?using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;

public partial class _Default : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {
        if (!IsPostBack)
        {
            //if (Request.Cookies["user"] != null&&Request.Cookies["user"]["name"].ToString().Trim()!="")
            //{
            //    Response.Redirect("ViewMessage.aspx");
            //}
        }
    }



    protected void btnLogin_Click(object sender, EventArgs e)
    {
        Label1.Text="";
        string userName = UserName.Text.Trim();
        string passWord = PassWord.Text.Trim();

        if (userName == "")
        {
            Label1.Text = "用戶名不能為空！";
            UserName.Focus();
            return;
        }
        if (passWord == "")
        {
            Label1.Text = "密碼不能為空！";
            PassWord.Focus();
            return ;
        }

        DataSet ds = SqlDB.getdataset("select * from AdminInfo where AdminID ='" + userName + "' and AdminPwd ='"+passWord+"'");
        if (ds != null && ds.Tables[0].Rows.Count > 0)
        {
            HttpCookie cookie = new HttpCookie("user");
            cookie["name"] = userName;
            cookie["isAdmin"] = "1";
            cookie.Expires = DateTime.Now.AddHours(3);
            Response.Cookies.Add(cookie);
            Response.Redirect("ViewMessage.aspx");
        }
        else
        {
            ds = SqlDB.getdataset("select * from UserInfo where UserName ='" + userName + "' and UserPwd ='" + passWord + "'");
            if (ds != null && ds.Tables[0].Rows.Count > 0)
            {
                HttpCookie cookie = new HttpCookie("user");
                cookie["name"] = userName;
                cookie["isAdmin"] = "0";
                cookie.Expires = DateTime.Now.AddHours(3);
                Response.Cookies.Add(cookie);
                Response.Redirect("WriteMessage.aspx");
            }
            else
            {
                Label1.Text = "用戶名或密碼錯誤！";
            }
        }

    }
    protected void Button1_Click(object sender, EventArgs e)
    {
        Response.Redirect("Register.aspx");
    }
}