public int ForceLogout(string empID)
{
SqlCommand cmd = PMCommand.CtrlCmd();
PMUser.UserName = GetempName(empID);
cmd.CommandText = "delete from wapUserstate where empID = '" + empID + "'";
int state = cmd.ExecuteNonQuery();
PMPublicFuncs.WriteLogs(empID, PMUser.UserName, PMUser.UserIpAdress, "强制登出", DateTime.Now, "用户选择强制登出。", PMUser.UserWeb);
return(state);
}
public DataTable Getlist()
{
DataTable table = new DataTable();
SqlCommand cmd = PMCommand.CtrlCmd();
cmd.CommandText = "select * from wapUserlog";
SqlDataAdapter da = new SqlDataAdapter(cmd);
da.Fill(table);
da.Dispose();
cmd.Connection.Dispose();
return(table);
}
public static string GetuserGuid(string empID)
{
SqlCommand cmd = PMCommand.CtrlCmd();
cmd.Parameters.Add("@EmpID", SqlDbType.VarChar).Value = empID;
cmd.CommandText = "select userGuid from wapUserstate where empID = @EmpID";
SqlDataReader rd = cmd.ExecuteReader();
rd.Read();
string userguid = rd[0].ToString();
rd.Close();
cmd.Connection.Dispose();
return(userguid);
}
public static void DeleteUser()
{
SqlCommand cmd = PMCommand.CtrlCmd();
cmd.CommandText = "delete from wapUserstate where Empid = '" + PMUser.EmpID + "'";
cmd.ExecuteNonQuery();
cmd.Connection.Close();
WriteLogs(PMUser.EmpID, PMUser.UserName, PMUser.UserIpAdress, "用户退出", DateTime.Now, "用户正常退出。", PMUser.UserWeb);
PMUser.EmpID = string.Empty;
PMUser.UserPass = string.Empty;
PMUser.UserIpAdress = string.Empty;
PMUser.UserWeb = string.Empty;
PMUser.UserName = string.Empty;
PMUser.UserGuid = string.Empty;
}
public static void WriteLogs(string empID, string empName, string ipaddress, string model, DateTime time, string message, string webinfo)
{
//写入log
SqlCommand cmd = PMCommand.CtrlCmd();
cmd.Parameters.Add("@empID", SqlDbType.VarChar).Value = empID;
cmd.Parameters.Add("@empName", SqlDbType.VarChar).Value = empName;
cmd.Parameters.Add("@ipaddress", SqlDbType.VarChar).Value = ipaddress;
cmd.Parameters.Add("@model", SqlDbType.VarChar).Value = model;
cmd.Parameters.Add("@time", SqlDbType.DateTime).Value = time;
cmd.Parameters.Add("@message", SqlDbType.VarChar).Value = message;
cmd.Parameters.Add("@webinfo", SqlDbType.VarChar).Value = webinfo;
cmd.CommandText = "insert into wapUserlog (empID,empName,ipAddress,model,logtime,logmessage,webinfomation) values (@empID,@empName,@ipaddress,@model,@time,@message,@webinfo)";
cmd.ExecuteNonQuery();
cmd.Connection.Close();
}
public LoginMessage LoginMessage()
{
List <string> loginInfo = new List <string>();
string empName = GetempName(PMUser.EmpID);
int errortimes = 0;
DateTime errortime = new DateTime();
SqlCommand cmd = PMCommand.CtrlCmd();
cmd.CommandText = "select * from wapUserstate where empID = '" + PMUser.EmpID + "'";
DataTable DtuserState = new DataTable();
SqlDataAdapter dataAdapter = new SqlDataAdapter(cmd);
dataAdapter.Fill(DtuserState);
dataAdapter.Dispose();
cmd.Connection.Close();
LoginMessage loginMessage = new LoginMessage();
if (DtuserState.Rows.Count > 0)
{
errortimes = Convert.ToInt32(DtuserState.Rows[0]["errortimes"]);
errortime = Convert.ToDateTime(DtuserState.Rows[0]["errortime"]);
string online = DtuserState.Rows[0]["online"].ToString();
string ipaddress = DtuserState.Rows[0]["userIpaddress"].ToString();
if (online == "0")
{
//如果已经大于5分钟了，删除数据库记录
if ((DateTime.Now - errortime).Minutes > 5)
{
cmd = PMCommand.CtrlCmd();
cmd.CommandText = "delete from wapUserstate where empID = '" + PMUser.EmpID + "' and online = '0'";
cmd.ExecuteNonQuery();
cmd.Connection.Close();
}
}
else
{
loginMessage.LoginState = "2";
loginMessage.Message = "用户已经在IP:" + ipaddress + " 上登陆。";
loginMessage.EmpID = PMUser.EmpID;
loginMessage.EmpName = empName;
return(loginMessage);
}
}
//判断用户是否被锁定
if (errortimes < 3)
{
cmd = PMCommand.ModCmd();
cmd.CommandText = "select * from wapEmpList where empID = '" + PMUser.EmpID + "'";
SqlDataReader reader = cmd.ExecuteReader();
if (reader.Read() != true)
{
loginMessage.LoginState = "0";
loginMessage.Message = "登陆失败，没有这个用户名。";
loginMessage.EmpID = PMUser.EmpID;
loginMessage.EmpName = empName;
reader.Close();
}
else
{
//存在用户名，验证密码
string dbpass = reader["password"].ToString();
PMUser.UserSysID = reader["sysID"].ToString();
reader.Close();
if (PMUser.UserPass != dbpass)
{
//如果密码错误，去查询库里是不是第一次错误，如果是，计入错误记录和计数
DataRow[] dr;
if ((dr = DtuserState.Select("empID = '" + PMUser.EmpID + "'")).Count() > 0)
{
errortimes = Convert.ToInt32(dr[0][6]) + 1;
cmd = PMCommand.CtrlCmd();
cmd.CommandText = "update wapUserstate set userpass = '******',errortimes = '" + errortimes + "', errorTime = '" + DateTime.Now + "' where empID = '" + PMUser.EmpID + "'";
cmd.ExecuteNonQuery();
cmd.Connection.Close();
}
else
{
errortimes = 1;
cmd = PMCommand.CtrlCmd();
cmd.CommandText = "insert into wapUserstate (empID,empName,userPass,userIpaddress,onLine,errorTimes,errorTime,message) values ('" + PMUser.EmpID + "','" + empName + "','" + PMUser.UserPass + "','" + PMUser.UserIpAdress + "','0','" + errortimes + "','" + DateTime.Now + "','用户密码错误')";
cmd.ExecuteNonQuery();
cmd.Connection.Close();
}
if (errortimes <= 3)
{
loginMessage.LoginState = "0";
int interr = 3 - errortimes;
if (interr != 0)
{
loginMessage.Message = "用户密码错误！再输入" + (3 - errortimes).ToString() + "次错误密码后，账号将被锁定5分钟。";
}
else
{
loginMessage.Message = "用户被锁定，请在" + (3000 - (DateTime.Now - errortime).TotalSeconds).ToString() + "秒后登陆。";
}
loginMessage.EmpID = PMUser.EmpID;
loginMessage.EmpName = empName;
loginInfo.Add(PMUser.EmpID);
loginInfo.Add(empName);
}
}
else
{
cmd = PMCommand.CtrlCmd();
string userguid = Guid.NewGuid().ToString();
//查询是否有相同登陆记录，如果有，是否推出。
if ((_ = DtuserState.Select("empID = '" + PMUser.EmpID + "'")).Count() > 0)
{
cmd.CommandText = "update wapUserstate set userpass = '******',errortimes = '0',errortime = '" + DateTime.Now + "',online = '1',message = '登陆成功',userGuid = '" + userguid + "',useripaddress = '" + PMUser.UserIpAdress + "' where empID = '" + PMUser.EmpID + "'";
cmd.ExecuteNonQuery();
}
else
{
cmd.CommandText = "insert into wapUserstate (empID,empName,userPass,userIpaddress,onLine,errorTimes,errorTime,message,userGuid) values ('" + PMUser.EmpID + "','" + empName + "','" + PMUser.UserPass + "','" + PMUser.UserIpAdress + "','1','0','" + DateTime.Now + "','登陆成功','" + userguid + "')";
cmd.ExecuteNonQuery();
}
cmd.Connection.Close();
loginMessage.LoginState = "1";
loginMessage.Message = "登陆成功！";
loginMessage.EmpID = PMUser.EmpID;
loginMessage.EmpName = empName;
loginMessage.UserGuid = userguid;
}
}
}
else
{
loginMessage.LoginState = "0";
loginMessage.Message = "用户被锁定，请在" + (3000 - (DateTime.Now - errortime).TotalSeconds).ToString() + "秒后登陆。";
loginMessage.EmpID = PMUser.EmpID;
loginMessage.EmpName = empName;
}
return(loginMessage);
}