tijian_tieying/web/BLL/ERPUser.cs
2025-02-20 12:14:39 +08:00

1150 lines
46 KiB
C#
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

using System;
using System.Data;
using System.Text;
using System.Data.SqlClient;
using ZWL.DBUtility;
using System.Web;//请先添加引用
using System.Text.RegularExpressions;
namespace ZWL.BLL
{
/// <summary>
/// 类ERPUser。
/// </summary>
public class ERPUser
{
public ERPUser()
{ }
#region Model
private int _id;
private string _username;
private string _userpwd;
private DateTime _pwdtime;
private string _truename;
private string _serils;
private string _department;
private string _jiaose;
private DateTime? _activetime;
private string _zhiwei;
private string _zaigang;
private string _emailstr;
private string _iflogin;
private string _sex;
private string _backinfo;
private string _birthday;
private string _mingzu;
private string _sfzserils;
private string _hunying;
private string _zhengzhimianmao;
private string _jiguan;
private string _hukou;
private string _xueli;
private string _zhicheng;
private string _biyeyuanxiao;
private string _zhuanye;
private string _canjiagongzuotime;
private string _jiarubendanweitime;
private string _jiatingdianhua;
private string _jiatingaddress;
private string _gangweibiandong;
private string _jiaoyuebeijing;
private string _gongzuojianli;
private string _shehuiguanxi;
private string _jiangchengjilu;
private string _zhiwuqingkuang;
private string _peixunjilu;
private string _danbaojilu;
private string _naodonghetong;
private string _shebaojiaona;
private string _tijianjilu;
private string _beizhustr;
private string _fujian;
/// <summary>
///
/// </summary>
public int ID
{
set { _id = value; }
get { return _id; }
}
/// <summary>
///
/// </summary>
public string UserName
{
set { _username = value; }
get { return _username; }
}
/// <summary>
///
/// </summary>
public string UserPwd
{
set { _userpwd = value; }
get { return _userpwd; }
}
public DateTime Pwdtime
{
set { _pwdtime = value; }
get { return _pwdtime; }
}
/// <summary>
///
/// </summary>
public string TrueName
{
set { _truename = value; }
get { return _truename; }
}
/// <summary>
///
/// </summary>
public string Serils
{
set { _serils = value; }
get { return _serils; }
}
/// <summary>
///
/// </summary>
public string Department
{
set { _department = value; }
get { return _department; }
}
/// <summary>
///
/// </summary>
public string JiaoSe
{
set { _jiaose = value; }
get { return _jiaose; }
}
/// <summary>
///
/// </summary>
public DateTime? ActiveTime
{
set { _activetime = value; }
get { return _activetime; }
}
/// <summary>
/// 职位
/// </summary>
public string ZhiWei
{
set { _zhiwei = value; }
get { return _zhiwei; }
}
/// <summary>
///
/// </summary>
public string ZaiGang
{
set { _zaigang = value; }
get { return _zaigang; }
}
/// <summary>
///
/// </summary>
public string EmailStr
{
set { _emailstr = value; }
get { return _emailstr; }
}
/// <summary>
///
/// </summary>
public string IfLogin
{
set { _iflogin = value; }
get { return _iflogin; }
}
/// <summary>
///
/// </summary>
public string Sex
{
set { _sex = value; }
get { return _sex; }
}
/// <summary>
///
/// </summary>
public string BackInfo
{
set { _backinfo = value; }
get { return _backinfo; }
}
/// <summary>
///
/// </summary>
public string BirthDay
{
set { _birthday = value; }
get { return _birthday; }
}
/// <summary>
///
/// </summary>
public string MingZu
{
set { _mingzu = value; }
get { return _mingzu; }
}
/// <summary>
///
/// </summary>
public string SFZSerils
{
set { _sfzserils = value; }
get { return _sfzserils; }
}
/// <summary>
///
/// </summary>
public string HunYing
{
set { _hunying = value; }
get { return _hunying; }
}
/// <summary>
///
/// </summary>
public string ZhengZhiMianMao
{
set { _zhengzhimianmao = value; }
get { return _zhengzhimianmao; }
}
/// <summary>
///
/// </summary>
public string JiGuan
{
set { _jiguan = value; }
get { return _jiguan; }
}
/// <summary>
///
/// </summary>
public string HuKou
{
set { _hukou = value; }
get { return _hukou; }
}
/// <summary>
///
/// </summary>
public string XueLi
{
set { _xueli = value; }
get { return _xueli; }
}
/// <summary>
///
/// </summary>
public string ZhiCheng
{
set { _zhicheng = value; }
get { return _zhicheng; }
}
/// <summary>
///
/// </summary>
public string BiYeYuanXiao
{
set { _biyeyuanxiao = value; }
get { return _biyeyuanxiao; }
}
/// <summary>
///
/// </summary>
public string ZhuanYe
{
set { _zhuanye = value; }
get { return _zhuanye; }
}
/// <summary>
///
/// </summary>
public string CanJiaGongZuoTime
{
set { _canjiagongzuotime = value; }
get { return _canjiagongzuotime; }
}
/// <summary>
///
/// </summary>
public string JiaRuBenDanWeiTime
{
set { _jiarubendanweitime = value; }
get { return _jiarubendanweitime; }
}
/// <summary>
///
/// </summary>
public string JiaTingDianHua
{
set { _jiatingdianhua = value; }
get { return _jiatingdianhua; }
}
/// <summary>
///
/// </summary>
public string JiaTingAddress
{
set { _jiatingaddress = value; }
get { return _jiatingaddress; }
}
/// <summary>
///
/// </summary>
public string GangWeiBianDong
{
set { _gangweibiandong = value; }
get { return _gangweibiandong; }
}
/// <summary>
///
/// </summary>
public string JiaoYueBeiJing
{
set { _jiaoyuebeijing = value; }
get { return _jiaoyuebeijing; }
}
/// <summary>
///
/// </summary>
public string GongZuoJianLi
{
set { _gongzuojianli = value; }
get { return _gongzuojianli; }
}
/// <summary>
///
/// </summary>
public string SheHuiGuanXi
{
set { _shehuiguanxi = value; }
get { return _shehuiguanxi; }
}
/// <summary>
///
/// </summary>
public string JiangChengJiLu
{
set { _jiangchengjilu = value; }
get { return _jiangchengjilu; }
}
/// <summary>
///
/// </summary>
public string ZhiWuQingKuang
{
set { _zhiwuqingkuang = value; }
get { return _zhiwuqingkuang; }
}
/// <summary>
///
/// </summary>
public string PeiXunJiLu
{
set { _peixunjilu = value; }
get { return _peixunjilu; }
}
/// <summary>
///
/// </summary>
public string DanBaoJiLu
{
set { _danbaojilu = value; }
get { return _danbaojilu; }
}
/// <summary>
///
/// </summary>
public string NaoDongHeTong
{
set { _naodonghetong = value; }
get { return _naodonghetong; }
}
/// <summary>
///
/// </summary>
public string SheBaoJiaoNa
{
set { _shebaojiaona = value; }
get { return _shebaojiaona; }
}
/// <summary>
///
/// </summary>
public string TiJianJiLu
{
set { _tijianjilu = value; }
get { return _tijianjilu; }
}
/// <summary>
///
/// </summary>
public string BeiZhuStr
{
set { _beizhustr = value; }
get { return _beizhustr; }
}
/// <summary>
///
/// </summary>
public string FuJian
{
set { _fujian = value; }
get { return _fujian; }
}
#endregion Model
#region
/// <summary>
/// 是否存在该记录
/// </summary>
public bool Exists(int ID)
{
StringBuilder strSql = new StringBuilder();
strSql.Append("select count(1) from ERPUser");
strSql.Append(" where ID=" + ID + " ");
SqlParameter[] parameters = {
new SqlParameter("@ID", SqlDbType.Int,4) };
parameters[0].Value = ID;
return DbHelperSQL.Exists(strSql.ToString(), parameters);
}
/// <summary>
/// 增加一条数据
/// </summary>
public int Add()
{
StringBuilder strSql = new StringBuilder();
strSql.Append("insert into ERPUser(");
strSql.Append("UserName,UserPwd,TrueName,Serils,Department,JiaoSe,ActiveTime,ZhiWei,ZaiGang,EmailStr,IfLogin,Sex,BackInfo,BirthDay,MingZu,SFZSerils,HunYing,ZhengZhiMianMao,JiGuan,HuKou,XueLi,ZhiCheng,BiYeYuanXiao,ZhuanYe,CanJiaGongZuoTime,JiaRuBenDanWeiTime,JiaTingDianHua,JiaTingAddress,GangWeiBianDong,JiaoYueBeiJing,GongZuoJianLi,SheHuiGuanXi,JiangChengJiLu,ZhiWuQingKuang,PeiXunJiLu,DanBaoJiLu,NaoDongHeTong,SheBaoJiaoNa,TiJianJiLu,BeiZhuStr,FuJian)");
strSql.Append(" values (");
strSql.Append("@UserName,@UserPwd,@TrueName,@Serils,@Department,@JiaoSe,@ActiveTime,@ZhiWei,@ZaiGang,@EmailStr,@IfLogin,@Sex,@BackInfo,@BirthDay,@MingZu,@SFZSerils,@HunYing,@ZhengZhiMianMao,@JiGuan,@HuKou,@XueLi,@ZhiCheng,@BiYeYuanXiao,@ZhuanYe,@CanJiaGongZuoTime,@JiaRuBenDanWeiTime,@JiaTingDianHua,@JiaTingAddress,@GangWeiBianDong,@JiaoYueBeiJing,@GongZuoJianLi,@SheHuiGuanXi,@JiangChengJiLu,@ZhiWuQingKuang,@PeiXunJiLu,@DanBaoJiLu,@NaoDongHeTong,@SheBaoJiaoNa,@TiJianJiLu,@BeiZhuStr,@FuJian)");
strSql.Append(";select @@IDENTITY");
SqlParameter[] parameters = {
new SqlParameter("@UserName", SqlDbType.VarChar,50),
new SqlParameter("@UserPwd", SqlDbType.VarChar,200),
new SqlParameter("@TrueName", SqlDbType.VarChar,50),
new SqlParameter("@Serils", SqlDbType.VarChar,50),
new SqlParameter("@Department", SqlDbType.VarChar,50),
new SqlParameter("@JiaoSe", SqlDbType.VarChar,500),
new SqlParameter("@ActiveTime", SqlDbType.DateTime),
new SqlParameter("@ZhiWei", SqlDbType.VarChar,500),
new SqlParameter("@ZaiGang", SqlDbType.VarChar,50),
new SqlParameter("@EmailStr", SqlDbType.VarChar,50),
new SqlParameter("@IfLogin", SqlDbType.VarChar,50),
new SqlParameter("@Sex", SqlDbType.VarChar,50),
new SqlParameter("@BackInfo", SqlDbType.VarChar,8000),
new SqlParameter("@BirthDay", SqlDbType.VarChar,50),
new SqlParameter("@MingZu", SqlDbType.VarChar,50),
new SqlParameter("@SFZSerils", SqlDbType.VarChar,50),
new SqlParameter("@HunYing", SqlDbType.VarChar,50),
new SqlParameter("@ZhengZhiMianMao", SqlDbType.VarChar,50),
new SqlParameter("@JiGuan", SqlDbType.VarChar,50),
new SqlParameter("@HuKou", SqlDbType.VarChar,500),
new SqlParameter("@XueLi", SqlDbType.VarChar,50),
new SqlParameter("@ZhiCheng", SqlDbType.VarChar,50),
new SqlParameter("@BiYeYuanXiao", SqlDbType.VarChar,50),
new SqlParameter("@ZhuanYe", SqlDbType.VarChar,50),
new SqlParameter("@CanJiaGongZuoTime", SqlDbType.VarChar,50),
new SqlParameter("@JiaRuBenDanWeiTime", SqlDbType.VarChar,50),
new SqlParameter("@JiaTingDianHua", SqlDbType.VarChar,50),
new SqlParameter("@JiaTingAddress", SqlDbType.VarChar,500),
new SqlParameter("@GangWeiBianDong", SqlDbType.Text),
new SqlParameter("@JiaoYueBeiJing", SqlDbType.Text),
new SqlParameter("@GongZuoJianLi", SqlDbType.Text),
new SqlParameter("@SheHuiGuanXi", SqlDbType.Text),
new SqlParameter("@JiangChengJiLu", SqlDbType.Text),
new SqlParameter("@ZhiWuQingKuang", SqlDbType.Text),
new SqlParameter("@PeiXunJiLu", SqlDbType.Text),
new SqlParameter("@DanBaoJiLu", SqlDbType.Text),
new SqlParameter("@NaoDongHeTong", SqlDbType.Text),
new SqlParameter("@SheBaoJiaoNa", SqlDbType.Text),
new SqlParameter("@TiJianJiLu", SqlDbType.Text),
new SqlParameter("@BeiZhuStr", SqlDbType.Text),
new SqlParameter("@FuJian", SqlDbType.VarChar,5000)};
parameters[0].Value = UserName;
parameters[1].Value = UserPwd;
parameters[2].Value = TrueName;
parameters[3].Value = Serils;
parameters[4].Value = Department;
parameters[5].Value = JiaoSe;
parameters[6].Value = ActiveTime;
parameters[7].Value = ZhiWei;
parameters[8].Value = ZaiGang;
parameters[9].Value = EmailStr;
parameters[10].Value = IfLogin;
parameters[11].Value = Sex;
parameters[12].Value = BackInfo;
parameters[13].Value = BirthDay;
parameters[14].Value = MingZu;
parameters[15].Value = SFZSerils;
parameters[16].Value = HunYing;
parameters[17].Value = ZhengZhiMianMao;
parameters[18].Value = JiGuan;
parameters[19].Value = HuKou;
parameters[20].Value = XueLi;
parameters[21].Value = ZhiCheng;
parameters[22].Value = BiYeYuanXiao;
parameters[23].Value = ZhuanYe;
parameters[24].Value = CanJiaGongZuoTime;
parameters[25].Value = JiaRuBenDanWeiTime;
parameters[26].Value = JiaTingDianHua;
parameters[27].Value = JiaTingAddress;
parameters[28].Value = GangWeiBianDong;
parameters[29].Value = JiaoYueBeiJing;
parameters[30].Value = GongZuoJianLi;
parameters[31].Value = SheHuiGuanXi;
parameters[32].Value = JiangChengJiLu;
parameters[33].Value = ZhiWuQingKuang;
parameters[34].Value = PeiXunJiLu;
parameters[35].Value = DanBaoJiLu;
parameters[36].Value = NaoDongHeTong;
parameters[37].Value = SheBaoJiaoNa;
parameters[38].Value = TiJianJiLu;
parameters[39].Value = BeiZhuStr;
parameters[40].Value = FuJian;
object obj = DbHelperSQL.GetSingle(strSql.ToString(), parameters);
if (obj == null)
{
return 1;
}
else
{
return Convert.ToInt32(obj);
}
}
/// <summary>
/// 更新一条数据
/// </summary>
public void UpdatePwd()
{
StringBuilder strSql = new StringBuilder();
strSql.Append("update ERPUser set ");
strSql.Append("UserPwd=@UserPwd");
strSql.Append(" where ID=" + ID + " ");
SqlParameter[] parameters = {
new SqlParameter("@ID", SqlDbType.Int,4),
new SqlParameter("@UserPwd", SqlDbType.VarChar,200)};
parameters[0].Value = ID;
parameters[1].Value = UserPwd;
DbHelperSQL.ExecuteSql(strSql.ToString(), parameters);
}
/// <summary>
/// 更新一条数据
/// </summary>
public void Update()
{
StringBuilder strSql = new StringBuilder();
strSql.Append("update ERPUser set ");
strSql.Append("UserName=@UserName,");
strSql.Append("UserPwd=@UserPwd,");
strSql.Append("TrueName=@TrueName,");
strSql.Append("Serils=@Serils,");
strSql.Append("Department=@Department,");
strSql.Append("JiaoSe=@JiaoSe,");
strSql.Append("ZhiWei=@ZhiWei,");
strSql.Append("ZaiGang=@ZaiGang,");
strSql.Append("EmailStr=@EmailStr,");
strSql.Append("IfLogin=@IfLogin,");
strSql.Append("Sex=@Sex,");
strSql.Append("BackInfo=@BackInfo,");
strSql.Append("BirthDay=@BirthDay,");
strSql.Append("MingZu=@MingZu,");
strSql.Append("SFZSerils=@SFZSerils,");
strSql.Append("HunYing=@HunYing,");
strSql.Append("ZhengZhiMianMao=@ZhengZhiMianMao,");
strSql.Append("JiGuan=@JiGuan,");
strSql.Append("HuKou=@HuKou,");
strSql.Append("XueLi=@XueLi,");
strSql.Append("ZhiCheng=@ZhiCheng,");
strSql.Append("BiYeYuanXiao=@BiYeYuanXiao,");
strSql.Append("ZhuanYe=@ZhuanYe,");
strSql.Append("CanJiaGongZuoTime=@CanJiaGongZuoTime,");
strSql.Append("JiaRuBenDanWeiTime=@JiaRuBenDanWeiTime,");
strSql.Append("JiaTingDianHua=@JiaTingDianHua,");
strSql.Append("JiaTingAddress=@JiaTingAddress,");
strSql.Append("GangWeiBianDong=@GangWeiBianDong,");
strSql.Append("JiaoYueBeiJing=@JiaoYueBeiJing,");
strSql.Append("GongZuoJianLi=@GongZuoJianLi,");
strSql.Append("SheHuiGuanXi=@SheHuiGuanXi,");
strSql.Append("JiangChengJiLu=@JiangChengJiLu,");
strSql.Append("ZhiWuQingKuang=@ZhiWuQingKuang,");
strSql.Append("PeiXunJiLu=@PeiXunJiLu,");
strSql.Append("DanBaoJiLu=@DanBaoJiLu,");
strSql.Append("NaoDongHeTong=@NaoDongHeTong,");
strSql.Append("SheBaoJiaoNa=@SheBaoJiaoNa,");
strSql.Append("TiJianJiLu=@TiJianJiLu,");
strSql.Append("BeiZhuStr=@BeiZhuStr,");
strSql.Append("FuJian=@FuJian");
strSql.Append(" where ID=" + ID + " ");
SqlParameter[] parameters = {
new SqlParameter("@ID", SqlDbType.Int,4),
new SqlParameter("@UserName", SqlDbType.VarChar,50),
new SqlParameter("@UserPwd", SqlDbType.VarChar,200),
new SqlParameter("@TrueName", SqlDbType.VarChar,50),
new SqlParameter("@Serils", SqlDbType.VarChar,50),
new SqlParameter("@Department", SqlDbType.VarChar,50),
new SqlParameter("@JiaoSe", SqlDbType.VarChar,500),
new SqlParameter("@ZhiWei", SqlDbType.VarChar,500),
new SqlParameter("@ZaiGang", SqlDbType.VarChar,50),
new SqlParameter("@EmailStr", SqlDbType.VarChar,50),
new SqlParameter("@IfLogin", SqlDbType.VarChar,50),
new SqlParameter("@Sex", SqlDbType.VarChar,50),
new SqlParameter("@BackInfo", SqlDbType.VarChar,8000),
new SqlParameter("@BirthDay", SqlDbType.VarChar,50),
new SqlParameter("@MingZu", SqlDbType.VarChar,50),
new SqlParameter("@SFZSerils", SqlDbType.VarChar,50),
new SqlParameter("@HunYing", SqlDbType.VarChar,50),
new SqlParameter("@ZhengZhiMianMao", SqlDbType.VarChar,50),
new SqlParameter("@JiGuan", SqlDbType.VarChar,50),
new SqlParameter("@HuKou", SqlDbType.VarChar,500),
new SqlParameter("@XueLi", SqlDbType.VarChar,50),
new SqlParameter("@ZhiCheng", SqlDbType.VarChar,50),
new SqlParameter("@BiYeYuanXiao", SqlDbType.VarChar,50),
new SqlParameter("@ZhuanYe", SqlDbType.VarChar,50),
new SqlParameter("@CanJiaGongZuoTime", SqlDbType.VarChar,50),
new SqlParameter("@JiaRuBenDanWeiTime", SqlDbType.VarChar,50),
new SqlParameter("@JiaTingDianHua", SqlDbType.VarChar,50),
new SqlParameter("@JiaTingAddress", SqlDbType.VarChar,500),
new SqlParameter("@GangWeiBianDong", SqlDbType.Text),
new SqlParameter("@JiaoYueBeiJing", SqlDbType.Text),
new SqlParameter("@GongZuoJianLi", SqlDbType.Text),
new SqlParameter("@SheHuiGuanXi", SqlDbType.Text),
new SqlParameter("@JiangChengJiLu", SqlDbType.Text),
new SqlParameter("@ZhiWuQingKuang", SqlDbType.Text),
new SqlParameter("@PeiXunJiLu", SqlDbType.Text),
new SqlParameter("@DanBaoJiLu", SqlDbType.Text),
new SqlParameter("@NaoDongHeTong", SqlDbType.Text),
new SqlParameter("@SheBaoJiaoNa", SqlDbType.Text),
new SqlParameter("@TiJianJiLu", SqlDbType.Text),
new SqlParameter("@BeiZhuStr", SqlDbType.Text),
new SqlParameter("@FuJian", SqlDbType.VarChar,5000)};
parameters[0].Value = ID;
parameters[1].Value = UserName;
parameters[2].Value = UserPwd;
parameters[3].Value = TrueName;
parameters[4].Value = Serils;
parameters[5].Value = Department;
parameters[6].Value = JiaoSe;
parameters[7].Value = ZhiWei;
parameters[8].Value = ZaiGang;
parameters[9].Value = EmailStr;
parameters[10].Value = IfLogin;
parameters[11].Value = Sex;
parameters[12].Value = BackInfo;
parameters[13].Value = BirthDay;
parameters[14].Value = MingZu;
parameters[15].Value = SFZSerils;
parameters[16].Value = HunYing;
parameters[17].Value = ZhengZhiMianMao;
parameters[18].Value = JiGuan;
parameters[19].Value = HuKou;
parameters[20].Value = XueLi;
parameters[21].Value = ZhiCheng;
parameters[22].Value = BiYeYuanXiao;
parameters[23].Value = ZhuanYe;
parameters[24].Value = CanJiaGongZuoTime;
parameters[25].Value = JiaRuBenDanWeiTime;
parameters[26].Value = JiaTingDianHua;
parameters[27].Value = JiaTingAddress;
parameters[28].Value = GangWeiBianDong;
parameters[29].Value = JiaoYueBeiJing;
parameters[30].Value = GongZuoJianLi;
parameters[31].Value = SheHuiGuanXi;
parameters[32].Value = JiangChengJiLu;
parameters[33].Value = ZhiWuQingKuang;
parameters[34].Value = PeiXunJiLu;
parameters[35].Value = DanBaoJiLu;
parameters[36].Value = NaoDongHeTong;
parameters[37].Value = SheBaoJiaoNa;
parameters[38].Value = TiJianJiLu;
parameters[39].Value = BeiZhuStr;
parameters[40].Value = FuJian;
DbHelperSQL.ExecuteSql(strSql.ToString(), parameters);
}
/// <summary>
/// 删除一条数据
/// </summary>
public void Delete(int ID)
{
StringBuilder strSql = new StringBuilder();
strSql.Append("delete ERPUser ");
strSql.Append(" where ID=" + ID + " ");
SqlParameter[] parameters = {
new SqlParameter("@ID", SqlDbType.Int,4) };
parameters[0].Value = ID;
DbHelperSQL.ExecuteSql(strSql.ToString(), parameters);
}
/// <summary>
/// 得到一个对象实体
/// </summary>
public void GetModel(int ID)
{
StringBuilder strSql = new StringBuilder();
strSql.Append("select ID,UserName,UserPwd,TrueName,Serils,Department,JiaoSe,ActiveTime,ZhiWei,ZaiGang,EmailStr,IfLogin,Sex,BackInfo,BirthDay,MingZu,SFZSerils,HunYing,ZhengZhiMianMao,JiGuan,HuKou,XueLi,ZhiCheng,BiYeYuanXiao,ZhuanYe,CanJiaGongZuoTime,JiaRuBenDanWeiTime,JiaTingDianHua,JiaTingAddress,GangWeiBianDong,JiaoYueBeiJing,GongZuoJianLi,SheHuiGuanXi,JiangChengJiLu,ZhiWuQingKuang,PeiXunJiLu,DanBaoJiLu,NaoDongHeTong,SheBaoJiaoNa,TiJianJiLu,BeiZhuStr,FuJian ");
strSql.Append(" FROM ERPUser ");
strSql.Append(" where ID=" + ID + " ");
SqlParameter[] parameters = {
new SqlParameter("@ID", SqlDbType.Int,4) };
parameters[0].Value = ID;
DataSet ds = DbHelperSQL.Query(strSql.ToString(), parameters);
if (ds.Tables[0].Rows.Count > 0)
{
if (ds.Tables[0].Rows[0]["ID"].ToString() != "")
{
ID = int.Parse(ds.Tables[0].Rows[0]["ID"].ToString());
}
UserName = ds.Tables[0].Rows[0]["UserName"].ToString();
UserPwd = ds.Tables[0].Rows[0]["UserPwd"].ToString();
TrueName = ds.Tables[0].Rows[0]["TrueName"].ToString();
Serils = ds.Tables[0].Rows[0]["Serils"].ToString();
Department = ds.Tables[0].Rows[0]["Department"].ToString();
JiaoSe = ds.Tables[0].Rows[0]["JiaoSe"].ToString();
if (ds.Tables[0].Rows[0]["ActiveTime"].ToString() != "")
{
ActiveTime = DateTime.Parse(ds.Tables[0].Rows[0]["ActiveTime"].ToString());
}
ZhiWei = ds.Tables[0].Rows[0]["ZhiWei"].ToString();
ZaiGang = ds.Tables[0].Rows[0]["ZaiGang"].ToString();
EmailStr = ds.Tables[0].Rows[0]["EmailStr"].ToString();
IfLogin = ds.Tables[0].Rows[0]["IfLogin"].ToString();
Sex = ds.Tables[0].Rows[0]["Sex"].ToString();
BackInfo = ds.Tables[0].Rows[0]["BackInfo"].ToString();
BirthDay = ds.Tables[0].Rows[0]["BirthDay"].ToString();
MingZu = ds.Tables[0].Rows[0]["MingZu"].ToString();
SFZSerils = ds.Tables[0].Rows[0]["SFZSerils"].ToString();
HunYing = ds.Tables[0].Rows[0]["HunYing"].ToString();
ZhengZhiMianMao = ds.Tables[0].Rows[0]["ZhengZhiMianMao"].ToString();
JiGuan = ds.Tables[0].Rows[0]["JiGuan"].ToString();
HuKou = ds.Tables[0].Rows[0]["HuKou"].ToString();
XueLi = ds.Tables[0].Rows[0]["XueLi"].ToString();
ZhiCheng = ds.Tables[0].Rows[0]["ZhiCheng"].ToString();
BiYeYuanXiao = ds.Tables[0].Rows[0]["BiYeYuanXiao"].ToString();
ZhuanYe = ds.Tables[0].Rows[0]["ZhuanYe"].ToString();
CanJiaGongZuoTime = ds.Tables[0].Rows[0]["CanJiaGongZuoTime"].ToString();
JiaRuBenDanWeiTime = ds.Tables[0].Rows[0]["JiaRuBenDanWeiTime"].ToString();
JiaTingDianHua = ds.Tables[0].Rows[0]["JiaTingDianHua"].ToString();
JiaTingAddress = ds.Tables[0].Rows[0]["JiaTingAddress"].ToString();
GangWeiBianDong = ds.Tables[0].Rows[0]["GangWeiBianDong"].ToString();
JiaoYueBeiJing = ds.Tables[0].Rows[0]["JiaoYueBeiJing"].ToString();
GongZuoJianLi = ds.Tables[0].Rows[0]["GongZuoJianLi"].ToString();
SheHuiGuanXi = ds.Tables[0].Rows[0]["SheHuiGuanXi"].ToString();
JiangChengJiLu = ds.Tables[0].Rows[0]["JiangChengJiLu"].ToString();
ZhiWuQingKuang = ds.Tables[0].Rows[0]["ZhiWuQingKuang"].ToString();
PeiXunJiLu = ds.Tables[0].Rows[0]["PeiXunJiLu"].ToString();
DanBaoJiLu = ds.Tables[0].Rows[0]["DanBaoJiLu"].ToString();
NaoDongHeTong = ds.Tables[0].Rows[0]["NaoDongHeTong"].ToString();
SheBaoJiaoNa = ds.Tables[0].Rows[0]["SheBaoJiaoNa"].ToString();
TiJianJiLu = ds.Tables[0].Rows[0]["TiJianJiLu"].ToString();
BeiZhuStr = ds.Tables[0].Rows[0]["BeiZhuStr"].ToString();
FuJian = ds.Tables[0].Rows[0]["FuJian"].ToString();
}
}
/**/
/// <summary>
/// 分析用户请求是否正常
/// </summary>
/// <param name="Str">传入用户提交数据</param>
/// <returns>返回是否含有SQL注入式攻击代码</returns>
public string ProcessSqlStr(string Str)
{
string SqlStr = "'|exec|insert|select|delete|update|count|chr|mid|master|truncate|char|declare";
string ReturnValue = Str;
try
{
if (Str != "")
{
string[] anySqlStr = SqlStr.Split('|');
foreach (string ss in anySqlStr)
{
if (Str.ToLower().IndexOf(ss) >= 0)
{
ReturnValue = "";
}
}
}
}
catch
{
ReturnValue = "";
}
if (Str.Length > 20)
{
ReturnValue = "";
}
return ReturnValue;
}
/// <summary>
/// 登陆系统
/// </summary>
/// <param name="MyUserName"></param>
/// <param name="MyUserPwd"></param>
public string UserLogin(string MyUserName, string MyUserPwd)
{
string SqlSTr = "select * from ERPUser where UserName='" + ProcessSqlStr(MyUserName) + "' or Serils='" + ProcessSqlStr(MyUserName) + "'";
DataRow MyDataRow = DbHelperSQL.GetDataRow(SqlSTr);
if (MyDataRow == null)
{
return "您所输入的用户名不存在";
}
else
{
if (MyUserPwd == ZWL.Common.DataValidate.ValidateDataRow_S(MyDataRow, "UserPwd"))
{
if (ZWL.Common.DataValidate.ValidateDataRow_S(MyDataRow, "IfLogin").Trim() == "是")
{
return "ok";
}
}
}
return "false";
}
/// <summary>
/// 登陆系统
/// </summary>
/// <param name="MyUserName"></param>
/// <param name="MyUserPwd"></param>
public void UserLogin(string MyUserName, string MyUserPwd, string IFPop, string LoginType, string LoginToUrl, bool rem)
{
string SqlSTr = "select * from ERPUser where UserName='" + ProcessSqlStr(MyUserName) + "'";
if (LoginType == "0")
{
SqlSTr = "select * from ERPUser where Serils='" + ProcessSqlStr(MyUserName) + "'";
}
else if (LoginType == "1")
{
SqlSTr = "select * from ERPUser where UserName='" + ProcessSqlStr(MyUserName) + "'";
}
else
{
SqlSTr = "select * from ERPUser where UserName='" + ProcessSqlStr(MyUserName) + "' or Serils='" + ProcessSqlStr(MyUserName) + "'";
}
DataRow MyDataRow = DbHelperSQL.GetDataRow(SqlSTr);
if (MyDataRow == null)
{
System.Web.HttpContext.Current.Response.Write("<script language='javascript'>alert('您所输入的用户名不存在!');</script>");
}
else
{
if (MyUserPwd == ZWL.Common.DataValidate.ValidateDataRow_S(MyDataRow, "UserPwd"))
{
if (ZWL.Common.DataValidate.ValidateDataRow_S(MyDataRow, "IfLogin").Trim() == "是")
{
dccdc.Models.ERPUser user = new dccdc.Models.ERPUser();
DateTime currentT = DateTime.Now;
System.Web.HttpContext.Current.Session["UserID"] = user.ID = int.Parse(ZWL.Common.DataValidate.ValidateDataRow_S(MyDataRow, "ID"));
System.Web.HttpContext.Current.Session["UserName"] = user.UserName = ZWL.Common.DataValidate.ValidateDataRow_S(MyDataRow, "UserName");
System.Web.HttpContext.Current.Session["Password"] = user.UserPwd = ZWL.Common.DataValidate.ValidateDataRow_S(MyDataRow, "UserPwd");
System.Web.HttpContext.Current.Session["JiaoSe"] = user.JiaoSe = ZWL.Common.DataValidate.ValidateDataRow_S(MyDataRow, "JiaoSe");
System.Web.HttpContext.Current.Session["Department"] = user.Department = ZWL.Common.DataValidate.ValidateDataRow_S(MyDataRow, "Department");
System.Web.HttpContext.Current.Session["TrueName"] = user.TrueName = ZWL.Common.DataValidate.ValidateDataRow_S(MyDataRow, "TrueName");
System.Web.HttpContext.Current.Session["ZhiWei"] = user.ZhiWei = ZWL.Common.DataValidate.ValidateDataRow_S(MyDataRow, "ZhiWei");
System.Web.HttpContext.Current.Session["guid"] = user.Guid = ZWL.Common.DataValidate.ValidateDataRow_S(MyDataRow, "guid");
System.Web.HttpContext.Current.Session["QuanXian"] = ZWL.DBUtility.DbHelperSQL.GetStringList("select QuanXian from ERPJiaoSe where JiaoSeName in(" + "'" + ZWL.Common.DataValidate.ValidateDataRow_S(MyDataRow, "JiaoSe").Replace(",", "','") + "'" + ")");
System.Web.HttpContext.Current.Session["LoginDate"] = currentT.ToString("yyyy-MM-dd HH:mm:ss");
//写登陆日志
user.top_id = gettopid(user.Department);
user.ksid = getksid(user.Department);
System.Web.HttpCookie hc = new HttpCookie("loginUser");
hc.Value = ZWL.Common.DEncrypt.DESEncrypt.Encrypt(Newtonsoft.Json.JsonConvert.SerializeObject(user));
System.Web.HttpContext.Current.Response.Cookies.Add(hc);
// System.Web.HttpCookie hcqx = new HttpCookie("QuanXian");
// hcqx.Value = ZWL.Common.DEncrypt.DESEncrypt.Encrypt(System.Web.HttpContext.Current.Session["QuanXian"].ToString());
// System.Web.HttpContext.Current.Response.Cookies.Add(hcqx);
ERPRiZhi MyRiZhi = new ERPRiZhi();
MyRiZhi.UserName = ZWL.Common.PublicMethod.GetSessionValue("UserName");
MyRiZhi.DoSomething = "用户登陆系统";
MyRiZhi.IpStr = System.Web.HttpContext.Current.Request.UserHostAddress.ToString();
MyRiZhi.TimeStr2 = currentT;
MyRiZhi.Add();
//写入Cookies
if (rem)
{
ZWL.Common.PublicMethod.WriteCookie("DTRememberName", System.Web.HttpContext.Current.Session["UserName"].ToString(), 14400);
}
else
{
ZWL.Common.PublicMethod.WriteCookie("DTRememberName", System.Web.HttpContext.Current.Session["UserName"].ToString(), -14400);
}
ZWL.Common.PublicMethod.WriteCookie("AdminName", "DTcms", System.Web.HttpContext.Current.Session["UserName"].ToString());
ZWL.Common.PublicMethod.WriteCookie("AdminPwd", "DTcms", System.Web.HttpContext.Current.Session["Password"].ToString());
if (IFPop == "否")
{
var oldpassword = ZWL.Common.DEncrypt.DESEncrypt.Decrypt(MyUserPwd);
Regex regex = new Regex(@"^(?![^0-9]+$)(?![^a-zA-Z]+$)[0-9A-Za-z!@#$%^&*]{8,16}$", RegexOptions.IgnoreCase);
var match = regex.IsMatch(oldpassword);
if (match)
{
if (oldpassword == "abc123456") //系统默认密码
{
//System.Web.HttpContext.Current.Response.Write("<script language='javascript'>alert('默认密码,请联系管理员!');</script>");
System.Web.HttpContext.Current.Response.Redirect("/personal/changpwd2.aspx");
}
else
{
//系统跳转
System.Web.HttpContext.Current.Response.Redirect(LoginToUrl);
}
}
else
{
//System.Web.HttpContext.Current.Response.Write("<script language='javascript'>alert('密码过于简单,请联系管理员!');</script>");
System.Web.HttpContext.Current.Response.Redirect("/personal/changpwd2.aspx");
}
}
else
{
System.Web.HttpContext.Current.Response.Write("<script language=javascript>window.open ('" + LoginToUrl + "','_blank', 'width='+screen.availWidth+',height='+screen.availHeight-20+', left=0,top=0,toolbar=no, menubar=no, scrollbars=no,location=no, status=no') ;window.opener='';window.close();</script>");
}
}
else
{
System.Web.HttpContext.Current.Response.Write("<script language='javascript'>alert('该用户暂时不允许登陆系统,请联系管理员!');</script>");
}
}
else
{
System.Web.HttpContext.Current.Response.Write("<script language='javascript'>alert('该用户名对应的密码错误!');</script>");
}
}
}
private int getksid(string department)
{
string sql = "select ID,DirID from ERPBuMen where BuMenName='" + department + "'";
DataTable dt = DBUtility.DbHelperSQL.GetDataTable(sql);
if (dt.Rows.Count > 0)
{
return (int)dt.Rows[0]["ID"];
}
else
{
return 49;
}
}
/// <summary>
/// 返回最上级部门ID如果因数据关系错误找不到直接返回49铁营医院
/// </summary>
/// <param name="department"></param>
/// <returns></returns>
private int gettopid(string department)
{
//throw new NotImplementedException();
string sql = "select ID,DirID from ERPBuMen where BuMenName='" + department + "'";
DataTable dt = DBUtility.DbHelperSQL.GetDataTable(sql);
if (dt.Rows.Count > 0)
{
if (dt.Rows[0]["DirID"].ToString() == "0")
{
return (int)dt.Rows[0]["ID"];
}
else
{
aa:
sql = "select ID,DirID from ERPBuMen where ID='" + dt.Rows[0]["DirID"] + "'";
dt = DBUtility.DbHelperSQL.GetDataTable(sql);
if (dt.Rows.Count > 0)
if (dt.Rows[0]["DirID"].ToString() == "0")
{
return (int)dt.Rows[0]["ID"];
}
else
{
goto aa;
}
else
return 49;
}
}
else
{
return 49;
}
}
/// <summary>
/// 获得数据列表
/// </summary>
public DataSet GetList(string strWhere)
{
StringBuilder strSql = new StringBuilder();
strSql.Append("select [ID],[UserName],[UserPwd],[TrueName],[Serils],[Department],[JiaoSe],[ActiveTime],[ZhiWei],[ZaiGang],[EmailStr],[IfLogin],[Sex],[BackInfo],[BirthDay],[MingZu],[SFZSerils],[HunYing],[ZhengZhiMianMao],[JiGuan],[HuKou],[XueLi],[ZhiCheng],[BiYeYuanXiao],[ZhuanYe],[CanJiaGongZuoTime],[JiaRuBenDanWeiTime],[JiaTingDianHua],[JiaTingAddress],[GangWeiBianDong],[JiaoYueBeiJing],[GongZuoJianLi],[SheHuiGuanXi],[JiangChengJiLu],[ZhiWuQingKuang],[PeiXunJiLu],[DanBaoJiLu],[NaoDongHeTong],[SheBaoJiaoNa],[TiJianJiLu],[BeiZhuStr],[FuJian] ");
strSql.Append(" FROM ERPUser ");
if (strWhere.Trim() != "")
{
strSql.Append(" where " + strWhere);
}
return DbHelperSQL.Query(strSql.ToString());
}
public string GetSignation(string id)
{
string sql = "select signation from ERPUser where ID =" + id;
DataTable dt = DBUtility.DbHelperSQL.GetDataTable(sql);
if (dt.Rows.Count > 0)
{
return dt.Rows[0]["signation"].ToString();
}
else
{
return "";
}
}
public bool SetSignation(string id, string qianming)
{
StringBuilder strSql = new StringBuilder();
strSql.Append("update ERPUser set ");
strSql.Append("signation=@signation");
strSql.Append(" where ID=" + id + " ");
SqlParameter[] parameters = {
new SqlParameter("@ID", SqlDbType.Int,4),
new SqlParameter("@signation", SqlDbType.VarChar,200)};
parameters[0].Value =Convert.ToInt32(id);
parameters[1].Value = qianming;
try
{
if (DbHelperSQL.ExecuteSql(strSql.ToString(), parameters) > 0)
return true;
else
return false;
}
catch (Exception ex)
{
return false;
}
}
public string GetXCX(string id)
{
string sql = "select xcx from ERPUser where ID =" + id;
DataTable dt = DBUtility.DbHelperSQL.GetDataTable(sql);
if (dt.Rows.Count > 0)
{
return dt.Rows[0]["xcx"].ToString();
}
else
{
return "";
}
}
public bool SetXCX(string id, string xcxs)
{
StringBuilder strSql = new StringBuilder();
strSql.Append("update ERPUser set ");
strSql.Append("xcx=@xcx");
strSql.Append(" where ID=" + id + " ");
SqlParameter[] parameters = {
new SqlParameter("@ID", SqlDbType.Int,4),
new SqlParameter("@xcx", SqlDbType.VarChar,200)};
parameters[0].Value = Convert.ToInt32(id);
parameters[1].Value = xcxs;
try
{
if (DbHelperSQL.ExecuteSql(strSql.ToString(), parameters) > 0)
return true;
else
return false;
}
catch (Exception ex)
{
return false;
}
}
public string Getopenid(string id)
{
string sql = "select openid from ERPUser where ID =" + id;
DataTable dt = DBUtility.DbHelperSQL.GetDataTable(sql);
if (dt.Rows.Count > 0)
{
return dt.Rows[0]["openid"].ToString();
}
else
{
return "";
}
}
public string GetUserinfo(string openid)
{
string sql = "select * from dccdc.dbo.ym_open_user where openid ='" + openid + "'";
DataTable dt = DBUtility.DbHelperSQL.GetDataTable(sql);
if (dt.Rows.Count > 0)
{
return dt.Rows[0]["headimgurl"].ToString()+"|||||"+ dt.Rows[0]["nickname"].ToString();
}
else
{
return "";
}
}
public string Getopenidtime(string id)
{
string sql = "select openidtime from ERPUser where ID =" + id;
DataTable dt = DBUtility.DbHelperSQL.GetDataTable(sql);
if (dt.Rows.Count > 0)
{
return dt.Rows[0]["openidtime"].ToString();
}
else
{
return "";
}
}
public bool Setopenid(string id, string openid)
{
StringBuilder strSql = new StringBuilder();
strSql.Append("update ERPUser set ");
strSql.Append("openid=@openid,openidtype=1,openidtime='" + DateTime.Now.ToString() + "'");
strSql.Append(" where ID=" + id + " ");
SqlParameter[] parameters = {
new SqlParameter("@ID", SqlDbType.Int,4),
new SqlParameter("@openid", SqlDbType.VarChar,200)};
parameters[0].Value = Convert.ToInt32(id);
parameters[1].Value = openid;
try
{
if (DbHelperSQL.ExecuteSql(strSql.ToString(), parameters) > 0)
return true;
else
return false;
}
catch (Exception ex)
{
return false;
}
}
#endregion
}
}