MVC4制作网站教程第二章 用户登陆2.2

/// <summary> /// 用户登陆模型 /// </summary> public class UserLogin { /// <summary> /// 用户名 /// </summary> [Display(Name = "用户名", Description = "4-20个字符。")] [Required(ErrorMessage = "×")] [StringLength(20, MinimumLength = 4, ErrorMessage = "×")] public string UserName { get; set; } /// <summary> /// 密码 /// </summary> [Display(Name = "密码", Description = "6-20个字符。")] [Required(ErrorMessage = "×")] [StringLength(20, MinimumLength = 6, ErrorMessage = "×")] [DataType(DataType.Password)] public string Password { get; set; } /// <summary> /// 验证码 /// </summary> [Display(Name = "验证码", Description = "请输入图片中的验证码。")] [Required(ErrorMessage = "×")] [StringLength(6, MinimumLength = 6, ErrorMessage = "×")] public string VerificationCode { get; set; } }

public ActionResult Login() {  return View(); } [HttpPost] public ActionResult Login(UserLogin login) {  return View(); }

[HttpPost] public ActionResult Login(UserLogin login) {  //验证验证码  if (Session["VerificationCode"] == null || Session["VerificationCode"].ToString() == "")  {  Error _e = new Error { Title = "验证码不存在", Details = "在用户注册时，服务器端的验证码为空，或向服务器提交的验证码为空", Cause = "<li>你注册时在注册页面停留的时间过久页已经超时</li><li>您绕开客户端验证向服务器提交数据</li>", Solution = "返回<a href='" + Url.Action("Register", "User") + "'>注册</a>页面，刷新后重新注册" };  return RedirectToAction("Error", "Prompt", _e);  }  else if (Session["VerificationCode"].ToString() != login.VerificationCode.ToUpper())  {  ModelState.AddModelError("VerificationCode", "×");  return View();  }  //验证账号密码  userRsy = new UserRepository();  if (userRsy.Authentication(login.UserName, Common.Text.Sha256(login.Password)) == 0)  {  HttpCookie _cookie = new HttpCookie("User");  _cookie.Values.Add("UserName", login.UserName);  _cookie.Values.Add("Password", Common.Text.Sha256(login.Password));  Response.Cookies.Add(_cookie);  return RedirectToAction("Default","User");  }  else  {  ModelState.AddModelError("Message", "登陆失败！");  return View();  } }

@model CMS.Models.UserLogin@{ ViewBag.Title = "用户登陆"; Layout = "~/Views/Shared/_Layout.cshtml";} <div class="banner">  <img src="~/Skins/Default/Images/banner.jpg" /> </div> @using (Html.BeginForm()) {  @Html.ValidationSummary(true) <div class="form">  <dl>   <dt>用户登陆</dt>   <dd>   <div class="label">@Html.LabelFor(model => model.UserName)：</div>   <div class="ctrl">@Html.EditorFor(model => model.UserName)    @Html.ValidationMessageFor(model => model.UserName)    @Html.DisplayDescriptionFor(model => model.UserName)   </div>   </dd>   <dd>   <div class="label">@Html.LabelFor(model => model.Password)：</div>   <div class="ctrl">@Html.PasswordFor(model => model.Password)    @Html.ValidationMessageFor(model => model.Password)    @Html.DisplayDescriptionFor(model => model.Password)   </div>   </dd>   <dd>   <div class="label">验证码：</div>   <div class="ctrl">   @Html.TextBoxFor(model => model.VerificationCode)    @Html.ValidationMessageFor(model => model.VerificationCode)    <img id="verificationcode" alt="" src="@Url.Action("VerificationCode", "User")" />    <a id="trydifferent" style="cursor: pointer">换一张</a>   </div>   </dd>   <dd>   <div class="label"></div>   <div class="ctrl">    <input type="submit" value="登陆" />@Html.ValidationMessage("Message");   </div>   </dd>  </dl>  <div class="clear"></div>  </div>}<script type="text/javascript"> $("#trydifferent").click(function () {  $("#verificationcode").attr("src", "/User/VerificationCode?" + new Date());  })</script>@section Scripts {  @Scripts.Render("~/bundles/jqueryval") }

using Ninesky.Repository;namespace System.Web.Mvc{ /// <summary> /// 用户权限验证 /// </summary> public class UserAuthorizeAttribute :AuthorizeAttribute { /// <summary> /// 核心【验证用户是否登陆】 /// </summary> /// <param name="httpContext"></param> /// <returns></returns> protected override bool AuthorizeCore(HttpContextBase httpContext) {  //检查Cookies["User"]是否存在  if (httpContext.Request.Cookies["User"] == null) return false;  //验证用户名密码是否正确  HttpCookie _cookie = httpContext.Request.Cookies["User"];  string _userName = _cookie["UserName"];  string _password = _cookie["Password"];  httpContext.Response.Write("用户名:"+_userName);  if (_userName == "" || _password == "") return false;  UserRepository _userRsy = new UserRepository();  if (_userRsy.Authentication(_userName, _password) == 0) return true;  else return false; } }}

/// <summary> /// 退出系统 /// </summary> /// <returns></returns> public ActionResult Logout() {  if (Request.Cookies["User"] != null)  {  HttpCookie _cookie = Request.Cookies["User"];  _cookie.Expires = DateTime.Now.AddHours(-1);  Response.Cookies.Add(_cookie);  }  Notice _n = new Notice { Title = "成功退出", Details = "您已经成功退出！", DwellTime = 5, NavigationName="网站首页", NavigationUrl = Url.Action("Index", "Home") };  return RedirectToAction("Notice", "Prompt", _n); }