/// <summary>
    /// 增加数据
    /// </summary>
    /// <param name="parameter_forUI">前台表单传来的参数</param>
    /// <returns></returns>
    public DataSet NRS_ADD(DataTable parameter_forUI)
    {
        //接收转换参数
        Hashtable ht_forUI = new Hashtable();

        for (int i = 0; i < parameter_forUI.Rows.Count; i++)
        {
            ht_forUI[parameter_forUI.Rows[i]["参数名"].ToString()] = parameter_forUI.Rows[i]["参数值"].ToString();
        }
        //初始化返回值
        DataSet dsreturn = initReturnDataSet().Clone();

        dsreturn.Tables["返回值单条"].Rows.Add(new string[] { "err", "初始化" });
        //参数合法性各种验证,这里要根据具体业务逻辑处理

        //开始真正的处理,根据业务逻辑操作数据库
        I_Dblink  I_DBL     = (new DBFactory()).DbLinkSqlMain("");
        Hashtable return_ht = new Hashtable();
        ArrayList alsql     = new ArrayList();
        Hashtable param     = new Hashtable();
        //以可排序guid方式生成
        //string guid = CombGuid.GetNewCombGuid("D");
        //以两位年+两位月+两位日+6位序列顺序号方式生成
        string guid = CombGuid.GetNewCombGuid("U");

        param.Add("@UAid", guid);
        param.Add("@Uloginname", ht_forUI["Uloginname"].ToString());

        //对密码进行加密
        string mima_enc = StringOP.encMe(ht_forUI["Uloginpassword"].ToString().Trim(), "mima");

        param.Add("@Uloginpassword", mima_enc);

        param.Add("@xingming", ht_forUI["xingming"].ToString());
        param.Add("@xingbie", ht_forUI["xingbie"].ToString());
        param.Add("@nianling", ht_forUI["nianling"].ToString());
        param.Add("@zhuangtai", ht_forUI["zhuangtai"].ToString());
        param.Add("@beizhu", ht_forUI["beizhu"].ToString());

        alsql.Add("INSERT INTO  auth_users_auths(UAid ,Uloginname,Uloginpassword) VALUES(@UAid ,@Uloginname,@Uloginpassword )");

        alsql.Add("INSERT INTO  ZZZ_userinfo(UAid ,xingming,xingbie,nianling,zhuangtai,beizhu) VALUES(@UAid ,@xingming,@xingbie,@nianling,@zhuangtai,@beizhu)");

        return_ht = I_DBL.RunParam_SQL(alsql, param);

        if ((bool)(return_ht["return_float"]))
        {
            dsreturn.Tables["返回值单条"].Rows[0]["执行结果"] = "ok";
            dsreturn.Tables["返回值单条"].Rows[0]["提示文本"] = "新增成功!";
        }
        else
        {
            dsreturn.Tables["返回值单条"].Rows[0]["执行结果"] = "err";
            dsreturn.Tables["返回值单条"].Rows[0]["提示文本"] = "系统故障,保存失败:" + return_ht["return_errmsg"].ToString();
        }
        return(dsreturn);
    }
예제 #2
0
    protected override void OnInit(EventArgs e)
    {
        //登录状态判定
        if (UserSession.唯一键 == "")
        {
            Response.Redirect("/adminht/login.aspx?u=" + StringOP.encMe(Request.Url.PathAndQuery, "mima"));
            return;
        }
        if (!AuthComm.chekcAuth_fromsession("1", UserSession.最终权值_全局独立权限, false))
        {
            Response.Redirect("/adminht/login.aspx?f=exit&meiyouquanxian=yes");
            return;
        }

        base.OnInit(e);
    }
예제 #3
0
파일: AuthComm.cs 프로젝트: gotodk/shfw
    /// <summary>
    /// 通过session检查权限(用户后台)
    /// </summary>
    /// <param name="enumNumber">要检查的权限权值枚举值(在配置中查阅)</param>
    /// <param name="SUfinal_Number">当前用户某个类型的最终权值</param>
    /// <param name="Do_Redirect">没有权限时,是否跳转到无权提示页面.true为跳转,false为不跳转。 一般情况用true,需要自己特殊处理代码的才用false,因为false不跳转等于没有控制权限只是检测了结果</param>
    /// <returns>是否具备指定权限</returns>
    public static bool chekcAuth_fromsession_userht(string enumNumber, string SUfinal_Number, bool Do_Redirect)
    {
        //检查唯一编号是否存在
        if (UserSession.唯一键 == "")
        {
            HttpContext.Current.Response.Redirect("/userht/login.aspx?u=" + StringOP.encMe(HttpContext.Current.Request.Url.PathAndQuery, "mima"));
            return(false);
        }
        //检查是否具备权限
        if (!AuthComm.checkAuth(SUfinal_Number, enumNumber, UserSession.是否超管))
        {
            if (Do_Redirect)
            {
                HttpContext.Current.Response.Redirect("/userht/auth_noauth.aspx");
            }

            return(false);
        }
        else
        {
            return(true);
        }
    }
예제 #4
0
 protected void Button3_Click(object sender, EventArgs e)
 {
     Label3.Text = StringOP.encMe("000000", "mima");
 }
예제 #5
0
    /// <summary>
    /// 增加数据
    /// </summary>
    /// <param name="parameter_forUI">前台表单传来的参数</param>
    /// <returns></returns>
    public DataSet NRS_ADD(DataTable parameter_forUI)
    {
        //接收转换参数
        Hashtable ht_forUI = new Hashtable();

        for (int i = 0; i < parameter_forUI.Rows.Count; i++)
        {
            ht_forUI[parameter_forUI.Rows[i]["参数名"].ToString()] = parameter_forUI.Rows[i]["参数值"].ToString();
        }
        //初始化返回值
        DataSet dsreturn = initReturnDataSet().Clone();

        dsreturn.Tables["返回值单条"].Rows.Add(new string[] { "err", "初始化" });
        //参数合法性各种验证,这里要根据具体业务逻辑处理


        //如果填写了邀请码,验证邀请码是否可用
        string yqm = "xx";



        //开始真正的处理,根据业务逻辑操作数据库
        I_Dblink  I_DBL     = (new DBFactory()).DbLinkSqlMain("");
        Hashtable return_ht = new Hashtable();
        ArrayList alsql     = new ArrayList();
        Hashtable param     = new Hashtable();

        //以可排序guid方式生成
        //string guid = CombGuid.GetNewCombGuid("D");
        //用登录账号作为内码
        //string guid = ht_forUI["Uloginname"].ToString();
        //System.Text.RegularExpressions.Regex reg1 = new System.Text.RegularExpressions.Regex(@"^\w+$");
        //bool regre = reg1.IsMatch(ht_forUI["Uloginname"].ToString());
        if (ht_forUI["Uloginname"].ToString().IndexOf('<') >= 0 || ht_forUI["Uloginname"].ToString().IndexOf('>') >= 0)
        {
            dsreturn.Tables["返回值单条"].Rows[0]["执行结果"] = "err";
            dsreturn.Tables["返回值单条"].Rows[0]["提示文本"] = "错误:登录账号含有禁用字符!";
            return(dsreturn);
        }
        string guid = CombGuid.GetNewCombGuid("U");

        param.Add("@UAid", guid);
        param.Add("@Uloginname", ht_forUI["Uloginname"].ToString());

        //对密码进行加密
        string mima_enc = StringOP.encMe(ht_forUI["Uloginpassword"].ToString().Trim(), "mima");

        param.Add("@Uloginpassword", mima_enc);

        param.Add("@xingming", ht_forUI["xingming"].ToString());
        param.Add("@zhuangtai", ht_forUI["zhuangtai"].ToString());
        param.Add("@zhiwei", ht_forUI["zhiwei"].ToString());
        param.Add("@xingbie", ht_forUI["xingbie"].ToString());


        param.Add("@beizhu", ht_forUI["beizhu"].ToString());

        param.Add("@gongzuodi", ht_forUI["gongzuodi"].ToString());
        param.Add("@suoshuquyu", ht_forUI["suoshuquyu"].ToString());
        param.Add("@shoujihao", ht_forUI["shoujihao"].ToString());
        param.Add("@gudingdianhua", ht_forUI["gudingdianhua"].ToString());
        param.Add("@youxiang", ht_forUI["youxiang"].ToString());
        param.Add("@lingdao", ht_forUI["lingdao"].ToString());



        param.Add("@sfzh", ht_forUI["sfzh"].ToString());
        param.Add("@csrq", ht_forUI["csrq"].ToString());
        param.Add("@sheng", ht_forUI["yhb_city_Promary_shengshiqu"].ToString());
        param.Add("@shi", ht_forUI["yhb_city_City_shengshiqu"].ToString());
        param.Add("@qu", ht_forUI["yhb_city_Qu_shengshiqu"].ToString());
        param.Add("@minzu", ht_forUI["minzu"].ToString());
        param.Add("@yuanxiao", ht_forUI["yuanxiao"].ToString());
        param.Add("@wxhm", ht_forUI["wxhm"].ToString());
        param.Add("@qqhaoma", ht_forUI["qqhaoma"].ToString());
        param.Add("@tongxundizhi", ht_forUI["tongxundizhi"].ToString());
        param.Add("@ss_yqmsx", "10");
        param.Add("@neibubeizhu", ht_forUI["neibubeizhu"].ToString());

        //建档人和更新人 addtime,gxtime
        param.Add("@addren", ht_forUI["yhbsp_session_uer_UAid"].ToString());
        //param.Add("@gxren", ht_forUI["yhbsp_session_uer_UAid"].ToString());


        param.Add("@ss_yaoqingma", yqm);


        if (ht_forUI["zhuangtai"].ToString() == "离职")
        {
            param.Add("@Uattrcode", "1");
        }
        else
        {
            param.Add("@Uattrcode", "-1");
        }


        alsql.Add("INSERT INTO  auth_users_auths(UAid ,Uloginname,Uloginpassword,Uattrcode) VALUES(@UAid ,@Uloginname,@Uloginpassword,@Uattrcode )");

        alsql.Add("INSERT INTO  ZZZ_userinfo(UAid ,xingming,zhuangtai,zhiwei,xingbie,beizhu,gongzuodi,suoshuquyu,shoujihao,gudingdianhua,youxiang,lingdao,ss_yaoqingma,sfzh,csrq,sheng,shi,qu,minzu,yuanxiao,wxhm,qqhaoma,tongxundizhi,ss_yqmsx,neibubeizhu,addren,addtime) VALUES(@UAid ,@xingming,@zhuangtai,@zhiwei,@xingbie,@beizhu,@gongzuodi,@suoshuquyu,@shoujihao,@gudingdianhua,@youxiang,@lingdao,@ss_yaoqingma,@sfzh,@csrq,@sheng,@shi,@qu,@minzu,@yuanxiao,@wxhm,@qqhaoma,@tongxundizhi,@ss_yqmsx,@neibubeizhu,@addren,getdate())");

        if (yqm != "")
        {
            alsql.Add("update AAA_SJS set joinok=1,joinuser=@UAid,joinsj=getdate() where SN=@ss_yaoqingma and beok=1");
        }


        //设置初始权限组
        if (ht_forUI.Contains("morenqanxianshezhi") && ht_forUI["morenqanxianshezhi"].ToString() != "")
        {
            param.Add("@morenqanxianshezhi", ht_forUI["morenqanxianshezhi"].ToString());
            alsql.Add("update auth_users_auths set Uingroups=@morenqanxianshezhi where UAid=@UAid");
        }


        return_ht = I_DBL.RunParam_SQL(alsql, param);

        if ((bool)(return_ht["return_float"]))
        {
            dsreturn.Tables["返回值单条"].Rows[0]["执行结果"] = "ok";
            dsreturn.Tables["返回值单条"].Rows[0]["提示文本"] = "新增成功!{" + guid + "}";
        }
        else
        {
            dsreturn.Tables["返回值单条"].Rows[0]["执行结果"] = "err";
            dsreturn.Tables["返回值单条"].Rows[0]["提示文本"] = "系统故障,保存失败:" + return_ht["return_errmsg"].ToString();
        }
        return(dsreturn);
    }
예제 #6
0
    /// <summary>
    /// 编辑数据
    /// </summary>
    /// <param name="parameter_forUI">前台表单传来的参数</param>
    /// <returns></returns>
    public DataSet NRS_EDIT(DataTable parameter_forUI)
    {
        //接收转换参数
        Hashtable ht_forUI = new Hashtable();

        for (int i = 0; i < parameter_forUI.Rows.Count; i++)
        {
            ht_forUI[parameter_forUI.Rows[i]["参数名"].ToString()] = parameter_forUI.Rows[i]["参数值"].ToString();
        }


        //初始化返回值
        DataSet dsreturn = initReturnDataSet().Clone();

        dsreturn.Tables["返回值单条"].Rows.Add(new string[] { "err", "初始化" });

        //参数合法性各种验证,这里省略
        if (ht_forUI["idforedit"].ToString().Trim() == "")
        {
            dsreturn.Tables["返回值单条"].Rows[0]["执行结果"] = "err";
            dsreturn.Tables["返回值单条"].Rows[0]["提示文本"] = "没有明确的修改目标!";
            return(dsreturn);
        }

        //System.Text.RegularExpressions.Regex reg1 = new System.Text.RegularExpressions.Regex(@"^\w+$");
        //bool regre = reg1.IsMatch(ht_forUI["Uloginname"].ToString());
        if (ht_forUI["Uloginname"].ToString().IndexOf('<') >= 0 || ht_forUI["Uloginname"].ToString().IndexOf('>') >= 0)
        {
            dsreturn.Tables["返回值单条"].Rows[0]["执行结果"] = "err";
            dsreturn.Tables["返回值单条"].Rows[0]["提示文本"] = "错误:登录账号含有禁用字符!";
            return(dsreturn);
        }

        //开始真正的处理,这里只是演示,所以直接在这里写业务逻辑代码了

        I_Dblink  I_DBL     = (new DBFactory()).DbLinkSqlMain("");
        Hashtable return_ht = new Hashtable();
        ArrayList alsql     = new ArrayList();
        Hashtable param     = new Hashtable();

        param.Add("@UAid", ht_forUI["idforedit"].ToString());
        param.Add("@Uloginname", ht_forUI["Uloginname"].ToString());
        param.Add("@Uloginpassword", StringOP.encMe(ht_forUI["Uloginpassword"].ToString(), "mima"));

        param.Add("@xingming", ht_forUI["xingming"].ToString());
        param.Add("@zhuangtai", ht_forUI["zhuangtai"].ToString());
        param.Add("@zhiwei", ht_forUI["zhiwei"].ToString());
        param.Add("@xingbie", ht_forUI["xingbie"].ToString());


        param.Add("@beizhu", ht_forUI["beizhu"].ToString());

        param.Add("@gongzuodi", ht_forUI["gongzuodi"].ToString());
        param.Add("@suoshuquyu", ht_forUI["suoshuquyu"].ToString());
        param.Add("@shoujihao", ht_forUI["shoujihao"].ToString());
        param.Add("@gudingdianhua", ht_forUI["gudingdianhua"].ToString());
        param.Add("@youxiang", ht_forUI["youxiang"].ToString());
        param.Add("@lingdao", ht_forUI["lingdao"].ToString());



        param.Add("@sfzh", ht_forUI["sfzh"].ToString());
        param.Add("@csrq", ht_forUI["csrq"].ToString());

        if (ht_forUI.Contains("yhb_city_Promary_shengshiqu"))
        {
            param.Add("@sheng", ht_forUI["yhb_city_Promary_shengshiqu"].ToString());
            param.Add("@shi", ht_forUI["yhb_city_City_shengshiqu"].ToString());
            param.Add("@qu", ht_forUI["yhb_city_Qu_shengshiqu"].ToString());
        }
        else
        {
            param.Add("@sheng", "0");
            param.Add("@shi", "0");
            param.Add("@qu", "0");
        }



        param.Add("@minzu", ht_forUI["minzu"].ToString());
        param.Add("@yuanxiao", ht_forUI["yuanxiao"].ToString());
        param.Add("@wxhm", ht_forUI["wxhm"].ToString());
        param.Add("@qqhaoma", ht_forUI["qqhaoma"].ToString());
        param.Add("@tongxundizhi", ht_forUI["tongxundizhi"].ToString());
        param.Add("@ss_yqmsx", "10");
        param.Add("@neibubeizhu", ht_forUI["neibubeizhu"].ToString());

        //建档人和更新人 addtime,gxtime
        //param.Add("@addren", ht_forUI["yhbsp_session_uer_UAid"].ToString());
        param.Add("@gxren", ht_forUI["yhbsp_session_uer_UAid"].ToString());



        if (ht_forUI["zhuangtai"].ToString() == "离职")
        {
            param.Add("@Uattrcode", "1");
        }
        else
        {
            param.Add("@Uattrcode", "-1");
        }

        alsql.Add("UPDATE ZZZ_userinfo SET xingming=@xingming,zhuangtai=@zhuangtai,zhiwei=@zhiwei,xingbie=@xingbie,beizhu=@beizhu,gongzuodi=@gongzuodi,suoshuquyu=@suoshuquyu,shoujihao=@shoujihao,gudingdianhua=@gudingdianhua,youxiang=@youxiang,lingdao=@lingdao, sfzh=@sfzh,csrq=@csrq,sheng=@sheng,shi=@shi,qu=@qu,minzu=@minzu,yuanxiao=@yuanxiao,wxhm=@wxhm,qqhaoma=@qqhaoma,tongxundizhi=@tongxundizhi,ss_yqmsx=@ss_yqmsx,neibubeizhu=@neibubeizhu,gxren=@gxren,gxtime=getdate() where UAid=@UAid ");
        alsql.Add("UPDATE auth_users_auths SET Uloginname=@Uloginname,Uloginpassword=@Uloginpassword,Uattrcode=@Uattrcode  where UAid=@UAid ");

        return_ht = I_DBL.RunParam_SQL(alsql, param);



        if ((bool)(return_ht["return_float"]))
        {
            dsreturn.Tables["返回值单条"].Rows[0]["执行结果"] = "ok";
            dsreturn.Tables["返回值单条"].Rows[0]["提示文本"] = "修改成功!{" + ht_forUI["idforedit"].ToString() + "}";
        }
        else
        {
            //其实要记录日志,而不是输出,这里只是演示
            //dsreturn.Tables.Add(parameter_forUI.Copy());
            dsreturn.Tables["返回值单条"].Rows[0]["执行结果"] = "err";
            dsreturn.Tables["返回值单条"].Rows[0]["提示文本"] = "系统故障,修改失败:" + return_ht["return_errmsg"].ToString();
        }



        return(dsreturn);
    }
    /// <summary>
    /// 编辑数据
    /// </summary>
    /// <param name="parameter_forUI">前台表单传来的参数</param>
    /// <returns></returns>
    public DataSet NRS_EDIT(DataTable parameter_forUI)
    {
        //接收转换参数
        Hashtable ht_forUI = new Hashtable();

        for (int i = 0; i < parameter_forUI.Rows.Count; i++)
        {
            ht_forUI[parameter_forUI.Rows[i]["参数名"].ToString()] = parameter_forUI.Rows[i]["参数值"].ToString();
        }


        //初始化返回值
        DataSet dsreturn = initReturnDataSet().Clone();

        dsreturn.Tables["返回值单条"].Rows.Add(new string[] { "err", "初始化" });

        //参数合法性各种验证,这里省略
        if (ht_forUI["idforedit"].ToString().Trim() == "")
        {
            dsreturn.Tables["返回值单条"].Rows[0]["执行结果"] = "err";
            dsreturn.Tables["返回值单条"].Rows[0]["提示文本"] = "没有明确的修改目标!";
            return(dsreturn);
        }
        //开始真正的处理,这里只是演示,所以直接在这里写业务逻辑代码了

        I_Dblink  I_DBL     = (new DBFactory()).DbLinkSqlMain("");
        Hashtable return_ht = new Hashtable();
        ArrayList alsql     = new ArrayList();
        Hashtable param     = new Hashtable();

        param.Add("@UAid", ht_forUI["idforedit"].ToString());
        param.Add("@Uloginname", ht_forUI["Uloginname"].ToString());
        param.Add("@Uloginpassword", StringOP.encMe(ht_forUI["Uloginpassword"].ToString(), "mima"));
        param.Add("@xingming", ht_forUI["xingming"].ToString());
        param.Add("@xingbie", ht_forUI["xingbie"].ToString());
        param.Add("@nianling", ht_forUI["nianling"].ToString());
        param.Add("@zhuangtai", ht_forUI["zhuangtai"].ToString());
        param.Add("@beizhu", ht_forUI["beizhu"].ToString());

        alsql.Add("UPDATE ZZZ_userinfo SET xingming=@xingming,xingbie=@xingbie,nianling=@nianling,zhuangtai=@zhuangtai,beizhu=@beizhu where UAid=@UAid ");
        alsql.Add("UPDATE auth_users_auths SET Uloginname=@Uloginname,Uloginpassword=@Uloginpassword  where UAid=@UAid ");

        return_ht = I_DBL.RunParam_SQL(alsql, param);



        if ((bool)(return_ht["return_float"]))
        {
            dsreturn.Tables["返回值单条"].Rows[0]["执行结果"] = "ok";
            dsreturn.Tables["返回值单条"].Rows[0]["提示文本"] = "修改成功!";
        }
        else
        {
            //其实要记录日志,而不是输出,这里只是演示
            //dsreturn.Tables.Add(parameter_forUI.Copy());
            dsreturn.Tables["返回值单条"].Rows[0]["执行结果"] = "err";
            dsreturn.Tables["返回值单条"].Rows[0]["提示文本"] = "系统故障,修改失败:" + return_ht["return_errmsg"].ToString();
        }



        return(dsreturn);
    }