public ActionResult LogOn(LogOnModel model, string returnUrl)
        {
            //Response.Write(returnUrl);

            returnUrl = Request["referrer"];
            if (ModelState.IsValid)
            {
                if (model.UserName != null)
                {
                    model.UserName = model.UserName.Trim();
                }
                SOSOshop.BLL.MemberAccount   bll = new SOSOshop.BLL.MemberAccount();
                SOSOshop.Model.MemberAccount obj = null;
                if ((string.IsNullOrEmpty(model.Captcha) || !model.Captcha.Equals(Convert.ToString(Session["Captcha"]), StringComparison.CurrentCultureIgnoreCase)))
                {
                    ModelState.AddModelError("", "您输入的验证码不正确。");
                }
                else
                {
                    string loginname = model.UserName;
                    string loginpwd  = model.PassWord;
                    if (!string.IsNullOrEmpty(model.UserName) && !string.IsNullOrEmpty(model.PassWord))
                    {
                        model.PassWord = ChangeHope.Common.DEncryptHelper.Encrypt(model.PassWord, 1);
                        obj            = bll.GetModelByNameAndPassword(model.UserName, model.PassWord);
                    }
                    if (obj != null)
                    {
                        if (obj.State == 2)
                        {
                            ModelState.AddModelError("", "用户已经被冻结,请联系客服。");
                        }
                        else if (obj.PeriodOfValidity <= DateTime.Now)
                        {
                            ModelState.AddModelError("", "用户过期时间已到,请联系客服。");
                        }
                        //else if (bll.GetMember_Class(obj.UID) == SOSOshop.Model.Member.Member_Class.无)
                        //{
                        //    ModelState.AddModelError("", "用户属未知买家类别,请联系客服。");
                        //}
                        else
                        {
                            //写入登陆日志
                            new SOSOshop.BLL.MemberLoginLog().Add(obj.UID, model.UserName, model.PassWord);
                            Session["Captcha"] = null;

                            DateTime expiration = DateTime.Now.AddHours(12);
                            FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(1,
                                                                                             model.UserName,
                                                                                             DateTime.Now,
                                                                                             expiration,
                                                                                             false,
                                                                                             obj.UID.ToString(),
                                                                                             FormsAuthentication.FormsCookiePath);
                            string     encTicket = FormsAuthentication.Encrypt(ticket);
                            HttpCookie tk        = new HttpCookie(FormsAuthentication.FormsCookieName, encTicket);
                            Response.Cookies.Add(tk);
                            //普通会员引导去升级
                            SOSOshop.BLL.MemberPermission mpb  = new SOSOshop.BLL.MemberPermission();
                            SOSOshop.BLL.MemberInfo       mifo = new SOSOshop.BLL.MemberInfo();//判断用户类型
                            SOSOshop.Model.MemberInfo     obj2 = mifo.GetModel(obj.UID);
                            int memberClass = obj2.Member_Class;
                            //判断用户是否GSP建档
                            //未建档用户跳转到会员建档资料提交页面
                            if (!mpb.GetBuyFilingStatus(obj.UID))
                            {
                                if (1 == (int)mpb.ExecuteScalar("SELECT IsSpecialTrade FROM dbo.memberpermission WHERE UID=" + obj.UID))
                                {
                                    #region 短信提醒
                                    string phone            = obj.MobilePhone;
                                    string CompanyShortName = ConfigurationManager.AppSettings["CompanyShortName"];
                                    SOSOshop.BLL.Sms.SendAndSaveDataBase(phone, "尊敬的" + obj2.TrueName + string.Format(",快捷交易权限仅7天内有效,请尽快邮寄合法的首营资料到{0}审核,享永久会员权益", CompanyShortName), "系统", phone);
                                    int tId = obj2.Editer;
                                    if (tId > 0)
                                    {
                                        string jyphone = (string)new SOSOshop.BLL.Administrators().ExecuteScalar("select MobilePhone from yxs_administrators where adminid=" + tId);

                                        if (!string.IsNullOrEmpty(jyphone))
                                        {
                                            SOSOshop.BLL.Sms.SendAndSaveDataBase(phone, "手机号为" + model.UserName + "的快捷开通客户已登录,请及时联系跟进,督促首营资质到位。", "系统", phone);
                                        }
                                    }
                                    #endregion
                                    return(RedirectToAction("Upgrade", "MemberCenter"));
                                }
                                else
                                {
                                    return(RedirectToAction("registerok", "account"));
                                }
                            }
                            else
                            {
                                if (returnUrl.Length > 10)
                                {
                                    int pos  = returnUrl.LastIndexOf("/");
                                    int outs = 0;

                                    if (pos != -1)
                                    {
                                        pos++;
                                    }

                                    int.TryParse(returnUrl.Substring(pos).Replace(".html", ""), out outs);

                                    if ((outs != 0) || (returnUrl.IndexOf("products") != -1))
                                    {
                                        return(Redirect(returnUrl));
                                    }
                                }
                                return(RedirectToAction("index", "home"));
                                //if (memberClass == 0)//批发客户跳转到基药频道
                                //{
                                //    return RedirectToAction("Index", "jy");
                                //}
                                //else if (memberClass == 1)//OTC客户跳转到OTC频道
                                //{

                                //    //return RedirectToAction("Index", "Otc");
                                //}
                                //else//其它用户
                                //{
                                //    if (returnUrl.ToLower().IndexOf("logon") != -1 || returnUrl.ToLower().IndexOf("register") != -1)
                                //    {
                                //        return RedirectToAction("LoginOK", "Account");
                                //    }
                                //    else if (!string.IsNullOrEmpty(returnUrl))
                                //    {
                                //        return Redirect(returnUrl);
                                //    }
                                //    else
                                //    {
                                //        return RedirectToAction("LoginOK", "Account");
                                //    }
                                //}
                            }
                        }
                    }
                    else
                    {
                        ModelState.AddModelError("", "您输入的用户名或密码不正确。");
                    }
                }
            }

            // 如果我们进行到这一步时某个地方出错,则重新显示表单
            return(View(model));
        }
示例#2
0
        private void UpdateMemberPermission(RadioButtonList cb)
        {
            int uid = 0; int.TryParse(this.hfUID.Value, out uid);

            if (uid > 0 && cb.Enabled)
            {
                //授权
                bool isCheckUp = SOSOshop.BLL.PowerPass.isPass("008009014");
                if (!isCheckUp)
                {
                    Response.Write("<script type=\"text/javascript\">alert('操作失败!无权限!');location='Buyer_Permissions.aspx?UID=" + uid + "';</script>");
                    Response.End();
                }
                else
                {
                    SOSOshop.BLL.MemberPermission bll = new SOSOshop.BLL.MemberPermission();
                    string c  = cb.ID.Replace("cb_", "");
                    string v  = cb.SelectedValue;
                    bool   ok = bll.Amend(uid, c, v);
                    if (!ok)
                    {
                        Response.Write("<script type=\"text/javascript\">alert('操作失败!');location='Buyer_Permissions.aspx?UID=" + uid + "';</script>");
                        Response.End();
                    }
                    else
                    {
                        #region 后台用户操作日志记录
                        SOSOshop.Model.AdminInfo adminInfo = SOSOshop.BLL.AdministrorManager.Get();
                        SOSOshop.BLL.Logs.Log.LogAdminAdd("修改买家权限[" + uid + "]" + c, (adminInfo == null ? 0 : adminInfo.AdminId), (adminInfo == null ? "" : adminInfo.AdminName), 1);
                        #endregion
                        #region 清除缓存
                        SOSOshop.BLL.DbBase db1 = new SOSOshop.BLL.DbBase(); db1.ClearCache();
                        #endregion

                        //快捷开通交易权限
                        if (v == "1" && c == "IsSpecialTrade")
                        {
                            string sql = "UPDATE dbo.memberaccount SET isIsSpecialTradeDate=getdate() where uid={0};Update memberpermission set IsMoneyAndShipping=1,IsCOD=0 Where UID=(select top(1) UID from memberinfo where UID={0} and Member_Class=0) ";
                            sql += "Update memberpermission set IsMoneyAndShipping=0,IsCOD=1 Where UID=(select top(1) UID from memberinfo where UID={0} and Member_Class=1) ";
                            int effected = bll.ExecuteNonQuery(string.Format(sql, uid));
                            if (effected <= 0)
                            {
                                bll.Amend(uid, c, "0");
                                Response.Write("<script type=\"text/javascript\">alert('操作失败!');location='Buyer_Permissions.aspx?UID=" + uid + "';</script>");
                                Response.End();
                            }
                            else
                            {
                                //发送短信通知
                                string MobilePhone = Convert.ToString(bll.ExecuteScalar("select MobilePhone from memberaccount where UID=" + uid));
                                string SmsMsg      = "尊敬的" + bll.ExecuteScalar("select TrueName from MemberInfo where UID=" + uid)
                                                     + ",快捷交易权限(7天内有效)已开通,立即登录,畅享医药电商的网上采购快感";
                                string from = "系统";
                                string to   = MobilePhone;
                                SOSOshop.BLL.Sms.SendAndSaveDataBase(MobilePhone, SmsMsg, from, to);

                                Response.Write("<script type=\"text/javascript\">location='Buyer_Permissions.aspx?UID=" + uid + "';</script>");
                                Response.End();
                            }
                        }
                    }
                }
            }
        }