migrate to new git

web/admin/index.aspx.cs

@@ -0,0 +1,473 @@
+using System;
+using System.Collections;
+using System.Data;
+using System.Data.OleDb;
+using System.Web.UI;
+using System.Configuration;
+using Newtonsoft.Json;
+using System.Web;
+using System.Web.UI.HtmlControls;
+
+public partial class admin_index : MyWeb.function
+{
+
+    string db = ConfigurationManager.ConnectionStrings["shopConn"].ConnectionString;
+    string p_name = ConfigurationManager.ConnectionStrings["shopConn"].ProviderName;
+    string scc = ConfigurationManager.AppSettings["shopCarCode"].ToString();
+
+    public MyWeb.Recaptcha recaptcha = new MyWeb.Recaptcha();
+    MyWeb.encrypt encrypt = new MyWeb.encrypt();
+    MyWeb.function function = new MyWeb.function();
+    MyWeb.sql sql = new MyWeb.sql();
+    MyWeb.admin admin = new MyWeb.admin();
+   
+    protected void Page_Load(object sender, EventArgs e)
+    {
+        var m = (admin_Templates_TBS5ADM001_MasterPage)Page.Master;
+        m.set_navs(false, "nav_hide home");
+        if (MyWeb.admin.chkAdmIP && (MyWeb.admin.chkTwIP || MyWeb.admin.chkAdmIP_Enable))
+        {
+            if (!IsPostBack)
+            {
+                MyWeb.security security = new MyWeb.security();
+                psdRule.ValidationExpression = security.PasswordValidator();
+                psdRule.ErrorMessage = security.PasswordNotice();
+                if (isStrNull(psdRule.ValidationExpression))
+                    psdRule.Visible = false;
+
+                if (admin.isLoign(false))
+                {
+                    admin.ClearInfo();
+                    Response.Cookies[scc + "_menu_oid"].Expires = DateTime.Now.AddDays(-1);
+                    Response.Redirect(Request.Url.AbsoluteUri);
+                }
+
+                if (!isStrNull(Request["msg"]))
+                {
+                    if (Request["msg"] == "A")
+                    {
+                        this.L_msg.Text = "您尚未登錄系統或登錄時間逾時，請重新登錄！";
+                    }
+                    else if (Request["msg"] == "B")
+                    {
+                        this.L_msg.Text = "您的帳號已被停權，請洽管理者！";
+                    }
+                    else if (Request["msg"] == "C")
+                    {
+                        this.L_msg.Text = "您的帳號重複登入，請檢查是否有人使用相同帳號！";
+                    }
+                    else if (Request["msg"] == "D")
+                    {
+                        this.L_msg.Text = "您的帳號不存在，請洽管理者！";
+                    }
+                    else if (Request["msg"] == "E")
+                    {
+                        this.L_msg.Text = "您的網路環境已變動，請重新登入！";
+                    }
+                }
+
+                if (recaptcha.Used)
+                {
+                    MultiView1.ActiveViewIndex = 1;
+                }
+                else
+                {
+                    chksum_img.ImageUrl = "~/App_Script/chksum.ashx";
+                }
+
+                DesignModeButton.Visible = MyWeb.master.chkDesignIP();
+
+            }
+        }
+        else
+        {
+            HttpContext.Current.Response.Clear();
+            HttpContext.Current.Response.StatusCode = 404;
+            HttpContext.Current.Response.End();
+        }
+
+    }
+
+    #region 驗證碼
+
+    protected void chksum_img_Load(object sender, EventArgs e)
+    {
+        if (Session["chknum"] != null)
+        {
+            ViewState["chknum"] = Session["chknum"];
+        }
+    }
+    protected void rechk_Click(object sender, EventArgs e)
+    {
+        chksum_img.ImageUrl = "~/App_Script/chksum.ashx?time=" + DateTime.Now.ToString("yyyyMMddHHmmss");
+    }
+
+    #endregion
+
+    #region 回首頁鈕事件
+
+    protected void ImageButton1_Click(object sender, ImageClickEventArgs e)
+    {
+        Response.Redirect("~/index.aspx");
+    }
+
+    #endregion
+
+    #region 登入
+
+    protected void Button1_Click(object sender, EventArgs e)
+    {
+        msg.Text = "";
+        int LoginTryCount = Val(ConfigurationManager.AppSettings["LoginTryCount"].ToString());
+        int LoginTryLockMin = Val(ConfigurationManager.AppSettings["LoginTryLockMin"].ToString());
+
+        if (LoginTryCount > 0 && !isStrNull(Session[scc + "ezLgErr"]))
+        {
+            ezLgErr ezLgErr = JsonConvert.DeserializeObject<ezLgErr>(ValString(Session[scc + "ezLgErr"]));
+            if (ezLgErr.count >= LoginTryCount && DateTime.Now < ezLgErr.reg_time.AddMinutes(LoginTryLockMin))
+            {
+                TimeSpan ts = ezLgErr.reg_time.AddMinutes(LoginTryLockMin) - DateTime.Now;
+                ScriptMsg("您嘗試登入失敗太多次，請稍待 " + Math.Round(ts.TotalMinutes) + "  分鐘後再嘗試!", "", msgIcon.warning);
+                return;
+            }
+
+        }
+       
+
+        bool isOk = false;
+        if (MultiView1.ActiveViewIndex == 0)
+        {
+            if (isStrNull(ViewState["chknum"]))
+            {
+                msg.Text = "檢核碼逾時，請重新輸入！";
+                chksum_img.ImageUrl = "~/App_Script/chksum.ashx";
+            }
+            else if (ViewState["chknum"].ToString() == this.chknum.Text.ToUpper())
+            {
+                isOk = true;
+            }
+            else
+            {
+                msg.Text = "您所輸入的檢核碼有誤！";
+                chksum_img.ImageUrl = "~/App_Script/chksum.ashx";
+            }
+        }
+        else if (recaptcha.Verification())
+        {
+            isOk = true;
+        }
+        else
+        {
+            msg.Text = "驗證未通過！";
+        }
+
+        if (isOk)
+        {
+            OleDbConnection sqlConn = sql.conn(db, p_name);
+            try
+            {
+                sqlConn.Open();
+
+                bool isErr = true;
+                OleDbCommand sqlCmd = new OleDbCommand("", sqlConn);
+                sqlCmd.CommandText = "Select * from admin where u_id=?";
+                sqlCmd.Parameters.Add(new OleDbParameter("u_id", u_id.Text));
+                DataTable dt = sql.dataTable(sqlCmd);
+                if (dt.Rows.Count > 0)
+                {
+                    var userr = dt.Rows[0];
+                    if (u_password.Text == encrypt.DecryptAutoKey(userr["u_password"].ToString()))
+                    {
+                        isErr = false;
+                        if ((bool)userr["online"])
+                        {
+                            string log = chk_setting(Val(userr["num"]), userr["u_id"].ToString(), userr["power"].ToString());
+                            if (log == null)
+                            {
+                                if (!isStrNull(Session[scc + "ezLgErr"]))
+                                    Session[scc + "ezLgErr"] = null;
+                                if (!(userr["gauth_enabled"] is System.DBNull) &&
+                                    (bool)(userr["gauth_enabled"]))
+                                {
+                                    GoogleAuth gauth = new GoogleAuth();
+                                    gauth.User = userr["u_id"].ToString();
+                                    gauth.Password = userr["u_password"].ToString();
+                                    gauth.SecretKey = userr["gauth_key"].ToString();
+                                    string ValidateCode = u_gauth.Text;
+                                    isErr = !(gauth.ValidateGoogleAuthCode(ValidateCode));
+                                }
+
+                                if (!isErr)
+                                {
+                                    Response.Redirect("index2.aspx");
+                                }
+                            }
+                            else
+                            {
+                                this.msg.Text = log;
+                                chksum_img.ImageUrl = "~/App_Script/chksum.ashx";
+                            }
+                        }
+                        else
+                        {
+                            LoginHistoryAdd(sqlConn, userr["u_id"].ToString(), Model.admin_log.Detail.Disable);
+                            msg.Text = "您的帳號已停權，請洽管理者！";
+                            chksum_img.ImageUrl = "~/App_Script/chksum.ashx";
+                        }
+                    }                
+                }
+              
+
+                if (isErr)
+                {
+                    LoginHistoryAdd(sqlConn, u_id.Text, Model.admin_log.Detail.Incorrect);
+                    msg.Text = "您所輸入的帳號或密碼有誤！";
+                    chksum_img.ImageUrl = "~/App_Script/chksum.ashx";
+
+                    if (LoginTryCount > 0)
+                    {
+                        ezLgErr ezLgErr = new ezLgErr();
+                        ezLgErr.count = 0;
+                        if (!isStrNull(Session[scc + "ezLgErr"]))
+                            ezLgErr = JsonConvert.DeserializeObject<ezLgErr>(ValString(Session[scc + "ezLgErr"]));
+                        ezLgErr.count++;
+                        ezLgErr.reg_time = DateTime.Now;
+                        Session[scc + "ezLgErr"] = JsonConvert.SerializeObject(ezLgErr);
+                    }
+                }
+
+
+            }
+            catch (Exception ex)
+            {
+                msg.Text = "資料庫連接錯誤";
+                chksum_img.ImageUrl = "~/App_Script/chksum.ashx";
+            }
+            finally
+            {
+                sqlConn.Close(); sqlConn.Dispose();
+            }
+        }
+
+     
+
+    }
+
+    public class ezLgErr
+    {
+        public int count;
+        public DateTime reg_time;
+    }
+
+    public string chk_setting(int num, string u_id, string g_name)
+    {
+
+        string myip = MyWeb.admin.MyIP;
+        if (myip != "127.0.0.1")
+        {
+            myip = Request.UserHostAddress;
+            if (g_name.ToUpper() == "EZ" & myip != "211.20.239.58")
+            {
+                return "禁止登入";
+            }
+        }   
+
+        string login_code = function.randCode(10);
+
+
+        string log = null;
+        OleDbConnection sqlConn = sql.conn(db, p_name);
+
+        try
+        {
+            sqlConn.Open();
+
+            OleDbCommand sqlCmd = new OleDbCommand("", sqlConn);
+            sqlCmd.CommandText = "Select log_class,menu from company";
+            DataTable dt = sql.dataTable(sqlCmd);
+            if (dt.Rows.Count > 0)
+            {
+                bool log_class = (bool)dt.Rows[0]["log_class"];
+                string menu = dt.Rows[0]["menu"].ToString();
+
+
+                OleDbCommand sqlCmd2 = new OleDbCommand("", sqlConn);
+                sqlCmd2.CommandText = "SELECT items FROM admin_group where g_name=?";
+                sqlCmd2.Parameters.Add(new OleDbParameter("g_name", g_name));
+                DataTable dt2 = sql.dataTable(sqlCmd2);
+
+                if (dt2.Rows.Count > 0)
+                {
+                    DateTime ntime = DateTime.Now;
+
+                    MyWeb.admin.AdmItem aItem = new MyWeb.admin.AdmItem();
+                    aItem.num = num;
+                    aItem.power = dt2.Rows[0]["items"].ToString();
+                    aItem.group = g_name;
+                    aItem.u_id = u_id;
+                    aItem.login_time = ntime;
+                    aItem.login_code = login_code;
+                    aItem.login_ip = myip;
+                    aItem.menu = menu;
+                    admin.SaveInfo(aItem, log_class);
+                           
+
+                    //記錄登入時間和ip
+                    sqlCmd = new OleDbCommand("", sqlConn);
+                    sqlCmd.CommandText = "update admin set login_time=?, login_ip=?, login_code=? where num=?";
+                    sqlCmd.Parameters.Add(new OleDbParameter("login_time", ntime.ToString("yyyy/MM/dd HH:mm:ss")));
+                    sqlCmd.Parameters.Add(new OleDbParameter("login_ip", myip));
+                    sqlCmd.Parameters.Add(new OleDbParameter("login_code", login_code));
+                    sqlCmd.Parameters.Add(new OleDbParameter("num", num));
+                    sqlCmd.ExecuteNonQuery();
+
+                    LoginHistoryAdd(sqlConn, u_id, Model.admin_log.Detail.Success);
+
+                }
+                else
+                {
+                    LoginHistoryAdd(sqlConn,u_id, Model.admin_log.Detail.PermissionsNotSet);
+                    log = "您所屬的群組未設定使用權限，請洽管理員";
+                }
+            }
+            else
+            {
+                LoginHistoryAdd(sqlConn, u_id, Model.admin_log.Detail.GroupNotExist);
+                log = "您所屬的群組不存在，請洽管理員";
+            }
+
+        }
+        catch (Exception ex)
+        {
+            log = "資料庫連接錯誤";
+        }
+        finally
+        {
+            sqlConn.Close(); sqlConn.Dispose();
+        }
+
+        return log;
+
+    }
+
+
+    #endregion
+
+    #region 設計師模式
+
+    protected void DesignModeButton_Click(object sender, EventArgs e)
+    {
+        if (MyWeb.master.chkDesignIP())
+        {
+            string u_id = "Designer";
+            string g_name = "EZ";
+
+            MyWeb.sql sql = new MyWeb.sql();
+            MyWeb.function function = new MyWeb.function();
+            string login_code = function.randCode(10);
+
+            string log = null;
+            OleDbConnection sqlConn = sql.conn(db, p_name);
+
+            try
+            {
+                sqlConn.Open();
+
+                OleDbCommand sqlCmd = new OleDbCommand("", sqlConn);
+                sqlCmd.CommandText = "Select log_class,menu from company";
+                DataTable dt = sql.dataTable(sqlCmd);
+                if (dt.Rows.Count > 0)
+                {
+                    bool log_class = (bool)dt.Rows[0]["log_class"];
+                    string menu = dt.Rows[0]["menu"].ToString();
+
+
+                    OleDbCommand sqlCmd2 = new OleDbCommand("", sqlConn);
+                    sqlCmd2.CommandText = "SELECT items FROM admin_group where g_name=?";
+                    sqlCmd2.Parameters.Add(new OleDbParameter("g_name", g_name));
+                    DataTable dt2 = sql.dataTable(sqlCmd2);
+
+                    if (dt2.Rows.Count > 0)
+                    {
+                        DateTime ntime = DateTime.Now;
+
+                        MyWeb.admin.AdmItem aItem = new MyWeb.admin.AdmItem();
+                        aItem.num = 0;
+                        aItem.power = dt2.Rows[0]["items"].ToString();
+                        aItem.group = g_name;
+                        aItem.u_id = u_id;
+                        aItem.login_time = ntime;
+                        aItem.login_code = login_code;
+                        aItem.login_ip = MyWeb.admin.MyIP;
+                        aItem.menu = menu;
+                        admin.SaveInfo(aItem, log_class);
+
+                        LoginHistoryAdd(sqlConn, u_id, Model.admin_log.Detail.Success);
+
+                    }
+                    else
+                    {
+                        LoginHistoryAdd(sqlConn, u_id, Model.admin_log.Detail.GroupNotExist);
+                        log = "設計師群組不存在，無法登入";
+                    }
+                }
+                else
+                {
+                    LoginHistoryAdd(sqlConn, u_id, Model.admin_log.Detail.GroupNotExist);
+                    log = "您所屬的群組不存在，請洽管理員";
+                }
+
+            }
+            catch (Exception ex)
+            {
+                log = "資料庫連接錯誤";
+            }
+            finally
+            {
+                sqlConn.Close(); sqlConn.Dispose();
+            }
+
+            if (log == null)
+            {
+                Response.Redirect("index2.aspx");
+            }
+            else
+            {
+                Response.Write("<script>alert('設計師群組不存在，無法登入')</script>");
+            }
+        }      
+    }
+
+    #endregion
+
+
+    #region 登入歷史記錄
+    protected void LoginHistoryAdd(OleDbConnection sqlConn, string u_id, Model.admin_log.Detail status)
+    {      
+        try
+        {
+            OleDbCommand sqlCmd = new OleDbCommand("", sqlConn);
+            string cu = "u_id,login_time,login_ip,status,word,agent";
+            sqlCmd.CommandText = "INSERT INTO [admin_log] (" + cu + ") VALUES (" + sql.mark(cu) + ")";
+            sqlCmd.Parameters.Add(new OleDbParameter("u_id", u_id));
+            sqlCmd.Parameters.Add(new OleDbParameter("login_time", DateTime.Now.ToString("yyyy/MM/dd HH:mm:ss")));
+            sqlCmd.Parameters.Add(new OleDbParameter("login_ip", Model.admin.MyIP.Replace("本機", "127.0.0.1")));
+            sqlCmd.Parameters.Add(new OleDbParameter("status", (int)Model.admin_log.Status.Login));
+            sqlCmd.Parameters.Add(new OleDbParameter("word", GetEnumsDescription(status)));
+            sqlCmd.Parameters.Add(new OleDbParameter("agent", Model.admin_log.UserAgent));
+            sqlCmd.ExecuteNonQuery();
+
+            //只保留1年內的登入記錄
+            sqlCmd = new OleDbCommand("", sqlConn);
+            sqlCmd.CommandText = "delete from [admin_log] where login_time<?";
+            sqlCmd.Parameters.Add(new OleDbParameter("login_time", DateTime.Now.AddYears(-1).ToString("yyyy/MM/dd HH:mm:ss")));
+            sqlCmd.ExecuteNonQuery();
+        }
+        catch (Exception ex)
+        {
+           // ex.Message;
+        }      
+    }
+    #endregion
+
+}