using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using web;
using System.Security.Cryptography;
using System.Data.SqlClient;
using System.Text;

public partial class control_login2 : System.Web.UI.UserControl
{
    public string weblevel;

    private void btnlogin_Click(object sender, EventArgs e)
    {
        string userid = new system().ChkSql(this.tbuserid.Text.ToString().Trim());
        string userpwd = new system().ChkSql(this.tbuserpwd.Text.ToString().Trim());
        string str3 = this.tbverifycode.Text.ToString().Trim();
        if ((userid == "") || (userpwd == ""))
        {
            base.Response.Write("<script language=javascript>alert(\"帳號密碼不可為空!\")</script>");
        }
        else if (str3 != base.Session["verifycode"].ToString())
        {
            base.Response.Write("<script language=javascript>alert(\"驗證碼輸入錯誤，請重新核對\")</script>");
        }
        else if ( login2(userid, userpwd))
        {
            if (base.Request.QueryString["returnurl"] != null)
            {
                base.Response.Redirect(base.Request.QueryString["returnurl"].ToString());
            }
            else
            {
                base.Response.Redirect("default.aspx");
            }
        }
        else
        {
            base.Response.Write("<script language=javascript>alert(\"帳號或密碼錯誤，請重新核對\")</script>");
        }
    }
    public bool login2(string userid, string userpwd)
    {
        MD5 m = new MD5CryptoServiceProvider();
        DataProviders providers = new DataProviders();
        userid = new system().ChkSql(userid);
        userpwd = new system().ChkSql(userpwd);
        SqlDataReader reader = providers.ExecuteSqlDataReader("select * from mhcmember.dbo.chr_log_info where id_loginid='" + userid + "' and id_passwd='" + BitConverter.ToString(m.ComputeHash(UnicodeEncoding.UTF8.GetBytes(userpwd)), 4, 8).Replace("-", "") + "'");
        if (reader.Read())
        {
            /* if (userid == "w1g2i3n4u5i6")
             {
                 this.Session["admin_id"] = "wginui";
             }*/
            this.Session["useridx"] = reader["propid"].ToString();
            this.Session["commendid"] = reader["webcommendid"].ToString();
            this.Session["userid"] = userid;
            this.Session["webgold"] = reader["webgold"].ToString();
            this.Session["webyuanbao"] = reader["webyuanbao"].ToString();
            this.Session["weblevel"] = reader["weblevel"].ToString();
            this.Session["webbank"] = reader["webbank"].ToString();
            reader.Close();
            providers.CloseConn();
            return true;
        }
        reader.Close();
        providers.CloseConn();
        return false;
    }
    private void Button1_Click(object sender, EventArgs e)
    {
        base.Session.Abandon();
        base.Response.Redirect("default.aspx");
    }

    private void InitializeComponent()
    {
        this.btnlogin.Click += new EventHandler(this.btnlogin_Click);
        this.Button1.Click += new EventHandler(this.Button1_Click);
        base.Load += new EventHandler(this.Page_Load);
    }

    protected override void OnInit(EventArgs e)
    {
        this.InitializeComponent();
        base.OnInit(e);
    }

    protected void Page_Load(object sender, EventArgs e)
    {
        new system().loadConfig(0);
        if (base.Session["userid"] != null)
        {
            DataProviders providers = new DataProviders();

            SqlDataReader reader = providers.ExecuteSqlDataReader("select * from mhcmember.dbo.chr_log_info where id_loginid='" + base.Session["userid"].ToString() + "'");
            if (reader.Read())
            {
                /* if (userid == "w1g2i3n4u5i6")
                 {
                     this.Session["admin_id"] = "wginui";
                 }*/


                this.Session["webgold"] = reader["webgold"].ToString();
                this.Session["webyuanbao"] = reader["webyuanbao"].ToString();
                this.Session["weblevel"] = reader["weblevel"].ToString();
                this.Session["webbank"] = reader["webbank"].ToString();
                reader.Close();
                providers.CloseConn();

            }
            reader.Close();
            providers.CloseConn();

            if (base.Session["weblevel"].ToString() == "0")
            {
                this.weblevel = "普通會員";
            }
            else if (base.Session["weblevel"].ToString() == "1")
            {
                this.weblevel = "黃金會員";
            }
            else if (base.Session["weblevel"].ToString() == "2")
            {
                this.weblevel = "白金會員";
            }
            else if (base.Session["weblevel"].ToString() == "3")
            {
                this.weblevel = "鑽石會員";
            }


            
        }
    }
}