使用 Membership.ValidateUser(Login1.UserName, Login1.Password)验证用户

      要为后台写一个登陆界面，asp.net 自带Login空间，因为直接就可以了。

      双击添加的Login空间将出现如下代码：

protected void Login1_Authenticate(object sender, AuthenticateEventArgs e) { bool Authenticated = false; // Authenticated = AdminDB.Login(Login1.UserName,Login1.Password); Authenticated = Membership.ValidateUser(Login1.UserName, Login1.Password); e.Authenticated = Authenticated; if (Authenticated == true) { Response.Redirect("自定义跳转方向，如http://163.com或index.aspx"); } else Login1.FailureText = "用户名或密码错误"; }

这里直接调用了System.Web.Security.Membership.ValidateUser(username,password)方法，这样就不用自己再写验证sql语句了。

不过这里的ValidateUser(username,password)只能验证用户名和密码是否匹配，而不能验证其他的内容，为了能够自定义验证内容，我们写了一个验证程序。代码如下：

AdminDB.cs

using System; using System.Data; using System.Configuration; using System.Web; using System.Web.Security; using System.Web.UI; using System.Web.UI.WebControls; using System.Web.UI.WebControls.WebParts; using System.Web.UI.HtmlControls; using System.Data.SqlClient; using MyProviders; /// <summary> /// AdminDB 的摘要说明 /// </summary> /// namespace NewsSystem { public class AdminDB { public AdminDB() { // // TODO: 在此处添加构造函数逻辑 // } public static bool Login(string name, string pwd) { SqlConnection conn = NewsDB.CreatCon(); try { // String strsql = "select * from dbo.AdminUser where mg_login=@login and mg_pwd=@pwd"; //限定UserRoles.roleid=0即只有管理员角色才能登录 //需要注意的是这里字符串很长，在换行时首字符最好流出一个空格。 string strsql = "select * from (((aspnet_Membership INNER JOIN aspnet_users ON "+ " aspnet_Membership.UserId = aspnet_users.UserId) INNER JOIN Users ON "+ " aspnet_users.username=Users.username) INNER JOIN UserRoles ON "+ " Users.userid=UserRoles.userid) where Users.Username=@name and aspnet_Membership.password=@pwd "+ " and UserRoles.roleid=0"; SqlParameter[] paras = new SqlParameter[2]; paras[0] = new SqlParameter("@name", SqlDbType.VarChar, 50); paras[0].Value = name; paras[1] = new SqlParameter("@pwd", SqlDbType.VarChar, 50); //paras[1].Value = pwd; paras[1].Value = MyProviders.MySQLMembershipProvider.GetMd5(pwd);//将密码转化为md5格式 SqlCommand cmd = new SqlCommand(strsql, conn); for (int i = 0; i < paras.Length; i++) { cmd.Parameters.Add(paras[i]); } conn.Open(); SqlDataReader dr = cmd.ExecuteReader(); if (dr.Read()) { return true; } } catch (Exception ex) { throw ex; } finally { conn.Close(); } return false; } } }

NewsDB.cs

using System; using System.Data; using System.Configuration; using System.Web; using System.Web.Security; using System.Web.UI; using System.Web.UI.WebControls; using System.Web.UI.WebControls.WebParts; using System.Web.UI.HtmlControls; using System.Data.SqlClient; /// <summary> /// DB 的摘要说明 /// </summary> /// namespace NewsSystem { public class NewsDB { public NewsDB() { // // TODO: 在此处添加构造函数逻辑 // } public static SqlConnection CreatCon() { string str = ConfigurationManager.AppSettings["SiteSqlServer"]; return new SqlConnection(str); } public static bool Getcmd(String strsql, params SqlParameter[] paras) { SqlConnection conn = NewsDB.CreatCon(); try { conn.Open(); SqlCommand cmd = new SqlCommand(strsql, conn); for (int i = 0; i < paras.Length; i++) { cmd.Parameters.Add(paras[i]); } int a = Convert.ToInt32(cmd.ExecuteNonQuery()); if (a > 0) { return true; } } catch (Exception ex) { throw ex; } finally { conn.Close(); } return false; } public static DataSet Getds(String strsql) { SqlConnection con = NewsDB.CreatCon(); DataSet ds = null; try { SqlDataAdapter da = new SqlDataAdapter(strsql, con); ds = new DataSet(); da.Fill(ds); } catch (Exception er) { throw er; } return ds; } } }

在

public static bool Login(string name, string pwd){}

中我们可以自定义sql语句，比如我们上面的例子就有验证了用户的角色。

参考文章：Visual Studio 2005 Login 控件的使用