ASP.NET MVC5网站开发之登录、验证和注销管理员篇1(六)

using System; using System.ComponentModel.DataAnnotations; namespace Ninesky.Core { /// 
 /// 管理员模型 /// 
 public class Administrator { [Key] public int AdministratorID { get; set; } /// 
 /// 帐号 /// 
 [Required(ErrorMessage = "必须输入{0}")] [StringLength(30, MinimumLength = 4, ErrorMessage ="{0}长度为{2}-{1}个字符")] [Display(Name ="帐号")] public string Accounts { get; set; } /// 
 /// 密码 /// 
 [DataType(DataType.Password)] [Required(ErrorMessage = "必须输入{0}")] [StringLength(256,ErrorMessage = "{0}长度少于{1}个字符")] [Display(Name = "密码")] public string Password { get; set; } /// 
 /// 登录IP /// 
 [Display(Name = "登录IP")] public string LoginIP { get; set; } /// 
 /// 登录时间 /// 
 [Display(Name = "登录时间")] public Nullable LoginTime { get; set; } /// 
 /// 创建时间 /// 
 [Display(Name = "创建时间")] public DateTime CreateTime { get; set; } } } 

using Ninesky.Core.Types; using System; namespace Ninesky.Core { public class AdministratorManager : BaseManager { /// 
 /// 添加 /// 
 /// 管理员实体 ///  public override Response Add(Administrator admin) { Response _resp = new Response(); if (HasAccounts(admin.Accounts)) { _resp.Code = 0; _resp.Message = "帐号已存在"; } else _resp = base.Add(admin); return _resp; } /// 
 /// 修改密码 /// 
 /// 主键 /// 新密码【密文】 ///  public Response ChangePassword(int administratorID, string password) { Response _resp = new Response(); var _admin = Find(administratorID); if (_admin == null) { _resp.Code = 0; _resp.Message = "该主键的管理员不存在"; } else { _admin.Password = password; _resp = Update(_admin); } return _resp; } /// 
 /// 删除 /// 
 /// 主键 ///  public override Response Delete(int administratorID) { Response _resp = new Response(); if (Count() == 1) { _resp.Code = 0; _resp.Message = "不能删除唯一的管理员帐号"; } else _resp = base.Delete(administratorID); return _resp; } /// 
 /// 查找 /// 
 /// 帐号 ///  public Administrator Find(string accounts) { return base.Repository.Find(a => a.Accounts == accounts); } /// 
 /// 帐号是否存在 /// 
 /// 帐号 ///  public bool HasAccounts(string accounts) { return base.Repository.IsContains(a => a.Accounts.ToUpper() == accounts.ToUpper()); } /// 
 /// 更新登录信息 /// 
 /// 主键 /// IP地址 /// 时间 ///  public Response UpadateLoginInfo(int administratorID, string ip, DateTime time) { Response _resp = new Response(); var _admin = Find(administratorID); if (_admin == null) { _resp.Code = 0; _resp.Message = "该主键的管理员不存在"; } else { _admin.LoginIP = ip; _admin.LoginTime = time; _resp = Update(_admin); } return _resp; } /// 
 /// 验证 /// 
 /// 帐号 /// 密码【密文】 /// Code:1-成功;2-帐号不存在;3-密码错误 public Response Verify(string accounts, string password) { Response _resp = new Response(); var _admin = base.Repository.Find(a => a.Accounts == accounts); if (_admin == null) { _resp.Code = 2; _resp.Message = "帐号为:【" + accounts + "】的管理员不存在"; } else if (_admin.Password == password) { _resp.Code = 1; _resp.Message = "验证通过"; } else { _resp.Code = 3; _resp.Message = "帐号密码错误"; } return _resp; } } } 

 using System.Web; using System.Web.Mvc; namespace Ninesky.Web.Areas.Control { /// 
 /// 管理员身份验证类 /// 
 public class AdminAuthorizeAttribute : AuthorizeAttribute { /// 
 /// 重写自定义授权检查 /// 
 ///  protected override bool AuthorizeCore(HttpContextBase httpContext) { if (httpContext.Session["AdminID"] == null) return false; else return true; } /// 
 /// 重写未授权的 HTTP 请求处理 /// 
 protected override void HandleUnauthorizedRequest(AuthorizationContext filterContext) { filterContext.Result = new RedirectResult("~/Control/Admin/Login"); } } } 

 namespace Ninesky.Web.Areas.Control.Models { /// 
 /// 登录模型 /// 
 public class LoginViewModel { /// 
 /// 帐号 /// 
 [Required(ErrorMessage = "必须输入{0}")] [StringLength(30, MinimumLength = 4, ErrorMessage = "{0}长度为{2}-{1}个字符")] [Display(Name = "帐号")] public string Accounts { get; set; } /// 
 /// 密码 /// 
 [DataType(DataType.Password)] [Required(ErrorMessage = "必须输入{0}")] [StringLength(20,MinimumLength =6, ErrorMessage = "{0}长度{2}-{1}个字符")] [Display(Name = "密码")] public string Password { get; set; } } } 

 /// 
 /// 登录 /// 
 ///  [AllowAnonymous] public ActionResult Login() { return View(); }

@model Ninesky.Web.Areas.Control.Models.LoginViewModel @{ Layout = null; }    @Styles.Render("~/Content/controlcss") @Scripts.Render("~/bundles/modernizr")  @Scripts.Render("~/bundles/jquery") @Scripts.Render("~/bundles/jqueryval") 
 
 
登录
 @using (Html.BeginForm()) { @Html.AntiForgeryToken() @Html.ValidationSummary(true, "", new { @class = "text-danger" }) 
 @Html.EditorFor(model => model.Accounts, new { htmlAttributes = new { @class = "form-control", placeholder = "帐号" } }) @Html.ValidationMessageFor(model => model.Accounts, "", new { @class = "text-danger" }) 
 @Html.EditorFor(model => model.Password, new { htmlAttributes = new { @class = "form-control", placeholder = "密码" } }) @Html.ValidationMessageFor(model => model.Password, "", new { @class = "text-danger" }) 
 
 } 

[AllowAnonymous] [ValidateAntiForgeryToken] [HttpPost] public ActionResult Login(LoginViewModel loginViewModel) { if(ModelState.IsValid) { string _passowrd = Security.SHA256(loginViewModel.Password); var _response = adminManager.Verify(loginViewModel.Accounts, _passowrd); if (_response.Code == 1) { var _admin = adminManager.Find(loginViewModel.Accounts); Session.Add("AdminID", _admin.AdministratorID); Session.Add("Accounts", _admin.Accounts); _admin.LoginTime = DateTime.Now; _admin.LoginIP = Request.UserHostAddress; adminManager.Update(_admin); return RedirectToAction("Index", "Home"); } else if (_response.Code == 2) ModelState.AddModelError("Accounts", _response.Message); else if (_response.Code == 3) ModelState.AddModelError("Password", _response.Message); else ModelState.AddModelError("",_response.Message); } return View(loginViewModel); }

/// 
 /// 注销 /// 
 ///  public ActionResult Logout() { Session.Clear(); return RedirectToAction("Login"); }