知识大全在ASP.NET中创建安全的web站点[4]

Posted 2022-07-14 事件

篇首语：常识是本能，有足够的常识便是天才。本文由小常识网(cha138.com)小编为大家整理，主要介绍了知识大全在ASP.NET中创建安全的web站点[4]相关的知识，希望对你有一定的参考价值。

在ASP.NET中创建安全的web站点[4] 以下文字资料是由(全榜网网www.cha138.com)小编为大家搜集整理后发布的内容，让我们赶快一起来看一下吧！

界面做好之后就开始编写提交按钮事件首先需要注册该事件代码如下

private void InitializeComponent()  this  btnLogin  Click += new System  Web  UI  ImageClickEventHandler(this  btnLogin_Click);

　　事件注册好之后自然就是编写事件处理函数了

private void btnLogin_Click(object sender   System  Web  UI  ImageClickEventArgs e)  CCommonDB sql = new CCommonDB(); string redirect =     ; if((redirect = sql  AuthenticateUser(this  Session   this  Response   username  Text   password  Text   saveLogin  Checked)) != string  Empty)  // Redirect the user Response  Redirect(redirect);  else  Message  Text =   Login Failed!  ;

　　读者看完上面的代码之后一定想问CCommonDB是哪里来的东东这是我编写的一个类用来处理用户登录信息的如果成功则把相关信息写入session Cookie和SQL数据库同时跳到default aspx页面具体如下

CCommonDB  cs namespace secure  Components  public class CCommonDB : CSql  public CCommonDB() : base()   public string AuthenticateUser( System  Web  SessionState  HttpSessionState objSession   // Session Variable System  Web  HttpResponse objResponse   // Response Variable string email   // Login string password   // Password bool bPersist // Persist login )  int nLoginID =   ; int nLoginType =   ; // Log the user in Login(email   password   ref nLoginID   ref nLoginType); if(nLoginID !=   ) // Success  // Log the user in System  Web  Security  FormsAuthentication  SetAuthCookie(nLoginID  ToString()   
bPersist); // Set the session varaibles objSession[  loginID  ] = nLoginID  ToString(); objSession[  loginType  ] = nLoginType  ToString(); // Set cookie information incase they made it persistant System  Web  HttpCookie wrapperCookie = new System  Web  HttpCookie(  wrapper  ); wrapperCookie  Value = objSession[  wrapper  ]  ToString(); wrapperCookie  Expires = DateTime  Now  AddDays(    ); System  Web  HttpCookie lgnTypeCookie = new System  Web  HttpCookie(  loginType  ); lgnTypeCookie  Value = objSession[  loginType  ]  ToString(); lgnTypeCookie  Expires = DateTime  Now  AddDays(    ); // Add the cookie to the response objResponse  Cookies  Add(wrapperCookie); objResponse  Cookies  Add(lgnTypeCookie); return   /candidate/default  aspx  ;  case   : // Admin Login  return   /admin/default  aspx  ;  case   : // Reporting Login  return   /reports/default  aspx  ;  default:  return string  Empty;    else  return string  Empty;   /// <summary> /// Verifies the login and password that were given /// </summary> /// <param name=  email  >the login</param> /// <param name=  password  >the password</param> /// <param name=  nLoginID  >returns the login id</param> /// <param name=  nLoginType  >returns the login type</param> public void Login(string email   string password   ref int nLoginID   
ref int nLoginType)  ResetSql(); DataSet ds = new DataSet(); // Set our parameters SqlParameter paramLogin = new SqlParameter(  @username     SqlDbType  VarChar         ); paramLogin  Value = email; SqlParameter paramPassword = new SqlParameter(  @password     SqlDbType  VarChar       ); paramPassword  Value = password; Command  CommandType = CommandType  StoredProcedure; Command  CommandText =   glbl_Login  ; Command  Parameters  Add(paramLogin); Command  Parameters  Add(paramPassword); Adapter  TableMappings  Add(  Table       Login  ); Adapter  SelectCommand = Command; Adapter  Fill(ds); if(ds  Tables  Count !=   )  DataRow row = ds  Tables[  ]  Rows[  ]; // Get the login id and the login type nLoginID = Convert  ToInt    (row[  Login_ID  ]  ToString()); nLoginType = Convert  ToInt    (row[  Login_Type  ]  ToString());  else  nLoginID =   ; nLoginType =   ;    abstract public class CSql  private SqlConnection sqlConnection; // Connection string private SqlCommand sqlCommand; // Command private SqlDataAdapter sqlDataAdapter; // Data Adapter private DataSet sqlDataSet; // Data Set 
public CSql()  sqlConnection = new SqlConnection(ConfigurationSettings  AppSettings
[  ConnectionString  ]); sqlCommand = new SqlCommand(); sqlDataAdapter = new SqlDataAdapter(); sqlDataSet = new DataSet(); sqlCommand  Connection = sqlConnection;  /// <summary> /// Access to our sql mand /// </summary> protected SqlCommand Command  get  return sqlCommand;   /// <summary> /// Access to our data adapter /// </summary> protected SqlDataAdapter Adapter  get  return sqlDataAdapter;   /// <summary> /// Makes sure that everything is clear and ready for a new query /// </summary> protected void ResetSql()  if(sqlCommand != null)  sqlCommand = new SqlCommand(); sqlCommand  Connection = sqlConnection;  if(sqlDataAdapter != null) sqlDataAdapter = new SqlDataAdapter(); if(sqlDataSet != null) sqlDataSet = new DataSet();  /// <summary> /// Runs our mand and returns the dataset /// </summary> /// <returns>the data set</returns> protected DataSet RunQuery()  sqlDataAdapter  SelectCommand = Command; sqlConnection  Open(); sqlConnection  Close(); sqlDataAdapter  Fill(sqlDataSet); return sqlDataSet;

cha138/Article/program/net/201311/15688

知识大全 在ASP.NET中创建安全的web站点[4]

知识大全在ASP.NET中创建安全的web站点[4]