public bool signIn(Credentials c)
{
bool valid = false;
UserDao = new UserDaoImpl();
Credentials = userDao.getCredentialsByEmail(c.Email);
if(Credentials != null && Credentials.Equals(c))
{
User = userDao.getUserByEmail(c.Email);
valid = true;
}
return valid;
}
public bool authenticate(string userEmail, string pass)
{
bool valid = false;
UserDaoImpl user = new UserDaoImpl();
Credentials c = user.getCredentialsByEmail(userEmail);
Credentials inputCreds = new Credentials(userEmail, pass);
if (c.Password.Equals(inputCreds.Password) && c.Email.Equals(inputCreds.Email))
{
User u = user.getUserByEmail(c.Email);
valid = true;
}
return valid;
}
public bool signUp(User u, Credentials c)
{
bool valid = false;
userDao = new UserDaoImpl();
if (userDao.createUser(u))
{
User = u;
if (userDao.createCredentials(c))
{
Credentials = c;
valid = true;
}
}
return valid;
}
protected void Button1_Click(object sender, EventArgs e)
{
UserController ctrl = new UserController();
Credentials creds = new Credentials()
{
Email = TextBox1.Text.ToString(),
Password = TextBox2.Text.ToString()
};
if (ctrl.signIn(creds))
{
Session["user"] = UserController.User;
Response.Redirect("TestHome.aspx");
}
else
{
Label3.Text = "Failed";
}
}
public bool createCredentials(Credentials creds)
{
bool added = true;
SqlConnection conn = DBHelper.loadDB();
string query = "INSERT INTO USERCREDENTIALS VALUES (@EMAIL, @PASSWORD, @QUESTION, @ANSWER)";
SqlCommand command = new SqlCommand(query, conn);
command.Parameters.Add(new SqlParameter("@EMAIL", creds.Email));
command.Parameters.Add(new SqlParameter("@PASSWORD", creds.Password));
command.Parameters.Add(new SqlParameter("@QUESTION", creds.Question));
command.Parameters.Add(new SqlParameter("@ANSWER", creds.Answer));
try
{
command.ExecuteNonQuery();
}
catch(SqlException e)
{
added = false;
}
return added;
}
public bool signUp(User u, Credentials c)
{
bool valid = false;
UserDaoImpl userDao = new UserDaoImpl();
userDao.createUser(u);
if (true)
{
userDao.createCredentials(c);
if (true)
{
Credentials creds = c;
valid = true;
Session["StartTime"] = DateTime.UtcNow;
Session["Name"] = userEmailTxt.Text;
Session["Admin"] = "No";
Response.Redirect("Profile.aspx");
}
}
return valid;
}
private Credentials readerToCredentials(SqlDataReader reader)
{
reader.Read();
Credentials c = new Credentials() {
Email = Convert.ToString(reader["email"]),
Password = Convert.ToString(reader["userpassword"]),
Question = Convert.ToString(reader["question"]),
Answer = Convert.ToString(reader["answer"])
};
return c;
}
public void createCredentials(Credentials creds)
{
SqlConnection conn = DBHelper.loadDB();
string query = "INSERT INTO USERCREDENTIALS VALUES ("
+ "'" + creds.Email
+ "', '" + creds.Password
+ "', '" + creds.Question
+ "', '" + creds.Answer
+ "')";
SqlCommand command = new SqlCommand(query, conn);
command.ExecuteNonQuery();
}
protected void SignUpBtn_Click(object sender, EventArgs e)
{
string role = Request.QueryString["role"];
bool ADMIN = false;
bool COMMITTEE = false;
bool DONOR = false;
string EMAIL = email.Text;
string FNAME = firstName.Text;
string LNAME = lastName.Text;
string ADDRESS = address1.Text;
string CITY = address2.Text;
string STATE = DropDownList1.SelectedValue;
int ZIP = Convert.ToInt32(zipCode.Text);
if (role.Equals("a"))
{
ADMIN = true;
COMMITTEE = false;
}
if (role.Equals("s"))
{
ADMIN = false;
COMMITTEE = true;
}
if (role.Equals("d"))
{
DONOR = true;
}
string HPHONE = phone.Text;
string MPHONE = TextBox1.Text;
bool TEXT = checkToText.Checked;
toAdd = new User()
{
Email = EMAIL,
FirstName = FNAME,
LastName = LNAME,
Address = ADDRESS,
City = CITY,
State = STATE,
Zip = ZIP,
Admin = ADMIN,
Committee = COMMITTEE,
Donor = DONOR,
Phone = MPHONE,
Text = TEXT
};
if (signUp.addUser(toAdd))
{
//Do we wnat to add a message here letting user know request was submitted successfully?
}
else
{
//Is this the preferred action if a user is already signed up or sign up fails?
Response.Redirect("Login.aspx");
}
//This adds usercredentials right away ... needs to be modified if there is an approval action
Credentials creds = new Credentials()
{
Email = EMAIL,
Password = password1.Text.ToString()
};
signUp.addUserCredentials(creds);
}
