public void OnPost()
{
if (!UsersDAO.CheckLogin(Login) || !UsersDAO.CheckPassword(Password))
{
ViewData["error"] = "Неверно заполненное поле или несколько полей.";
return;
}
var connection = Connection.Open();
if (Password.Equals(ConfirmPassword))
{
var a = new Tuple <string, string>(null, null);
var(item1, item2) = UsersDAO.FirstHashing(Password);
Password = item1 + item2;
var loginParam = new NpgsqlParameter("@login", Login)
{
Direction = ParameterDirection.Input,
};
var passwordParam = new NpgsqlParameter("@Password", Password)
{
Direction = ParameterDirection.Input,
};
var commandString = (@"INSERT INTO USERS VALUES (@login, @password, null)");
connection.SendCommandWithoutAnswer(commandString, new List <NpgsqlParameter>()
{
loginParam, passwordParam
});
login.IsSession = true;
login.LoginSession = Login;
login.Staticlogin = Login;
Response.Redirect("/account");
}
else
{
ViewData["error"] = "Пароли не совпадают";
}
connection.Close();
}
public ActionResult Login(User login)
{
//Remove unnecessary validations for login
ModelState.Remove("Firstname");
ModelState.Remove("Lastname");
ModelState.Remove("Address");
ModelState.Remove("Phone");
ModelState.Remove("Email");
ModelState.Remove("Sex");
ModelState.Remove("Age");
ModelState.Remove("CCNo");
ModelState.Remove("PassportNo_");
ModelState.Remove("Skymiles");
//Check if login is valid if validation is successful
if (ModelState.IsValid)
{
var user = UsersDAO.CheckLogin(login.UserID, login.Password);
if (user != null)
{
Session["user"] = user.UserID;
if (Session["GotoPayment"] != null)
{
string Goto = Session["GotoPayment"].ToString();
Session["GotoPayment"] = null;
return(Redirect(Goto));
}
if (Session["Goto"] != null)
{
return(Redirect(Session["Goto"].ToString()));
}
return(RedirectToAction("Index")); //TODO redirect to previous page instead of home
}
ModelState.AddModelError("", "Invalid login information");
}
return(View());
}
public bool CheckLogin(string username, string password)
{
return(userTemp.CheckLogin(username, password));
}
public string CheckLogin(string Username, string Pass)
{
return(dao.CheckLogin(Username, Pass));
}
private bool CheckLoginAndPassword()
{
return(NewLogin != null && Password != null && UsersDAO.CheckLogin(NewLogin));
}