tijian_tieying/web/Web/Default.aspx.cs

using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Management;
using Microsoft.Win32;

public partial class _Default : System.Web.UI.Page 
{
    protected void Page_Load(object sender, EventArgs e)
    {
        //需要真正清空登录用户时，请启用下面这句代码。考虑到部分用户不需要真正清空用户信息，只是转回登陆页。此处，留待自定义启用
        //ZWL.Common.PublicMethod.SetSessionValue("UserName", null);
        //验证序列号是否正确
        if (!Page.IsPostBack)
        {

            //TxtUserName.Text = ZWL.Common.PublicMethod.GetCookie("DTRememberName");
            try
            {
                //当前序列号---------------------------------------------------------------------------
                //string NowSerils = ZWL.DBUtility.DbHelperSQL.GetSHSL("select top 1 SerilsStr from ERPSerils");
                //string aaa = ZWL.Common.DEncrypt.DESEncrypt.Encrypt(GetMoAddress(), "www.sancainet.cn").ToString();
                ////解密后的用户数量及单位名称
                //string bbb = ZWL.Common.DEncrypt.DESEncrypt.Decrypt(ZWL.DBUtility.DbHelperSQL.GetSHSL("select top 1 DateStr from ERPSerils"), "www.sancainet.cn").ToString();
                //string ccc = ZWL.Common.DEncrypt.DESEncrypt.Decrypt(ZWL.DBUtility.DbHelperSQL.GetSHSL("select top 1 UserNum from ERPSerils"), "www.sancainet.cn").ToString();
                //string ddd = ZWL.Common.DEncrypt.DESEncrypt.Decrypt(ZWL.DBUtility.DbHelperSQL.GetSHSL("select top 1 DanWeiStr from ERPSerils"), "www.sancainet.cn").ToString();
                //if (ZWL.Common.DEncrypt.DESEncrypt.Encrypt(GetMoAddress(), "www.sancainet.cn").ToString() != NowSerils)
                //{
                    //序列号错误
                    //ZWL.Common.MessageBox.ShowAndRedirect(this, "系统授权码验证无效！请联系新医路重新获取授权！", "SerilsSetting.aspx");
                //}
                //zyk注释掉  20230509
                //if(!(Request.QueryString["tjlogout"]!=null&& Request.QueryString["tjlogout"]=="ok"))
                //{
                //    Response.Redirect("/dccdc/Home/logout");
                //}
            }
            catch(Exception ex)
            {
                //ZWL.Common.MessageBox.ShowAndRedirect(this, "系统授权码验证无效！请联系新医路重新获取授权！", "SerilsSetting.aspx");
            }

            try
            {
                //时间字符串-----------------------------------------------------------------------------
                //DateTime DateStr = DateTime.Parse(ZWL.Common.DEncrypt.DESEncrypt.Decrypt(ZWL.DBUtility.DbHelperSQL.GetSHSL("select top 1 DateStr from ERPSerils"), "www.sancainet.cn"));
                //if (DateStr < DateTime.Now)
                //{
                    //使用时间到达
                    //ZWL.Common.MessageBox.ShowAndRedirect(this, "系统授权码过期！请联系新医路重新获取授权！", "SerilsSetting.aspx");
                //}
            }
            catch
            {
                //ZWL.Common.MessageBox.ShowAndRedirect(this, "系统授权码过期！请联系新医路重新获取授权！", "SerilsSetting.aspx");
            }
        }

        //判断系统的IP限制
        PassORNo();
    }

    private void PassORNo()
    {
        string NowIPStr = System.Web.HttpContext.Current.Request.UserHostAddress.ToString();//访问者IP
        string[] OAIPStr = ConfigurationManager.AppSettings["OAIP"].ToString().Trim().Split('|');//允许的IP字符串组数组

        for (int i = 0; i < OAIPStr.Length; i++)
        {
            if (ZWL.Common.PublicMethod.StrIFIn(OAIPStr[i].ToString(), NowIPStr) == true || OAIPStr[i].ToString()=="*")
            {
                return;
            }
        }
        //执行到最后，不允许访问！
        this.TxtUserName.Enabled = false;
        this.TxtUserPwd.Enabled = false;
        this.ImageButton1.Enabled = false;

        ZWL.Common.MessageBox.Show(this, "您的访问IP不在系统允许范围内，您不能登录系统，请联系管理员！");
    }

    protected void ImageButton1_Click(object sender, ImageClickEventArgs e)
    {
        //解密Aa147896325
        string oldpass = ZWL.Common.DEncrypt.DESEncrypt.Decrypt("DE3A1B15E45C573B9DAD3FEEE2D69BCF");
        //string oldpass2 = ZWL.Common.DEncrypt.DESEncrypt.Decrypt("16191FF9D44FA9C249E482354EB4288C");
        string oldpass2 = ZWL.Common.DEncrypt.DESEncrypt.Decrypt("EDBAF1F9F2C595773B84E8B114AB1136");
        

        string IFPop ="否";
        /*
        if (this.CheckBox1.Checked == true)
        {
            IFPop = "是";
        }*/
        ZWL.BLL.ERPUser MyUser = new ZWL.BLL.ERPUser();
        MyUser.UserLogin(TxtUserName.Text.Trim(), ZWL.Common.DEncrypt.DESEncrypt.Encrypt(TxtUserPwd.Text), IFPop, ConfigurationManager.AppSettings["OALogin"].ToString().Trim(), "Main/Main.aspx", cbRememberId.Checked);
    }

    //获得网卡序列号----MAc地址
    public string GetMoAddress()
    {
        try
        {
            //读取硬盘序列号
            ManagementObject disk;
            disk = new ManagementObject("win32_logicaldisk.deviceid=\"c:\"");
            disk.Get();

            string MoAddress = "BD-CNSOFTWEB";
            ManagementClass mc = new ManagementClass("Win32_NetworkAdapterConfiguration");
            ManagementObjectCollection moc2 = mc.GetInstances();
            foreach (ManagementObject mo in moc2)
            {
                if ((bool)mo["IPEnabled"] == true)
                {
                    string a = mo["MacAddress"].ToString();
                    string c = disk.GetPropertyValue("VolumeSerialNumber").ToString();
                    MoAddress = "BD-" + a + "-" + c + "-CNSOFTWEB";
                    break;
                }
            }
            return MoAddress.ToString().Replace(":", "");
        }
        catch
        {
            return "BD-ERR-CNSOFTWEB";
        }
    }

    /**/
    /// <summary>
    /// 分析用户请求是否正常
    /// </summary>
    /// <param name="Str">传入用户提交数据</param>
    /// <returns>返回是否含有SQL注入式攻击代码</returns>
    public string ProcessSqlStr(string Str)
    {
        string SqlStr = "exec|insert|select|delete|update|count|chr|mid|master|truncate|char|declare";
        string ReturnValue = Str;
        try
        {
            if (Str != "")
            {
                string[] anySqlStr = SqlStr.Split('|');
                foreach (string ss in anySqlStr)
                {
                    if (Str.ToLower().IndexOf(ss) >= 0)
                    {
                        ReturnValue = "";
                    }
                }
            }
        }
        catch
        {
            ReturnValue = "";
        }
        if (Str.Length > 20)
        {
            ReturnValue = "";
        }
        return ReturnValue;
    }  
}