protected void Page_Load(object sender, EventArgs e)
{
if (Site_Settings.NavigationSection == 1)
{
// right side navigation
NavigationClass = "chnl_right_nav";
BodyClass = "chnl_left_mn";
}
if (!Page.IsPostBack)
{
if (Request.Params["key"] != null && Request.Params["user"] != null)
{
// validate key
string username = Request.Params["user"].ToString();
if (_members.Check_Key(username, Request.Params["key"].ToString()))
{
// activate account
_members.Update_IsEnabled(username, 1);
// authorize user
FormsAuthentication.SetAuthCookie(username, false);
// store IP Address Log
User_IPLogBLL.Process_Ipaddress_Log(username, Request.ServerVariables["REMOTE_ADDR"].ToString());
if (Config.GetMembershipAccountUpgradeRedirect() == 1)
{
Response.Redirect("myaccount/Packages.aspx?status=activated");
}
else
{
Response.Redirect(Config.GetUrl("myaccount/Default.aspx?status=activated"));
}
return;
}
else
{
// key validation failed
Response.Redirect(Config.GetUrl("Validate.aspx?user="******"user"].ToString() + "&status=failed"));
return;
}
}
if (Request.Params["user"] != null)
{
lbl_user.Text = Request.Params["user"].ToString();
}
if (Request.Params["status"] != null)
{
if (Request.Params["status"] == "failed")
{
Config.ShowMessageV2(msg, Resources.vsk.registrationkeyvalidationfailed, "Error!", 0);
}
}
}
}
protected void btn_register_Click1(object sender, EventArgs e)
{
if (!chk_agree.Checked)
{
Config.ShowMessageV2(msg, Resources.vsk.message_reg_01, "Error!", 0); // "Accept terms of use & privacy policy before continue."
return;
}
// birth date processing
//string _birth_date = drp_birthday_month.SelectedValue + "/" + drp_birthday_day.SelectedValue + "/" + drp_year.SelectedValue;
//DateTime birth_day = Convert.ToDateTime(_birth_date);
//int date_diff = DateTime.Now.Year - birth_day.Year;
//if (date_diff < 10)
//{
// Config.ShowMessage(msg, Resources.vsk.message_reg_02, 0, 0); // Age must be greater than 10 years before registering on this website.
// return;
//}
// check for restricted usernames
string res_values = DictionaryBLL.Return_RestrictedUserNames();
if (res_values != "")
{
if (DictionaryBLL.isMatch(lUserName.Text, res_values))
{
Config.ShowMessageV2(msg, Resources.vsk.message_reg_03, "Error!", 0); // User name not available, please choose another one.
return;
}
}
// IP Address tracking and processing
string ipaddress = Request.ServerVariables["REMOTE_ADDR"].ToString();
if (BlockIPBLL.Validate_IP(ipaddress))
{
Response.Redirect(Config.GetUrl("IPBlocked.aspx"));
return;
}
if (_memberprocess.Check_UserName(lUserName.Text))
{
Config.ShowMessageV2(msg, Resources.vsk.message_reg_03, "Error!", 0); // User name not available, please choose another one.
return;
}
if (_memberprocess.Check_Email(Email.Text))
{
Config.ShowMessageV2(msg, Resources.vsk.message_reg_04, "Error!", 0); // "Email address is already exist."
return;
}
string gender = "Male";
if (r_female.Checked)
{
gender = "Female";
}
// validation key processing
string val_key = "none";
int isenabled = 1; // user account activated
if (Config.isRegistrationValidation() && !this.isAdmin)
{
val_key = Guid.NewGuid().ToString().Substring(0, 10);
isenabled = 0; // user account deactivated
}
// Add Member
int type = 0; // normal member
if (this.isAdmin)
{
type = Convert.ToInt32(drp_acc.SelectedValue);
}
int userrole_id = 0;
// encrypt password
//int BCRYPT_WORK_FACTOR = 10;
string encrypted_password = BCrypt.Net.BCrypt.HashPassword(lPassword.Text);
members.Add(0, lUserName.Text, encrypted_password, Email.Text, drp_country.SelectedValue.ToString(), isenabled, gender, DateTime.Now, val_key, type, userrole_id);
// Create Required Directories
Directory_Process.CreateRequiredDirectories(Server.MapPath(Request.ApplicationPath) + "/contents/member/" + lUserName.Text.ToLower());
if (this.isAdmin)
{
Response.Redirect(Config.GetUrl("adm/sc/members/Default.aspx?status=created"));
}
else
{
// Send Mail
MailTemplateProcess(Email.Text, lUserName.Text, lPassword.Text, val_key);
if (Config.isRegistrationValidation())
{
Response.Redirect("Validate.aspx?user="******"");
}
else
{
// authorize user
FormsAuthentication.SetAuthCookie(lUserName.Text, false);
// Store IP Address Log
User_IPLogBLL.Process_Ipaddress_Log(lUserName.Text, ipaddress);
if (Config.GetMembershipAccountUpgradeRedirect() == 1)
{
Response.Redirect("myaccount/Packages.aspx?status=success");
}
else
{
Response.Redirect("myaccount/Default.aspx?status=success");
}
}
}
}
public void ProcessRequest(HttpContext context)
{
var json = new StreamReader(context.Request.InputStream).ReadToEnd();
var responseMsg = new Dictionary <string, string>();
int Type = 0;
string UserName = "";
string Email = "";
int Status = 0;
int OldValue = 0;
int NewValue = 0;
string Value = "";
string FieldName = "";
int Records = 0;
string Key = "";
bool isAdmin = false;
var _mem = new members();
var _ld_video_data = new Dictionary <string, MembersObject>();
if ((context.Request.Params["action"] != null))
{
switch (context.Request.Params["action"])
{
// url/api/members/process.ashx?action=login
// data
case "login":
var _login_member = JsonConvert.DeserializeObject <Member_Struct>(json);
// validate member
// Update Password Validation Script
if (_login_member.UserName == "" || _login_member.Password == "")
{
responseMsg["status"] = "error";
responseMsg["message"] = "Please enter username and password";
context.Response.Write(responseMsg);
return;
}
int MemberType = 0;
int Readonly = 0;
List <Member_Struct> _lst = members.Get_Hash_Password(_login_member.UserName);
if (_lst.Count == 0)
{
// No user account found based on username search
responseMsg["status"] = "error";
responseMsg["message"] = Resources.vsk.message_06;
context.Response.Write(responseMsg);
return;
}
// check encrypted password
if (_lst[0].Password.Length < 20)
{
// backward compatibility
// check existing user passwords with old system
if (!_mem.Validate_Member(_login_member.UserName, _login_member.Password, false))
{
responseMsg["status"] = "error";
responseMsg["message"] = Resources.vsk.message_06;
context.Response.Write(responseMsg);
return;
}
MemberType = Convert.ToInt32(members.Return_Value(_login_member.UserName, "type"));
Readonly = Convert.ToInt32(members.Return_Value(_login_member.Password, "readonly"));
}
else
{
// check encrypted password with user typed password
bool matched = BCrypt.Net.BCrypt.Verify(_login_member.Password, _lst[0].Password);
if (!matched)
{
responseMsg["status"] = "error";
responseMsg["message"] = Resources.vsk.message_06;
context.Response.Write(responseMsg);
return;
}
MemberType = _lst[0].Type; // type
Readonly = _lst[0].ReadOnly;
}
string Role = "User";
switch (MemberType)
{
case 0:
Role = "User";
break;
case 1:
Role = "Admin";
break;
case 2:
Role = "PaidUser";
break;
}
if (MemberType == 1)
{
if (Readonly == 1)
{
Role = "ReadOnlyAdmin";
}
}
// IP Address tracking and processing
string ipaddress = context.Request.ServerVariables["REMOTE_ADDR"].ToString();
if (BlockIPBLL.Validate_IP(ipaddress))
{
responseMsg["status"] = "error";
responseMsg["message"] = "IP Blocked";
context.Response.Write(responseMsg);
return;
}
if (Site_Settings.Store_IPAddress)
{
// Store IP Address Log
User_IPLogBLL.Process_Ipaddress_Log(_login_member.UserName, ipaddress);
}
// Update Last Login Activity of User
members.Update_Value(_login_member.UserName, "last_login", DateTime.Now);
// member is validated
FormsAuthenticationTicket _ticket = new FormsAuthenticationTicket(1, _login_member.UserName, DateTime.Now, DateTime.Now.AddMonths(1), true, Role, FormsAuthentication.FormsCookiePath);
string encTicket = FormsAuthentication.Encrypt(_ticket);
HttpCookie _cookie = new HttpCookie(FormsAuthentication.FormsCookieName, encTicket);
// if (chk_remember.Checked)
// _cookie.Expires = DateTime.Now.AddMonths(1);
// Response.Cookies.Add(_cookie);
// check for membership upgrades
responseMsg["status"] = "success";
responseMsg["message"] = "Login Successfull";
responseMsg["role"] = Role;
context.Response.Write(responseMsg);
return;
// url/api/members/process.ashx?action=register
// data
case "register":
var _register_member = JsonConvert.DeserializeObject <Member_Struct>(json);
string res_values = DictionaryBLL.Return_RestrictedUserNames();
if (res_values != "")
{
if (DictionaryBLL.isMatch(_register_member.UserName, res_values))
{
responseMsg["status"] = "error";
responseMsg["message"] = Resources.vsk.message_reg_03;
context.Response.Write(responseMsg);
return;
}
}
// IP Address tracking and processing
string ip = context.Request.ServerVariables["REMOTE_ADDR"].ToString();
if (BlockIPBLL.Validate_IP(ip))
{
responseMsg["status"] = "error";
responseMsg["message"] = "IP Blocked";
context.Response.Write(responseMsg);
return;
}
if (_mem.Check_UserName(_register_member.UserName))
{
responseMsg["status"] = "error";
responseMsg["message"] = Resources.vsk.message_reg_03;
context.Response.Write(responseMsg);
return;
}
if (_mem.Check_Email(_register_member.Email))
{
responseMsg["status"] = "error";
responseMsg["message"] = Resources.vsk.message_reg_04;
context.Response.Write(responseMsg);
return;
}
// validation key processing
string val_key = "none";
int isenabled = 1; // user account activated
if (Config.isRegistrationValidation())
{
val_key = Guid.NewGuid().ToString().Substring(0, 10);
isenabled = 0; // user account deactivated
}
// Add Member
int type = 0; // normal member
// Credits and Default Space Allocation
int credits = 0;
int remained_video = 0;
int remained_audio = 0;
int remained_gallery = 0;
int remained_photos = 0;
int remained_blogs = 0;
double space_video = 0;
double space_audio = 0;
double space_photos = 0;
if (Config.GetMembershipAccountUpgradeType() == 0)
{
if (!User_PackagesBLL.Check_Package_Feature())
{
// free user have some restricted features and services.
// load default free user package settings
List <Package_Struct> pck = PackagesBLL.Fetch_Record(Site_Settings.General_Default_Package_ID, false);
if (pck.Count > 0)
{
credits = pck[0].Credits;
remained_video = pck[0].Num_Videos;
remained_audio = pck[0].Num_Audio;
remained_gallery = pck[0].Num_Galleries;
remained_photos = pck[0].Num_Photos;
remained_blogs = pck[0].Num_Blogs;
space_audio = pck[0].Space_Audio;
space_video = pck[0].Space_Video;
space_photos = pck[0].Space_Photo;
}
else
{
// default package info not found, either package not exist or package is disabled currently.
// in this case users records updated with 0 status.
}
}
}
int userrole_id = Site_Settings.Default_UserRoleID; // assign user default role at time of register
// encrypt password
//int BCRYPT_WORK_FACTOR = 10;
string encrypted_password = BCrypt.Net.BCrypt.HashPassword(_register_member.Password);
int atype = 0;
members.Add(atype, _register_member.UserName, encrypted_password, _register_member.Email, _register_member.CountryName, isenabled, _register_member.Gender, DateTime.Now, val_key, type, credits, remained_video, remained_audio, remained_gallery, remained_photos, remained_blogs, space_video, space_audio, space_photos, userrole_id);
// Create Required Directories
Directory_Process.CreateRequiredDirectories(context.Server.MapPath(context.Request.ApplicationPath) + "/contents/member/" + _register_member.UserName.ToLower());
// Send Mail
MailTemplateProcess_Register(_register_member.Email, _register_member.UserName, _register_member.Password, val_key);
if (Config.isRegistrationValidation())
{
responseMsg["status"] = "pending";
responseMsg["message"] = "Validation Required";
context.Response.Write(responseMsg);
return;
}
responseMsg["status"] = "success";
responseMsg["message"] = "Registeration Completed";
context.Response.Write(responseMsg);
break;
case "update_profile":
// Authentication
if (!context.User.Identity.IsAuthenticated)
{
responseMsg["status"] = "error";
responseMsg["message"] = "Authentication Failed";
context.Response.Write(responseMsg);
return;
}
var _upd_mem = JsonConvert.DeserializeObject <Member_Struct>(json);
members.Update_User_Profile(_upd_mem.UserName, _upd_mem.FirstName, _upd_mem.LastName, _upd_mem.CountryName, _upd_mem.Gender, _upd_mem.RelationshipStatus, _upd_mem.AboutMe, _upd_mem.Website, _upd_mem.HometTown, _upd_mem.CurrentCity, _upd_mem.Zipcode, _upd_mem.Occupations, _upd_mem.Companies, _upd_mem.Schools, _upd_mem.Interests, _upd_mem.Movies, _upd_mem.Musics, _upd_mem.Books, _upd_mem.isAllowBirthDay);
responseMsg["status"] = "success";
responseMsg["message"] = "Operation Commit";
context.Response.Write(responseMsg);
break;
case "email_options":
// Authentication
if (!context.User.Identity.IsAuthenticated)
{
responseMsg["status"] = "error";
responseMsg["message"] = "Authentication Failed";
context.Response.Write(responseMsg);
return;
}
var _email_options = JsonConvert.DeserializeObject <Member_Struct>(json);
// validate email address and password.
var options = members.Get_Hash_Password(_email_options.UserName);
if (options.Count == 0)
{
// No user account found based on username search
responseMsg["status"] = "error";
responseMsg["message"] = Resources.vsk.message_emailoptions_03;
context.Response.Write(responseMsg);
return;
}
// check encrypted password
if (options[0].Password.Length < 20)
{
// backward compatibility
if (!members.Validate_Member_Email(_email_options.Email, _email_options.Password))
{
responseMsg["status"] = "error";
responseMsg["message"] = Resources.vsk.message_emailoptions_03;
context.Response.Write(responseMsg);
return;
}
}
else
{
// check encrypted password with user typed password
bool matched = BCrypt.Net.BCrypt.Verify(_email_options.Password, options[0].Password);
if (!matched)
{
responseMsg["status"] = "error";
responseMsg["message"] = Resources.vsk.message_emailoptions_03;
context.Response.Write(responseMsg);
return;
}
}
// update user validation key
var _key = Guid.NewGuid().ToString().Substring(0, 10);
members.Update_Value(_email_options.UserName, "val_key", _key);
// send mail validation request on new email address
MailTemplateProcess_EmailOptions(_email_options.Email, _email_options.UserName, _key);
responseMsg["status"] = "success";
responseMsg["message"] = "Email change request sent on email";
context.Response.Write(responseMsg);
break;
case "signout":
// Authentication
FormsAuthentication.SignOut();
responseMsg["status"] = "success";
responseMsg["message"] = "Success";
context.Response.Write(responseMsg);
break;
case "change_password":
// Authentication
if (!context.User.Identity.IsAuthenticated)
{
responseMsg["status"] = "error";
responseMsg["message"] = "Authentication Failed";
context.Response.Write(responseMsg);
return;
}
var _change_password = JsonConvert.DeserializeObject <Member_Struct>(json);
string _oldPassword = "";
string _newPassword = "";
if (context.Request.Params["op"] != null)
{
_oldPassword = context.Request.Params["op"].ToString();
}
if (context.Request.Params["np"] != null)
{
_newPassword = context.Request.Params["np"].ToString();
}
var _cPass = members.Get_Hash_Password(_change_password.UserName);
if (_cPass.Count == 0)
{
responseMsg["status"] = "error";
responseMsg["message"] = Resources.vsk.message_pass_01;
context.Response.Write(responseMsg);
return;
}
// check encrypted password
if (_cPass[0].Password.Length < 20)
{
// backward compatibility
// check existing user passwords with old system
if (!_mem.Validate_Member(_change_password.UserName, _oldPassword, false))
{
responseMsg["status"] = "error";
responseMsg["message"] = Resources.vsk.message_pass_01;
context.Response.Write(responseMsg);
return;
}
}
else
{
// check encrypted password with user typed password
bool matched = BCrypt.Net.BCrypt.Verify(_oldPassword, _cPass[0].Password);
if (!matched)
{
responseMsg["status"] = "error";
responseMsg["message"] = Resources.vsk.message_pass_01;
context.Response.Write(responseMsg);
return;
}
}
// change password
int BCRYPT_WORK_FACTOR = 10;
string _enc_pass = BCrypt.Net.BCrypt.HashPassword(_newPassword, BCRYPT_WORK_FACTOR);
members.Update_Value(_change_password.UserName, "password", _enc_pass);
MailTemplateProcess_ChangePassword(_change_password.UserName);
responseMsg["status"] = "success";
responseMsg["message"] = "Email change request sent on email";
context.Response.Write(responseMsg);
break;
case "validate_user":
if (context.Request.Params["user"] != null)
{
UserName = context.Request.Params["user"].ToString();
}
if (members.Validate_Member(UserName))
{
responseMsg["status"] = "success";
responseMsg["message"] = "Validated";
}
else
{
responseMsg["status"] = "error";
responseMsg["message"] = "Not Validated";
}
context.Response.Write(responseMsg);
break;
/*case "validate_member_email":
*
* var _val_email = JsonConvert.DeserializeObject<Member_Struct>(json);
* if (members.Validate_Member_Email(_val_email.Email,_val_email.Password))
* {
* responseMsg["status"] = "success";
* responseMsg["message"] = "Validated";
* }
* else
* {
* responseMsg["status"] = "error";
* responseMsg["message"] = "Not Validated";
* }
* break; */
case "check_username":
if (context.Request.Params["user"] != null)
{
UserName = context.Request.Params["user"].ToString();
}
if (_mem.Check_UserName(UserName))
{
responseMsg["status"] = "success";
responseMsg["message"] = "Validated";
}
else
{
responseMsg["status"] = "error";
responseMsg["message"] = "Not Validated";
}
context.Response.Write(responseMsg);
break;
case "check_email":
if (context.Request.Params["email"] != null)
{
Email = context.Request.Params["email"].ToString();
}
if (_mem.Check_Email(Email))
{
responseMsg["status"] = "success";
responseMsg["message"] = "Validated";
}
else
{
responseMsg["status"] = "error";
responseMsg["message"] = "Not Validated";
}
context.Response.Write(responseMsg);
break;
case "check_key":
if (context.Request.Params["user"] != null)
{
UserName = context.Request.Params["user"].ToString();
}
if (context.Request.Params["key"] != null)
{
Key = context.Request.Params["key"].ToString();
}
if (_mem.Check_Key(UserName, Key))
{
responseMsg["status"] = "success";
responseMsg["message"] = "Validated";
}
else
{
responseMsg["status"] = "error";
responseMsg["message"] = "Not Validated";
}
context.Response.Write(responseMsg);
break;
case "getpicture":
if (context.Request.Params["user"] != null)
{
UserName = context.Request.Params["user"].ToString();
}
responseMsg["picture"] = _mem.Get_Picture_NO_Session(UserName);
context.Response.Write(responseMsg);
break;
case "increment_views":
var _view_obj = JsonConvert.DeserializeObject <Member_Struct>(json);
members.Increment_Views(_view_obj.UserName, _view_obj.Views);
responseMsg["status"] = "success";
responseMsg["message"] = "Operation Commit";
break;
case "update_isenabled":
if (context.Request.Params["nval"] != null)
{
NewValue = Convert.ToInt32(context.Request.Params["nval"]);
}
var _upd_isenabled = JsonConvert.DeserializeObject <Member_Struct>(json);
_mem.Update_IsEnabled(_upd_isenabled.UserName, NewValue);
responseMsg["status"] = "success";
responseMsg["message"] = "Operation Commit";
context.Response.Write(responseMsg);
break;
case "update_user_roles":
var _update_role = JsonConvert.DeserializeObject <Member_Struct>(json);
members.Update_User_Role(_update_role.UserName, _update_role.RoleID);
responseMsg["status"] = "success";
responseMsg["message"] = "Operation Commit";
context.Response.Write(responseMsg);
break;
case "update_field":
if (context.Request.Params["user"] != null)
{
UserName = context.Request.Params["user"].ToString();
}
if (context.Request.Params["val"] != null)
{
Value = context.Request.Params["val"].ToString();
}
if (context.Request.Params["field"] != null)
{
FieldName = context.Request.Params["field"].ToString();
}
members.Update_Value(UserName, FieldName, Value);
responseMsg["status"] = "success";
responseMsg["message"] = "Operation Commit";
context.Response.Write(responseMsg);
break;
case "get_field_value":
if (context.Request.Params["user"] != null)
{
UserName = context.Request.Params["user"].ToString();
}
if (context.Request.Params["field"] != null)
{
FieldName = context.Request.Params["field"].ToString();
}
responseMsg["value"] = members.Return_Value(UserName, FieldName);
context.Response.Write(responseMsg);
break;
case "load_channels":
var _ld_video_json = JsonConvert.DeserializeObject <Member_Struct>(json);
var _vObject = new MembersObject()
{
Data = _mem.Load_Channels_ADV(_ld_video_json),
Count = _mem.Count_Channels(_ld_video_json)
};
_ld_video_data["data"] = _vObject;
context.Response.Write(_ld_video_data);
break;
case "load_users_autocomplete":
string _Term = "";
if (context.Request.Params["term"] != null)
{
_Term = context.Request.Params["term"].ToString();
}
responseMsg["data"] = members.Load_User_AutoComplete(_Term);
context.Response.Write(responseMsg);
break;
case "fetch_record":
if (context.Request.Params["user"] != null)
{
UserName = context.Request.Params["user"].ToString();
}
_ld_video_data["data"] = new MembersObject()
{
Data = members.Fetch_User_Profile(UserName),
Count = 0
};
context.Response.Write(_ld_video_data);
break;
case "fetch_user_channels":
if (context.Request.Params["user"] != null)
{
UserName = context.Request.Params["user"].ToString();
}
_ld_video_data["data"] = new MembersObject()
{
Data = members.Fetch_User_Channel(UserName),
Count = 0
};
context.Response.Write(_ld_video_data);
break;
case "fetch_user_detail_profile":
if (context.Request.Params["user"] != null)
{
UserName = context.Request.Params["user"].ToString();
}
_ld_video_data["data"] = new MembersObject()
{
Data = members.Fetch_User_DetailProfile(UserName),
Count = 0
};
context.Response.Write(_ld_video_data);
break;
case "fetch_user_status_info":
if (context.Request.Params["user"] != null)
{
UserName = context.Request.Params["user"].ToString();
}
_ld_video_data["data"] = new MembersObject()
{
Data = members.Fetch_User_Status_Info(UserName),
Count = 0
};
context.Response.Write(_ld_video_data);
break;
case "fetch_user_usernames":
if (context.Request.Params["type"] != null)
{
Type = Convert.ToInt32(context.Request.Params["type"]);
}
_ld_video_data["data"] = new MembersObject()
{
Data = members.Fetch_User_UserNames(Type),
Count = 0
};
context.Response.Write(_ld_video_data);
break;
case "fetch_user_info":
if (context.Request.Params["user"] != null)
{
UserName = context.Request.Params["user"].ToString();
}
_ld_video_data["data"] = new MembersObject()
{
Data = members.Fetch_User_Info(UserName),
Count = 0
};
context.Response.Write(_ld_video_data);
break;
case "fetch_usernames":
_ld_video_data["data"] = new MembersObject()
{
Data = members.Fetch_User_UserNames(),
Count = 0
};
context.Response.Write(_ld_video_data);
break;
}
}
else
{
// No action found
responseMsg["status"] = "error";
responseMsg["message"] = "No action found";
context.Response.Write(JsonConvert.SerializeObject(responseMsg));
}
}
protected void btn_login_Click1(object sender, EventArgs e)
{
// validate member
// Update Password Validation Script
if (lUserName.Text == "" || lPassword.Text == "")
{
Config.ShowMessageV2(msg, "Please enter username and password", "Error!", 0);
return;
}
List <Member_Struct> _lst = members.Get_Hash_Password(lUserName.Text);
if (_lst.Count == 0)
{
// No user account found based on username search
Config.ShowMessageV2(msg, Resources.vsk.message_06, "Error!", 0); // "Login failed, please enter correct user name & password."
return;
}
// check encrypted password
if (_lst[0].Password.Length < 20)
{
// backward compatibility
// check existing user passwords with old system
if (!_memberprocess.Validate_Member(lUserName.Text, lPassword.Text, false))
{
Config.ShowMessageV2(msg, Resources.vsk.message_06, "Error!", 0); // "Login failed, please enter correct user name & password."
return;
}
}
else
{
// check encrypted password with user typed password
bool matched = BCrypt.Net.BCrypt.Verify(lPassword.Text, _lst[0].Password);
if (!matched)
{
Config.ShowMessageV2(msg, Resources.vsk.message_06, "Error!", 0); // "Login failed, please enter correct user name & password."
return;
}
}
// IP Address tracking and processing
string ipaddress = Request.ServerVariables["REMOTE_ADDR"].ToString();
if (BlockIPBLL.Validate_IP(ipaddress))
{
Response.Redirect(Config.GetUrl("IPBlocked.aspx"));
return;
}
if (Site_Settings.Store_IPAddress)
{
// Store IP Address Log
User_IPLogBLL.Process_Ipaddress_Log(lUserName.Text, ipaddress);
}
// Update Last Login Activity of User
members.Update_Value(lUserName.Text, "last_login", DateTime.Now);
// member is validated
FormsAuthenticationTicket _ticket = new FormsAuthenticationTicket(1, lUserName.Text, DateTime.Now, DateTime.Now.AddMonths(1), chk_remember.Checked, lUserName.Text.ToString(), FormsAuthentication.FormsCookiePath);
string encTicket = FormsAuthentication.Encrypt(_ticket);
HttpCookie _cookie = new HttpCookie(FormsAuthentication.FormsCookieName, encTicket);
if (chk_remember.Checked)
{
_cookie.Expires = DateTime.Now.AddMonths(1);
}
Response.Cookies.Add(_cookie);
if (Request.Params["ReturnUrl"] != null && Request.Params["ReturnUrl"] != "")
{
Response.Redirect(Request.Params["ReturnUrl"].ToString());
}
else
{
Response.Redirect(Config.GetUrl("myaccount/Default.aspx"));
}
}
protected void btn_validate_Click(object sender, EventArgs e)
{
if (Page.IsValid)
{
if (UserName.Text == "" || Password.Text == "")
{
Config.ShowMessageV2(msg, "Please enter username and password", "Error!", 0);
return;
}
List <Member_Struct> _lst = members.Get_Hash_Password(UserName.Text);
if (_lst.Count == 0)
{
// No user account found based on username search
Config.ShowMessageV2(msg, Resources.vsk.message_06, "Error!", 0); // "Login failed, please enter correct user name & password."
return;
}
// check encrypted password
if (_lst[0].Password.Length < 20)
{
// backward compatibility
// check existing user passwords with old system
if (!_memberprocess.Validate_Member(UserName.Text, Password.Text, false))
{
Config.ShowMessageV2(msg, Resources.vsk.message_06, "Error!", 0); // "Login failed, please enter correct user name & password."
return;
}
}
else
{
// check encrypted password with user typed password
bool matched = BCrypt.Net.BCrypt.Verify(Password.Text, _lst[0].Password);
if (!matched)
{
Config.ShowMessageV2(msg, Resources.vsk.message_06, "Error!", 0); // "Login failed, please enter correct user name & password."
return;
}
}
// IP Address tracking and processing
string ipaddress = Request.ServerVariables["REMOTE_ADDR"].ToString();
// Read Access
if (_adminprocess.isReadOnly(UserName.Text))
{
Session["AccessLevel"] = "ReadOnly";
}
else
{
Session["AccessLevel"] = "Full";
}
// Authorize the member, inorder to make it separate from front end authorization we use custom authorization for Administration.
Session["AdminAuth"] = UserName.Text;
// Store IP Address Log
User_IPLogBLL.Process_Ipaddress_Log(UserName.Text, ipaddress);
// Update Last Login Activity of User
members.Update_Value(UserName.Text, "last_login", DateTime.Now);
Response.Redirect("sc/Default.aspx");
}
}