protected void btnLogin_Click(object sender, EventArgs e)
{
txtCheckCode.Text = "";
if (!IsValid)
{
return;
}
txtAccount.Text = txtAccount.Text.Trim();
txtPassword.Text = txtPassword.Text.Trim();
//登入驗證
EmployeeToLogin empVerify = empAuth.GetEmployeeDataToLogin(txtAccount.Text);
if (empVerify == null && empAuth.GetDbErrMsg() != "")
{
//異常錯誤
ShowErrorMsg(string.Format("{0}: {1}", Resources.Lang.ErrMsg_Exception, empAuth.GetDbErrMsg()));
//新增後端操作記錄
empAuth.InsertBackEndLogData(new BackEndLogData()
{
EmpAccount = "",
Description = string.Format("．帳號登入驗證時發生異常錯誤，帳號[{0}] ．An exception error occurred during login verification! Account[{0}]", txtAccount.Text),
IP = c.GetClientIP()
});
//檢查登入失敗次數,是否顯示驗證圖
CheckLoginFailedCountToShowCaptcha(true);
return;
}
//判斷是否有資料
if (empVerify == null)
{
//沒資料
ShowErrorMsg(ACCOUNT_FAILED_ERRMSG);
//新增後端操作記錄
empAuth.InsertBackEndLogData(new BackEndLogData()
{
EmpAccount = "",
Description = string.Format("．帳號不存在，輸入帳號[{0}] ．Account doesn't exist! Account[{0}]", txtAccount.Text),
IP = c.GetClientIP()
});
//檢查登入失敗次數,是否顯示驗證圖
CheckLoginFailedCountToShowCaptcha(true);
return;
}
//有資料
//檢查密碼
string passwordHash = HashUtility.GetPasswordHash(txtPassword.Text);
string empPassword = empVerify.EmpPassword;
bool isPasswordCorrect = false;
if (empVerify.PasswordHashed)
{
isPasswordCorrect = (passwordHash == empPassword);
}
else
{
isPasswordCorrect = (txtPassword.Text == empPassword);
}
if (!isPasswordCorrect)
{
ShowErrorMsg(ACCOUNT_FAILED_ERRMSG);
//新增後端操作記錄
empAuth.InsertBackEndLogData(new BackEndLogData()
{
EmpAccount = "",
Description = string.Format("．密碼錯誤，帳號[{0}] ．Password is incorrect! Account[{0}]", txtAccount.Text),
IP = c.GetClientIP()
});
//檢查登入失敗次數,是否顯示驗證圖
CheckLoginFailedCountToShowCaptcha(true);
return;
}
//檢查是否停權
if (empVerify.IsAccessDenied)
{
ShowErrorMsg(Resources.Lang.ErrMsg_AccountUnavailable);
//新增後端操作記錄
empAuth.InsertBackEndLogData(new BackEndLogData()
{
EmpAccount = "",
Description = string.Format("．帳號停用，帳號[{0}] ．Account is denied! Account[{0}]", txtAccount.Text),
IP = c.GetClientIP()
});
//檢查登入失敗次數,是否顯示驗證圖
CheckLoginFailedCountToShowCaptcha(true);
return;
}
//檢查上架日期
if (string.Compare(txtAccount.Text, "admin", true) != 0) // 不檢查帳號 admin
{
DateTime startDate = empVerify.StartDate.Value.Date;
DateTime endDate = empVerify.EndDate.Value.Date;
DateTime today = DateTime.Today;
if (today < startDate || endDate < today)
{
ShowErrorMsg(Resources.Lang.ErrMsg_AccountUnavailable);
//新增後端操作記錄
empAuth.InsertBackEndLogData(new BackEndLogData()
{
EmpAccount = "",
Description = string.Format("．帳號超出有效範圍，帳號[{0}] ．Account validation date is out of range! Account[{0}]", txtAccount.Text),
IP = c.GetClientIP()
});
//檢查登入失敗次數,是否顯示驗證圖
CheckLoginFailedCountToShowCaptcha(true);
return;
}
}
//記錄登入時間與IP
empAuth.UpdateEmployeeLoginInfo(txtAccount.Text, c.GetClientIP());
//確認可登入後,取得員工資料
EmployeeForBackend emp = empAuth.GetEmployeeData(txtAccount.Text);
if (emp == null && empAuth.GetDbErrMsg() != "")
{
//異常錯誤
ShowErrorMsg(string.Format("{0}: {1}", Resources.Lang.ErrMsg_Exception, empAuth.GetDbErrMsg()));
//新增後端操作記錄
empAuth.InsertBackEndLogData(new BackEndLogData()
{
EmpAccount = "",
Description = string.Format("．帳號登入取得使用者資料時發生異常錯誤，帳號[{0}] ．An exception error occurred during obtaining user profile! Account[{0}]", txtAccount.Text),
IP = c.GetClientIP()
});
//檢查登入失敗次數,是否顯示驗證圖
CheckLoginFailedCountToShowCaptcha(true);
return;
}
//清除登入失敗次數
c.seLoginFailedCount = 0;
DateTime
thisLoginTime = DateTime.MinValue,
lastLoginTime = DateTime.MinValue;
if (emp.ThisLoginTime.HasValue)
{
thisLoginTime = emp.ThisLoginTime.Value;
}
if (emp.LastLoginTime.HasValue)
{
lastLoginTime = emp.LastLoginTime.Value;
}
LoginEmployeeData loginEmpData = new LoginEmployeeData()
{
EmpId = emp.EmpId,
EmpName = emp.EmpName,
Email = emp.Email,
DeptId = emp.DeptId,
DeptName = emp.DeptName,
RoleId = emp.RoleId,
RoleName = emp.RoleName,
RoleDisplayName = emp.RoleDisplayName,
StartDate = emp.StartDate.Value,
EndDate = emp.EndDate.Value,
EmpAccount = emp.EmpAccount,
ThisLoginTime = thisLoginTime,
ThisLoginIP = emp.ThisLoginIP,
LastLoginTime = lastLoginTime,
LastLoginIP = emp.LastLoginIP
};
c.SaveLoginEmployeeDataIntoSession(loginEmpData);
//新增後端操作記錄
empAuth.InsertBackEndLogData(new BackEndLogData()
{
EmpAccount = c.GetEmpAccount(),
Description = "．登入系統！ ．Logged in!",
IP = c.GetClientIP()
});
//記錄指定語系
c.seLangNoOfBackend = c.qsLangNo;
//設定已登入
FormsAuthentication.RedirectFromLoginPage(c.seLoginEmpData.EmpAccount, false);
/* 需要帶入額外參數時使用
* if (string.IsNullOrEmpty(Request.QueryString["ReturnUrl"]))
* {
* FormsAuthentication.SetAuthCookie(c.seLoginEmpData.EmpAccount, false);
* Response.Redirect(FormsAuthentication.DefaultUrl + "?l=" + c.qsLangNo.ToString());
* }
*/
}