using System;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;

using System.Data.OleDb;
using System.Web.Security;

namespace SCard.admin
{
	/// <summary>
	/// Default 的摘要說明。
	/// </summary>
	public class index : System.Web.UI.Page
	{
        protected System.Web.UI.WebControls.TextBox txtAdminname;
        protected System.Web.UI.WebControls.TextBox txtAdminPW;
        protected System.Web.UI.WebControls.TextBox txtCheck;
		protected System.Web.UI.WebControls.LinkButton newCode;
        protected System.Web.UI.WebControls.Button btnOK;
    
		private void Page_Load(object sender, System.EventArgs e)
		{
            Response.Buffer=true;
            Response.ExpiresAbsolute=DateTime.Now.AddSeconds(-1);
            Response.Expires=0;
            Response.CacheControl="no-cache";

            Session["adminName"]=null;
		}

        private bool isAdmin( string strAdmin, string strPassword )//檢查 管理員名和密碼是否正確
        {
            bool bTemp = false;
            
            strPassword = FormsAuthentication.HashPasswordForStoringInConfigFile( strPassword ,"MD5"); 

            DBConn myDB = new DBConn();
            string mySql = "select * from admin where username='" + strAdmin + "' and password='" + strPassword + "'";
            OleDbDataReader mydr = myDB.getDataReader( mySql );
            if( mydr.Read() )
            {
                bTemp = true;
            }
            else
            {
                bTemp = false;
            }

            mydr.Close();
            myDB.Close();

            return bTemp;
        }

		#region Web 窗體設計器生成的代碼
		override protected void OnInit(EventArgs e)
		{
			//
			// CODEGEN: 該調用是 ASP.NET Web 窗體設計器所必需的。
			//
			InitializeComponent();
			base.OnInit(e);
		}
		
		/// <summary>
		/// 設計器支持所需的方法 - 不要使用代碼編輯器修改
		/// 此方法的內容。
		/// </summary>
		private void InitializeComponent()
		{    
			this.txtAdminname.TextChanged += new System.EventHandler(this.txtAdminname_TextChanged);
			this.btnOK.Click += new System.EventHandler(this.btnOK_Click);
			this.Load += new System.EventHandler(this.Page_Load);

		}
		#endregion

        private void btnOK_Click(object sender, System.EventArgs e)
        {
            string strAdminname = txtAdminname.Text;
            string strAdminPW = txtAdminPW.Text;

            if( strAdminname == String.Empty || strAdminPW == String.Empty )
            {
                Response.Write("<script>");
                Response.Write("alert('管理名/密碼 不能為空!!!');");
                Response.Write("</script>");
                return;
            }

            if( Session["CheckCode"] == null )
            {
                Response.Redirect("index.aspx");
                return;
            }
            if( Session["CheckCode"].ToString() != txtCheck.Text.Trim() )
            {
                Response.Write("<script>");
                Response.Write ("alert('輸入的驗證碼有誤！請重新輸入！')");
                Response.Write ("</script>");
                return;
            }

            if( isAdmin( strAdminname, strAdminPW ) )
            {
                Session["adminName"] = strAdminname;
                Response.Redirect("adminManage.aspx");
            }
            else
            {
                Response.Write("<script>");
                Response.Write("alert('管理名/密碼 不正確!!!');");
                Response.Write("</script>");
            }
        }


        private void txtAdminname_TextChanged(object sender, System.EventArgs e)
        {
        
        }
	}
}