Esempio n. 1
0
        protected void Page_Load(object sender, EventArgs e)
        {
            if (IsPostBack)
            {
                SrCom srCom = new SrCom();
                string account=Request.Form[this.TextBoxAccount.UniqueID].Trim();
                string pwd = srCom.HashPassword( Request.Form[this.TextBoxPwd.UniqueID].Trim());
                string connStr=ConfigurationManager.ConnectionStrings["SyglConnStr"].ConnectionString;
                OleDbConnection conn = new OleDbConnection(connStr);
                conn.Open();
                OleDbCommand cmd = new OleDbCommand();
                cmd.Connection = conn;
                cmd.CommandText = "select * from admins_tb where adminAccount=@account";
                cmd.Parameters.AddWithValue("@account",account);

                OleDbDataReader dr = cmd.ExecuteReader();

                if (dr.Read())
                {
                    //帐号正确
                    string dbpwd = dr["adminPwd"].ToString();
                    if (dbpwd == pwd)
                    {
                        //密码正确
                        Response.Cookies["SyglAdmin"]["account"] = dr["adminAccount"].ToString();
                        Response.Cookies["SyglAdmin"]["adminID"] = dr["adminID"].ToString();
                        Response.Cookies["SyglAdmin"].Expires = DateTime.Now.AddHours(3);
                        Response.Redirect("./Admin/");
                    }
                    else
                    {
                        //密码错误
                        this.LabelLoginTip.Text = "密码错误! ";//" + pwd;
                        this.LabelLoginTip.Visible = true;
                    }
                }
                else
                {

                    //帐号错误
                    this.LabelLoginTip.Text = "帐号不存在! ";
                    this.LabelLoginTip.Visible = true;
                }
                dr.Close();
                dr = null;
                conn.Close();

            }
            else
            {
                //初始化
                if (Request.QueryString["f"] == "unlogin")
                {
                    this.LabelLoginTip.Visible = true;
                    this.LabelLoginTip.Text = "您未登录或登录超时,请重新登陆!";
                }
            }
        }
Esempio n. 2
0
        public void ProcessRequest(HttpContext context)
        {
            int status = 0;
            string msg = "未知错误!";
            if (context.Request.Cookies["SyglAdmin"] == null)
            {
                msg = "您未登录或登录超时!";
            }
            else
            {
                if (context.Request["imgids"] == "" || context.Request["imgids"] == null)
                {
                    msg = "您没有提交数据!";
                }
                else
                {
                    string imgids = context.Request["imgids"];
                    OleDbConnection conn = new OleDbConnection(ConfigurationManager.ConnectionStrings["SyglConnStr"].ConnectionString);
                    try
                    {
                        conn.Open();
                        OleDbCommand cmd = new OleDbCommand();
                        cmd.Connection = conn;

                        //删除数据记录
                        cmd.CommandText = "delete from imgs_tb where imgID in ( " + imgids + ") ";
                        int effects = cmd.ExecuteNonQuery();
                        //删除图片文件
                        string imgFile = context.Request["imgFile"];
                        SrCom srCom = new SrCom();
                        srCom.DeleteFile(imgFile);

                        status = 1;
                        msg = "成功删除" + effects + "条记录";
                        conn.Close();
                    }
                    catch (Exception ex)
                    {
                        msg = ex.Message;
                    }
                    finally
                    {
                        conn.Close();
                    }
                }
            }
            JsonData jd = new JsonData();
            jd["status"] = status;
            jd["msg"] = msg;
            string echoData = jd.ToJson();
            context.Response.AddHeader("Content-Type", "text/html; charset=UTF-8");
            context.Response.Write(echoData);
            context.Response.End();
        }
Esempio n. 3
0
        protected void Page_Load(object sender, EventArgs e)
        {
            if (IsPostBack)
            {
                int status = 0;
                string msg = "未知错误";
                string account = Request.Form["account"];
                string pwd = Request.Form["pwd"];
                SrCom srCom = new SrCom();
                //加密
                pwd = srCom.HashPassword(pwd);

                LNSql lnSql = new LNSql();
                lnSql.conn.Open();
                lnSql.cmd.CommandText = "select * from admins_tb where adminAccount=@account";
                lnSql.cmd.Parameters.AddWithValue("@account",account);
                lnSql.dr = lnSql.cmd.ExecuteReader();
                if (lnSql.dr.Read())
                {
                    if (pwd == lnSql.dr["adminPwd"].ToString())
                    {
                        //登录成功,设置登录sesseion
                        Session["adminID"] = lnSql.dr["adminID"].ToString();
                        Session["adminName"] = lnSql.dr["adminName"].ToString();
                        Session["adminClass"] = lnSql.dr["adminClass"].ToString();
                        status = 1;
                        msg = "登录成功";
                    }
                    else
                    {
                        msg = "密码错误!"; //+ pwd;
                    }
                }
                else
                {
                    msg = "账号不存在!";
                }
                lnSql.conn.Close();

                JsonData data = new JsonData();
                data["status"] =status;
                data["msg"] = msg;
                string json = data.ToJson();
                Response.AddHeader("Content-Type", "text/html; charset=UTF-8");
                Response.Write(json);
                Response.End();
            }
        }
Esempio n. 4
0
        public void ProcessRequest(HttpContext context)
        {
            //登录状态码
            int status = 0;
            //登录状态提示信息
            string msg = "未知错误";
            //接收数据
            string account = context.Request.Form["account"];
            string pwd = context.Request.Form["pwd"];

            if (account == null || account == "")
            {
                msg = "未填写帐号!";
            }
            else
            {
                if (pwd == null || pwd == "")
                {
                    msg = "未填写密码!";
                }
                else
                {
                    //数据验证通过,查询帐号
                    DjOledb djOledb = new DjOledb();
                    djOledb.conn.Open();
                    djOledb.cmd.CommandText = "select * from admin_tb where adminAccount= @account";
                    djOledb.cmd.Parameters.AddWithValue("@account",account);
                    djOledb.dr = djOledb.cmd.ExecuteReader();
                    if (djOledb.dr.Read())
                    {
                        //帐号存在
                        //加密密码
                        SrCom srCom = new SrCom();
                        pwd = srCom.HashPassword(pwd);

                        //匹配密码
                        if (pwd == djOledb.dr["adminPwd"].ToString())
                        {
                            //匹配
                            status = 1;
                            msg = "登录成功!";
                            //设置session
                            context.Session["djAdminAccount"] = account;
                            context.Session["djAdminName"] = djOledb.dr["adminName"].ToString();
                            context.Session["djAdminType"] = djOledb.dr["adminType"].ToString();
                        }
                        else
                        {
                            //不匹配
                            msg = "密码错误!<br />"+pwd;
                        }
                    }
                    else
                    {
                        //帐号不存在
                        msg = "帐号不存在!";
                    }
                    djOledb.conn.Close();
                }
            }
            //返回登录结果json数据
            JsonData reData = new JsonData();
            reData["status"] = status;
            reData["msg"] = msg;
            context.Response.AddHeader("Content-Type", "text/html; charset=UTF-8");
            context.Response.Write(reData.ToJson());
            context.Response.End();
        }
Esempio n. 5
0
        protected void Page_Load(object sender, EventArgs e)
        {
            if (Request.Cookies["SyglAdmin"] == null)
            {

                Response.Redirect("/admLogin.aspx?f=unlogin");
            }
            else
            {
                Request.Cookies["SyglAdmin"].Expires = DateTime.Now.AddHours(1);
            }

            if (IsPostBack)
            {
                int status = 0;
                string msg = "未知错误";

                OleDbConnection conn = new OleDbConnection();
                try
                {
                    //接收数据
                    string file = Request["img_file"];
                    //转移缓存数据
                    SrCom srCom = new SrCom();
                    file = srCom.MoveFile(file, "/Sourse/Files/image/marquee/");
                    string link = Request["imgLink"];
                    conn.ConnectionString = (ConfigurationManager.ConnectionStrings["SyglConnStr"].ConnectionString);
                    conn.Open();
                    OleDbCommand cmd = new OleDbCommand();
                    cmd.Connection = conn;

                    //保存数据
                    if (Request["imgID"] == "" || Request["imgID"] == null)
                    {
                        //新添加数据
                        cmd.CommandText = "insert into imgs_tb (imgFile,imgLink) values (@file,@link)";
                        cmd.Parameters.AddWithValue("@file", file);
                        cmd.Parameters.AddWithValue("@link", link);
                    }
                    else
                    {
                        //修改数据
                        int imgID = Convert.ToInt32(Request["imgID"]);
                        cmd.CommandText = "update imgs_tb set imgFile=@file,imgLink=@link where imgID=@imgID";
                        cmd.Parameters.AddWithValue("@file", file);
                        cmd.Parameters.AddWithValue("@link", link);
                        cmd.Parameters.AddWithValue("@imgID", imgID);
                    }
                    cmd.ExecuteNonQuery();
                    status = 1;
                    msg = "保存成功!";
                }
                catch (Exception ex)
                {
                    conn.Close();
                    msg = ex.Message;
                }
                finally
                {
                    conn.Close();
                    JsonData jd = new JsonData();
                    jd["status"] = status;
                    jd["msg"] = msg;
                    string echoStr = jd.ToJson();
                    Response.AddHeader("Content-Type", "text/html; charset=UTF-8");
                    Response.Write(echoStr);
                    Response.End();
                }
            }
            else
            {
                //初始化页面
                if (Request["imgID"] == "" || Request["imgID"] == null)
                {
                    //初始化添加页面
                    this.show_img_file.Visible = false;
                    this.img_file.Visible = false;
                }
                else
                {
                    //初始化修改页面
                    OleDbConnection conn = new OleDbConnection();
                    int imgID = Convert.ToInt32(Request["imgID"]);
                    conn.ConnectionString = (ConfigurationManager.ConnectionStrings["SyglConnStr"].ConnectionString);
                    conn.Open();
                    OleDbCommand cmd = new OleDbCommand();
                    cmd.Connection = conn;
                    cmd.CommandText = "select * from imgs_tb where imgID=@imgID";
                    cmd.Parameters.AddWithValue("@imgID",imgID);
                    OleDbDataReader dr = cmd.ExecuteReader();
                    if (dr.Read())
                    {
                        this.show_img_file.ImageUrl = dr["imgFile"].ToString();
                        this.show_img_file.Width = 280;
                        this.img_file.Value = dr["imgFile"].ToString();
                        this.imgLink.Text = dr["imgLink"].ToString();
                        this.imgID.Value = imgID.ToString();
                    }
                    conn.Close();
                }
            }
        }
Esempio n. 6
0
        protected void Page_Load(object sender, EventArgs e)
        {
            if (IsPostBack)
            {
                int status = 0;
                string msg = "未定义错误";
                SrCom srCom = new SrCom();
                LNSql lnSql = new LNSql();
                lnSql.conn.Open();
                //保存提交数据
                try
                {
                    int resetPwd = Convert.ToInt32(Request.Params["resetPwd"]);
                    string adminName = Request.Params["adminName"];
                    string adminAccount = Request.Params["adminAccount"];
                    string adminCpPwd = srCom.HashPassword(Request.Params["adminCpPwd"]);
                    string adminPWD = srCom.HashPassword(Request.Params["adminPWD"]);
                    if (Request.Params["adminID"] == "" || Request.Params["adminID"] == null)
                    {
                        //添加用户,全部初始化密码

                        lnSql.cmd.CommandText = "insert into admins_tb (adminName,adminAccount,adminPWD) values(@adminName,@adminAccount,@adminPWD)";
                        lnSql.cmd.Parameters.AddWithValue("@adminName", adminName);
                        lnSql.cmd.Parameters.AddWithValue("@adminAccount", adminAccount);
                        lnSql.cmd.Parameters.AddWithValue("@adminPWD", adminPWD);
                        lnSql.cmd.ExecuteNonQuery();

                    }
                    else
                    {
                        int adminID = Convert.ToInt32(Request.Params["adminID"]);
                        //修改用户

                        if (resetPwd == 1)
                        {
                            lnSql.cmd.CommandText = "update admins_tb set adminName=@adminName,adminAccount=@adminAccount,adminPWD=@adminPWD where adminID=@adminID";
                            lnSql.cmd.Parameters.AddWithValue("@adminName", adminName);
                            lnSql.cmd.Parameters.AddWithValue("@adminAccount", adminAccount);
                            lnSql.cmd.Parameters.AddWithValue("@adminPWD", adminPWD);
                            lnSql.cmd.Parameters.AddWithValue("@adminID", adminID);
                        }
                        else
                        {
                            lnSql.cmd.CommandText = "update admins_tb set adminName=@adminName,adminAccount=@adminAccount where adminID=@adminID";
                            lnSql.cmd.Parameters.AddWithValue("@adminName", adminName);
                            lnSql.cmd.Parameters.AddWithValue("@adminAccount", adminAccount);
                            lnSql.cmd.Parameters.AddWithValue("@adminID", adminID);
                        }
                        lnSql.cmd.ExecuteNonQuery();
                    }
                    status = 1;
                    msg = "保存成功!";
                }
                catch (Exception ex)
                {
                    msg = ex.Message;
                }
                finally
                {
                    lnSql.conn.Close();
                    JsonData jsonData = new JsonData();
                    jsonData["status"] = status;
                    jsonData["msg"] = msg;
                    string echoString = jsonData.ToJson();

                    Response.AddHeader("Content-Type", "text/html; charset=UTF-8");
                    Response.Write(echoString);
                    Response.End();
                }

            }
            else
            {
                //初始化页面
                if (Request.Params["did"] == null || Request.Params["did"] == "")
                {
                    //初始化增加页面
                    this.adminCpPwd.TextMode = TextBoxMode.Password;
                    this.adminPWD.TextMode = TextBoxMode.Password;
                    this.adminPWD.Text = "12345";
                    this.adminCpPwd.Text ="12345";
                }
                else
                {
                    //初始化修改页面
                    int adminID = Convert.ToInt32(Request.Params["did"]);
                    LNSql lnSql = new LNSql();
                    lnSql.conn.Open();
                    lnSql.cmd.CommandText = "select * from admins_tb where adminID="+adminID;
                    lnSql.dr = lnSql.cmd.ExecuteReader();
                    if (lnSql.dr.Read())
                    {
                        this.adminID.Value = adminID.ToString();
                        this.adminName.Text = lnSql.dr["adminName"].ToString();
                        this.adminAccount.Text = lnSql.dr["adminAccount"].ToString();

                    }
                    this.adminCpPwd.TextMode = TextBoxMode.Password;
                    this.adminPWD.TextMode = TextBoxMode.Password;

                }
            }
        }