/*驗證帳號是否存在*/
private void txtID_Validating(object sender, CancelEventArgs e)
{
lblAlarmId.Visible = false;
txtPWD.Enabled = true;
txtNewPwd.Enabled = true;
txtNewPwdVer.Enabled = true;
btnSavePwd.Enabled = true;
string sId = "";
sId = txtID.Text;
if (sId != "")
{
if (ClsShareFunc.CheckInDb(ClsShareFunc.DbAdmin(), sId, "modify") == false)
{
if (ClsShareFunc.CheckInDb(ClsShareFunc.DbCom(), sId, "modify") == false)
{
//兩個db皆無
lblAlarmId.Visible = true;
txtPWD.Enabled = true;
txtNewPwd.Enabled = false;
txtNewPwdVer.Enabled = false;
btnSavePwd.Enabled = false;
}
}
}
}
private void LoginSuccess(string sType, string sID, string sName)
{
string ID = "";
ClsShareFunc.sChkID = sID;
ID = ClsShareFunc.replaceID(sID, 1, 4);
Name = sName;
BioBank NewFrm = new BioBank();
NewFrm.Text = "【" + sType + "】 ID: " + ID + " Name: " + sName;
NewFrm.Show();
this.Hide();
}
//檔案名稱，匯出EXCEL
private void btnExlExp_Click(object sender, EventArgs e)
{
string fileName = txtFileName.Text;
if (txtPath.Text != "" && txtFileName.Text != "")
{
ClsShareFunc.OutPutExcel(ClsShareFunc.nowDGV, txtPath.Text, fileName);
this.Close();
}
else
{
MessageBox.Show("請選擇路徑，檔名不可為空白!");
}
}
private bool chkPwdDate(string id)
{
using (SqlConnection sCon = BioBank_Conn.Class_biobank_conn.DB_SEC_conn())
{
string sSQL = "";
string tmpDate = "";
string tmpY = "";
string tmpM = "";
string tmpD = "";
DateTime cDate = new DateTime();
sCon.Open();
sSQL = "select chUserID, chLastModPwdDT from BioCommonLoginTbl where chUserID = '" + id + "' Union select chUserID, chLastModPwdDT from BioAdministratorKeyTbl where chUserID = '" + id + "'";
SqlCommand sCmd = new SqlCommand(sSQL, sCon);
SqlDataReader sRead = sCmd.ExecuteReader();
if (sRead.HasRows)
{
while (sRead.Read())
{
tmpY = (Convert.ToInt32(ClsShareFunc.gfunCheck(sRead["chLastModPwdDT"]).Substring(0, 3)) + 1911).ToString();
tmpM = ClsShareFunc.gfunCheck(sRead["chLastModPwdDT"]).Substring(3, 2);
tmpD = ClsShareFunc.gfunCheck(sRead["chLastModPwdDT"]).Substring(5, 2);
tmpDate = tmpY + "/" + tmpM + "/" + tmpD;
cDate = Convert.ToDateTime(tmpDate);
if (cDate.AddMonths(6) >= DateTime.Now)
{
ClsShareFunc.insEvenLogt("1-13", id, "", "", "密碼已更改--");
return(true);
}
else
{
return(false);
}
}
return(false);
}
else
{
return(false);
}
}
}
/*驗證txtNewPwdVer*/
private void txtNewPwdVer_Validating(object sender, CancelEventArgs e)
{
string sPwdVer = "";
sPwdVer = txtNewPwdVer.Text;
/*.驗證正確性*/
if (sPwdVer != "" && ClsShareFunc.gfunCheckPwd(sPwdVer) == false)
{
lblAlarm2.Visible = true;
txtNewPwdVer.Text = "";
btnSavePwd.Enabled = false;
}
else
{
lblAlarm2.Visible = false;
btnSavePwd.Enabled = true;
}
}
private void btnSavePwd_Click(object sender, EventArgs e)
{
string ID = txtID.Text;
string sPwd = "";
string sPwdVer = "";
string sOldPwd = "";
StringBuilder sbMsg = new StringBuilder();
sOldPwd = txtPWD.Text;
sPwd = txtNewPwd.Text;
sPwdVer = txtNewPwdVer.Text;
/*1.帳號不為空白*/
if (ID != "")
{
//密碼不可以一樣
if (sOldPwd == sPwd || sOldPwd == sPwdVer)
{
sbMsg.Append("密碼不能與之前相同");
MessageBox.Show(sbMsg.ToString());
return;
}
/*3.密碼輸入相同*/
if (sPwd == sPwdVer)
{
if (VerAction("修改") == false)
{
return;
}
/*4.帳號存在Administrator db*/
if (ClsShareFunc.CheckInDb(ClsShareFunc.DbAdmin(), ID, "modify") == true)
{
/*5.更新密碼*/
//using (SqlConnection updateCon = new SqlConnection(ClsShareFunc.DB_SECConnection()))
using (SqlConnection updateCon = BioBank_Conn.Class_biobank_conn.DB_SEC_conn())
{
updateCon.Open();
SqlCommand updateCmd = new SqlCommand("update BioAdministratorKeyTbl " +
"set chAdministratorKey = '" + GetMD5(sPwdVer) + "',chLastModPwdDT = dbo.GetDateToDate13(getdate())" + " where chUserId = '" + ID + "' ", updateCon);
updateCmd.ExecuteNonQuery();
MessageBox.Show("密碼修改成功!請重新登入。");
InitFrm();
updateCon.Close();
updateCon.Dispose();
}
}
else
{
/*4.帳號存在 Common db*/
if (ClsShareFunc.CheckInDb(ClsShareFunc.DbCom(), ID, "modify") == true)
{
/*5.更新密碼*/
//using (SqlConnection updateCon = new SqlConnection(ClsShareFunc.DB_SECConnection()))
using (SqlConnection updateCon = BioBank_Conn.Class_biobank_conn.DB_SEC_conn())
{
updateCon.Open();
SqlCommand updateCmd = new SqlCommand("update BioCommonLoginTbl " +
"set chPassword = '******',chLastModPwdDT = dbo.GetDateToDate13(getdate())" + " where chUserId = '" + ID + "' ", updateCon);
updateCmd.ExecuteNonQuery();
MessageBox.Show("密碼修改成功!請重新登入。");
InitFrm();
updateCon.Close();
updateCon.Dispose();
}
}
else
{
MessageBox.Show("查無此帳號!");
}
}
}
else
{
sbMsg.Append("\n密碼不一致。請重新輸入!");
MessageBox.Show(sbMsg.ToString());
}
}
else
{
MessageBox.Show("請先登入!");
}
txtNewPwd.Text = "";
txtNewPwdVer.Text = "";
}
//登入前認證
private void checkLoginBefore()
{
string sID;
string sName;
string sPWD;
string sSQL;
string sCorrectPwd;
string sType = "";
sID = ""; sPWD = ""; sSQL = ""; sName = ""; sCorrectPwd = "";
//insert Event Log: 1.Try Login
ClsShareFunc.insEvenLogt("1", sName, "", "", "Try Login--" + txtID.Text);
try
{
sID = txtID.Text;
sPWD = txtPWD.Text;
/*1.check Administrator 中是否有帳號*/
//using (SqlConnection sCon = new SqlConnection(ClsShareFunc.DB_SECConnection()))
using (SqlConnection sCon = BioBank_Conn.Class_biobank_conn.DB_SEC_conn())
{
sCon.Open();
sSQL = " select * from BioAdministratorKeyTbl (nolock) where chUserID = '" + sID + "' ";
SqlCommand sCmd = new SqlCommand(sSQL, sCon);
SqlDataReader sRead = sCmd.ExecuteReader();
if (sRead.HasRows == true)
{
while (sRead.Read())
{
sCorrectPwd = ClsShareFunc.gfunCheck(sRead["chAdministratorKey"]);
sName = ClsShareFunc.gfunCheck(sRead["chUserName"]);
sType = ClsShareFunc.gfunCheck(sRead["chBioEmpFlag"]);
}
sRead.Close();
if (sCorrectPwd == GetMD5(sPWD))
{
if (chkPwdDate(sID))
{
//insert Event Log: 1-11. --Login successful (administrator)--
ClsShareFunc.insEvenLogt("1-11", sName, "", "", "Login successful (administrator)--" + txtID.Text);
LoginSuccess("Administrator (" + sType + ")", sID, sName);
MessageBox.Show("歡迎" +
"\n使用者 : " + sName +
"\n部門 : " + (ClsShareFunc.sLoginDepartment == "M" ? "資訊室" : (ClsShareFunc.sLoginDepartment == "M" ? "生物資料庫" : "???")) +
"\n身分 : " + (ClsShareFunc.sLoginIdentity == "Administrator" ? "主管" : (ClsShareFunc.sLoginIdentity == "Common" ? "一般職員" : "???")));
}
else
{
MessageBox.Show("密碼已到期(半年)，請更新您的密碼!");
lnklblModPwd_LinkClicked(this.lnklblModPwd, null);
return;
}
}
else
{
//insert Event Log: 1-2. --Login fail--
ClsShareFunc.insEvenLogt("1-2", sName, "", "", "Login fail--" + txtID.Text);
MessageBox.Show("密碼錯誤!");
return;
}
}
else /*2.Administrator中沒有就去Common中查*/
{
string sSQL2 = "";
string sEnable = "";
//using (SqlConnection sCon2 = new SqlConnection(ClsShareFunc.DB_SECConnection()))
using (SqlConnection sCon2 = BioBank_Conn.Class_biobank_conn.DB_SEC_conn())
{
sCon2.Open();
sSQL2 = " select * from BioCommonLoginTbl (nolock) where chUserID = '" + sID + "' ";
SqlCommand sCmd2 = new SqlCommand(sSQL2, sCon2);
SqlDataReader sRead2 = sCmd2.ExecuteReader();
if (sRead2.HasRows == true)
{
while (sRead2.Read())
{
sCorrectPwd = ClsShareFunc.gfunCheck(sRead2["chPassword"]);
sName = ClsShareFunc.gfunCheck(sRead2["chUserName"]);
sEnable = ClsShareFunc.gfunCheck(sRead2["chEnableFlag"]);
sType = ClsShareFunc.gfunCheck(sRead2["chBioEmpFlag"]);
}
sRead2.Close();
/*enable = 'Y' -> 可使用 enable = 'N' -> 不可使用*/
if (sEnable == "Y")
{
if (sCorrectPwd == GetMD5(sPWD))
{
if (chkPwdDate(sID))
{
//insert Event Log: 1-12.--Login successful (common)--
ClsShareFunc.insEvenLogt("1-12", sName, "", "", "Login successful (common)--" + txtID.Text);
LoginSuccess("Common (" + sType + ")", sID, sName);
}
else
{
MessageBox.Show("密碼已到期(半年)，請更新您的密碼!");
lnklblModPwd_LinkClicked(this.lnklblModPwd, null);
return;
}
}
else
{
//insert Event Log: 1-2. --Login fail--
ClsShareFunc.insEvenLogt("1-2", sName, "", "", "Login fail--" + txtID.Text);
MessageBox.Show("密碼錯誤!");
return;
}
}
else
{
{
//insert Event Log: 1-2. --Login fail--
ClsShareFunc.insEvenLogt("1-2", sName, "", "", "Login fail--" + txtID.Text);
MessageBox.Show("此帳號尚未Enable, 請洽生物醫學主管!");
return;//exit function
}
}
}
else/*Administrator和Common中皆無此帳號*/
{
{
//insert Event Log: 1-2. --Login fail--
ClsShareFunc.insEvenLogt("1-2", sName, "", "", "Login fail--" + txtID.Text);
MessageBox.Show("查無此帳號!");
return;
}
}
}
}
}
}
catch (Exception ex)
{
MessageBox.Show("登入(buttonLogIn_Click) : " + ex.Message.ToString());
return;
}
}
/*驗證txtPwd*/
private void txtPWD_Validating(object sender, CancelEventArgs e)
{
lblAlarmPwd.Visible = false;
txtNewPwd.Enabled = true;
txtNewPwdVer.Enabled = true;
btnSavePwd.Enabled = true;
string sPwd = "";
string sId = "";
sId = txtID.Text;
sPwd = txtPWD.Text;
if (ClsShareFunc.CheckInDb(ClsShareFunc.DbAdmin(), sId, "modify") == false)
{
if (ClsShareFunc.CheckInDb(ClsShareFunc.DbCom(), sId, "modify") == true)
{
//Common有
string sSQL = "";
//using (SqlConnection sCon = new SqlConnection(ClsShareFunc.DB_SECConnection()))
using (SqlConnection sCon = BioBank_Conn.Class_biobank_conn.DB_SEC_conn())
{
sCon.Open();
sSQL = "select * from BioCommonLoginTbl (nolock) where chUserId = '" + sId + "' ";
SqlCommand sCmd2 = new SqlCommand(sSQL, sCon);
SqlDataReader sRead2 = sCmd2.ExecuteReader();
if (sRead2.HasRows == true)
{
while (sRead2.Read())
{
sPwd = ClsShareFunc.gfunCheck(sRead2["chPassword"]).ToString().Trim();
}
}
sRead2.Close();
sCon.Dispose();
}
if (sPwd != GetMD5(txtPWD.Text))
{
//密碼錯誤
lblAlarmPwd.Visible = true;
txtNewPwd.Enabled = false;
txtNewPwdVer.Enabled = false;
btnSavePwd.Enabled = false;
}
}
}
else
{
//Administrator有
string sSQL2 = "";
//using (SqlConnection sCon = new SqlConnection(ClsShareFunc.DB_SECConnection()))
using (SqlConnection sCon = BioBank_Conn.Class_biobank_conn.DB_SEC_conn())
{
sCon.Open();
sSQL2 = "select * from BioAdministratorKeyTbl (nolock) where chUserId = '" + sId + "' ";
SqlCommand sCmd = new SqlCommand(sSQL2, sCon);
SqlDataReader sRead = sCmd.ExecuteReader();
if (sRead.HasRows == true)
{
while (sRead.Read())
{
sPwd = ClsShareFunc.gfunCheck(sRead["chAdministratorKey"]).ToString().Trim();
}
}
sRead.Close();
}
if (sPwd != GetMD5(txtPWD.Text))
{
//密碼錯誤
lblAlarmPwd.Visible = true;
txtNewPwd.Enabled = false;
txtNewPwdVer.Enabled = false;
btnSavePwd.Enabled = false;
}
}
}
private void buttonLogIn_Click(object sender, EventArgs e)
{
string sID;
string sName;
string sPWD;
string sSQL;
string sCorrectPwd;
string sType = "";
sID = ""; sPWD = ""; sSQL = ""; sName = ""; sCorrectPwd = "";
try
{
sID = txtID.Text;
sPWD = txtPWD.Text;
/*1.check Administrator 中是否有帳號*/
//using (SqlConnection sCon = new SqlConnection(ClsShareFunc.DB_SECConnection()))
using (SqlConnection sCon = BioBank_Conn.Class_biobank_conn.DB_SEC_conn())
{
sCon.Open();
sSQL = " select * from BioAdministratorKeyTbl (nolock) where chUserID = '" + sID + "' ";
SqlCommand sCmd = new SqlCommand(sSQL, sCon);
SqlDataReader sRead = sCmd.ExecuteReader();
if (sRead.HasRows == true)
{
while (sRead.Read())
{
sCorrectPwd = ClsShareFunc.gfunCheck(sRead["chAdministratorKey"]);
sName = ClsShareFunc.gfunCheck(sRead["chUserName"]);
sType = ClsShareFunc.gfunCheck(sRead["chBioEmpFlag"]);
}
sRead.Close();
if (sCorrectPwd == GetMD5(sPWD))
{
LoginSuccess("Administrator (" + sType + ")", sID, sName);
}
}
else /*2.Administrator中沒有就去Common中查*/
{
string sSQL2 = "";
string sEnable = "";
//using (SqlConnection sCon2 = new SqlConnection(ClsShareFunc.DB_SECConnection()))
using (SqlConnection sCon2 = BioBank_Conn.Class_biobank_conn.DB_SEC_conn())
{
sCon2.Open();
sSQL2 = " select * from BioCommonLoginTbl (nolock) where chUserID = '" + sID + "' ";
SqlCommand sCmd2 = new SqlCommand(sSQL2, sCon2);
SqlDataReader sRead2 = sCmd2.ExecuteReader();
if (sRead2.HasRows == true)
{
while (sRead2.Read())
{
sCorrectPwd = ClsShareFunc.gfunCheck(sRead2["chPassword"]);
sName = ClsShareFunc.gfunCheck(sRead2["chUserName"]);
sEnable = ClsShareFunc.gfunCheck(sRead2["chEnableFlag"]);
sType = ClsShareFunc.gfunCheck(sRead2["chBioEmpFlag"]);
}
sRead2.Close();
/*enable = 'Y' -> 可使用 enable = 'N' -> 不可使用*/
if (sEnable == "Y")
{
if (sCorrectPwd == GetMD5(sPWD))
{
LoginSuccess("Common (" + sType + ")", sID, sName);
}
}
else
{
MessageBox.Show("此帳號無使用權限!");
return;//exit function
}
}
else/*Administrator和Common中皆無此帳號*/
{
MessageBox.Show("查無此帳號!");
return;
}
}
}
}
}
catch (Exception ex)
{
MessageBox.Show("登入(buttonLogIn_Click) : " + ex.Message.ToString());
return;
}
}
private void checkPwd()
{
string sSQL = "";
string sPwd = "";
string sID = "";
string sCorrectPwd = "";
PassVerPwd = false;
sPwd = txtPWD.Text;
sID = ClsShareFunc.sChkID;
if (sPwd == "")
{
MessageBox.Show("請輸入密碼!");
return;
}
//switch (ClsShareFunc.sLoginIdentity)
if (pEntrySource == "Function6" || pEntrySource == "Function7" || pEntrySource == "Function10")
{
if (ClsShareFunc.sLoginIdentity != "Administrator")
{
MessageBox.Show("非【生物、資訊主管-Administrator】權限，無法進入！", "Administrator Only!!!");
this.Close();
}
else
{
//using (SqlConnection sCon = new SqlConnection(ClsShareFunc.DB_SECConnection()))
using (SqlConnection sCon = BioBank_Conn.Class_biobank_conn.DB_SEC_conn())
{
sCon.Open();
sSQL = " select * from BioAdministratorKeyTbl (nolock) where chUserID = '" + sID + "' ";
SqlCommand sCmd = new SqlCommand(sSQL, sCon);
SqlDataReader sRead = sCmd.ExecuteReader();
if (sRead.HasRows == true)
{
while (sRead.Read())
{
sCorrectPwd = ClsShareFunc.gfunCheck(sRead["chAdministratorKey"]);
}
sRead.Close();
if (sCorrectPwd == ClsShareFunc.GetMD5(sPwd))
{
PassVerPwd = true;
this.Close();
}
else
{
PassVerPwd = false;
MessageBox.Show("密碼錯誤，請重新輸入！");
txtPWD.Text = "";
}
}
}
}
}
if (pEntrySource == "Function8")
{
if (ClsShareFunc.sLoginIdentity != "Common")
{
MessageBox.Show("需先以一般行政同仁權限進入【再輔以生物、資訊主管-Administrator 權限進入】！", "行政同仁 First!!!");
return;
}
else
{
if (txtID.Text.Trim() == "" || txtPWD.Text.Trim() == "")
{
MessageBox.Show("ID 及 PWD不可為空白!");
return;
}
//using (SqlConnection sCon = new SqlConnection(ClsShareFunc.DB_SECConnection()))
using (SqlConnection sCon = BioBank_Conn.Class_biobank_conn.DB_SEC_conn())
{
sCon.Open();
sSQL = " select * from BioAdministratorKeyTbl (nolock) where chUserID = '" + txtID.Text.Trim() + "' ";
SqlCommand sCmd = new SqlCommand(sSQL, sCon);
SqlDataReader sRead = sCmd.ExecuteReader();
if (sRead.HasRows == true)
{
while (sRead.Read())
{
sCorrectPwd = ClsShareFunc.gfunCheck(sRead["chAdministratorKey"]);
}
sRead.Close();
if (sCorrectPwd == ClsShareFunc.GetMD5(sPwd))
{
PassVerPwd = true;
BioBank.pFunction8_AdminID = txtID.Text.Trim();
this.Close();
}
else
{
PassVerPwd = false;
MessageBox.Show("密碼錯誤，請重新輸入！");
txtPWD.Text = "";
}
}
else
{
PassVerPwd = false;
MessageBox.Show("ID 或 密碼錯誤，請重新輸入！");
txtPWD.Text = "";
}
}
}
}
}