一用户
1.1用户注册
1.2用户登陆
首先在Models里添加用户登陆模型类UserLogin,该类只要用用户名,密码和验证码三个字段。
/// <summary>
/// 用户登陆模型
/// </summary>
public class UserLogin
{
/// <summary>
/// 用户名
/// </summary>
[Display(Name = \"用户名\", Description = \"4-20个字符。\")]
[Required(ErrorMessage = \"×\")]
[StringLength(20, MinimumLength = 4, ErrorMessage = \"×\")]
public string UserName { get; set; }
/// <summary>
/// 密码
/// </summary>
[Display(Name = \"密码\", Description = \"6-20个字符。\")]
[Required(ErrorMessage = \"×\")]
[StringLength(20, MinimumLength = 6, ErrorMessage = \"×\")]
[DataType(DataType.Password)]
public string Password { get; set; }
/// <summary>
/// 验证码
/// </summary>
[Display(Name = \"验证码\", Description = \"请输入图片中的验证码。\")]
[Required(ErrorMessage = \"×\")]
[StringLength(6, MinimumLength = 6, ErrorMessage = \"×\")]
public string VerificationCode { get; set; }
}
在UserController里添加Login action; 代码看如下:
public ActionResult Login()
{
return View();
}
[HttpPost]
public ActionResult Login(UserLogin login)
{
return View();
}
使用Cookie保存登陆账号,密码等信息,修改public ActionResult Login(UserLogin login)。修改完成代码如下:
[HttpPost]
public ActionResult Login(UserLogin login)
{
//验证验证码
if (Session[\"VerificationCode\"] == null || Session[\"VerificationCode\"].ToString() == \"\")
{
Error _e = new Error { Title = \"验证码不存在\", Details = \"在用户注册时,服务器端的验证码为空,或向服务器提交的验证码为空\", Cause = \"<li>你注册时在注册页面停留的时间过久页已经超时</li><li>您绕开客户端验证向服务器提交数据</li>\", Solution = \"返回<a href=\'\" + Url.Action(\"Register\", \"User\") + \"\'>注册</a>页面,刷新后重新注册\" };
return RedirectToAction(\"Error\", \"Prompt\", _e);
}
else if (Session[\"VerificationCode\"].ToString() != login.VerificationCode.ToUpper())
{
ModelState.AddModelError(\"VerificationCode\", \"×\");
return View();
}
//验证账号密码
userRsy = new UserRepository();
if (userRsy.Authentication(login.UserName, Common.Text.Sha256(login.Password)) == 0)
{
HttpCookie _cookie = new HttpCookie(\"User\");
_cookie.Values.Add(\"UserName\", login.UserName);
_cookie.Values.Add(\"Password\", Common.Text.Sha256(login.Password));
Response.Cookies.Add(_cookie);
return RedirectToAction(\"Default\",\"User\");
}
else
{
ModelState.AddModelError(\"Message\", \"登陆失败!\");
return View();
}
}
在public ActionResult Login() 上右键添加强类型视图
完成后代的Login.cshtml
@model CMS.Models.UserLogin
@{
ViewBag.Title = \"用户登陆\";
Layout = \"~/Views/Shared/_Layout.cshtml\";
}
<div class=\"banner\">
<img src=\"~/Skins/Default/Images/banner.jpg\" />
</div>
@using (Html.BeginForm())
{
@Html.ValidationSummary(true)
<div class=\"form\">
<dl>
<dt>用户登陆</dt>
<dd>
<div class=\"label\">@Html.LabelFor(model => model.UserName):</div>
<div class=\"ctrl\">@Html.EditorFor(model => model.UserName)
@Html.ValidationMessageFor(model => model.UserName)
@Html.DisplayDescriptionFor(model => model.UserName)
</div>
</dd>
<dd>
<div class=\"label\">@Html.LabelFor(model => model.Password):</div>
<div class=\"ctrl\">@Html.PasswordFor(model => model.Password)
@Html.ValidationMessageFor(model => model.Password)
@Html.DisplayDescriptionFor(model => model.Password)
</div>
</dd>
<dd>
<div class=\"label\">验证码:</div>
<div class=\"ctrl\">
@Html.TextBoxFor(model => model.VerificationCode)
@Html.ValidationMessageFor(model => model.VerificationCode)
<img id=\"verificationcode\" alt=\"\" src=\"@Url.Action(\"VerificationCode\", \"User\")\" />
<a id=\"trydifferent\" style=\"cursor: pointer\">换一张</a>
</div>
</dd>
<dd>
<div class=\"label\"></div>
<div class=\"ctrl\">
<input type=\"submit\" value=\"登陆\" />@Html.ValidationMessage(\"Message\");
</div>
</dd>
</dl>
<div class=\"clear\"></div>
</div>
}
<script type=\"text/javascript\">
$(\"#trydifferent\").click(function () {
$(\"#verificationcode\").attr(\"src\", \"/User/VerificationCode?\" + new Date());
})
</script>
@section Scripts {
@Scripts.Render(\"~/bundles/jqueryval\")
}
浏览器中查看一下登陆页面
点下登陆测试一下。OK登陆成功
验证用户是否已经登陆,这块和权限验证一起从AuthorizeAttribute继承个自定义验证类
在项目里添加Extensions文件夹,添加一个类UserAuthorizeAttribute 继承自AuthorizeAttribute,重写AuthorizeCore方法用来实现用户是否已经登陆的验证,权限验证在写权限功能时在补充
using Ninesky.Repository;
namespace System.Web.Mvc
{
/// <summary>
/// 用户权限验证
/// </summary>
public class UserAuthorizeAttribute :AuthorizeAttribute
{
/// <summary>
/// 核心【验证用户是否登陆】
/// </summary>
/// <param name=\"httpContext\"></param>
/// <returns></returns>
protected override bool AuthorizeCore(HttpContextBase httpContext)
{
//检查Cookies[\"User\"]是否存在
if (httpContext.Request.Cookies[\"User\"] == null) return false;
//验证用户名密码是否正确
HttpCookie _cookie = httpContext.Request.Cookies[\"User\"];
string _userName = _cookie[\"UserName\"];
string _password = _cookie[\"Password\"];
httpContext.Response.Write(\"用户名:\"+_userName);
if (_userName == \"\" || _password == \"\") return false;
UserRepository _userRsy = new UserRepository();
if (_userRsy.Authentication(_userName, _password) == 0) return true;
else return false;
}
}
}
以后只要在需要登陆后才能操作的Action或Controller上加[UserAuthorize]就可实现验证是否已经登录了。
退出功能,在UserController添加Logout Action
/// <summary>
/// 退出系统
/// </summary>
/// <returns></returns>
public ActionResult Logout()
{
if (Request.Cookies[\"User\"] != null)
{
HttpCookie _cookie = Request.Cookies[\"User\"];
_cookie.Expires = DateTime.Now.AddHours(-1);
Response.Cookies.Add(_cookie);
}
Notice _n = new Notice { Title = \"成功退出\", Details = \"您已经成功退出!\", DwellTime = 5, NavigationName=\"网站首页\", NavigationUrl = Url.Action(\"Index\", \"Home\") };
return RedirectToAction(\"Notice\", \"Prompt\", _n);
}
以上就是本文的全部内容,希望对大家的学习有所帮助,也希望大家多多支持phpstudy。
本文地址:https://www.stayed.cn/item/23183
转载请注明出处。
本站部分内容来源于网络,如侵犯到您的权益,请 联系我