private void GetCaptcha()
    {
        #region Create DataTable
        DataTable  dt  = new DataTable();
        DataColumn dc1 = new DataColumn("Question");
        DataColumn dc2 = new DataColumn("Answer");
        DataColumn dc3 = new DataColumn("Remark");

        dt.Columns.Add(dc1);
        dt.Columns.Add(dc2);
        dt.Columns.Add(dc3);
        DataRow dr;
        #endregion

        #region Insert Data
        string   fullPath = Server.MapPath(_tempFile);
        FileInfo fiTemp   = new FileInfo(fullPath);
        if (fiTemp.Exists)
        {
            int      i;
            string[] Line = File.ReadAllLines(fullPath);
            string[] Field;

            for (i = 0; i < Line.Length; i++)
            {
                Field = Line[i].Split(',');

                dr = dt.NewRow();
                dt.Rows.Add(dr);
                dr["Question"] = Field[0];
                dr["Answer"]   = Field[1];
                dr["Remark"]   = Field[2];
                dt.AcceptChanges();
            }
        }
        #endregion

        if (dt != null && dt.Rows.Count > 0)
        {
            Random ran    = new Random();
            int    id_ran = ran.Next(0, dt.Rows.Count - 1);
            lblCaptcha.Text       = dt.Rows[id_ran]["Question"].ToString();
            lblCaptchaRemark.Text = dt.Rows[id_ran]["Remark"].ToString();
            hidCaptcha.Value      = clsSecurity.Encrypt(dt.Rows[id_ran]["Answer"].ToString());
        }
    }
예제 #2
0
    protected void btSubmit_Click(object sender, EventArgs e)
    {
        #region Security
        if (!clsSecurity.LoginChecker())
        {
            //clsDefault.Redirect("/Register", "กรุณาสมัครสมาชิก หรือ ล็อคอิน ก่อนเข้าใช้งาน");
            ucColorBox1.Redirect("/Register", "กรุณาสมัครสมาชิก หรือ ล็อคอินก่อนเข้าใช้งาน");
        }
        #endregion

        #region Variable
        StringBuilder strSQL = new StringBuilder();
        string        outSQL;
        string        outError;
        string        outPhotoName = "Photo";
        #endregion

        #region Update
        #region Photo Upload
        if (fuPhoto.HasFile)
        {
            if (!clsIO.UploadPhoto(fuPhoto, pathPhoto, clsSecurity.LoginUID, 500, photoWidth, photoHeight, "", 0, out outError, out outPhotoName))
            {
                //lblSQL.Text = clsDefault.AlertMessageColor("เกิดข้อผิดพลาดขณะอัพโหลดภาพ : " + outError, clsDefault.AlertType.Fail);
                ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล", "เกิดข้อผิดพลาดขณะอัพโหลดภาพ : " + outError, AlertImage: ucColorBox.Alerts.Fail);
                return;
            }
            else
            {
                outPhotoName = "'" + pathPhoto + outPhotoName + "'";
            }
        }
        #endregion
        #region Check Data
        if (int.Parse(clsSQL.Return("SELECT COUNT(UID) FROM [USER] WHERE UID='" + clsSecurity.LoginUID + "' AND Password='******'", dbType, cs)) == 0)
        {
            //lblPassword.Text = clsDefault.AlertMessageColor("Password ที่คุณกรอกไม่ถูกต้อง", clsDefault.AlertType.Warn);
            ucColorBox1.Alert("ข้อมูลไม่ถูกต้อง", "Password ที่คุณกรอกไม่ถูกต้อง", AlertImage: ucColorBox.Alerts.Fail);
            lblPassword.Focus();
            return;
        }
        #endregion
        #region SQL Update
        if (!clsSQL.Update(
                "[User]",
                new string[, ] {
            { "Password", txtPasswordChange.Text.Trim() != ""?"'" + clsSecurity.Encrypt(clsDefault.CodeFilter(txtPasswordChange.Text)) + "'":"Password" },
            { "Photo", outPhotoName },
            { "UserGroupUID", "'" + ddlUserGroup.SelectedItem.Value + "'" },
            { "HN", "'" + clsDefault.CodeFilter(txtHN.Text) + "'" },
            { "PName", ddlPName.SelectedItem.Value != "null"?"'" + ddlPName.SelectedItem.Value + "'":"null" },
            { "FName", "'" + clsDefault.CodeFilter(txtFName.Text) + "'" },
            { "LName", "'" + clsDefault.CodeFilter(txtLName.Text) + "'" },
            { "BirthDate", ucDateTimeFlat1.DateTime != DateTime.MinValue?"'" + ucDateTimeFlat1.DateTime.ToString("yyyy-MM-dd HH:mm:ss") + "'":"null" },
            { "Gender", rbGender.SelectedItem.Value != "null"?"'" + rbGender.SelectedItem.Value + "'":"null" },
            { "Phone", "'" + clsDefault.CodeFilter(txtPhone.Text) + "'" },
            { "Mobile", "'" + clsDefault.CodeFilter(txtMobile.Text) + "'" },
            { "Email", "'" + clsDefault.CodeFilter(txtEMail.Text) + "'" },
            { "Address", "'" + clsDefault.CodeFilter(txtAddress.Text) + "'" },
            { "AddressDistrict", "'" + clsDefault.CodeFilter(txtAddressDistrict.Text) + "'" },
            { "AddressPrefecture", "'" + clsDefault.CodeFilter(txtAddressPrefecture.Text) + "'" },
            { "AddressProvince", "'" + clsDefault.CodeFilter(txtAddressProvince.Text) + "'" },
            { "AddressPostal", "'" + clsDefault.CodeFilter(txtAddressPostal.Text) + "'" },
            { "Profile", "'" + ucProfile.Text + "'" },
            { "Signature", "'" + ucSignature.Text + "'" },
            { "MUser", clsSecurity.LoginUID },
            { "MWhen", "GETDATE()" },
            { "Sort", clsDefault.CodeFilter(txtSort.Text) },
            { "Active", cbActive.Checked?"'1'":"'0'" + "'" }
        },
                new string[, ] {
            { "" + parameterChar + "UID", clsSecurity.LoginUID }
        },
                "UID=" + parameterChar + "UID",
                dbType,
                cs,
                out outSQL
                ))
        {
            //lblSQL.Text = clsDefault.AlertMessageColor("เกิดข้อผิดพลาดขณะบันทึกลงฐานข้อมูล : " + outSQL, clsDefault.AlertType.Fail);
            ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล", "เกิดข้อผิดพลาดขณะบันทึกลงฐานข้อมูล : " + outSQL, AlertImage: ucColorBox.Alerts.Fail);
            return;
        }
        #endregion
        //clsDefault.Redirect("/", "บันทึกข้อมูลเรียบร้อยแล้ว");
        ucColorBox1.Redirect("/", "บันทึกข้อมูลเรียบร้อยแล้ว");
        #endregion
    }
    protected void btSubmit_Click(object sender, EventArgs e)
    {
        #region Variable
        StringBuilder strSQL = new StringBuilder();
        string        outSQL;
        string        outError;
        string        outPhotoName = "null";
        #endregion

        #region Check Data
        #region Find Username
        if (int.Parse(clsSQL.Return("SELECT COUNT(UID) FROM [User] WHERE Username='******'", dbType, cs)) > 0)
        {
            //lblUsername.Text = clsDefault.AlertMessageColor("Username นี้มีผู้ใช้งานแล้ว", clsDefault.AlertType.Warn);
            //lblUsername.Focus();
            txtUsername.Focus();
            ucColorBox1.Alert("ข้อมูลไม่ถูกต้อง", "Username นี้มีผู้ใช้งานแล้ว", AlertImage: ucColorBox.Alerts.Fail);
            return;
        }
        else
        {
            lblUsername.Text = "";
        }
        #endregion
        #region Find Email
        if (int.Parse(clsSQL.Return("SELECT COUNT(UID) FROM [User] WHERE Email='" + clsDefault.CodeFilter(txtEMail.Text) + "'", dbType, cs)) > 0)
        {
            //lblEmail.Text = clsDefault.AlertMessageColor("Email นี้มีผู้ใช้งานแล้ว", clsDefault.AlertType.Warn);
            //lblEmail.Focus();
            txtEMail.Focus();
            ucColorBox1.Alert("ข้อมูลไม่ถูกต้อง", "E-Mail นี้มีผู้ใช้งานแล้ว", AlertImage: ucColorBox.Alerts.Fail);
            return;
        }
        else
        {
            lblEmail.Text = "";
        }
        #endregion
        #region Find UID
        int UID = clsSQL.GetNewID("UID", "[User]", "", dbType, cs);
        if (UID == 0)
        {
            //lblSQL.Text = clsDefault.AlertMessageColor("เกิดข้อผิดพลาดขณะหา UID", clsDefault.AlertType.Fail);
            //lblSQL.Focus();
            ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล", "ไม่สามารถหา UID ได้", AlertImage: ucColorBox.Alerts.Fail);
            return;
        }
        else
        {
            lblSQL.Text = "";
        }
        #endregion
        #endregion

        #region Insert
        #region Photo Upload
        if (fuPhoto.HasFile)
        {
            if (!clsIO.UploadPhoto(fuPhoto, pathPhoto, clsSecurity.LoginUID, 500, photoWidth, photoHeight, "", 0, out outError, out outPhotoName))
            {
                //lblSQL.Text = clsDefault.AlertMessageColor("เกิดข้อผิดพลาดขณะอัพโหลดภาพ : " + outError, clsDefault.AlertType.Fail);
                //lblSQL.Focus();
                ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล", "เกิดข้อผิดพลาดขณะอัพโหลดภาพ", AlertImage: ucColorBox.Alerts.Fail);
                return;
            }
            else
            {
                outPhotoName = "'" + pathPhoto + outPhotoName + "'";
            }
        }
        #endregion
        #region SQL Insert
        if (clsSQL.Insert(
                "[USER]",
                new string[, ] {
            { "UID", UID.ToString() },
            { "UserGroupUID", "2" },
            { "Username", "'" + clsDefault.CodeFilter(txtUsername.Text) + "'" },
            { "Password", "'" + clsSecurity.Encrypt(clsDefault.CodeFilter(txtPassword.Text)) + "'" },
            { "Photo", outPhotoName },
            { "PName", ddlPName.SelectedItem.Value != "null"?"'" + ddlPName.SelectedItem.Value + "'":"null" },
            { "FName", "'" + clsDefault.CodeFilter(txtFName.Text) + "'" },
            { "LName", "'" + clsDefault.CodeFilter(txtLName.Text) + "'" },
            { "HN", "'" + clsDefault.CodeFilter(HNConvert(txtHN.Text)) + "'" },
            { "BirthDate", ucDateTimeFlat1.DateTime != DateTime.MinValue?"'" + ucDateTimeFlat1.DateTime.ToString("yyyy-MM-dd HH:mm:ss") + "'":"null" },
            { "Gender", rbGender.SelectedItem.Value != "null"?"'" + rbGender.SelectedItem.Value + "'":"null" },
            { "Phone", "'" + clsDefault.CodeFilter(txtPhone.Text) + "'" },
            { "Mobile", "'" + clsDefault.CodeFilter(txtMobile.Text) + "'" },
            { "Email", "'" + clsDefault.CodeFilter(txtEMail.Text) + "'" },
            { "Address", "'" + clsDefault.CodeFilter(txtAddress.Text) + "'" },
            { "AddressDistrict", "'" + clsDefault.CodeFilter(txtAddressDistrict.Text) + "'" },
            { "AddressPrefecture", "'" + clsDefault.CodeFilter(txtAddressPrefecture.Text) + "'" },
            { "AddressProvince", "'" + clsDefault.CodeFilter(txtAddressProvince.Text) + "'" },
            { "AddressPostal", "'" + clsDefault.CodeFilter(txtAddressPostal.Text) + "'" },
            { "Profile", "'" + ucProfile.Text + "'" },
            { "Signature", "'" + ucSignature.Text + "'" },
            { "CUser", UID.ToString() },
            { "CWhen", "GETDATE()" },
            { "MUser", UID.ToString() },
            { "MWhen", "GETDATE()" },
            { "Sort", clsDefault.CodeFilter(txtSort.Text) },
            { "Active", "'0'" /*cbActive.Checked?"'1'":"'0'"+"'"*/ }
        },
                new string[, ] {
            { }
        },
                dbType,
                cs,
                out outSQL
                ))
        {
            clsMail clsMail = new clsMail();
            string  outMessage;
            string  idEncode = Server.UrlEncode(clsSecurity.Encrypt(UID.ToString()));

            #region Mail to User
            if (!clsMail.SendTemplate(
                    "UserRegisterConfirm",
                    clsMail.GetEmailList("GlobalFrom"),
                    txtEMail.Text,
                    new string[, ] {
                { "[Username]", txtUsername.Text },
                { "[UIDEncrypt]", idEncode }
            },
                    out outMessage))
            {
                //lblSQL.Text = clsDefault.AlertMessageColor("เกิดข้อผิดพลาดขณะส่งเมล์ยืนยัน<br/>"+outMessage, clsDefault.AlertType.Fail);
                //lblSQL.Focus();
                ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล", "เกิดข้อผิดพลาดขณะส่งเมล์ยืนยัน<br/>" + outMessage, AlertImage: ucColorBox.Alerts.Fail);
                return;
            }
            #endregion
            #region Mail to Admin
            if (!clsMail.SendTemplate(
                    "UserRegisterAdmin",
                    clsMail.GetEmailList("AutoSystemFrom"),
                    clsMail.GetEmailList("AdminTo"),
                    new string[, ] {
                { "[Username]", txtUsername.Text }
            },
                    out outMessage))
            {
                ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล", "เกิดข้อผิดพลาดขณะส่งเมล์ยืนยัน<br/>" + outMessage, AlertImage: ucColorBox.Alerts.Fail);
                return;
            }
            #endregion
        }
        else
        {
            //lblSQL.Text = clsDefault.AlertMessageColor("เกิดข้อผิดพลาดขณะบันทึกลงฐานข้อมูล : " + outSQL, clsDefault.AlertType.Fail);
            //lblSQL.Focus();
            ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล", "เกิดข้อผิดพลาดขณะบันทึกข้อมูลลงฐานข้อมูล : " + outSQL, AlertImage: ucColorBox.Alerts.Fail);
            return;
        }
        #endregion
        //clsDefault.Redirect("/", "บันทึกข้อมูลเรียบร้อยแล้ว");
        ucColorBox1.Redirect("/");
        #endregion
    }
예제 #4
0
 protected void btSubmit_Click(object sender, EventArgs e)
 {
     #region Authorize
     if (!clsSecurity.LoginChecker("admin"))
     {
         ucColorBox1.Redirect("/", "กรุณาล็อคอินด้วยสิทธิ์ Admin");
         return;
     }
     #endregion
     #region Variable
     var strSQL    = new StringBuilder();
     var id        = 0;
     var outSQL    = "";
     var photoName = "";
     #endregion
     #region Procedure
     try
     {
         #region Update
         if (Request.QueryString["id"] != null && clsDefault.QueryStringChecker("command") == "edit")
         {
             id = int.Parse(Request.QueryString["id"].ToString());
             #region Photo Upload
             if (fuPhoto.HasFile)
             {
                 var    clsIO = new clsIO();
                 string outErrorMessage;
                 string outFilename;
                 #region Photo
                 if (clsIO.UploadPhoto(
                         fuPhoto, pathUpload,
                         tableDefault + id.ToString(),
                         out outErrorMessage,
                         out outFilename,
                         maxWidth: photoWidth,
                         maxHeight: photoHeight))
                 {
                     photoName = outFilename;
                 }
                 else
                 {
                     ucColorBox1.Alert("เกิดข้อผิดพลาด", "เกิดข้อผิดพลาดขณะอัพโหลดไฟล์รูปภาพ<br/>" + outErrorMessage, AlertImage: ucColorBox.Alerts.Fail);
                     return;
                 }
                 #endregion
             }
             #endregion
             if (clsSQL.Update(tableDefault,
                               new string[, ] {
                 { "Photo", (!string.IsNullOrEmpty(photoName)?"'" + pathUpload + photoName + "'":"Photo") },
                 { "UserGroupUID", ddlUserGroup.SelectedItem.Value },
                 { "PName", "'" + ddlPName.SelectedItem.Value + "'" },
                 { "FName", "'" + txtFName.Text.SQLQueryFilter() + "'" },
                 { "LName", "'" + txtLName.Text.SQLQueryFilter() + "'" },
                 { "BirthDate", (ucBirthdate.Text != ""?"'" + ucBirthdate.DateTime.ToString("yyyy-MM-dd") + "'":"null") },
                 { "Gender", "'" + rbGender.SelectedItem.Value + "'" },
                 { "NID", "'" + txtNID.Text.SQLQueryFilter() + "'" },
                 { "Phone", "'" + txtPhone.Text.SQLQueryFilter() + "'" },
                 { "Mobile", "'" + txtMobile.Text.SQLQueryFilter() + "'" },
                 { "Email", "'" + txtEmail.Text.SQLQueryFilter() + "'" },
                 { "Address", "'" + txtAddress.Text.SQLQueryFilter() + "'" },
                 { "AddressDistrict", "'" + txtAddressDistrict.Text.SQLQueryFilter() + "'" },
                 { "AddressPrefecture", "'" + txtAddressPrefecture.Text.SQLQueryFilter() + "'" },
                 { "AddressProvince", "'" + txtAddressProvince.Text.SQLQueryFilter() + "'" },
                 { "AddressPostal", "'" + txtAddressPostal.Text.SQLQueryFilter() + "'" },
                 { "Profile", "'" + ucProfile.Text.SQLQueryFilter() + "'" },
                 { "Signature", "'" + ucSignature.Text.SQLQueryFilter() + "'" },
                 { "MUser", "'" + clsSecurity.LoginUID + "'" },
                 { "MWhen", functionGetDate },
                 { "Sort", clsSQL.CodeFilter(txtSort.Text) },
                 { "StatusFlag", "'" + (cbActive.Checked ? "A" : "I") + "'" }
             }, new string[, ] {
                 { parameterChar + "UID", id.ToString() }
             },
                               "UID=" + parameterChar + "UID",
                               out outSQL))
             {
                 ucColorBox1.ReloadParent();
             }
             else
             {
                 ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล<br/>", outSQL, AlertImage: ucColorBox.Alerts.Fail);
             }
         }
         #endregion
         #region Insert
         else
         {
             #region Photo Upload
             if (fuPhoto.HasFile)
             {
                 var    clsIO = new clsIO();
                 string outErrorMessage;
                 string outFilename;
                 #region Photo
                 if (clsIO.UploadPhoto(
                         fuPhoto, pathUpload,
                         tableDefault + id.ToString(),
                         out outErrorMessage,
                         out outFilename,
                         maxWidth: photoWidth,
                         maxHeight: photoHeight))
                 {
                     photoName = outFilename;
                 }
                 else
                 {
                     ucColorBox1.Alert("เกิดข้อผิดพลาด", "เกิดข้อผิดพลาดขณะอัพโหลดไฟล์รูปภาพ<br/>" + outErrorMessage, AlertImage: ucColorBox.Alerts.Fail);
                     return;
                 }
                 #endregion
             }
             #endregion
             if (clsSQL.Insert(tableDefault,
                               new string[, ] {
                 { "UserGroupUID", ddlUserGroup.SelectedItem.Value },
                 { "[Username]", "'" + txtUsername.Text.SQLQueryFilter() + "'" },
                 { "Password", "'" + clsSecurity.Encrypt(txtPassword.Text) + "'" },
                 { "PName", "'" + ddlPName.SelectedItem.Value + "'" },
                 { "FName", "'" + txtFName.Text.SQLQueryFilter() + "'" },
                 { "LName", "'" + txtLName.Text.SQLQueryFilter() + "'" },
                 { "BirthDate", (ucBirthdate.Text != ""?"'" + ucBirthdate.DateTime.ToString("yyyy-MM-dd") + "'":"null") },
                 { "Gender", "'" + rbGender.SelectedItem.Value + "'" },
                 { "NID", "'" + txtNID.Text.SQLQueryFilter() + "'" },
                 { "Phone", "'" + txtPhone.Text.SQLQueryFilter() + "'" },
                 { "Mobile", "'" + txtMobile.Text.SQLQueryFilter() + "'" },
                 { "Email", "'" + txtEmail.Text.SQLQueryFilter() + "'" },
                 { "[Address]", "'" + txtAddress.Text.SQLQueryFilter() + "'" },
                 { "AddressDistrict", "'" + txtAddressDistrict.Text.SQLQueryFilter() + "'" },
                 { "AddressPrefecture", "'" + txtAddressPrefecture.Text.SQLQueryFilter() + "'" },
                 { "AddressProvince", "'" + txtAddressProvince.Text.SQLQueryFilter() + "'" },
                 { "AddressPostal", "'" + txtAddressPostal.Text.SQLQueryFilter() + "'" },
                 { "Profile", "'" + ucProfile.Text.SQLQueryFilter() + "'" },
                 { "Signature", "'" + ucSignature.Text.SQLQueryFilter() + "'" },
                 { "CUser", "'" + clsSecurity.LoginUID + "'" },
                 { "CWhen", functionGetDate },
                 { "MUser", "'" + clsSecurity.LoginUID + "'" },
                 { "MWhen", functionGetDate },
                 { "Sort", clsSQL.CodeFilter(txtSort.Text) },
                 { "StatusFlag", "'" + (cbActive.Checked ? "A" : "I") + "'" }
             }, new string[, ] {
                 { }
             },
                               out outSQL))
             {
                 ucColorBox1.ReloadParent();
             }
             else
             {
                 ucColorBox1.Alert("เกิดข้อผิดพลาดขณะบันทึกข้อมูล<br/>", outSQL, AlertImage: ucColorBox.Alerts.Fail);
             }
         }
         #endregion
     }
     catch (Exception ex)
     {
         lblSQL.Text = "<div style='color:red;'>เกิดข้อผิดพลาด : " + ex.Message + "</div>";
         lblSQL.Focus();
     }
     #endregion
 }
예제 #5
0
 private void setSavePassword()
 {
     if (txtPassword.Text.Trim() != "")
     {
         var clsData = new clsDataNative();
         var clsSecurity = new clsSecurity();
         clsData.AppConfigUpdater("savePassword", clsSecurity.Encrypt(txtPassword.Text.Trim()));
     }
 }