Esempio n. 1
0
    protected void Page_Load(object sender, EventArgs e)
    {
        if (IsPostBack)
          {
        try{
          string strXml = Request["txtXML"];
          // strXml = XmlFun.addXDocHead(strXml);
          XmlDocument doc = XmlFun.CreateNewDoc(strXml);

          string strUsertitle = XmlFun.getNodeValue(doc,Common.BAR2 + Common.XDOC_LOGININFO + Common.BAR + Field.USERTITLE);
          string strPassWord = XmlFun.getNodeValue(doc, Common.BAR2 + Common.XDOC_LOGININFO + Common.BAR + Field.USERPASSWORD);
          string strIP = XmlFun.getNodeValue(doc, Common.BAR2 + Common.XDOC_LOGININFO + Common.BAR + Field.LOGINIP);
          string strMac = XmlFun.getNodeValue(doc, Common.BAR2 + Common.XDOC_LOGININFO + Common.BAR + Field.MAC);

          string str_SQL = "SELECT * FROM VW_USERLIST WHERE USERTITLE='" + strUsertitle + "'";
          string strErr = "";
          ReturnDoc Rtdoc = new ReturnDoc();

          OleDbDataReader rst = null;
          string strRet = CommonQuery.qryRst(str_SQL, ref rst);
          if (strRet == "0")
          {
            Rtdoc.getQueryInfo(rst);

            if (strPassWord != Rtdoc.getNodeValue(Common.BAR2 + Field.USERPASSWORD))
            {
              strErr = "密码错误";
            }
          }
          else
          {
            strErr = "查询用户信息为空";
          }

          rst.Close();

          if(strErr == "")
          {
            UserSession user = new UserSession(Rtdoc.getXml());

            string[] arrSys = { user.getUserID(), user.getUserTitle(), user.getUserName(), "", user.getUnitID(), user.getUnitName(), strIP, strMac };
            string logid = SystemLog.addSysLog(arrSys);
            user.setLogID(logid);

            Session.Add("RoleUser", user);
            Response.Redirect("Login.aspx");
            Response.End();
          }
          else
          {
            Response.Write("<script language=\"javascript\">");
            Response.Write("alert('" + strErr + "');");
            Response.Write("history.back();");
            Response.Write("</script>");
          }
        }
        catch(Exception ex)
        {

        }

          }
    }