protected void submit_Click(object sender, EventArgs e)
        {
            string sEmail    = email.Text;
            string sAuth_key = authenticate_key.Text;


            string query = DB_Querys.Authentication(sEmail, sAuth_key);

            DB.CloseConn();
            SqlCommand    cmd = DB.ExecuteReader(query);
            SqlDataReader dbr = cmd.ExecuteReader();

            if (dbr.HasRows == false)
            {
                Response.Write("<script>alert('You are not registered for this site contact to Admin');</script>");
            }
            else
            {
                while (dbr.Read())
                {
                    if (dbr["email"].ToString() == email.Text && dbr["authentication_key"].ToString() == authenticate_key.Text && dbr["is_authenticate"].Equals(true))
                    {
                        Session[Macros.SESSION_KEY] = dbr["authentication_key"].ToString();
                        Response.Redirect("site.aspx?skey=" + dbr["sitekey"].ToString());
                    }
                    else
                    {
                        Response.Write("<script>alert('You are not authenticate for this site');</script>");
                    }
                }
            }
        }
        internal static string GetFileConfigId(int sitekey)
        {
            string fileInfo = "";
            string query    = "select file_id,file_name,source_path from config_files where sitekey=" + sitekey;

            DB.CloseConn();
            SqlCommand cmd = DB.ExecuteReader(query);

            SqlDataReader dbr = cmd.ExecuteReader();

            if (dbr.HasRows == false)
            {
                fileInfo = "";
            }
            else
            {
                while (dbr.Read())
                {
                    fileInfo = dbr[0].ToString() + "," + dbr[1].ToString() + "," + dbr[2].ToString();
                }
            }
            DB.CloseConn();

            return(fileInfo);
        }
        internal static ArrayList IsVerifiedByAdmin(int sitekey, string permission_level, string mailId, int FileId)
        {
            ArrayList BoolArr = new ArrayList();
            string    query   = "select accept,inprocess from DownloadFileReq where sitekey='" + sitekey + "' and permission_level='" + permission_level + "' and sender_email='" + mailId + "' and file_id='" + FileId + "'";

            DB.CloseConn();
            SqlCommand cmd = DB.ExecuteReader(query);

            SqlDataReader dbr = cmd.ExecuteReader();

            if (dbr.HasRows == false)
            {
                BoolArr.Add(false);
                BoolArr.Add(false);
            }
            else
            {
                while (dbr.Read())
                {
                    if (dbr[0].Equals(true) && dbr[1].Equals(false))
                    {
                        BoolArr.Add(true);
                        BoolArr.Add(false);
                    }
                    if (dbr[0].Equals(false) && dbr[1].Equals(true))
                    {
                        BoolArr.Add(false);
                        BoolArr.Add(true);
                    }
                }
            }
            DB.CloseConn();

            return(BoolArr);
        }
Esempio n. 4
0
        protected void submit_Click(object sender, EventArgs e)
        {
            string query = "select email,password from registration;";



            SqlCommand cmd = DB.ExecuteReader(query);

            SqlDataReader dbr = cmd.ExecuteReader();

            if (!dbr.HasRows)
            {
                Response.Write("<script>alert('No Data availabe');</script>");
            }
            else
            {
                while (dbr.Read())
                {
                    if (dbr["email"].Equals(email.Text) && dbr["password"].Equals(password.Text))
                    {
                        Response.Redirect("Dashboard.aspx");
                    }
                    else
                    {
                        Response.Write("<script>alert('Email or Password is incorrent');</script>");
                        break;
                    }
                }
            }

            cmd.Dispose();
            dbr.Dispose();
            DB.CloseConn();
        }
Esempio n. 5
0
        private void AccesptRequest(int iauth, int iSiteKey, int iFileId, string sMailId, int iOutProcess)
        {
            DB.CloseConn();
            string query = "update DownloadFileReq set accept='" + iauth + "' , inprocess='" + iOutProcess + "' where sitekey='" + iSiteKey + "' and sender_email='" + sMailId + "' and file_id='" + iFileId + "'";

            DB.ExecuteNonQuery(query);
            DB.CloseConn();
        }
        internal static SqlDataReader GetAuntherizedUserData(string query)
        {
            DB.CloseConn();
            SqlCommand    cmd = DB.ExecuteReader(query);
            SqlDataReader dbr = cmd.ExecuteReader();

            return(dbr);
        }
        protected void Page_Load(object sender, EventArgs e)
        {
            id   = Convert.ToInt32(Request.QueryString.Get("id"));
            skey = Convert.ToInt32(Request.QueryString.Get("sitekey"));
            string query = "update accessControl set is_authenticate=0 where id='" + id + "' and sitekey='" + skey + "'";

            DB.CloseConn();
            DB.ExecuteNonQuery(query);
            DB.CloseConn();
        }
Esempio n. 8
0
        protected void Page_Load(object sender, EventArgs e)
        {
            string        query = DB_Querys.GetSideNav();
            SqlCommand    cmd   = null;
            SqlDataReader dbr   = null;

            dynamic_list.Text = "";
            try
            {
                if (Session[Macros.SESSION_KEY].ToString() == "" || Session[Macros.SESSION_KEY].ToString() == null)
                {
                    Response.Redirect("Default.aspx");
                }
                else
                {
                    try
                    {
                        DB.CloseConn();
                        cmd = DB.ExecuteReader(query);
                        dbr = cmd.ExecuteReader();

                        if (dbr.HasRows == false)
                        {
                        }
                        else
                        {
                            while (dbr.Read())
                            {
                                if (Session[Macros.SESSION_KEY].Equals("Admin") || Session[Macros.SESSION_KEY].Equals("Technician") || Session[Macros.SESSION_KEY].Equals("Account Manager"))
                                {
                                    dynamic_list.Text += "<li><a href='" + dbr["redirect"].ToString() + "'>" + dbr["content_name"].ToString() + "</a></li><li class='divider'></li>";
                                }
                                else
                                {
                                    dynamic_list.Text = "<li><a href='#!'>In Progress</a></li>";
                                }
                            }
                        }
                    }
                    catch (Exception ex)
                    {
                        Response.Redirect("Default.aspx");
                    }
                    finally {
                        DB.CloseConn();
                        cmd.Dispose();
                        dbr.Dispose();
                    }
                }
            }
            catch (Exception ex)
            {
                Response.Redirect("Default.aspx");
            }
        }
Esempio n. 9
0
        protected void submit_Click(object sender, EventArgs e)
        {
            string sEmail    = email.Text;
            string sAuth_key = authenticate_key.Text;


            string query = DB_Querys.Authentication(sEmail, sAuth_key, iSkey);

            DB.CloseConn();
            SqlCommand    cmd = DB.ExecuteReader(query);
            SqlDataReader dbr = cmd.ExecuteReader();

            if (dbr.HasRows == false)
            {
                Response.Write("<script>alert('You are not registered for this site contact to Admin');</script>");
            }
            else
            {
                while (dbr.Read())
                {
                    if (dbr["email"].ToString() == email.Text && dbr["authentication_key"].ToString() == authenticate_key.Text && dbr["is_authenticate"].Equals(true) && dbr["sitekey"].ToString() == iSkey.ToString())
                    {
                        string sSession = "";
                        sSession += dbr["permission_level"].ToString() + ",";

                        /* ArrayList sitekeys = getSiteKeys(dbr["email"].ToString());
                         * string str = "";
                         *
                         * for (int i=0;i<sitekeys.Count;i++) {
                         * str += sitekeys[i]+",";
                         * }*/


                        Session[Macros.SESSION_KEY] = sSession + email.Text;
                        // Response.Redirect("sites.aspx");
                        bAuth = true;
                        break;
                    }
                    else
                    {
                        Response.Write("<script>alert('You are not authenticate for this site');</script>");
                    }
                }

                if (bAuth)
                {
                    string skey = Cryptography.GetK_Encryption(iSkey.ToString());
                    Response.Redirect("site.aspx?skey=" + skey);
                }
            }
        }
        private void AuthenticateUserByAdmin(string sender_email)
        {
            int    fileID    = 0;
            string sFileName = "";
            string sFilePath = "";

            if (sFileInfo != "")
            {
                fileID    = Convert.ToInt32(sFileInfo.Split(',')[0]);
                sFileName = sFileInfo.Split(',')[1];
                sFilePath = sFileInfo.Split(',')[2];
            }

            bool req = SendRequestMail(sender_email, sitekey, fileID);

            if (req == true)
            {
                int    siteKey          = sitekey;
                string senderemail      = sender_email;
                string requestDateTime  = DateTime.Now.ToString("yyyy/MM/dd");
                string permission_level = Session[Macros.SESSION_KEY].ToString().Split(',')[0];
                string accepter_email   = sender_email;
                string query            = "insert into DownloadFileReq (sitekey,sender_email,requestdatetime,permission_level,accepter_email,accept,file_id,file_name,filepath,inprocess) values (@sitekey,@sender_email,@requestdatetime,@permission_level,@accepter_email,@accept,@file_id,@file_name,@filepath,@inprocess)";
                DB.CloseConn();
                DB.OpenConn();
                SqlCommand cmd = new SqlCommand(query, DB.OpenConn());

                cmd.Parameters.AddWithValue("@sitekey", sitekey);
                cmd.Parameters.AddWithValue("@sender_email", senderemail);
                cmd.Parameters.AddWithValue("@requestdatetime", requestDateTime);
                cmd.Parameters.AddWithValue("@permission_level", permission_level);
                cmd.Parameters.AddWithValue("@accepter_email", accepter_email);
                cmd.Parameters.AddWithValue("@accept", 0);
                cmd.Parameters.AddWithValue("@file_id", fileID);
                cmd.Parameters.AddWithValue("@file_name", sFileName);
                cmd.Parameters.AddWithValue("@filepath", sFilePath);
                cmd.Parameters.AddWithValue("@inprocess", 1);
                DB.ExecuteNoneQuery(cmd);

                download_msg.Visible   = true;
                ConfigLinkBtn.Visible  = false;
                ProcessLabel.Visible   = true;
                ProcessLabel.ForeColor = System.Drawing.Color.Green;
            }
            else
            {
                Response.Write("<script>alert('Access Mail not sent please try again or contact to Admin');</script>");
            }
        }
        protected void submit_Click(object sender, EventArgs e)
        {
            if (backofficeuser.Text.Equals(Macros.BACKOFFICE_VALUE) && backofficepassword.Text.Equals(Macros.BACKOFFICE_KEY))
            {
                int siteid = new Random().Next(100, 100000);

                /*  try
                 * {*/
                DB.CloseConn();
                SqlCommand cmd = DB.ExecuteReader(query);
                cmd.Parameters.AddWithValue("@sitename", sitename.Text);
                cmd.Parameters.AddWithValue("@siteid", siteid);
                cmd.Parameters.AddWithValue("@postype", postype.Text);
                cmd.Parameters.AddWithValue("@backofficeuserid", backofficeuser.Text);
                cmd.Parameters.AddWithValue("@backofficepassword", backofficepassword.Text);
                cmd.Parameters.AddWithValue("@regitered", DateTime.Now.ToString("yyyy-MM-dd hh:mm:ss tt"));
                cmd.Parameters.AddWithValue("@updated", DateTime.Now.ToString("yyyy-MM-dd hh:mm:ss tt"));

                int res = cmd.ExecuteNonQuery();
                cmd.Dispose();
                DB.CloseConn();

                if (res == 1)
                {
                    Response.Write("<script>alert('Site Create Successfuly!');</script>");
                    Response.Redirect("sites.aspx");
                }
                else
                {
                    Response.Write("<script>alert('Somthing Error!');</script>");
                }

                /*}
                 * catch (Exception ex)
                 * {
                 *
                 *  Response.Write("<script>alert('Error!');</script>");
                 * }*/
            }
            else
            {
                Response.Write("<script>alert('Inccrorect Username or Password');</script>");
            }
        }
Esempio n. 12
0
        protected void submit_Click(object sender, EventArgs e)
        {
            if (choose.SelectedIndex == 0)
            {
                Response.Write("<script>alert('Please select your catagory');</script>");
            }
            else
            {
                /*  try
                 * {*/
                DB.CloseConn();
                SqlCommand cmd = DB.ExecuteReader(query);
                cmd.Parameters.AddWithValue("@username", username.Text);
                cmd.Parameters.AddWithValue("@email", email.Text);
                cmd.Parameters.AddWithValue("@category", choose.SelectedValue);
                cmd.Parameters.AddWithValue("@password", create_pass.Text);
                cmd.Parameters.AddWithValue("@created", DateTime.Now.ToString("yyyy-MM-dd hh:mm:ss tt"));
                cmd.Parameters.AddWithValue("@updated", DateTime.Now.ToString("yyyy-MM-dd hh:mm:ss tt"));

                int res = cmd.ExecuteNonQuery();
                cmd.Dispose();
                DB.CloseConn();

                if (res == 1)
                {
                    Response.Write("<script>alert('Signup Successfull!');</script>");
                    Response.Redirect("Default.aspx");
                }
                else
                {
                    Response.Write("<script>alert('Somthing Error!');</script>");
                }

                /*}
                 * catch (Exception ex)
                 * {
                 *
                 *  Response.Write("<script>alert('Error!');</script>");
                 * }*/
            }
        }
        internal static bool IsSitekeyAvailable(string sitekey)
        {
            string query = "select sitekey from sites where sitekey='" + sitekey + "'";

            DB.CloseConn();
            SqlCommand    cmd = DB.ExecuteReader(query);
            SqlDataReader dbr = cmd.ExecuteReader();

            if (dbr.HasRows == false)
            {
                return(false);
            }
            else
            {
                return(true);
            }

            DB.CloseConn();
            cmd.Dispose();
            dbr.Dispose();
        }
        internal static bool IsSitekeyAvailable(string sitekey, string email)
        {
            string query = "select S.sitekey,A.email from sites S inner join accessControl A on S.sitekey=A.sitekey where A.email='" + email + "' and A.sitekey='" + sitekey + "'";

            DB.CloseConn();
            SqlCommand    cmd = DB.ExecuteReader(query);
            SqlDataReader dbr = cmd.ExecuteReader();

            if (dbr.HasRows == false)
            {
                return(false);
            }
            else
            {
                return(true);
            }

            DB.CloseConn();
            cmd.Dispose();
            dbr.Dispose();
        }
Esempio n. 15
0
        protected void submit_Click(object sender, EventArgs e)
        {
            string query = DB_Querys.GetRegisteredUsersQuery();


            DB.CloseConn();
            SqlCommand    cmd = DB.ExecuteReader(query);
            SqlDataReader dbr = cmd.ExecuteReader();

            if (!dbr.HasRows)
            {
                Response.Write("<script>alert('No Data availabe');</script>");
            }
            else
            {
                while (dbr.Read())
                {
                    if (dbr["email"].Equals(email.Text) && dbr["password"].Equals(password.Text))
                    {
                        login_error_msg.Visible = false;

                        Session[Macros.SESSION_KEY] = dbr["permission_level"].ToString() + "," + email.Text;

                        Response.Redirect("sites.aspx");
                    }
                    else
                    {
                        // Response.Write("<script>alert('Email :" + dbr["email"].ToString() + " or Password: "******"email"].ToString() + " is incorrent');</script>");
                        login_error_msg.Visible = true;
                    }
                }
            }

            cmd.Dispose();
            dbr.Dispose();
            DB.CloseConn();
        }
        protected void submit_Click(object sender, EventArgs e)
        {
            string query = "select email,password,category from registration;";


            DB.CloseConn();
            SqlCommand    cmd = DB.ExecuteReader(query);
            SqlDataReader dbr = cmd.ExecuteReader();

            if (!dbr.HasRows)
            {
                Response.Write("<script>alert('No Data availabe');</script>");
            }
            else
            {
                while (dbr.Read())
                {
                    if (dbr["email"].Equals(email.Text) && dbr["password"].Equals(password.Text) && dbr["category"].Equals(choose.SelectedItem.ToString()))
                    {
                        login_error_msg.Visible = false;

                        Session["global"] = dbr["category"].ToString();

                        Response.Redirect("Dashboard.aspx");
                    }
                    else
                    {
                        // Response.Write("<script>alert('Email :" + dbr["email"].ToString() + " or Password: "******"email"].ToString() + " is incorrent');</script>");
                        login_error_msg.Visible = true;
                    }
                }
            }

            cmd.Dispose();
            dbr.Dispose();
            DB.CloseConn();
        }
Esempio n. 17
0
        private int AlreadyAvailable()
        {
            string query = DB_Querys.CheckAlready();

            DB.CloseConn();
            SqlCommand    cmd = DB.ExecuteReader(query);
            SqlDataReader dbr = cmd.ExecuteReader();


            if (dbr.HasRows == false)
            {
                response = 0;
            }
            else
            {
                while (dbr.Read())
                {
                    if (dbr["email"].ToString() == email.Text && dbr["sitekey"].ToString() == Queryparam)
                    {
                        response = 1;
                        break;
                    }
                    else
                    {
                        response = 0;
                    }
                }
            }

            cmd.Dispose();
            dbr.Dispose();
            DB.CloseConn();


            return(response);
        }
Esempio n. 18
0
        private ArrayList getSiteKeys(string email)
        {
            ArrayList keyList = new ArrayList();
            string    query   = DB_Querys.getSiteKeys(email);

            DB.CloseConn();
            SqlCommand    cmd = DB.ExecuteReader(query);
            SqlDataReader dbr = cmd.ExecuteReader();

            if (dbr.HasRows == false)
            {
                keyList.Add("-1");
            }
            else
            {
                while (dbr.Read())
                {
                    keyList.Add(dbr["sitekey"].ToString());
                }
            }


            return(keyList);
        }
Esempio n. 19
0
        protected void Page_Load(object sender, EventArgs e)
        {
            int    permission_level = 105;
            string postype          = Request.QueryString.Get("postype");


            string        query = DB_Querys.GetSites(postype);
            SqlCommand    cmd   = null;
            SqlDataReader dbr   = null;

            GTICLOUD.navbar.dropstring = "";
            sitebox.Text = "";
            try
            {
                if ((Session[Macros.SESSION_KEY].ToString() == "" || Session[Macros.SESSION_KEY].ToString() == null))
                {
                    Response.Redirect("Default.aspx");
                }
                else
                {
                    if (permission_level == Macros.iSUPER_ADMIN)
                    {
                        GTICLOUD.navbar.dropstring += "  <li><a href='createsite.aspx'>Create Site</a></li>";
                        GTICLOUD.navbar.dropstring += "  <li><a href='#!'>Settings</a></li>";
                        GTICLOUD.navbar.dropstring += "  <li><a href='#!'>Logout</a></li>";
                    }
                    else
                    {
                        GTICLOUD.navbar.dropstring += "  <li><a href='#!'>Settings</a></li>";
                        GTICLOUD.navbar.dropstring += "  <li><a href='#!'>Logout</a></li>";
                    }


                    try
                    {
                        DB.CloseConn();
                        cmd = DB.ExecuteReader(query);
                        dbr = cmd.ExecuteReader();

                        if (dbr.HasRows == false)
                        {
                            sitebox.Text += "<div><h4 class='center-align red-text'>No Data Available</h4></div>";
                        }
                        else
                        {
                            while (dbr.Read())
                            {
                                sitebox.Text += "<div class='col s12 m4'>";
                                sitebox.Text += "<div class='card white'>";
                                sitebox.Text += "<div class='card-content black-text'>";
                                if (permission_level == Macros.iSUPER_ADMIN)
                                {
                                    sitebox.Text += "<span class='card-title activator grey-text text-darken-4'>" + dbr["sitename"].ToString() + "<i class='material-icons right'>more_vert</i></span>";
                                }
                                else
                                {
                                    sitebox.Text += "<span class='card-title  black-text'>" + dbr["sitename"].ToString() + "</span>";
                                }

                                sitebox.Text += "<p> POS ID : " + dbr["siteid"].ToString() + "</p>";
                                sitebox.Text += "<p> POS Type : " + dbr["postype"].ToString().ToUpper() + "</p>";
                                sitebox.Text += "<p> <span>Updated :</span><span>" + dbr["regitered"].ToString() + "</span> </p>";
                                sitebox.Text += " <p> <span>Created : </span><span>" + dbr["updated"].ToString() + "</span>  </p>";
                                sitebox.Text += "</div>";
                                if (permission_level == Macros.iSUPER_ADMIN)
                                {
                                    sitebox.Text += @"<div class='card-reveal'>
                                  <span class='card-title grey-text text-darken-4'>Access Control<i class='material-icons right'>close</i></span><br/>
                                  <a class='waves-effect waves-light btn' href='AccessControl.aspx?skey=" + dbr["sitekey"].ToString() + "'>authorization</a>";
                                    sitebox.Text += "</div>       ";
                                }

                                sitebox.Text += "<div class='card-action'>";
                                sitebox.Text += "<a href='site.aspx?siteid=" + dbr["siteid"].ToString() + "&sitekey=" + dbr["sitekey"].ToString() + "' class='theme-color'>GO TO SITE</a>";
                                sitebox.Text += @"</div> </div> </div>";
                            }
                        }
                    }
                    catch (Exception ex)
                    {
                        Response.Redirect("Default.aspx");
                    }
                    finally
                    {
                        DB.CloseConn();
                        cmd.Dispose();
                        dbr.Dispose();
                    }
                }
            }
            catch (Exception ex)
            {
                Response.Redirect("Default.aspx");
            }
        }
Esempio n. 20
0
        protected void Page_Load(object sender, EventArgs e)
        {
            int    permission_level = 0;
            string sSiteKeys        = "";

            //string Sessionemail = "";
            try
            {
                string[] session_arr = Session[Macros.SESSION_KEY].ToString().Split(',');


                if (Convert.ToInt32(session_arr[0]) == Macros.iSUPER_ADMIN)
                {
                    permission_level = Convert.ToInt32(session_arr[0]);
                }
                else
                {
                    permission_level = Convert.ToInt32(session_arr[0]);
                    // Session[Macros.SESSION_KEY] = session_arr[session_arr.Length - 1];

                    for (int j = 1; j < session_arr.Length - 1; j++)
                    {
                        sSiteKeys += session_arr[j] + ",";
                    }
                }
            }
            catch (Exception ex) {
                if (permission_level != Macros.iSUPER_ADMIN)
                {
                    Response.Redirect("authenticate.aspx");
                }
                else
                {
                    Response.Redirect("Default.aspx");
                }
            }



            //int permission_level = Convert.ToInt32(Session[Macros.SESSION_KEY].ToString());/*Convert.ToInt32(Request.QueryString.Get("plevel"));*/
            //string postype = Request.QueryString.Get("postype");
            //string sitekey=Request.QueryString.Get("skey");


            string query = "";

            if (permission_level == Macros.iSUPER_ADMIN)
            {
                query = DB_Querys.GetSites();
            }
            else
            {
                query = DB_Querys.GetSitesAccordingKeys(sSiteKeys.Substring(0, sSiteKeys.Length - 1));
            }
            SqlCommand    cmd = null;
            SqlDataReader dbr = null;

            GTICLOUD.navbar.dropstring = "";
            sitebox.Text = "";
            try
            {
                if ((Session[Macros.SESSION_KEY].ToString() == "" || Session[Macros.SESSION_KEY].ToString() == null))
                {
                    Response.Redirect("Default.aspx");
                }
                else
                {
                    if (permission_level == Macros.iSUPER_ADMIN)
                    {
                        GTICLOUD.navbar.dropstring += "  <li><a href='createsite.aspx'>Create Site</a></li>";
                        GTICLOUD.navbar.dropstring += "  <li><a href='#!'>Settings</a></li>";
                        GTICLOUD.navbar.dropstring += "  <li><a href='#!'>Logout</a></li>";
                    }
                    else
                    {
                        GTICLOUD.navbar.dropstring += "  <li><a href='#!'>Settings</a></li>";
                        GTICLOUD.navbar.dropstring += "  <li><a href='#!'>Logout</a></li>";
                    }


                    try
                    {
                        DB.CloseConn();
                        cmd = DB.ExecuteReader(query);
                        dbr = cmd.ExecuteReader();

                        if (dbr.HasRows == false)
                        {
                            sitebox.Text += "<div><h4 class='center-align red-text'>No Data Available</h4></div>";
                        }
                        else
                        {
                            while (dbr.Read())
                            {
                                sitebox.Text += "<div class='col s12 m4'>";
                                sitebox.Text += "<div class='card white'>";
                                sitebox.Text += "<div class='card-content black-text'>";
                                if (permission_level == Macros.iSUPER_ADMIN)
                                {
                                    sitebox.Text += "<span class='card-title activator grey-text text-darken-4'>" + dbr["sitename"].ToString() + "<i class='material-icons right'>more_vert</i></span>";
                                }
                                else
                                {
                                    sitebox.Text += "<span class='card-title  black-text'>" + dbr["sitename"].ToString() + "</span>";
                                }

                                sitebox.Text += "<p> POS ID : " + dbr["siteid"].ToString() + "</p>";
                                sitebox.Text += "<p> POS Type : " + dbr["postype"].ToString().ToUpper() + "</p>";
                                sitebox.Text += "<p> <span>Updated :</span><span>" + dbr["regitered"].ToString() + "</span> </p>";
                                sitebox.Text += " <p> <span>Created : </span><span>" + dbr["updated"].ToString() + "</span>  </p>";
                                sitebox.Text += "</div>";
                                if (permission_level == Macros.iSUPER_ADMIN)
                                {
                                    sitebox.Text += @"<div class='card-reveal'>
                                  <span class='card-title grey-text text-darken-4'>Access Control<i class='material-icons right'>close</i></span><br/>
                                  <a class='waves-effect waves-light btn' href='AccessControl.aspx?skey=" + Cryptography.GetK_Encryption(dbr["sitekey"].ToString()) + "' >authorization</a> <a class='waves-effect waves-light btn' href='Unauth.aspx?skey=" + Cryptography.GetK_Encryption(dbr["sitekey"].ToString()) + "' >Unauthorization</a>";
                                    sitebox.Text += "</div>";
                                }


                                //Session["SiteID"] = dbr["siteid"].ToString();
                                sitebox.Text += "<div class='card-action'>";
                                sitebox.Text += "<a href='site.aspx?skey=" + Cryptography.GetK_Encryption(dbr["sitekey"].ToString()) + "' class='theme-color')'>GO TO SITE</a>";

                                sitebox.Text += @"</div> </div> </div>";

                                //   Session["sitekey"] = dbr["sitekey"].ToString();
                            }
                        }
                    }
                    catch (Exception ex)
                    {
                        if (permission_level != Macros.iSUPER_ADMIN)
                        {
                            Response.Redirect("authenticate.aspx");
                        }
                        else
                        {
                            Response.Redirect("Default.aspx");
                        }
                    }
                    finally
                    {
                        DB.CloseConn();
                        cmd.Dispose();
                        dbr.Dispose();
                    }
                }
            }
            catch (Exception ex)
            {
                if (permission_level != Macros.iSUPER_ADMIN)
                {
                    Response.Redirect("authenticate.aspx");
                }
                else
                {
                    Response.Redirect("Default.aspx");
                }
            }
        }
        protected void Page_Load(object sender, EventArgs e)
        {
            string        query = "select sitename,siteid,postype,regitered,updated from sites";
            SqlCommand    cmd   = null;
            SqlDataReader dbr   = null;

            GTICLOUD.navbar.dropstring = "";
            sitebox.Text = "";
            try
            {
                if (Session[Macros.SESSION_KEY].ToString() == "" || Session[Macros.SESSION_KEY].ToString() == null)
                {
                    Response.Redirect("Default.aspx");
                }
                else
                {
                    GTICLOUD.navbar.dropstring += "  <li><a href='createsite.aspx'>Create Site</a></li>";
                    GTICLOUD.navbar.dropstring += "  <li><a href='#!'>Settings</a></li>";
                    GTICLOUD.navbar.dropstring += "  <li><a href='#!'>Logout</a></li>";


                    try
                    {
                        DB.CloseConn();
                        cmd = DB.ExecuteReader(query);
                        dbr = cmd.ExecuteReader();

                        if (dbr.HasRows == false)
                        {
                        }
                        else
                        {
                            while (dbr.Read())
                            {
                                if (dbr["postype"].ToString().ToLower().Equals("food"))
                                {
                                    sitebox.Text += "<div class='col s12 m4'>";
                                    sitebox.Text += "<div class='card white'>";
                                    sitebox.Text += "<div class='card-content black-text'>";
                                    sitebox.Text += "<span class='card-title'>" + dbr["sitename"].ToString() + "</span>";
                                    sitebox.Text += "<p> POS ID : " + dbr["siteid"].ToString() + "</p>";
                                    sitebox.Text += "<p> POS Type : " + dbr["postype"].ToString().ToUpper() + "</p>";
                                    sitebox.Text += "<p> <span>Updated :</span><span>" + dbr["regitered"].ToString() + "</span> </p>";
                                    sitebox.Text += " <p> <span>Created : </span><span>" + dbr["updated"].ToString() + "</span>  </p>";
                                    sitebox.Text += "</div>";
                                    sitebox.Text += "<div class='card-action'>";
                                    sitebox.Text += "<a href='site.aspx' class='theme-color'>GO TO SITE</a>";
                                    sitebox.Text += "</div></div></div>";
                                }
                            }
                        }
                    }
                    catch (Exception ex)
                    {
                        Response.Redirect("Default.aspx");
                    }
                    finally
                    {
                        DB.CloseConn();
                        cmd.Dispose();
                        dbr.Dispose();
                    }
                }
            }
            catch (Exception ex)
            {
                Response.Redirect("Default.aspx");
            }
        }
Esempio n. 22
0
        private void AddAccessUser()
        {
            string query = DB_Querys.AddAccessControl();

            DB.CloseConn();
            SqlCommand cmd = DB.ExecuteReader(query);

            access_key = getRandomString();
            cmd.Parameters.AddWithValue("@sitekey", Queryparam);
            cmd.Parameters.AddWithValue("@name", username.Text);
            cmd.Parameters.AddWithValue("@email", email.Text);
            cmd.Parameters.AddWithValue("@category", choose.SelectedValue);
            cmd.Parameters.AddWithValue("@authentication_key", access_key);
            cmd.Parameters.AddWithValue("@is_authenticate", 1);
            cmd.Parameters.AddWithValue("@created", DateTime.Now.ToString("yyyy-MM-dd hh:mm:ss tt"));
            cmd.Parameters.AddWithValue("@updated", DateTime.Now.ToString("yyyy-MM-dd hh:mm:ss tt"));

            if (choose.SelectedValue.ToLower().Equals(Macros.sADMIN))
            {
                cmd.Parameters.AddWithValue("@permission_level", Macros.iADMIN);
            }
            else if (choose.SelectedValue.ToLower().Equals(Macros.sACCOUNT_MANAGER))
            {
                cmd.Parameters.AddWithValue("@permission_level", Macros.iACCOUNT_MANAGER);
            }
            else if (choose.SelectedValue.ToLower().Equals(Macros.sTECHNICIAN))
            {
                cmd.Parameters.AddWithValue("@permission_level", Macros.iTECHNICIAN);
            }
            else if (choose.SelectedValue.ToLower().Equals(Macros.sMANAGER))
            {
                cmd.Parameters.AddWithValue("@permission_level", Macros.iMANAGER);
            }
            else if (choose.SelectedValue.ToLower().Equals(Macros.sEMPLOYEE))
            {
                cmd.Parameters.AddWithValue("@permission_level", Macros.iEMPLOYEE);
            }
            else if (choose.SelectedValue.ToLower().Equals(Macros.sCLIENT))
            {
                cmd.Parameters.AddWithValue("@permission_level", Macros.iCLIENT);
            }
            else
            {
                cmd.Parameters.AddWithValue("@permission_level", Macros.iNOTACCESS);
            }

            int res = cmd.ExecuteNonQuery();

            cmd.Dispose();
            DB.CloseConn();

            if (res == 1)
            {
                //send mail for access users

                SendMail(Macros.ACCESS_URL, access_key);

                Response.Write("<script>alert('Signup Successfull and check your mail!');</script>");
            }
            else
            {
                Response.Write("<script>alert('Somthing Error!');</script>");
            }
        }