protected void Page_Load(object sender, EventArgs e) { if (Session["objUser"] != null) { WUSERS loginUser = (WUSERS)(Session["objUser"]); if (loginUser.BelongFactory != null) { DataTable dtSetCheck = servCommfac.ExecuteSqlDatatable("select * from W_Weixin_Info where [UserName] like '" + loginUser.BelongFactory + "%'"); if (dtSetCheck.Rows.Count > 0) { DataTable dtMenu = servCommfac.ExecuteSqlDatatable("SELECT a.[MenuBM],b.ParentBM,b.MenuLevel FROM [W_Weixin_Info] a inner join W_WeixinMenu b on a.menubm = b.MenuBM where a.[UserName] = '" + loginUser.UserName + "' and a.status = 'E'"); if (dtMenu.Rows.Count > 0) { foreach (DataRow dr in dtMenu.Rows) { allMenuBM = allMenuBM + "," + dr["MenuBM"].ToString() + "," + dr["ParentBM"].ToString(); if (dr["MenuLevel"].ToString() == "2") { nextMenuBM = nextMenuBM + "," + dr["MenuBM"].ToString(); } } dt = servCommfac.ExecuteSqlDatatable("exec GetWXMenu '" + nextMenuBM + "'"); } else { dt = servCommfac.ExecuteSqlDatatable("exec GetWXMenu 'ALL' "); } } else { dt = servCommfac.ExecuteSqlDatatable("exec GetWXMenu 'ALL' "); } } Session["allMenuBM"] = allMenuBM; } }
/// <summary> /// /// </summary> /// <param name="strUserName"></param> /// <param name="strPassword"></param> /// <param name="bolAutoSave"></param> /// <returns>0:成功 1:失败</returns> public int doLogin(string strUserName, string strPassword) { ServiceCommon servComm = new ServiceCommon(); ConditionComponent condComponent = new ConditionComponent(); string CheckPass = ConfigurationManager.AppSettings["CheckPass"]; condComponent.Clear(); //condComponent.AddComponent("UPPER(Alias)", strUserName.ToUpper(), SearchComponent.Equals, SearchPad.Ex); condComponent.AddComponent("UPPER(UserName)", strUserName.ToUpper(), SearchComponent.Equals, SearchPad.NULL); if (CheckPass == "1") { condComponent.AddComponent("Passwd", strPassword, SearchComponent.Equals, SearchPad.And); } WUSERS objUser = servComm.GetEntity <WUSERS>(null, condComponent); if (objUser.ID > 0) { string accessList = ""; Session["objUser"] = objUser; string path = Server.MapPath(SaveFilePath); if (!Directory.Exists(path)) { Directory.CreateDirectory(path); } HttpContext.Current.Session["USERID"] = objUser.ID.ToString(); HttpContext.Current.Session["UserName"] = objUser.UserName.ToString(); HttpContext.Current.Session["PassWord"] = objUser.Passwd.ToString(); if (objUser.Kind == "S") { accessList = "Admin"; Session["accessList"] = accessList; Response.Redirect("/Weixinclient/WXOrderList.aspx"); } else { ccWhere.Clear(); ccWhere.AddComponent("JGCBM", objUser.BelongFactory, SearchComponent.Equals, SearchPad.NULL); JX_USERS jxUser = servComm.GetEntity <JX_USERS>(null, ccWhere); if (jxUser != null && !String.IsNullOrEmpty(jxUser.DBUser)) { string DBName = "JJ2011"; if (jxUser.DBsameJGCBM == "Y") { DBName = jxUser.JGCBM; } string factoryConnection = String.Format("Data Source={0};Initial Catalog={1};User ID={2};Password={3}", jxUser.DBServerIP, DBName, jxUser.DBUser, jxUser.DBPassword); Session["factoryConnectionString"] = factoryConnection; ServiceCommon facservComm = new ServiceCommon(base.factoryConnectionString); DataTable dtNeedScript = facservComm.ExecuteSqlDatatable("SELECT* FROM dbo.SysObjects WHERE ID = object_id(N'sp_PageGetCommNew') AND OBJECTPROPERTY(ID, N'IsProcedure') = 1"); if (dtNeedScript == null || dtNeedScript.Rows.Count == 0) { if (CreatDBScript(factoryConnection) == false) { return(3); } } DataTable dtClassSet = facservComm.ExecuteSqlDatatable("SELECT * FROM dbo.SysObjects WHERE ID = object_id(N'ClassSet') AND OBJECTPROPERTY(ID, 'IsTable') = 1"); if (dtClassSet != null && dtClassSet.Rows.Count > 0) { Session["ListClassSet"] = facservComm.GetListTop <ClassSet>(0, new ConditionComponent()); Session["IsGMP"] = true; } else { Session["IsGMP"] = false; } ccWhere.Clear(); Hashtable hashOrganization = new Hashtable(); if (LoginUser.Kind == "B") { hashOrganization.Add("sellerid", LoginUser.AssocNo); } else if (LoginUser.Kind == "C") { ccWhere.AddComponent("hospitalid", LoginUser.AssocNo.ToString(), SearchComponent.Equals, SearchPad.NULL); // DataTable dtHospital = facservComm.GetListTop(0, " distinct hospitalid ,sellerid ", "vieworganization", ccWhere); DataTable dtHospital = facservComm.ExecuteSqlDatatable(vieworganizationsql + " where " + ccWhere.sbComponent); if (dtHospital.Rows.Count > 0) { hashOrganization.Add("sellerid", dtHospital.Rows[0]["sellerid"]); hashOrganization.Add("hospitalid", dtHospital.Rows[0]["hospitalid"]); } else { return(1); } } else if (LoginUser.Kind == "D") { ccWhere.AddComponent("doctorid", LoginUser.AssocNo.ToString(), SearchComponent.Equals, SearchPad.NULL); // DataTable dtDoctor = facservComm.GetListTop(0, " distinct doctorid ,hospitalid,sellerid", "vieworganization", ccWhere); DataTable dtDoctor = facservComm.ExecuteSqlDatatable(distinctvieworganizationsql + " where " + ccWhere.sbComponent); if (dtDoctor.Rows.Count > 0) { hashOrganization.Add("sellerid", dtDoctor.Rows[0]["sellerid"]); hashOrganization.Add("hospitalid", dtDoctor.Rows[0]["hospitalid"]); hashOrganization.Add("doctorid", dtDoctor.Rows[0]["doctorid"]); } else { return(1); } } Session["Organization"] = hashOrganization; DataTable dtBase = facservComm.GetListTop(1, "base", null); if (dtBase.Rows.Count > 0) { Session["IDRule"] = dtBase.Rows[0]["IDRule"].ToString(); Session["phone"] = dtBase.Rows[0]["phone"].ToString().Trim().Replace("、", ","); Session["corp"] = dtBase.Rows[0]["corp"].ToString().Trim(); tel1 = dtBase.Rows[0]["phone"].ToString().Trim(); tel2 = dtBase.Rows[0]["fax"].ToString().Trim(); } else { Session["IDRule"] = "B"; Session["phone"] = ""; Session["corp"] = "义齿平台用户登录"; tel1 = ""; tel2 = ""; } WriteCookie(UserConstant.COOKIE_SAVEDUSERNAME, strUserName); WriteCookie(UserConstant.COOKIE_SAVEDPASSWORD, strPassword); WriteCookie(UserConstant.COOKIE_TEL1, tel1); WriteCookie(UserConstant.COOKIE_TEL2, tel2); Session["UserName"] = strUserName; Session["PassWord"] = strPassword; WriteCookie(UserConstant.COOKIE_SAVEDCORP, Session["corp"].ToString()); if (Session["APPID"] == null) { Response.Redirect(Request.Url.GetLeftPart(UriPartial.Authority) + "//Weixinclient//WXLogin.aspx?action=resubmit"); Response.End(); } DataTable dt = servComm.ExecuteSqlDatatable("exec SPAccessMenu '" + LoginUser.BelongFactory + "'"); foreach (DataRow dr in dt.Rows) { accessList = accessList + "," + dr["action_type"]; } Session["accessList"] = accessList; if (accessList == "") { return(2); } else if (accessList.IndexOf("Weixin") > -1 && Session["FromWeixin"] == "1") { if (servComm.ExecuteSqlDatatable("select * from W_Weixin_Info where [UserName] like '" + objUser.BelongFactory + "%'").Rows.Count > 0) { DataTable dtMenu = servComm.ExecuteSqlDatatable("SELECT b.LinkUrl FROM [W_Weixin_Info] a inner join W_WeixinMenu b on a.menubm = b.MenuBM where a.[UserName] = '" + strUserName + "' and a.status = 'E' and b.LinkUrl != 'None' "); if (dtMenu.Rows.Count > 0) { string menuurl = GetCookie("menubmcookie"); if (!String.IsNullOrEmpty(menuurl)) { Response.Redirect("/Weixinclient/" + menuurl + ".aspx"); Response.End(); } else if (dtMenu.Select("LinkUrl='WXOrderList.aspx'").Length > 0) { Response.Redirect("/Weixinclient/WXOrderList.aspx"); Response.End(); } else { Response.Redirect("/Weixinclient/" + dtMenu.Rows[0]["LinkUrl"].ToString()); Response.End(); } } else { return(2); } } else { return(2); //Response.Redirect("/Weixinclient/WXOrderList.aspx"); //Response.End(); } } else if (accessList.IndexOf("Order") > -1) { Response.Redirect("/OrderManagement/OrderList.aspx?type=Order"); Response.End(); } else if (accessList.IndexOf("Procedure") > -1) { Response.Redirect("/Information/ProcedureQuery.aspx?type=Information"); Response.End(); } else if (accessList.IndexOf("Report") > -1) { Response.Redirect("/ReportStatistics/FinanceSummaryDetail.aspx?type=ReportStatistics"); Response.End(); } } else { return(1); } } return(0); } else { return(1); } }
/// <summary> /// /// </summary> /// <param name="strUserName"></param> /// <param name="strPassword"></param> /// <param name="bolAutoSave"></param> /// <returns>0:成功 1:失败</returns> public int doLogin(string strUserName, string strPassword) { ServiceCommon servComm = new ServiceCommon(); ConditionComponent condComponent = new ConditionComponent(); string CheckPass = ConfigurationManager.AppSettings["CheckPass"]; condComponent.Clear(); //condComponent.AddComponent("UPPER(Alias)", strUserName.ToUpper(), SearchComponent.Equals, SearchPad.Ex); condComponent.AddComponent("UPPER(UserName)", strUserName.ToUpper(), SearchComponent.Equals, SearchPad.NULL); if (CheckPass == "1") { condComponent.AddComponent("Passwd", strPassword, SearchComponent.Equals, SearchPad.And); } WUSERS objUser = servComm.GetEntity <WUSERS>(null, condComponent); if (objUser.ID > 0) { string accessList = ""; Session["objUser"] = objUser; string path = Server.MapPath(SaveFilePath); if (!Directory.Exists(path)) { Directory.CreateDirectory(path); } HttpContext.Current.Session["USERID"] = objUser.ID.ToString(); HttpContext.Current.Session["UserName"] = objUser.UserName.ToString(); if (objUser.Kind == "S") { accessList = "Admin"; Session["accessList"] = accessList; Response.Redirect("System/JGCList.aspx?type=System"); } else { ccWhere.Clear(); ccWhere.AddComponent("JGCBM", objUser.BelongFactory, SearchComponent.Equals, SearchPad.NULL); JX_USERS jxUser = servComm.GetEntity <JX_USERS>(null, ccWhere); if (jxUser != null && !String.IsNullOrEmpty(jxUser.DBUser)) { string DBName = "JJ2011"; if (jxUser.DBsameJGCBM == "Y") { DBName = jxUser.JGCBM; } string factoryConnection = String.Format("Data Source={0};Initial Catalog={1};User ID={2};Password={3}", jxUser.DBServerIP, DBName, jxUser.DBUser, jxUser.DBPassword); Session["factoryConnectionString"] = factoryConnection; ServiceCommon facservComm = new ServiceCommon(base.factoryConnectionString); DataTable dtNeedScript = facservComm.ExecuteSqlDatatable("SELECT* FROM dbo.SysObjects WHERE ID = object_id(N'sp_PageGetCommNew') AND OBJECTPROPERTY(ID, N'IsProcedure') = 1"); if (dtNeedScript == null || dtNeedScript.Rows.Count == 0) { if (CreatDBScript(factoryConnection) == false) { return(3); } } DataTable dtClassSet = facservComm.ExecuteSqlDatatable("SELECT * FROM dbo.SysObjects WHERE ID = object_id(N'ClassSet') AND OBJECTPROPERTY(ID, 'IsTable') = 1"); if (dtClassSet != null && dtClassSet.Rows.Count > 0) { Session["ListClassSet"] = facservComm.GetListTop <ClassSet>(0, new ConditionComponent()); Session["IsGMP"] = true; } else { Session["IsGMP"] = false; } ccWhere.Clear(); Hashtable hashOrganization = new Hashtable(); if (LoginUser.Kind == "B") { hashOrganization.Add("sellerid", LoginUser.AssocNo); } else if (LoginUser.Kind == "C") { ccWhere.AddComponent("hospitalid", LoginUser.AssocNo.ToString(), SearchComponent.Equals, SearchPad.NULL); DataTable dtHospital = facservComm.ExecuteSqlDatatable(vieworganizationsql + " where " + ccWhere.sbComponent); if (dtHospital.Rows.Count > 0) { hashOrganization.Add("sellerid", dtHospital.Rows[0]["sellerid"]); hashOrganization.Add("hospitalid", dtHospital.Rows[0]["hospitalid"]); } else { return(1); } } else if (LoginUser.Kind == "D") { ccWhere.AddComponent("doctorid", LoginUser.AssocNo.ToString(), SearchComponent.Equals, SearchPad.NULL); DataTable dtDoctor = facservComm.ExecuteSqlDatatable(distinctvieworganizationsql + " where " + ccWhere.sbComponent); if (dtDoctor.Rows.Count > 0) { hashOrganization.Add("sellerid", dtDoctor.Rows[0]["sellerid"]); hashOrganization.Add("hospitalid", dtDoctor.Rows[0]["hospitalid"]); hashOrganization.Add("doctorid", dtDoctor.Rows[0]["doctorid"]); } else { return(1); } } Session["Organization"] = hashOrganization; DataTable dtBase = facservComm.GetListTop(1, "base", null); if (dtBase.Rows.Count > 0) { Session["IDRule"] = dtBase.Rows[0]["IDRule"].ToString(); } else { Session["IDRule"] = "B"; } WriteCookie(UserConstant.COOKIE_SAVEDUSERNAME, EncryptClass.Encode(strUserName)); WriteCookie(UserConstant.COOKIE_SAVEDPASSWORD, EncryptClass.Encode(strPassword)); DataTable dt = servComm.ExecuteSqlDatatable("exec SPAccessMenu '" + LoginUser.BelongFactory + "'"); foreach (DataRow dr in dt.Rows) { accessList = accessList + "," + dr["action_type"]; } Session["accessList"] = accessList; if (accessList == "") { return(2); } else if (accessList.IndexOf("Weixin") > -1 && Session["FromWeixin"] == "1") { Response.Redirect("/Weixinclient/WXLogin.aspx"); Response.End(); } else if (accessList.IndexOf("Order") > -1) { Response.Redirect("/OrderManagement/OrderList.aspx?type=Order"); Response.End(); } else if (accessList.IndexOf("Procedure") > -1) { Response.Redirect("/Information/ProcedureQuery.aspx?type=Information"); Response.End(); } else if (accessList.IndexOf("Report") > -1) { Response.Redirect("/ReportStatistics/FinanceSummaryDetail.aspx?type=ReportStatistics"); Response.End(); } } else { return(1); } } return(0); } else { return(1); } }