using System; using System.Data; using System.Configuration; using System.Collections; using System.Web; using System.Web.Security; using System.Web.UI; using System.Web.UI.WebControls; using System.Web.UI.WebControls.WebParts; using System.Web.UI.HtmlControls; using System.Web.SessionState; using System.Security.Cryptography; using System.Text; using MySql.Data.MySqlClient; using System.Xml; using System.IO; namespace FileUpload { public partial class Login : System.Web.UI.Page { MySqlConnection myConnection; MySqlDataAdapter myDataAdapter; DataSet myDataSet; DataTable myDataTable; String strSQL = null; String userpass = null; String username = null; String mail = null; protected void Page_Load(object sender, EventArgs e) { connectToMySql(); } void connectToMySql() { //username = "MultiDesign"; //username = "Sanja"; //userpass = "usu123logi"; //userpass = "123sanja"; username = (Request.Form["username"]).ToString(); userpass = (Request.Form["userpass"]).ToString(); userpass = encodeMd5(userpass); myConnection = new MySqlConnection("server=orf-mysql1.brinkster.com; user id=tstefan; password=multi1234; database=tstefan; pooling=false;"); //strSQL = "SELECT * FROM usu_users WHERE UserName='" + username + "'"; strSQL = "select `usu_users`.`UserID` AS `UserID`,`usu_users`.`UserName` AS `UserName`,`usu_users`.`UserPass` AS `UserPass`,`usu_users`.`UserMail` AS `UserMail`,`usu_roles`.`RoleName` AS `RoleName`,`usu_roles`.`RoleID` AS `RoleID` from (`usu_roles` join `usu_users` on((`usu_users`.`RoleID` = `usu_roles`.`RoleID`))) WHERE UserName='" + username + "'"; myDataAdapter = new MySqlDataAdapter(strSQL, myConnection); myDataSet = new DataSet(); myDataAdapter.Fill(myDataSet, "usu_users"); myDataTable = new DataTable(); myDataTable = myDataSet.Tables["usu_users"]; /* Response.Write(username + "=" + myDataTable.Rows[0][1].ToString() + "
"); Response.Write(userpass + "=" + myDataTable.Rows[0][2].ToString() + "
") ; Response.Write("email= " + myDataTable.Rows[0][3].ToString() + "
"); Response.Write("user role= " + myDataTable.Rows[0][4].ToString() + "
"); Response.Write("myDataTable.Rows.Count= " + string.Compare(myDataTable.Rows[0][2].ToString(), userpass) + "
"); if (myDataTable.Rows[0][1].ToString() == username) { Response.Write("username prolazi
"); } if (string.Compare(myDataTable.Rows[0][2].ToString(), userpass) == 0) { Response.Write("pass prolazi
"); } else { Response.Write("pass ne prolazi
"); } */ if (myDataTable.Rows.Count != 0) { if (myDataTable.Rows[0][1].ToString() == username && string.Compare(myDataTable.Rows[0][2].ToString(), userpass) == 0) { mail = Server.HtmlEncode(myDataTable.Rows[0][3].ToString()); Response.Write("true*" + mail); createUserFolder(username); } else { Response.Write("1false*"); } } else { Response.Write("2false*"); } /* Response.Write(""); Response.Write(""); for (int i = 0; i < myDataTable.Rows.Count; i++) { Response.Write(""); } Response.Write(""); * */ } private void createUserFolder(string param_user) { Upload.GlobalUserValue = param_user; getFileList.GlobalUserValue = param_user; string path = Request.MapPath("~/files/" + param_user); if (!Directory.Exists(path)) { DirectoryInfo dir = Directory.CreateDirectory(path); } } public static string encodeMd5(string sPassword) { System.Security.Cryptography.MD5CryptoServiceProvider x = new System.Security.Cryptography.MD5CryptoServiceProvider(); byte[] bs = System.Text.Encoding.UTF8.GetBytes(sPassword); bs = x.ComputeHash(bs); System.Text.StringBuilder s = new System.Text.StringBuilder(); foreach (byte b in bs) { s.Append(b.ToString("x2").ToLower()); } return s.ToString(); } } }