public UserPrivilege GetUser(string userName, string userPwd)
{
UserPrivilege privilege = null;
string sql = String.Format("SELECT privileges FROM user WHERE name='{0}' and pwd = '{1}'", userName, userPwd);
SQLiteDataReader reader = dbExecutor.QuerySQL(sql);
if (reader != null)
{
while (reader.Read())
{
privilege = new UserPrivilege();
privilege.UserName = userName;
privilege.UserPwd = userPwd;
privilege.Privileges = (Privilege)reader["privileges"];
}
}
return(privilege);
}
public ArrayList GetAllUsers()
{
ArrayList results = new ArrayList();
string sql = "SELECT name,pwd,privileges FROM user";
SQLiteDataReader reader = dbExecutor.QuerySQL(sql);
if (reader != null)
{
while (reader.Read())
{
UserPrivilege privilege = new UserPrivilege();
privilege.UserName = reader["name"].ToString();
privilege.UserPwd = reader["pwd"].ToString();
privilege.Privileges = (Privilege)reader["privileges"];
results.Add(privilege);
}
}
return(results);
}
public bool UpdateUser(UserPrivilege privilege)
{
string sql = String.Format("UPDATE user SET pwd='{0}', privileges={1} WHERE name='{2}'", privilege.UserPwd, (int)privilege.Privileges, privilege.UserName);
return(dbExecutor.ExecuteSQL(sql));
}
public bool AddUser(UserPrivilege privilege)
{
string sql = String.Format("INSERT INTO user(name, pwd, privileges) VALUES('{0}','{1}',{2})", privilege.UserName, privilege.UserPwd, (int)privilege.Privileges);
return(dbExecutor.ExecuteSQL(sql));
}
