public async Task <IHttpActionResult> Postuser_account(user_account user_account)
{
if (!ModelState.IsValid)
{
return(BadRequest(ModelState));
}
db.user_account.Add(user_account);
try
{
await db.SaveChangesAsync();
}
catch (DbUpdateException)
{
if (user_accountExists(user_account.id))
{
return(Conflict());
}
else
{
throw;
}
}
return(CreatedAtRoute("DefaultApi", new { id = user_account.id }, user_account));
}
public async Task <IHttpActionResult> Putuser_account(int id, user_account user_account)
{
if (!ModelState.IsValid)
{
return(BadRequest(ModelState));
}
if (id != user_account.id)
{
return(BadRequest());
}
db.Entry(user_account).State = EntityState.Modified;
try
{
await db.SaveChangesAsync();
}
catch (DbUpdateConcurrencyException)
{
if (!user_accountExists(id))
{
return(NotFound());
}
else
{
throw;
}
}
return(StatusCode(HttpStatusCode.NoContent));
}
public JsonResult changeUserRole(user_account user)
{
var selectedUser = db.user_account.Where(x => x.userAccountId == user.userAccountId).FirstOrDefault();
var type = user.userTypeID;
selectedUser.userTypeID = type;
db.SaveChanges();
var teacher = db.user_teacher.Where(x => x.userAccountID == selectedUser.userAccountId).FirstOrDefault();
db.user_teacher.Remove(teacher);
db.SaveChanges();
if (user.userTypeID != 1)
{
var userT = new user_student();
userT.userAccountID = selectedUser.userAccountId;
db.user_student.Add(userT);
db.SaveChanges();
}
else
{
var admin = new user_admin();
admin.adminAccountId = selectedUser.userAccountId;
admin.adminEmail = selectedUser.userEmail;
admin.adminName = selectedUser.firstName;
admin.adminSurname = selectedUser.lastName;
admin.adminRegisterDate = DateTime.Now;
admin.adminPassword = selectedUser.userPassword;
admin.adminIsActive = selectedUser.userIsActive;
db.user_admin.Add(admin);
db.user_account.Remove(selectedUser);
db.SaveChanges();
}
db.SaveChanges();
return(Json(JsonRequestBehavior.AllowGet));
}
public MainForm(user_account user)
{
InitializeComponent();
loggedInUser = user;
this.ActiveControl = comboBoxMemberLogin;
populateTable(false); //Prebaciti u load mozda??
populateGearTable();
}
public JsonResult userActivate(user_account user)
{
var selectedUser = db.user_account.Where(x => x.userAccountId == user.userAccountId).FirstOrDefault();
selectedUser.userIsActive = "1";
db.SaveChanges();
return(Json(JsonRequestBehavior.AllowGet));
}
public JsonResult Login(UserAccount param)
{
var token = Guid.NewGuid().ToString();
UserInfo userInfo = null;
if (!ModelState.IsValid)
{
return(Json(Global.VerifyModel(ModelState)));
}
using (var db = new DataMigrationEntities())
{
var user_account = db.user_account.FirstOrDefault(a => a.Email == param.Account);
if (user_account == null)
{
//注册流程
//验证账号
var vCode = MeCache <string> .Get(string.Format(MeCacheKey.EmailVerifyCode, param));
if (string.IsNullOrWhiteSpace(vCode))
{
var json = SendVerifyCodeToEmail(param);
return(SendVerifyCode(param));
}
if (param.Code != vCode)
{
return(Json(ReturnResult.Fail(null)));
}
user_account = new user_account
{
CreateTime = DateTime.Now,
Creator = "login_api",
Modifier = string.Empty,
ModifyTime = DateTime.Now,
Email = param.Account,
Account = param.Account,
HeadPortrait = string.Empty,
Mobile = string.Empty,
Nickname = string.Empty,
Password = "******",
TrueName = string.Empty,
};
db.user_account.Add(user_account);
db.SaveChanges();
userInfo = SetCache(user_account, token);
return(Json(new ReturnResult(0, token, userInfo)));
}
if (user_account.Password != param.Code)
{
return(Json(new ReturnResult(2, TipString.密码错误)));
}
userInfo = SetCache(user_account, token);
return(Json(new ReturnResult(0, token, userInfo)));
}
}
public void TestMethod1()
{
var userId = 1;
var query = from ua in db.user_account
where ua.user_id == userId
select ua;
user_account userAccount = query.FirstOrDefault();
Console.WriteLine(userAccount.account1_balance);
}
/// <summary>
/// 提交“个人信息更新”
/// </summary>
/// <param name="user"></param>
/// <returns></returns>
public ActionResult UpdateProfile([Bind] user_account user)
{
if (user.name != null)
{
CurrentUser = AccountMgr.UpdateUser(user);
return(Content("OK"));
}
else
{
return(Content("姓名不可为空！"));
}
}
//登录
public string LoginSignin(string LoginName, string LoginPassword)
{
string Rt_url = "";
user_account user = AdminMgr.GetLoin(LoginName, Cryptography.GetMD5Hash(LoginName + LoginPassword));
if (user != null)
{
HttpCookie cookie = new HttpCookie("LogingName", user.account);
Response.Cookies.Add(cookie);
Rt_url = "/admin/index";
}
return(Rt_url);
}
//User authentication
public static Boolean authenticateUser(user_account user, String password)
{
var retVal = false;
var initialSalt = user.username.Substring(0, 3);
var passHash = Utils.Utilities.getPasswordHash(password, initialSalt);
if (user.password.Equals(passHash))
{
retVal = true;
}
return(retVal);
}
/// <summary>
/// 设置缓存
/// </summary>
/// <param name="user_account"></param>
/// <param name="token"></param>
/// <returns></returns>
private static UserInfo SetCache(user_account user_account, string token)
{
var userInfo = new UserInfo
{
Id = user_account.Id,
Logo = user_account.HeadPortrait,
Name = user_account.Nickname,
};
MeCache <UserInfo> .AddOrUpdate(token, userInfo, DateTime.Now.AddDays(7));
return(userInfo);
}
//insert
public static Boolean insert(user_account newUser) //lower to invariant kod pravljenja za username
{
int retVal = 0;
//Check if user with same username already exists //DORADITI
using (var db = new ExtremeAppContext())
{
db.user_account.Add(newUser);
retVal = db.SaveChanges();
}
return(retVal > 0 ? true : false);
}
public async Task <IHttpActionResult> Deleteuser_account(int id)
{
user_account user_account = await db.user_account.FindAsync(id);
if (user_account == null)
{
return(NotFound());
}
db.user_account.Remove(user_account);
await db.SaveChangesAsync();
return(Ok(user_account));
}
public ActionResult Login(user_account user)
{
var us = user.userEmail;
var ps = user.userPassword;
var password = Crypt.Encrypt(user.userPassword);
var data = db.user_admin.Where(x => x.adminEmail == user.userEmail && x.adminPassword == password && x.adminIsActive == "1").FirstOrDefault();
if (data != null)
{
LoginStatus.Current.IsLogin = true;
LoginStatus.Current.Name = data.adminName;
LoginStatus.Current.Surname = data.adminSurname;
LoginStatus.Current.UserId = data.adminAccountId;
LoginStatus.Current.IsActive = data.adminIsActive;
var userLog = db.admin_log.Where(x => x.adminAccountID == data.adminAccountId).FirstOrDefault();
if (userLog == null)
{
admin_log log = new admin_log();
log.adminAccountID = data.adminAccountId;
log.loginDate = DateTime.Now;
string ipAddress = Request.ServerVariables["HTTP_X_FORWARDED_FOR"];
if (ipAddress == "" || ipAddress == null)
{
ipAddress = Request.ServerVariables["REMOTE_ADDR"];
}
log.loginIp = ipAddress;
db.admin_log.Add(log);
db.SaveChanges();
}
else
{
userLog.loginDate = DateTime.Now;
string ipAddress = Request.ServerVariables["HTTP_X_FORWARDED_FOR"];
if (ipAddress == "" || ipAddress == null)
{
ipAddress = Request.ServerVariables["REMOTE_ADDR"];
}
userLog.loginIp = ipAddress;
db.SaveChanges();
}
return(RedirectToAction("Index", "Home"));
}
else
{
ViewBag.Warning = "Kullanıcı adı ve ya şifre hatalı.";
}
return(View());
}
public JsonResult SendActivationEmail(user_account user)
{
var token = Guid.NewGuid().ToString();
var activationUrl = "Verify/" + token;
var link = Request.Url.AbsoluteUri.Replace(Request.Url.PathAndQuery, activationUrl);
var selected = db.user_account.FirstOrDefault(x => x.userAccountId == user.userAccountId);
selected.mailActivationCode = token;
db.SaveChanges();
var subject = "E-mail Aktivasyonu";
var body = "Merhaba " + selected.firstName + ", <br/> E-mail aktivasyonu için aşağıdaki linke tıklayınız." + "<br/><br/><a href='" + link + "'>Buraya Tıklayınız</a> <br/><br/>" + "Teşekkürler";
sendEmail(selected.userEmail, body, subject);
return(Json("ok", JsonRequestBehavior.AllowGet));
}
public ActionResult Edit(user_account user)
{
var stu = db.user_account.FirstOrDefault(x => x.userAccountId == user.userAccountId);
if (stu != null)
{
stu.firstName = user.firstName;
stu.lastName = user.lastName;
stu.userAddress = user.userAddress;
stu.userPhone = user.userPhone;
db.SaveChanges();
return(RedirectToAction("Index", "StudentList"));
}
else
{
ViewBag.Warning = "Düzenleme gerçekleştirilemedi.";
return(View());
}
}
public ActionResult Edit(user_account user)
{
var teach = db.user_account.FirstOrDefault(x => x.userAccountId == user.userAccountId);
if (teach != null)
{
teach.firstName = user.firstName;
teach.lastName = user.lastName;
teach.userAddress = user.userAddress;
teach.userPhone = user.userPhone;
teach.user_teacher.degree = user.user_teacher.degree;
db.SaveChanges();
return(RedirectToAction("Index", "TeacherList"));
}
else
{
ViewBag.Warning = "Düzenleme gerçekleştirilemedi.";
return(View());
}
}
public JsonResult Register(UserAccount param)
{
if (!ModelState.IsValid)
{
return(Json(new ReturnResult(2, Global.VerifyModel(ModelState))));
}
var code = MeCache <string> .Get(string.Format(MeCacheKey.EmailVerifyCode, param.Account));
if (code != param.VerifyCode_Email)
{
return(Json(new ReturnResult(2, "邮箱验证码错误")));
}
using (var db = new DataMigrationEntities())
{
var user_account = db.user_account.FirstOrDefault(a => a.Email == param.Account);
if (user_account != null)
{
return(Json(ReturnResult.IsExist()));
}
user_account = new user_account
{
CreateTime = DateTime.Now,
Creator = "login_api",
Modifier = string.Empty,
ModifyTime = DateTime.Now,
Email = param.Account,
Account = param.Account,
HeadPortrait = string.Empty,
Mobile = string.Empty,
Nickname = string.Empty,
Password = param.Password,
TrueName = string.Empty,
};
db.user_account.Add(user_account);
db.SaveChanges();
return(Json(ReturnResult.Ok));
}
}
public bool AddDeleteMoney(int[] userIds, int addOrDelete, string money, int accountType)
{
for (int i = 0; i < userIds.Length; i++)
{
int userId = userIds[i];
//获取对象
user_account userAccount = this._userManager.GetUserAccount(userId);
var operId = (Session[SessionConstants.CURRENTOPERATOR] as _operator).oper_id;
if (userAccount == null)
{
continue;
}
account_record accountRecord = new account_record();
accountRecord.user_id = userAccount.user_id;
accountRecord.cons_value = int.Parse(money);
accountRecord.oper_id = operId;
accountRecord.acc_remark = "系统手工操作";
//判断是增加还是删除
//addOrDelete增加是1 减是-1
if (addOrDelete == 1)
{
accountRecord.acc_record_type = AccRecordType.SYS_ADD;
accountRecord.cons_type = ConType.INCOME;
//金钻账户增加
if (accountType == AccountConstants.GOLD)
{
accountRecord.acc_type = AccountConstants.GOLD;
accountRecord.acc_balance = userAccount.account1_balance + int.Parse(money);
this._userManager.InsertAccountRecord(accountRecord);
}
//银钻账户增加
if (accountType == AccountConstants.SILVER)
{
accountRecord.acc_type = AccountConstants.SILVER;
accountRecord.acc_balance = userAccount.account2_balance + int.Parse(money);
this._userManager.InsertAccountRecord(accountRecord);
}
//蓝钻账户增加
if (accountType == AccountConstants.BLUE)
{
accountRecord.acc_type = AccountConstants.BLUE;
accountRecord.acc_balance = userAccount.account3_balance + int.Parse(money);
this._userManager.InsertAccountRecord(accountRecord);
}
continue;
}
if (addOrDelete == -1)
{
accountRecord.acc_record_type = AccRecordType.SYS_DELETE;
accountRecord.cons_type = ConType.EXPEND;
//金钻账户减少
if (accountType == AccountConstants.GOLD)
{
accountRecord.acc_type = AccountConstants.GOLD;
accountRecord.acc_balance = userAccount.account1_balance - int.Parse(money);
this._userManager.InsertAccountRecord(accountRecord);
}
//银钻账户减少
if (accountType == AccountConstants.SILVER)
{
accountRecord.acc_type = AccountConstants.SILVER;
accountRecord.acc_balance = userAccount.account2_balance - int.Parse(money);
this._userManager.InsertAccountRecord(accountRecord);
}
//蓝钻账户减少
if (accountType == AccountConstants.BLUE)
{
accountRecord.acc_type = AccountConstants.BLUE;
accountRecord.acc_balance = userAccount.account3_balance - int.Parse(money);
this._userManager.InsertAccountRecord(accountRecord);
}
continue;
}
}
return(true);
}
public void update(user_account user)
{
throw new NotImplementedException();
}
public static ReturnObject UpdateUser(string current, string previous_user_id)
{
user_account page_object = new user_account();
DBConnection db_connection = new DBConnection();
ReturnObject return_object = new ReturnObject();
JObject current_data = new JObject();
string
employee_id = string.Empty,
user_name = string.Empty,
password = string.Empty,
confirm_password = string.Empty,
query = string.Empty;
int
user_access_level = 0,
count = 0;
try
{
// Parsing data from JSON
current_data = JObject.Parse(current);
// Storing data for later use.
employee_id = current_data["employee_code"].ToString();
user_name = current_data["username"].ToString();
password = current_data["password"].ToString();
confirm_password = current_data["confirm_password"].ToString();
user_access_level = Convert.ToInt32(current_data["access_level"]);
// Query for setting user access level
query = "update EmployeeMaster set ";
switch (user_access_level)
{
case 0:
query += " ismanager = 0, IsHr = 0 ";
break;
case 1:
query += " ismanager = 1, IsHr = 0 ";
break;
case 2:
query += " ismanager = 0, IsHr = 0 ";
break;
case 3:
query += " ismanager = 0, IsHr = 1 ";
break;
}
query += " where emp_code='" + employee_id + "' ";
db_connection.ExecuteQuery_WithOutReturnValue(query);
if (previous_user_id != user_name)
{
query = "select count(*) from login where UserName = '******' and status = 1";
count = db_connection.ExecuteQuery_WithReturnValueInteger(query);
if (count > 0)
{
return_object.status = "error";
return_object.return_data = "User name has been taken. Please try again with a different user name.";
}
else
{
page_object.InsertUpdate("U", employee_id, user_name, password, user_access_level, 1);
return_object.status = "success";
return_object.return_data = "Changes saved successfully!";
}
}
else
{
page_object.InsertUpdate("U", employee_id, user_name, password, user_access_level, 1);
return_object.status = "success";
return_object.return_data = "Changes saved successfully!";
}
}
catch (Exception ex)
{
Logger.LogException(ex, page, "UPDATE_USER");
return_object.status = "error";
return_object.return_data = "An error occurred while updating user details. Please try again. If the error persists, please contact Support.";
throw;
}
finally
{
page_object.Dispose();
}
return(return_object);
}
public static ReturnObject GetUserData(int page_number, bool is_filter, string filters)
{
user_account page_object = new user_account();
DBConnection db_connection = new DBConnection();
ReturnObject return_object = new ReturnObject();
DataTable user_data = new DataTable();
string
query = string.Empty,
user_id = string.Empty;
int
access_level = 0,
start_row = (page_number - 1) * 30,
number_of_rows = page_number * 30 + 1;
try
{
user_id = HttpContext.Current.Session["username"].ToString();
if (user_id != "admin")
{
user_id = HttpContext.Current.Session["employee_id"].ToString();
}
access_level = Convert.ToInt32(HttpContext.Current.Session["access_level"]);
query = page_object.GetBaseQuery();
switch (access_level)
{
case 0:
query += " and L.UserName!='admin' and L.Password!='admin' ";
break;
default:
query += " and E.Emp_Code in (select distinct(Emp_Code) from EmployeeMaster where managerId='" + user_id + "' and Emp_Status=1) ";
break;
}
query = page_object.GetFilterQuery(query, filters);
query += " ) a where row > " + start_row + " and row < " + number_of_rows;
user_data = db_connection.ReturnDataTable(query);
return_object.status = "success";
return_object.return_data = JsonConvert.SerializeObject(user_data, Formatting.Indented);
}
catch (Exception ex)
{
Logger.LogException(ex, page, "GET_USER_DATA");
return_object.status = "error";
return_object.return_data = "An error occurred while loading User data. Please refresh the page and try again. If the error persists, please contact Support.";
throw;
}
finally
{
page_object.Dispose();
}
return(return_object);
}
/// <summary>
/// 提交新用户注册
/// </summary>
/// <param name="user"></param>
/// <returns></returns>
public ActionResult SubmitRegister([Bind] user_account user)
{
var password2 = Request.Form["password2"];
// 检查必填字段是否完整
if (string.IsNullOrEmpty(user.mobile_number) == true)
{
return(Content("手机号码不可为空。"));
}
if (string.IsNullOrEmpty(user.name) == true)
{
return(Content("真实姓名不可为空。"));
}
if (string.IsNullOrEmpty(user.password) == true)
{
return(Content("登录密码不可为空。"));
}
if (string.IsNullOrEmpty(password2) == true)
{
return(Content("重复登录密码不可为空。"));
}
if (user.password != password2)
{
return(Content("两次输入的登录密码不一致。"));
}
if (string.IsNullOrEmpty(user.hospital_name) == true)
{
return(Content("所在医院不可为空。"));
}
if (string.IsNullOrEmpty(user.department_name) == true)
{
return(Content("科室名称不可为空。"));
}
if (Checker.IsValidTelephone(user.mobile_number) == false)
{
return(Content("手机号码格式无效。"));
}
// 检查手机号码是否已被使用
var temp = AccountMgr.GetUser(user.mobile_number);
if (temp != null)
{
return(Content("手机号码(" + user.mobile_number + ")已被注册。"));
}
// 根据性别，设置默认头像
if (user.gender == GenderType.男)
{
user.avatar = "user.png";
}
else if (user.gender == GenderType.女)
{
user.avatar = "user-female.png";
}
// 保存新用户登录信息
CurrentUser = AccountMgr.InsertUser(user);
return(Content("OK"));
}
public void SaveUserAccount(user_account userAccount)
{
UserAccountRepository.Save(userAccount);
}
