CharacterID} AND IsEquipped = 1")
                {
                    Connection = Connection
                }.ExecuteReader();

                ResultReader.Read();
                CharacterData.Add("HeadIndex", ResultReader.GetInt16(3));
                CharacterData.Add("HeadColor", ResultReader.GetString(4));
                CharacterData.Add("HairIndex", ResultReader.GetInt16(5));
                CharacterData.Add("HairColor", ResultReader.GetString(6));
                CharacterData.Add("EyesIndex", ResultReader.GetInt16(7));
                CharacterData.Add("EyesColor", ResultReader.GetString(8));
                CharacterData.Add("TorsoIndex", ResultReader.GetInt16(9));
                CharacterData.Add("TorsoColor", ResultReader.GetString(10));
                CharacterData.Add("ArmsIndex", ResultReader.GetInt16(11));
                CharacterData.Add("ArmsColor", ResultReader.GetString(12));
                CharacterData.Add("HandsIndex", ResultReader.GetInt16(13));
                CharacterData.Add("HandsColor", ResultReader.GetString(14));
                CharacterData.Add("LegsIndex", ResultReader.GetInt16(15));
                CharacterData.Add("LegsColor", ResultReader.GetString(16));
                CharacterData.Add("FeetIndex", ResultReader.GetInt16(17));
                CharacterData.Add("FeetColor", ResultReader.GetString(18));

                ResultReader.Close();

                return(CharacterData);
            }
Exemple #5
0
        // Users

        static public Tuple <int, string, bool> Login(string username, string password)
        {
            var query = "select id, username, password, is_admin from users where username = '******' AND password = SHA2('" +
                        MySqlHelper.EscapeString(password) +
                        "', 256);";

            Tuple <int, string, bool> result = null;

            if (OpenConnection())
            {
                var reader = new MySqlCommand(query, connection).ExecuteReader();

                if (reader.Read())
                {
                    result = new Tuple <int, string, bool>(reader.GetInt32("id"), reader.GetString("username"), reader.GetBoolean("is_admin"));
                }

                reader.Close();
            }

            CloseConnection();
            return(result);
        }