public static bool LoginUserDAL(LoginModel userData)
{
SqlDatabase travelMSysDB = new SqlDatabase(ConnString.DBConnectionString);// (@"Data Source=(LocalDB)\v11.0;AttachDbFilename=|DataDirectory|\TravelMS_Sep16.mdf;Integrated Security=True");
SqlCommand selectCmmnd = new SqlCommand("SELECT [Password] FROM EMPLOYEES WHERE [User_ID]=@User_ID");
selectCmmnd.CommandType = CommandType.Text;
selectCmmnd.Parameters.AddWithValue("@User_ID", userData.User_ID);
object pHash = travelMSysDB.ExecuteScalar(selectCmmnd);
if (!(pHash == null))
if (pHash.ToString().Equals(userData.Password))
return true;
return false;
}
public static bool LoginAgentDAL(LoginModel userData)
{
SqlDatabase travelMSysDB = new SqlDatabase(ConnString.DBConnectionString);
SqlCommand selectCmmnd = new SqlCommand("SELECT [Password] FROM AGENTS WHERE [Agent_ID]=@User_ID");
selectCmmnd.CommandType = CommandType.Text;
selectCmmnd.Parameters.AddWithValue("@User_ID", userData.User_ID);
object pHash = travelMSysDB.ExecuteScalar(selectCmmnd);
if (!(pHash == null))
if (pHash.ToString().Equals(userData.Password))
return true;
return false;
}
public ActionResult Login(LoginModel model, string returnUrl)
{
string role=Request.Params["Role"];
if (LoginBizLayer.LoginUserBiz(model, role))
{
//if credentials are in app db but not in default websecurity db - like how admin/agent login without using register functionality
if (!WebSecurity.Login(model.User_ID, model.Password, persistCookie: model.RememberMe))
WebSecurity.CreateUserAndAccount(model.User_ID, model.Password);
else if (ModelState.IsValid)
{
try
{
if (!Roles.RoleExists(role))
Roles.CreateRole(role);
if (!Roles.GetRolesForUser(model.User_ID).Contains(role))
Roles.AddUserToRole(model.User_ID, role);
}
catch (Exception)
{
throw;
}
return RedirectToLocal(returnUrl);
}
// If we got this far, something failed, redisplay form
ModelState.AddModelError("", "The user name or password provided is incorrect.");
return View(model);
}
else
{
ModelState.AddModelError("", "The user name or password provided is incorrect.");
return View(model);
}
}
