Exemplo n.º 1
0
        public ActionResult ChangePassword(ChangePasswordViewModel model)
        {
            if (ModelState.IsValid)
            {
                try

                {
                    using (var _context = new MODEntities())
                    {
                        model.UserId = Convert.ToInt32(Session["UserID"]);
                        var changePassword = _context.tbl_tbl_User.Where(x => x.Password == model.OldPassword && x.UserId == model.UserId).FirstOrDefault();
                        if (changePassword != null)
                        {
                            changePassword.Password = model.NewPassword;
                            _context.SaveChanges();
                            TempData["ChangePassword"] = "******";
                        }
                    }
                }
                catch (Exception ex)
                {
                    throw ex;
                }
            }
            return(View());
        }
Exemplo n.º 2
0
        public string Blockuser(string EmailID)
        {
            string message = string.Empty;

            using (var _context = new MODEntities())
            {
                var _isUser = _context.tbl_trn_OTP.Where(x => x.EmailID == EmailID).FirstOrDefault();

                if (_isUser != null)
                {
                    if (_isUser.OtpCount >= 5)
                    {
                        message = "Blocked";
                    }
                    else
                    {
                        var _isUserDetail = _context.tbl_tbl_User.Where(x => x.InternalEmailID == EmailID).FirstOrDefault();
                        if (_isUserDetail.LoginCount >= 5)
                        {
                            message = "Blocked";
                        }
                        else
                        {
                            message = "Allow";
                        }
                    }
                }
            }

            return(message);
        }
Exemplo n.º 3
0
        public WReportsController()
        {
            if (System.Web.HttpContext.Current.Session["EmailID"] != null)
            {
                AccountController account = new AccountController();
                string            message = account.Blockuser(System.Web.HttpContext.Current.Session["EmailID"].ToString());
                if (message == "Blocked")
                {
                    System.Web.HttpContext.Current.Response.Redirect("~/LoginBlockMsg");
                }
            }
            _entities = new MODEntities();
            EncriptServicesData();

            BruteForce bruteForce = new BruteForce();

            BruteForceAttackss.bcontroller = "WReports";
            if (BruteForceAttackss.bcontroller != "")
            {
                if (BruteForceAttackss.bcontroller == "WReports")
                {
                    if (BruteForceAttackss.refreshcount == 0 && BruteForceAttackss.date == null)
                    {
                        BruteForceAttackss.date         = System.DateTime.Now;
                        BruteForceAttackss.refreshcount = 1;
                    }
                    else
                    {
                        TimeSpan tt = System.DateTime.Now - BruteForceAttackss.date.Value;
                        if (tt.TotalSeconds <= 30 && BruteForceAttackss.refreshcount > 2)
                        {
                            if (System.Web.HttpContext.Current.Session["EmailID"] != null)
                            {
                                List <UserViewModel> model = new List <UserViewModel>();
                                model = bruteForce.GetUserLoginBlock(System.Web.HttpContext.Current.Session["EmailID"].ToString());
                                if (model != null)
                                {
                                    BruteForceAttackss.refreshcount = 0;
                                    BruteForceAttackss.date         = null;
                                    BruteForceAttackss.bcontroller  = "";
                                    System.Web.HttpContext.Current.Response.Redirect(WebPortalUrl);
                                }
                            }
                        }
                        else
                        {
                            BruteForceAttackss.refreshcount = BruteForceAttackss.refreshcount + 1;
                        }
                    }
                }
            }
            else
            {
                BruteForceAttackss.bcontroller = "WReports";
            }
        }
Exemplo n.º 4
0
 public masterService()
 {
     _entities = new MODEntities();
 }
Exemplo n.º 5
0
        public ActionResult Index()
        {
            // Response.Write("Start");
            String id = "";

            if (Session["UserID"] != null)
            {
                try
                {
                    id = Encryption.Decryptl(Session["UserID"].ToString());
                }
                catch (Exception e)
                {
                    Response.Write("Step 1 : " + e.Message);
                }

                if (id != "")
                {
                    try
                    {
                        using (var _context = new MODEntities())
                        {
                            var isValid = _context.tbl_tbl_User.Where(x => x.InternalEmailID == id).FirstOrDefault();
                            if (isValid != null)
                            {
                                var IsLogout = _context.acq_audit_trail.Where(s => s.UserEmail == id).OrderByDescending(s => s.LogId).FirstOrDefault();
                                if (IsLogout != null)
                                {
                                    if (IsLogout.Action != "Logout")
                                    {
                                        //if (IsLogout.IPAddress == isValid.IPAddress)
                                        //{
                                        // int UserId = isValid.UserId;
                                        FormsAuthentication.SetAuthCookie(isValid.InternalEmailID, false);
                                        Session["UserID"]       = isValid.UserId;
                                        Session["UserName"]     = isValid.UserName;
                                        Session["SectionID"]    = isValid.SectionID;
                                        Session["WebPortalUrl"] = WebPortalUrl;
                                        Session["EmailID"]      = isValid.InternalEmailID;

                                        List <tbl_Master_Role> list = _context.tbl_Master_Role.Where(x => x.UserID == isValid.UserId).ToList();
                                        Session["RoleList"] = list;
                                        return(View());
                                        //}
                                        //else
                                        //{
                                        //    return Redirect(WebPortalUrlLogout);
                                        //}
                                    }
                                    else
                                    {
                                        return(Redirect(WebPortalUrlLogout));
                                    }
                                }
                                else
                                {
                                    return(RedirectToAction("Login", "Account"));
                                }
                            }
                            else
                            {
                                TempData["Message"] = "Login Failed.User Name or Password Doesn't Exist.";
                                return(Redirect(WebPortalUrlLogout));
                            }
                        }
                    }
                    catch (Exception e)
                    {
                        Response.Write("Step 2 : " + e.Message);
                        throw e;
                    }
                }
                else
                {
                    Response.Write("Step 3 : ");
                    return(View());

                    //return Redirect(WebPortalUrlLogout);
                }
            }
            else
            {
                Response.Write("Step 4 : ");
                return(View());
                //return Redirect(WebPortalUrlLogout);
            }
        }