【发布时间】:2010-11-09 10:15:34
【问题描述】:
我正在尝试创建以下场景...
- 用户通过输入其用户 ID 和密码登录。
- 如果他们没有为他们的登录详细信息分配电子邮件地址,则需要先提交一个电子邮件地址,然后才能继续。
- 然后他们继续以登录状态访问主页。
我遇到的问题是提交电子邮件地址时没有保留用户名和密码,因此登录失败。
这是代码...
Dim userid as String
Dim password as String
Sub Page_Load(ByVal Sender as Object, ByVal E as EventArgs)
end sub
Sub Page_Transfer()
Dim userLookup As mySource.myData = New mySource.myData()
Dim drSet1 As DataSet = userLookup.xyz("SELECT * FROM OPENQUERY (myDatabase,' SELECT userid, password, email1 FROM userInfo WHERE userid = ''" & userid & "'' AND password = ''" & password & "'' ') ")
If drSet1.Tables(0).Rows.Count < 1 Then
'Invalid Bond number
Page.ClientScript.RegisterClientScriptInclude("loginError", "scripts/loginError.js")
Else
If drSet1.Tables(0).Rows(0).Item("email1") = "" Then
'No email address
Page.ClientScript.RegisterClientScriptInclude("emailAddressSubmit", "scripts/emailAddressSubmit.js")
Else
response.redirect("home.aspx")
End If
End If
End Sub
Sub Submit_Email(sender As Object, e As System.Web.UI.ImageClickEventArgs)
'script to add email address to database
'this is where the strings are losing their values
Page_Transfer()
End Sub
Sub Submit_login(sender As Object, e As System.Web.UI.ImageClickEventArgs)
userid = Trim(useridfield.text)
password = Trim(passwordfield.text)
Page_Transfer()
End Sub
有什么想法吗?
【问题讨论】:
-
你从哪里得到 drSet2?
-
对不起...在简化代码时遗漏了一点。不过现在应该一切都好
-
请务必了解有关 SQL 注入的知识!
-
OT:注意 SQL 注入。
-
是的……我已经在处理 SQL 注入的问题了……只是还没有到位。不过谢谢