public JsonReturn Login(string username, string password)
{
username = HTMLEntity.XSSConvert(username);
var domain = new HttpParser(HttpContext).GetDomain();
UserEntity u = (from lu in dbc.User where lu.Name == username select lu).FirstOrDefault();
if (u == null)
{
return(JsonReturn.ReturnFail(-1, "该用户不存在！"));
}
string salt = u.Salt;
string passHash = HashStr(salt + password + salt + username);
if (u.Pass != passHash)
{
return(JsonReturn.ReturnFail(-2, "密码错误！"));
}
else
{
if (u.Token == null)
{
string token = HashStr(password + DateTime.Now.ToString() + username);
u.Token = token;
u.ExpireTime = DateTime.Now.AddMonths(1);
dbc.SaveChanges();
}
string ip = new HttpParser(HttpContext).GetIPAddr();
var loginIpDic = u.LoginIP;
if (!loginIpDic.ContainsKey(ip) || loginIpDic[ip] == false)
{
if (!loginIpDic.ContainsKey(ip))
{
loginIpDic.Add(ip, false);
u.LoginIP = loginIpDic;
dbc.SaveChangesAsync();
}
//TODO: 陌生ip登录，进行身份验证
}
Response.Cookies.Append("username", username, new CookieOptions {
Domain = domain, Expires = DateTime.Now.AddMonths(1)
});
Response.Cookies.Append("token", u.Token, new CookieOptions {
Domain = domain, Expires = DateTime.Now.AddMonths(1)
});
Response.Cookies.Append("id", u.UserID.ToString(), new CookieOptions {
Domain = domain, Expires = DateTime.Now.AddMonths(1)
});
return(JsonReturn.ReturnSuccess());
}
}
public JsonReturn Register(string username, string password)
{
username = HTMLEntity.XSSConvert(username);
string salt = HashStr(username + DateTime.Now.ToString());
string passHash = HashStr(salt + password + salt + username);
string ip = new HttpParser(HttpContext).GetIPAddr();
var loginIPDic = new Dictionary <string, bool>();
loginIPDic.Add(ip, true);
UserEntity u = new UserEntity {
Name = username, Pass = passHash, Salt = salt, LastLoginIP = ip, LoginIP = loginIPDic
};
dbc.User.Add(u);
dbc.SaveChanges();
return(JsonReturn.ReturnSuccess());
}