ajax/AdminLogin.ashx

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

<%@ WebHandler Language="C#" Class="AdminLogin" %>

using System;
using System.Web;

public class AdminLogin : IHttpHandler, System.Web.SessionState.IRequiresSessionState
{

    public void ProcessRequest (HttpContext context) {
        context.Response.ContentType = "text/plain";


        string uid = context.Request["uname"].ToString().Trim();
        string upwd = MD5.Hash(context.Request["upass"].ToString().Trim());
        //string upwd = context.Request["upass"].ToString().Trim();
        string yzm = context.Request["yzm"].ToString().Trim();
        string r;
        if (yzm.ToUpper() != context.Session["CheckCode"].ToString().ToUpper())
        {
            r = "2";
        }
        else
        {
            System.Data.SqlClient.SqlParameter[] p = new System.Data.SqlClient.SqlParameter[]
         {
        new System.Data.SqlClient.SqlParameter("@id",uid),
        new System.Data.SqlClient.SqlParameter("@pwd",upwd),
        };
            string sql = "select count(*) from tb_gys where gys_user=@id and gys_pwd=@pwd" ;
            if (SqlHelper.GetSqlCount(sql, p) > 0)
            {
                 System.Data.SqlClient.SqlParameter[] p1 = new System.Data.SqlClient.SqlParameter[]
                {
                    new System.Data.SqlClient.SqlParameter("@id",uid),
                    new System.Data.SqlClient.SqlParameter("@pwd",upwd),
                    new System.Data.SqlClient.SqlParameter("@tag","1"),
                };
                string sql1 = "select count(*) from tb_gys where gys_tag=@tag and gys_user=@id and gys_pwd=@pwd" ;
               
                if (SqlHelper.GetSqlCount(sql1, p1) > 0)
                {
                    context.Session["userid"] = uid;
                    r = "3";
                }
                else
                {
                    context.Session["userid"] = uid;
                    r = "1";
                }
            }
            else
            { r = "0"; }
        }

        context.Response.Write(r.ToString ());
    }

    public bool IsReusable {
        get {
            return false;