using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;
using System.Web.Services;
/// <summary>
/// admin 的摘要说明
/// </summary>
public class admin
{
public admin()
{
// TODO: 在此处添加构造函数逻辑
//
}
private string getpwd(string name)
{
string pwd="0";
SqlDataReader myreader = sqlreader();
while (myreader.Read())
{
string username = myreader.GetString(1);
if (username == name)
{
pwd = myreader.GetString(2);
break;
}
}
return pwd;
}
public int gettype(string name)
{
int usertype=0;
SqlDataReader myreader = sqlreader();
while (myreader.Read())
{
string username = myreader.GetString(1);
if (username == name)
{
usertype = myreader.GetInt32(3);
break;
}
}
return usertype;
}
public DataTable getadmintable()
{
SqlConnection mycons = mycon();
SqlDataAdapter adpt = new SqlDataAdapter("select * from LD_USER",mycons);
mycons.Open();
DataSet ds =new DataSet();
adpt.Fill(ds, "user");
DataTable table1;
table1 = ds.Tables["user"];
return table1;
}
private SqlDataReader sqlreader()
{
SqlConnection myconsws = new SqlConnection();
myconsws = mycon();
myconsws.Open();
SqlCommand mycmd = new SqlCommand("select * from LD_USER", myconsws);
SqlDataReader reader;
reader= mycmd.ExecuteReader();
return reader;
}
public int login( string name,string pwd)
{
string pwdtrue;
pwd = md51(pwd);
pwdtrue = getpwd(name);
DataTable admintable = getadmintable();
if (pwdtrue != "0")
{
if (pwdtrue == pwd)
{
return gettype(name);
}
else
return 0;
}
else
return 0;
}
public SqlConnection mycon()
{
SqlConnection conn = new SqlConnection(System.Configuration.ConfigurationManager.ConnectionStrings[1].ConnectionString.ToString());
return conn;
}
public string md51(string tostrings)
{
return FormsAuthentication.HashPasswordForStoringInConfigFile(tostrings, "MD5");
}
public bool adduser(string name,string pwd,int type)
{
// DataTable tablead = getadmintable();
//for(int i=0;;i++)
//{
//if(tablead.Rows[i]["user_name"]==name)
// {
// return false;
// }
// }
SqlDataReader myreader = sqlreader();
while(myreader.Read())
{
string mynamne;
mynamne=myreader.GetString(1);
if (name == mynamne)
{
return false;
}
}
string insertpwd=md51(pwd);
SqlConnection mycons = mycon();
mycons.Open();
SqlCommand mycmd = new SqlCommand("insert_admin", mycons);
mycmd.CommandType = CommandType.StoredProcedure;
SqlParameter parametername = new SqlParameter("@User_Name_2 ", SqlDbType.VarChar, 50);
parametername.Value = name;
mycmd.Parameters.Add(parametername);
SqlParameter parameterpwd = new SqlParameter("@User_Pwd_3 ", SqlDbType.VarChar, 50);
parameterpwd.Value = insertpwd;
mycmd.Parameters.Add(parameterpwd);
SqlParameter parametertype = new SqlParameter("@User_Type_4 ", SqlDbType.Int);
parametertype.Value = type;
mycmd.Parameters.Add(parametertype);
mycmd.ExecuteNonQuery();
mycons.Close();
return true;
}
}