public ActionResult SetPwd(FormCollection fc)
{
string oldPwd = fc["txtOldPwd"];
string newPwd = fc["txtNewPwd"];
string newConfirmPwd = fc["txtConfirmNewPwd"];
if (string.IsNullOrEmpty(oldPwd))
{
ModelState.AddModelError("OldPwdEmpty", "原密码不能为空");
return(View());
}
if (string.IsNullOrEmpty(newPwd))
{
ModelState.AddModelError("NewPwdEmpty", "新密码不能为空");
return(View());
}
if (newPwd != newConfirmPwd)
{
ModelState.AddModelError("NewPwdNotMatch", "两次输入的新密码不匹配");
return(View());
}
var userInfo = OrderAdminService.Get(OrdersAdminContext.Current.UserName);
var oldEncrptyPwd = Controleng.Common.Utils.MD5(oldPwd);
if (oldEncrptyPwd != userInfo.UserPwd)
{
ModelState.AddModelError("OldPwdNotMatch", "旧密码有误，请重试");
return(View());
}
OrderAdminService.SetPwd(userInfo.Id, newConfirmPwd);
ModelState.AddModelError("Success", "修改成功");
return(View());
}
public ActionResult Login(FormCollection fc)
{
bool error = false;
string userName = fc["txtUserName"];
string userPwd = fc["txtUserPwd"];
if (string.IsNullOrEmpty(userName) || string.IsNullOrEmpty(userPwd))
{
error = true;
ModelState.AddModelError("UserNameOrUserPwdEmpty", "用户名或密码不能为空！");
}
if (!error && ModelState.IsValid)
{
//判断用户是否存在
//判断密码是否正确
if (!OrderAdminService.IsExistsUserName(userName))
{
ModelState.AddModelError("UserNameNotExists", "用户名不存在，请重试！");
}
else if (!OrderAdminService.ValidateForLogin(userName, userPwd))
{
ModelState.AddModelError("UserPwdError", "密码错误，请重试！");
}
else
{
//正确
var userInfo = OrderAdminService.Get(userName);
string _cookieValue = string.Format("{0}#{1}", userInfo.UserName, userInfo.RoleType);
//MD5加密
_cookieValue = Goodspeed.Library.Security.DESCryptography.Encrypt(_cookieValue, System.Configuration.ConfigurationManager.AppSettings["DESKey"]);
//Write cookie
Controleng.Common.Utils.WriteCookie(OrdersAdminContext.LOGINCOOKIEKEY, _cookieValue, COOKIEEXPIRETIME);
Response.Redirect("/");
}
}
return(View());
}