示例#1
0
        private void submitdeal()
        {
            MyFunc.isRefUrl();
            string text  = MyFunc.ConvertStr(base.Request["TextBoxUserName"].Trim().ToLower());
            string text2 = MyFunc.ConvertStr(base.Request["TextBoxUserPass"].Trim());

            if ((text == "") || (text2 == ""))
            {
                MyFunc.showmsg("请输入用户名或密码!");
                base.Response.End();
            }
            else
            {
                DataBase      db     = new DataBase(MyFunc.GetConnStr(2));
                SqlDataReader reader = db.ExecuteReader("SELECT userid,username,userpass,abc,(select top 1 gdid from agence where userid = member.gdid) as gsid,(select top 1 gsbl from agence where userid = member.gdid) as gscs FROM member WHERE username='******' AND isuseable=1");
                if (!reader.Read())
                {
                    reader.Close();
                    db.Dispose();
                    MyFunc.showmsg("帐号或密码错误!");
                    base.Response.End();
                }
                else if ((text != reader["username"].ToString().ToLower().Trim()) || (text2 != reader["userpass"].ToString().ToLower().Trim()))
                {
                    reader.Close();
                    db.Dispose();
                    MyFunc.showmsg("帐号或密码错误!");
                    base.Response.End();
                }
                else
                {
                    this.Session.Contents["userid"]   = reader["userid"].ToString().Trim();
                    this.Session.Contents["username"] = reader["username"].ToString().ToLower().Trim();
                    this.Session.Contents["userpass"] = reader["userpass"].ToString().Trim();
                    this.Session.Contents["sessid"]   = this.Session.SessionID;
                    this.Session.Contents["classid"]  = "20";
                    this.Session.Contents["ABC"]      = reader["abc"].ToString().Trim();
                    this.Session.Contents["usergsid"] = reader["gsid"].ToString().Trim();
                    this.Session.Contents["usergscs"] = reader["gscs"].ToString().Trim();
                    reader.Close();
                    string place = "";
                    string text4 = "";
                    string ip    = "";
                    if ((base.Request.ServerVariables["HTTP_X_FORWARDED_FOR"] != null) && (base.Request.ServerVariables["HTTP_X_FORWARDED_FOR"].ToString().Trim() != ""))
                    {
                        ip    = base.Request.ServerVariables["HTTP_X_FORWARDED_FOR"].ToString().Trim();
                        place = MyFunc.GetPlace(db, MyFunc.ChgIP(base.Request.ServerVariables["HTTP_X_FORWARDED_FOR"].ToString().Trim()));
                    }
                    ip = ip + "|" + base.Request.UserHostAddress.ToString().Trim();
                    MyFunc.WriteUserEvent(db, this.Session.Contents["userid"].ToString(), this.Session.Contents["username"].ToString(), base.Request.UserHostAddress.ToString(), this.Session.Contents["classid"].ToString(), "1");
                    db.ExecuteNonQuery("UPDATE member SET curmoney=(usemoney-(select ISNULL(sum(tzmoney),0) from ball_order where userid=" + this.Session.Contents["userid"].ToString().Trim() + " AND tztype in (15,14) and datediff(day,balltime,getdate())=0)),moneyupdate=GetDate() WHERE userid=" + this.Session.Contents["userid"].ToString().Trim() + " AND DateDiff(day,moneyupdate,GetDate())<>0");
                    text4 = MyFunc.GetPlace(db, MyFunc.ChgIP(base.Request.UserHostAddress.ToString().Trim()));
                    db.Dispose();
                    MyTeam.OnlineList.OnlineList.NewUserLogin(this.Session.Contents["username"].ToString().Trim(), this.Session.SessionID.ToString().Trim(), DateTime.Now.ToString(), ip, this.Session.Contents["classid"].ToString().Trim(), place + "|" + text4);
                    base.Response.Redirect("imp_rules.aspx");
                    base.Response.End();
                }
            }
        }
示例#2
0
        private void ButtonLogin_Click(object sender, EventArgs e)
        {
            string text  = this.TextBoxUserName.Text.Trim().ToLower();
            string text2 = this.TextBoxUserPass.Text.Trim();
            string text3 = base.Request.UserHostAddress.Trim();
            string text4 = DateTime.Now.ToString().Trim();

            if ((text == "") || (text2 == ""))
            {
                MyFunc.showmsg("请输入帐号和密码!");
                base.Response.End();
            }
            else if ((text.Length > 15) || (text2.Length > 15))
            {
                MyFunc.showmsg("用户名或密码的长度不能超过15!");
                base.Response.End();
            }
            else
            {
                DataBase      db     = new DataBase(MyFunc.GetConnStr(2));
                SqlDataReader reader = null;
                reader = db.ExecuteReader("SELECT userid,username,userpass,classid,gdid,islock FROM agence ag WHERE username='******' AND classid=3 AND isuseable=1 and (select top 1 gdid from agence where userid = ag.gdid) in (" + MyFunc.GetGongSiID().ToString() + ")");
                if (!reader.Read())
                {
                    reader.Close();
                    db.Dispose();
                    MyFunc.showmsg("帐号或密码错误!");
                    base.Response.End();
                }
                else if ((text != reader["username"].ToString().Trim()) || (text2 != reader["userpass"].ToString().Trim()))
                {
                    reader.Close();
                    db.Dispose();
                    MyFunc.showmsg("帐号或密码错误!");
                    base.Response.End();
                }
                else
                {
                    this.Session.Contents["adminuserid"]   = reader["userid"].ToString().Trim();
                    this.Session.Contents["adminusername"] = reader["username"].ToString().Trim();
                    this.Session.Contents["adminuserpass"] = reader["userpass"].ToString().Trim();
                    this.Session.Contents["adminsessid"]   = this.Session.SessionID.ToString().Trim();
                    this.Session.Contents["adminclassid"]  = reader["classid"].ToString().Trim();
                    this.Session["pre_id"] = reader["gdid"].ToString().Trim();
                    string text5 = reader["gdid"].ToString().Trim();
                    string text6 = reader["islock"].ToString().Trim();
                    reader.Close();
                    reader = db.ExecuteReader("SELECT gdid FROM agence WHERE userid=" + text5);
                    if (reader.Read())
                    {
                        this.Session.Contents["usergsid"] = reader["gdid"].ToString().Trim();
                        reader.Close();
                    }
                    string place = "";
                    string text8 = "";
                    string ip    = "";
                    if ((base.Request.ServerVariables["HTTP_X_FORWARDED_FOR"] != null) && (base.Request.ServerVariables["HTTP_X_FORWARDED_FOR"].ToString().Trim() != ""))
                    {
                        ip    = base.Request.ServerVariables["HTTP_X_FORWARDED_FOR"].ToString().Trim();
                        place = MyFunc.GetPlace(db, MyFunc.ChgIP(base.Request.ServerVariables["HTTP_X_FORWARDED_FOR"].ToString().Trim()));
                    }
                    ip = ip + "|" + base.Request.UserHostAddress.ToString().Trim();
                    MyFunc.WriteUserEvent(db, this.Session.Contents["adminuserid"].ToString(), this.Session.Contents["adminusername"].ToString(), base.Request.UserHostAddress.Trim(), this.Session.Contents["adminclassid"].ToString(), "1");
                    text8 = MyFunc.GetPlace(db, MyFunc.ChgIP(base.Request.UserHostAddress.ToString().Trim()));
                    db.Dispose();
                    MyTeam.OnlineList.OnlineList.NewUserLogin(this.Session.Contents["adminusername"].ToString().Trim(), this.Session.SessionID.ToString().Trim(), DateTime.Now.ToString(), ip, this.Session.Contents["adminclassid"].ToString().Trim(), place + "|" + text8);
                    if (text6 == "1")
                    {
                        base.Response.Redirect("rep.htm");
                    }
                    else
                    {
                        base.Response.Redirect("frmindex.aspx");
                    }
                    base.Response.End();
                }
            }
        }
示例#3
0
        private void ButtonLogin_Click(object sender, EventArgs e)
        {
            string text  = this.TextBoxUserName.Text.Trim().ToLower();
            string text2 = this.TextBoxUserPass.Text.Trim();
            string text3 = base.Request.UserHostAddress.Trim();
            string text4 = DateTime.Now.ToString().Trim();

            if ((text == "") || (text2 == ""))
            {
                MyFunc.showmsg("请输入帐号和密码!");
                base.Response.End();
            }
            else if ((text.Length > 15) || (text2.Length > 15))
            {
                MyFunc.showmsg("用户名或密码的长度不能超过15!");
                base.Response.End();
            }
            else
            {
                DataBase      db     = new DataBase(MyFunc.GetConnStr(2));
                SqlDataReader reader = null;
                reader = db.ExecuteReader("SELECT subid,userid,classid,subname,truename,subpass,isnull((select arrgd from agence where userid = subagence.userid),'-1') as arrgd FROM subAgence WHERE subname ='" + text + "' AND subpass ='******' AND isuseable=1");
                if (reader.Read())
                {
                    if ((text == reader["subname"].ToString().Trim()) && (text2 == reader["subpass"].ToString().Trim()))
                    {
                        this.Session.Contents["adminuserid"]     = reader["userid"].ToString().Trim();
                        this.Session.Contents["adminsubclassid"] = reader["classid"].ToString().Trim();
                        this.Session.Contents["adminsubname"]    = reader["subname"].ToString().Trim();
                        this.Session.Contents["adminsubid"]      = reader["subid"].ToString().Trim();
                        this.Session.Contents["adminsubpass"]    = reader["subpass"].ToString().Trim();
                        this.Session.Contents["adminsubsessid"]  = this.Session.SessionID.ToString().Trim();
                        this.Session.Contents["adminarrgd"]      = reader["arrgd"].ToString().Trim();
                        this.Session.Contents["adminusername"]   = reader["subname"].ToString().Trim();
                        reader.Close();
                        string place = "";
                        string ip    = "";
                        if (base.Request.ServerVariables["HTTP_X_FORWARDED_FOR"] != null)
                        {
                            ip    = base.Request.ServerVariables["HTTP_X_FORWARDED_FOR"].ToString().Trim();
                            place = MyFunc.GetPlace(db, MyFunc.ChgIP(base.Request.ServerVariables["HTTP_X_FORWARDED_FOR"].ToString().Trim()));
                        }
                        ip = ip + "|" + base.Request.UserHostAddress.ToString().Trim();
                        MyFunc.WriteUserEvent(db, this.Session.Contents["adminsubid"].ToString(), this.Session.Contents["adminsubname"].ToString(), base.Request.UserHostAddress.ToString(), this.Session.Contents["adminsubclassid"].ToString(), "1");
                        MyTeam.OnlineList.OnlineList.NewUserLogin(this.Session.Contents["adminsubname"].ToString(), this.Session.Contents["adminsubsessid"].ToString(), DateTime.Now.ToString(), ip, this.Session.Contents["adminsubclassid"].ToString(), place + "|" + MyFunc.GetPlace(db, MyFunc.ChgIP(base.Request.UserHostAddress.ToString().Trim())));
                        db.CloseConnect();
                        db.Dispose();
                        base.Response.Redirect("frmindex.aspx");
                        base.Response.End();
                        return;
                    }
                    reader.Close();
                }
                else
                {
                    reader.Close();
                    db.Dispose();
                    MyFunc.showmsg("帐号或密码错误!");
                    base.Response.End();
                    return;
                }
                reader = db.ExecuteReader("SELECT userid,username,userpass,classid FROM agence WHERE username='******' AND classid=4 AND isuseable = 1");
                if (!reader.Read())
                {
                    reader.Close();
                    db.Dispose();
                    MyFunc.showmsg("帐号或密码错误!");
                    base.Response.End();
                }
                else if ((text != reader["username"].ToString().Trim()) || (text2 != reader["userpass"].ToString().Trim()))
                {
                    reader.Close();
                    db.Dispose();
                    MyFunc.showmsg("帐号或密码错误!");
                    base.Response.End();
                }
                else
                {
                    this.Session.Contents["adminuserid"]   = reader["userid"].ToString().Trim();
                    this.Session.Contents["adminusername"] = reader["username"].ToString().Trim();
                    this.Session.Contents["adminuserpass"] = reader["userpass"].ToString().Trim();
                    this.Session.Contents["adminsessid"]   = this.Session.SessionID.ToString().Trim();
                    this.Session.Contents["adminclassid"]  = reader["classid"].ToString().Trim();
                    reader.Close();
                    reader = db.ExecuteReader("SELECT userid,username,userpass,classid,arrgd FROM agence WHERE userid='" + this.Session.Contents["adminuserid"].ToString() + "' AND classid=0 AND isuseable=1 and userid in (" + MyFunc.GetGongSiID().ToString() + ")");
                    if (reader.Read())
                    {
                        this.Session.Contents["adminarrgd"] = reader["arrgd"].ToString().Trim();
                    }
                    else
                    {
                        MyFunc.goToLoginPage();
                        base.Response.End();
                        return;
                    }
                    reader.Close();
                    string text8  = "";
                    string text9  = "";
                    string text10 = "";
                    if (base.Request.ServerVariables["HTTP_X_FORWARDED_FOR"] != null)
                    {
                        text10 = base.Request.ServerVariables["HTTP_X_FORWARDED_FOR"].ToString().Trim();
                        text8  = MyFunc.GetPlace(db, MyFunc.ChgIP(base.Request.ServerVariables["HTTP_X_FORWARDED_FOR"].ToString().Trim()));
                    }
                    text10 = text10 + "|" + base.Request.UserHostAddress.ToString().Trim();
                    MyFunc.WriteUserEvent(db, this.Session.Contents["adminuserid"].ToString(), this.Session.Contents["adminusername"].ToString(), base.Request.UserHostAddress.Trim(), this.Session.Contents["adminclassid"].ToString(), "1");
                    text9 = MyFunc.GetPlace(db, MyFunc.ChgIP(base.Request.UserHostAddress.ToString().Trim()));
                    db.Dispose();
                    MyTeam.OnlineList.OnlineList.NewUserLogin(this.Session.Contents["adminusername"].ToString().Trim(), this.Session.SessionID.ToString().Trim(), DateTime.Now.ToString(), text10, this.Session.Contents["adminclassid"].ToString().Trim(), text8 + "|" + text9);
                    base.Response.Redirect("frmindex.aspx");
                    base.Response.End();
                }
            }
        }