public ActionResult NewUser(NewUserModel model)
{
EventLogHandler Logger = new EventLogHandler();
CreateUser tbl = new CreateUser();
tbl.FirstName = model.FirstName;
tbl.LastName = model.LastName;
tbl.Username = model.Username;
tbl.Password = model.Password;
tbl.Role = model.Role;
tbl.Phone = model.Phone;
tbl.Email = model.Email;
tbl.Date = model.Date_Created;
tbl.Active = model.Active;
tbl.Address = model.Address;
tbl.City = model.City;
tbl.State = model.State;
tbl.ZIP_Code = model.ZIP_Code;
tbl.AccountLocked = false;
tbl.LoginAttempts = 10;
tbl.LoginAmount = 0;
tbl.LoginFails = 0;
if (ModelState.IsValid)
{
using (IDbConnection db = new SqlConnection(SqlAccess.GetConnectionString()))
{
string sql = $"Insert into dbo.UserTable (FirstName, LastName, " +
"Username, Password, Role, Phone, Email, Date, Active, Address, City, State, ZIP_Code," +
"AccountLocked, LoginAttempts, LoginAmount, LoginFails)" +
"values(@FirstName,@LastName,@Username,@Password,@Role," +
"@Phone,@Email,@Date,@Active,@Address,@City,@State,@ZIP_Code," +
"@AccountLocked, @LoginAttempts, @LoginAmount, @LoginFails)";
db.Execute(sql, new
{
FirstName = tbl.FirstName,
LastName = tbl.LastName,
Username = tbl.Username,
Password = tbl.Password,
Role = tbl.Role,
Phone = tbl.Phone,
Email = tbl.Email,
Date = tbl.Date,
Active = tbl.Active,
Address = tbl.Address,
City = tbl.City,
State = tbl.State,
ZIP_Code = tbl.ZIP_Code,
AccountLocked = tbl.AccountLocked,
LoginAttempts = tbl.LoginAttempts,
LoginAmount = tbl.LoginAmount,
LoginFails = tbl.LoginFails
});
}
TempData["Message"] = "Your entry was successfully added!";
Logger.LogNewUser(model.Username);
return(RedirectToAction("AllUsers"));
}
return(View("NewUser", new NewUserModel()));
}
