1using System;
  2using System.Data;
  3using System.Configuration;
  4using System.Collections;
  5using System.Web;
  6using System.Web.Security;
  7using System.Web.UI;
  8using System.Web.UI.WebControls;
  9using System.Web.UI.WebControls.WebParts;
 10using System.Web.UI.HtmlControls;
 11using WoNextDll.Handler;
 12using WoNextDll.component;
 13using WoNextDll.Data;
 14using AjaxPro;
 15
 16public partial class admin_admin_login : System.Web.UI.Page
 17...{
 18    protected void Page_Load(object sender, EventArgs e)
 19    ...{
 20        if (Session["WONEXT_AdMiN!@#"] != null)
 21        ...{
 22            if (Session["WONEXT_AdMiN!@#"].ToString() != "WONEXT_ADMIN!@#")
 23            ...{
 24                //确定是从网站登陆
 25                Response.Write("非法进入,点击<a href='../Default.aspx'>此处</a>返回首页！");
 26                Response.End();
 27            }
 28        }
 29        else
 30        ...{
 31            Response.Write("您不是管理员,点击<a href='../Default.aspx'>此处</a>返回首页！");
 32            Response.End();
 33        }
 34        if (Session["_AdminID"] != null)
 35        ...{
 36            Response.Redirect("admin.html");
 37            Response.End();
 38        }
 39        Utility.RegisterTypeForAjax(typeof(admin_admin_login));
 40        if (!Page.IsPostBack)
 41        ...{
 42            this.txtUserName.Attributes.Add("onKeyUp", "KeyUp('yes');");
 43            this.txtPassword.Attributes.Add("onKeyUp", "KeyUp('yes');");
 44        } 
 45    }
 46
 47    [AjaxMethod()]
 48    public String check_login(String lname, String lpass)
 49    ...{
 50        String str_Return = "";
 51        String sql_Str = "";
 52        try
 53        ...{
 54            lpass = WoNextDll.commen.Function.plusPass(lpass);
 55
 56            sql_Str = "Select state,IsAdmin from Wo_Users Where nickname='" + lname + "'";
 57            IDataReader dr = MyDB.GetDataReader(sql_Str);
 58            IDataReader dr2;
 59            if (dr.Read())
 60            ...{
 61                if (dr["state"].ToString() == "0" && Convert.ToBoolean(dr["IsAdmin"].ToString()) == true)
 62                ...{
 63                    //才判断密码
 64                    sql_Str = "Select userid,state,IsAdmin,username from Wo_Users where nickname='" + lname + "' and password='" + lpass + "'";
 65                    dr2 = MyDB.GetDataReader(sql_Str);
 66                    if (dr2.Read())
 67                    ...{
 68                        if (dr["state"].ToString() == "0" && Convert.ToBoolean(dr["IsAdmin"].ToString()) == true)
 69                        ...{
 70                            Session.Timeout = 200;
 71                            Session["_AdminUserName"] = dr2["username"].ToString();
 72                            Session["_AdminID"] = dr2["userid"].ToString();
 73                            str_Return = "1";
 74
 75                            dr2.Close();
 76                            dr2.Dispose();
 77                        }
 78                    }
 79                    else
 80                    ...{
 81                        str_Return = "<font color='#ff0000'>* 管理员密码不正确！</font>";
 82                    }
 83                    dr.Close();
 84                    dr.Dispose();
 85                }
 86                else
 87                ...{
 88                    str_Return = "<font color='#ff0000'>* 抱歉！您不是管理员！</font>";
 89                }
 90            }
 91            else
 92            ...{
 93                str_Return = "<font color='#ff0000'>* 用户名不存在！</font>";
 94            }
 95            dr.Close();
 96            dr.Dispose();
 97        }
 98        catch (Exception ex)
 99        ...{
100            WoNextDll.commen.Log.LogError("管理员登陆", ex);
101        }
102        
103        return str_Return;
104    }
105}
106