在多層體系結構中登錄ASP.NET

Question

我試圖在基於n層體系結構的ASP.NET C＃中實現登錄功能。

數據訪問：

public int userlogin(string user, string passw)//checking the user name and password 
{ 
    SqlConnection con = new SqlConnection(); 
    con.ConnectionString = GetConnectionString(); 
    con.Open(); 
    int id = 0; 
    string selectstr = "SELECT NurseName, password FROM Nurse2 WHERE NurseName = '" + user.Trim() + "' AND Password = '" + passw.Trim() + "'"; 
    SqlCommand cmd = new SqlCommand(); 
    cmd.CommandText = selectstr; 
    cmd.CommandType = System.Data.CommandType.Text; 
    cmd.Connection = con; 
    SqlDataReader reader = cmd.ExecuteReader(); 
    while (reader.Read()) 
    { 
     id++; 
    } 
    cmd = null; 
    reader.Close(); 
    con.Close(); 
    return id; 
} 

表示層cs文件

protected void Button1_Click(object sender, EventArgs e) 
{ 
    string name = TextBox1.Text; 
     string password = TextBox2.Text; 
    int id = da.userlogin(name, password); 
    if (id > 0) 
    { 
     Session["userName"] = name; 

     Response.Redirect("SubscribePage.aspx"); 

    } 
    else 
    { 
     Label1.Text = "invalid"; 
    } 

現在，我的問題是，當我按下按鈕，程序簡單地去else子句，即使我輸入正確的數據。在我看來，這一切似乎都沒有問題。

Answer 1

N層架構有助於分離您的代碼，因爲它是您的代碼跳過一層並且沒有充分利用業務邏輯層。這是一個有用的圖像;

我還想添加一個額外的類來存儲用戶登錄信息，我猜你會與護士名一起更多的信息，存儲 - 您可以在這個類的實例存儲您的會話數據並在需要時丟棄;

public class User 
{ 
    public string Name  { get; set; } 
    /* Some other attributes - not your password though! */ 
} 

-

介紹;

protected void Button1_Click(object sender, EventArgs e) 
    { 
     try 
     { 
      Session["User"] = BLL.userLogin(TextBox1.Text, TextBox2.Text); 
      Response.Redirect("SubscribePage.aspx"); /* If it reaches here, everything is okay */ 
     } 
     catch (Exception ex) 
     { 
      Label1.Text = ex.Message; 
     } 
    } 

業務層;

public static User userLogin(string username, string password) 
    { 
     User U = DAL.userLogin(username, password); 

     if (string.IsNullOrEmpty(U.Name)) 
      throw new Exception("Incorrect login details"); 

     return U; 
    } 

數據訪問層;

public static User userLogin(string username, string password) 
    { 
     using (SqlConnection con = new SqlConnection(GetConnectionString()) 
     { 
      User U = new User(); 

      SqlCommand cmd = new SqlCommand(@"SELECT NurseName, password 
               FROM Nurse2 
               WHERE NurseName = @user AND password = @pw", con); 

      cmd.Parameters.Add(new SqlParameter("@user", username)); 
      cmd.Parameters.Add(new SqlParameter("@pw", password)); 

      try 
      { 
       con.Open(); 
      } 
      catch (Exception ex) 
      { 
       throw new Exception("connetion problem", ex); 
      } 

      try 
      { 
       using (SqlDataReader rdr = cmd.ExecuteReader()) 
       { 
        while (rdr.Read()) 
        { 
         U = rdr["NurseName"]; 
        } 
       } 
      } 
      catch (Exception ex) 
      { 
       throw new Exception("problem with query", ex); 
      } 
      finally 
      { 
       con.Close(); /* Clean up regardless of the outcome */ 
       con.Dispose(); 
      } 

      return U; 
     } 
    } 

請仔細閱讀N層體系結構和try-catch語句。希望能幫助到你。我也會改進你的控制命名約定，使生活更輕鬆（即Label1 - > lblError）

Answer 2

我不認爲你現在需要這樣做。 ASP.NET具有內置身份驗證。只需檢查此https://msdn.microsoft.com/en-us/library/xdt4thhy(v=vs.140).aspx。