自定义MembershipProvider配合Asp.net 2.0 Login控�g

vls — Fri, 29 Feb 2008 10:51:00 GMT

转自�Q?a >http://www.programbbs.com/doc/2988.htm

转向Asp.net 2.0�Q�如果单单看Asp.net 2.0的例子和SDK�Q�相信你一定对�pȝ��自带的Login控�g有比较深�ȝ��印象。Asp.Net 2.0的Login控�g不用你写一行检��用戯��入是否合法的�E�序代码及相��x��询数据库的SQL脚本�Q�只需把相应的控�g拖到Web表单中，卛_��完成用户登陆�Q�创建用��P��用户角色��理�Q�修改密码用戯��l�情况，取回密码�{�功能模块�?br /> 　　Login控�g看上去近乎完��，而我们现在手头正好来了一个项目要求采用Asp.net 2.0开发，而该��目也要求有登陆�Q�用��L��理，权限��理�Q�修改密码等功能�Q�相信绝大多��C�h都会考虑使用Login控�g来快速搞定这些要求。于是乎�Q�大家拿��Z��前的教学例子�Q�试着分析较深一层的代码�Q�看看该在哪里对Login控�g修改一番，让它满��手头��目已设计好的数据库表结构。结果发玎ͼ�除了aspx文�g里面可以对Login控�g的外观，提示文字可以自定义外�Q�cs文�g中愣是找不到一行代码，然后�l�箋��MSDN和Google�Q�终于知道，要在自己的项目中直接使用�pȝ��自带的Login控�g�Q�需要做�Q�项修改工作�Q?br /> 　　1、根据你选用的数据库�Q�修改Web.config中相应的connectionStrings。系�l�默认的数据库是SQL Server 2005 Express�Q�如果我们的数据库是Access/SQL2000/2005/Oracle�Q�当然要大改一番了�?br /> 　　2、改完Web.config�q�不够，我们�q�得执行C:\WINNT\Microsoft.NET\Framework\v2.0.507\aspnet_sqlreg.exe注册你的sql server�Q�该�E�序的作用是在你的数据库中徏立Login控�g需要的所有资�?大约有上十个表，三十多条存储�q�程�Q�上十个视图�{�等)�Q�如果你使用的是access/orcale�Q�或者是其他格式的数据库�Q�那你自己去Google相应的SQL脚本吧�?br /> 　　OK�Q�想到Login控�g帮你节省的工作量�Q�相信不��h都会咬着牙完成上面的�Q�项工作。完成上面２��工作后�Q�大家接着读项目需求，发现有用��L��理和权限管理，�q�好开发资料上提到Login控�g集成的Role角色��理模块正好与之对应�Q�不�q�以后我们创��Z��个用户后�Q�还要再�q�入一个页面给用户选择所属用��L��Q�当�Ӟ��采用Role的话�Q�我们可以设定一个用户同时属于多个用��L��Q�貌似功能很强大哟。��l�读��目需求，发现�q�些��目的用户对象还有不��Login控�g中没有的属性要保存�Q�回头再�ȝ��MSDN�Q�发现Profile可以帮我们解册��个问题�?br /> 　　嗯，除开使用Login控�g�Q�运行aspnet_sqlreg.exe帮我们徏立的上十个表�Q�三十多条存储过�E�，上十个视囄��Q�我们再不用��保存用户的�Q何信息了�Q�以后我们只用在Web.config文�g和相应的cs代码中加上Role和Profile的处理代码，卛_��完成该项目的登陆�Q�用��L��理，密码修改功能。算��投入查MSDN�Q�Google及修改Web.config文�g和相应的cs代码的时��_��怿�原来自己写过自定义Login控�g的朋友已�l�准备发誓再也不��Asp.net 2.0自带的Login控�g了�?br /> 　　其实�Q�我们完全有更简�z�通用的办法来重用Asp.net 2.0自带的Login控�g�Q�即只用它最基本的登陆及修改密码功能�Q�这�Q�个基本功能照旧�?a >工具��拖�?a >控�g出来往Web表单上一扔即可，一行代码都不多加。其他的用户/用户�l�管理，权限��理不用扯上Login控�g�Q�数据库想用什么��品就用什么��品，mysql/db2/infomax来者不�?表结构想怎么设计��怎么设计�Q�E-R图，UML囄��接照搬就�?用户/用户�l�管理和权限��理模块��x��么规定��怎么规定�Q�自兌��Q�无限分�U�都行。��M��一句话�Q�让Login控�g附带的上十个表，三十多条存储�q�程�Q�上十个视图见鬼��d��?br /> 　　下面�l�说实现�Ҏ��Q�Asp.net 2.0的Login控�g用到�?个类来从数据库中获取相应的数据，分别是MemberShipprovider�Q�RoleProvider及ProfileProvider�Q�系�l�自带的�q?个类的方法的代码被隐藏�v来了�Q�尽��没公开�Q�但实际上就是��用我上面一直念叨的上十个表�Q�三十多条存储过�E�，上十个视图。不��你用什么数据库�Q�只要想使用Login控�g的所有功能，必须保证该数据库中有与之对应的十来个表，三十多条存储�q�程�Q�十来个视图�?br /> 　　当然�Q�MS的架构设计师也不是某些�h惌��中的那么无能�Q�上面的�q�三个类其实都是抽象�c�，�pȝ��的Login控�g实际调用的是从这�Q�个�c�L��生出来的针对SQL Server2000/2005的数据操作类�Q�灵�zȝ��架构设计正是在这里体现出来。既然MemberShipProvider�Q�RoleProvider及ProfileProvider三大头是抽象�c�，那么我们完全可以自定义一个只针对用户表的username及password�Q�个列操作的MemberShipprovider�z��c�d��来，重写登陆验证�Q�修改密码以及其调用的方法，然后在Web.config中把membership的提供者指定�ؓ我们自己写的MemberShipprovider�z��c�，�q�样我们��可以和原来一��P��把Login控�g的登陆和修改密码�Q�个�?a >控�g往Web表单上一拖了事�?br /> 　　下面开始脓代码�Q�懒的深�I�的朋友们可以直接把我给出的cs代码贴回去，��Z��cs文�g攑ֈ�App_Code目录下，然后按照后面的Web.config修改相应的connectionStrings和membership卛_��Q�以后�Q何项目要利用Asp.net 2.0的Login控�g的登陆和修改密码都是�q�样照葫芦画瓢，够傻瓜吧�?br />

using System;
using System.Data;
using System.Configuration;
using System.Data.SqlClient;
using System.Collections.Generic;
using System.Text.RegularExpressions;
using System.Data.SqlTypes;
using System.Web;
using System.Web.Security;
/**//**//**////
/// MyMemberShip 的摘要说�?
///
public class MyMemberShip : MembershipProvider
{
private bool _requiresQuestionAndAnswer;
private int _minRequiredPasswordLength;
public MyMemberShip()
{
//
// TODO: 在此处添加构造函数逻辑
//
}
public override string ApplicationName
{
get
{
throw new Exception("The method or operation is not implemented.");
}
set
{
throw new Exception("The method or operation is not implemented.");
}
}
public override void Initialize(string name, System.Collections.Specialized.NameValueCollection config)
{
if (config["requiresQuestionAndAnswer"].ToLower() == "true")
_requiresQuestionAndAnswer = true;
else
_requiresQuestionAndAnswer = false;
int.TryParse(config["minPasswordLength"], out _minRequiredPasswordLength);
base.Initialize(name, config);
}
public override bool ChangePassword(string username, string oldPassword, string newPassword)
{
using (SqlConnection connection = new SqlConnection(DBBase.DBConnectionString))
{
SqlCommand command = new SqlCommand();
command.CommandText = "update [User] set user_pwd=@newpwd where user_name=@name and user_pwd=@oldpwd";
command.Parameters.AddWithValue("@name", username);
command.Parameters.AddWithValue("@oldpwd", CryptUtil.GetStringHashValue1(StringUtil.SqlEscape(oldPassword)));
command.Parameters.AddWithValue("@newpwd", CryptUtil.GetStringHashValue1(StringUtil.SqlEscape(newPassword)));
command.Connection = connection;
connection.Open();
return (int)command.ExecuteNonQuery() > 0 ? true : false;
}
//throw new Exception("The method or operation is not implemented.");
}
public override bool ChangePasswordQuestionAndAnswer(string username, string password, string newPasswordQuestion, string newPasswordAnswer)
{
throw new Exception("The method or operation is not implemented.");
}
public override MembershipUser CreateUser(string username, string password, string email, string passwordQuestion, string passwordAnswer, bool isApproved, object providerUserKey, out MembershipCreateStatus status)
{
throw new Exception("The method or operation is not implemented.");
}
public override bool DeleteUser(string username, bool deleteAllRelatedData)
{
throw new Exception("The method or operation is not implemented.");
}
public override bool EnablePasswordReset
{
get { throw new Exception("The method or operation is not implemented."); }
}
public override bool EnablePasswordRetrieval
{
get { throw new Exception("The method or operation is not implemented."); }
}
public override MembershipUserCollection FindUsersByEmail(string emailToMatch, int pageIndex, int pageSize, out int totalRecords)
{
throw new Exception("The method or operation is not implemented.");
}
public override MembershipUserCollection FindUsersByName(string usernameToMatch, int pageIndex, int pageSize, out int totalRecords)
{
throw new Exception("The method or operation is not implemented.");
}
public override MembershipUserCollection GetAllUsers(int pageIndex, int pageSize, out int totalRecords)
{
throw new Exception("The method or operation is not implemented.");
}
public override int GetNumberOfUsersOnline()
{
throw new Exception("The method or operation is not implemented.");
}
public override string GetPassword(string username, string answer)
{
throw new Exception("The method or operation is not implemented.");
}
public override MembershipUser GetUser(string username, bool userIsOnline)
{
DateTime myDate = DateTime.Today;
MembershipUser user = new MembershipUser(
Name, // Provider name
username, // Username
null, // providerUserKey
bobcy@21cn.com, // Email
String.Empty, // passwordQuestion
String.Empty, // Comment
true, // isApproved
false, // isLockedOut
DateTime.Now, // creationDate
DateTime.Now, // lastLoginDate
DateTime.Now, // lastActivityDate
DateTime.Now, // lastPasswordChangedDate
new DateTime(1980, 1, 1) // lastLockoutDate
);
return user;
}
public override MembershipUser GetUser(object providerUserKey, bool userIsOnline)
{
throw new Exception("The method or operation is not implemented.");
}
public override string GetUserNameByEmail(string email)
{
throw new Exception("The method or operation is not implemented.");
}
public override int MaxInvalidPasswordAttempts
{
get { throw new Exception("The method or operation is not implemented."); }
}
public override int MinRequiredNonAlphanumericCharacters
{
get { return 0; }
}
public override int MinRequiredPasswordLength
{
get { return _minRequiredPasswordLength; }
}
public override int PasswordAttemptWindow
{
get { throw new Exception("The method or operation is not implemented."); }
}
public override MembershipPasswordFormat PasswordFormat
{
get { throw new Exception("The method or operation is not implemented."); }
}
public override string PasswordStrengthRegularExpression
{
get { throw new Exception("The method or operation is not implemented."); }
}
public override bool RequiresQuestionAndAnswer
{
get { return _requiresQuestionAndAnswer; }
}
public override bool RequiresUniqueEmail
{
get { throw new Exception("The method or operation is not implemented."); }
}
public override string ResetPassword(string username, string answer)
{
throw new Exception("The method or operation is not implemented.");
}
public override bool UnlockUser(string userName)
{
throw new Exception("The method or operation is not implemented.");
}
public override void UpdateUser(MembershipUser user)
{
throw new Exception("The method or operation is not implemented.");
}
public override bool ValidateUser(string username, string password)
{
using (SqlConnection connection = new SqlConnection(DBBase.DBConnectionString))
{
SqlCommand command = new SqlCommand();
command.CommandText = "select count(0) from [User] where user_name=@name and user_pwd=@pwd";
command.Parameters.AddWithValue("@name", username);
command.Parameters.AddWithValue("@pwd", password);
command.Connection = connection;
connection.Open();
return ((int)command.ExecuteScalar()) > 0 ? true : false;
}
}
}

Web.Config的membership节这样写�Q�connectionStrings和数据库有关�Q�不同的数据库差别很大，大家自己Google�Q�我��׃��列出来了�?br />

<membership defaultProvider="MyMemberShip">
            <providers>
                <clear/>
                <add name="MyMemberShip" type="MyMemberShip" requiresQuestionAndAnswer="false" connectionString="AdminSqlServer" minRequiredNonalphanumericCharacters="0" />
            providers>
        membership>

如果我们惛_��用户验证登陆成功后做一些额外的处理�Q�可以给登陆控�g的登陆按钮添加一个事�Ӟ��相应的代码如下：

protected void Login1_Authenticate(object sender, AuthenticateEventArgs e)
    {
        if (Membership.ValidateUser(Login1.UserName, Login1.Password))
        {
            //�q�里��d��你的额外处理代码�Q�如Session,login日至�{�等
            e.Authenticated = true;
        }
    }

vls 2008-02-29 18:51 发表评论

firefox下insertRow

vls — Mon, 11 Feb 2008 18:14:00 GMT

	ie6	firefox	opera
insertRow	支持, 默认参数-1,默认��d��到最�?/td>	支持�Q?nbsp;但不支持默认参数	支持�Q�默认参�? 默认��d��到最�?br />
appendChild	不支�?/td>	支持�Q�但是增�?nbsp;tr后不影响rows	支持�Q�效果同insertRow(-1),影响rows

dom level 1:http://www.w3.org/TR/2000/WD-DOM-Level-1-20000929/level-one-html.html#ID-64060425

//向table�q�加一个空行：
var otr = otable.insertRow(-1);
var otd = document.createElement("td");
otd.innerHTML = " ";
otd.className = "XXXX";
otr.appendChild(otd);

�q�样��可以运行在�q�三�U�浏览器上了

vls 2008-02-12 02:14 发表评论

久久五月天婷婷,亚洲国产精品久久久久婷婷884 ,国产在线日本

自定义MembershipProvider配合Asp.net 2.0 Login控�g

firefox下insertRow