zoukankan      html  css  js  c++  java
  • OnActionExecuting验证用户登录

    代码

    using Common;
    using Service;
    using Service.IService;
    using System;
    using System.Collections.Generic;
    using System.Linq;
    using System.Net;
    using System.Net.Http;
    using System.Web.Http;
    using System.Web.Mvc;
    
    namespace WebPage.Controllers
    {
        public class BaseController : Controller
        {
            //public log4net.Ext.IExtLog log = log4net.Ext.ExtLogManager.GetLogger("dblog");
    
            #region 公用变量
            /// <summary>
            /// 查询关键词
            /// </summary>
            public string keywords { get; set; }
            /// <summary>
            /// 视图传递的分页页码
            /// </summary>
            public int page { get; set; }
            /// <summary>
            /// 视图传递的分页条数
            /// </summary>
            public int pagesize { get; set; }
            /// <summary>
            /// 用户容器,公用
            /// </summary>
            public IUserInfoManage UserInfoManage = Spring.Context.Support.ContextRegistry.GetContext().GetObject("Service.UserInfoManage") as IUserInfoManage;
            #endregion
    
            #region 用户对象
            /// <summary>
            /// 获取当前用户对象
            /// </summary>
            public Account CurrentUser
            {
                get
                {
                    //从Session中获取用户对象
                    if (SessionHelper.GetSession("CurrentUser") != null)
                    {
                        return SessionHelper.GetSession("CurrentUser") as Account;
                    }
                    //Session过期 通过Cookies中的信息 重新获取用户对象 并存储于Session中
                    var account = UserInfoManage.GetAccountByCookie();
                    SessionHelper.SetSession("CurrentUser", account);
                    return account;
                }
            }
            #endregion
    
            #region 登录验证 OnActionExecuting
            /// <summary>
            /// 重写控制器 OnActionExecuting(ActionExecutingContext filterContext)方法 实现登录验证和公共变量的获取
            /// </summary>
            /// <param name="filterContext"></param>
            protected override void OnActionExecuting(ActionExecutingContext filterContext)
            {
                #region 登录用户验证
                //1、判断Session对象是否存在
                if (filterContext.HttpContext.Session == null)
                {
                    filterContext.HttpContext.Response.Write("<script type='text/javascript'> alert('~登录已过期,请重新登录');window.top.location='/'; </script>");
                    filterContext.RequestContext.HttpContext.Response.End();
                    filterContext.Result = new EmptyResult();
                    return;
                }
                //2、登录验证
                if (this.CurrentUser == null)
                {
                    filterContext.HttpContext.Response.Write("<script type='text/javascript'> alert('登录已过期,请重新登录'); window.top.location='/';</script>");
                    filterContext.RequestContext.HttpContext.Response.End();
                    filterContext.Result = new EmptyResult();
                    return;
                }
                #endregion
    
                #region 公共Get变量
                //分页页码
                object p = filterContext.HttpContext.Request["page"];
                if (p == null || p.ToString() == "") { page = 1; } else { page = int.Parse(p.ToString()); }
    
                //搜索关键词
                string search = filterContext.HttpContext.Request.QueryString["Search"];
                if (!string.IsNullOrEmpty(search)) { keywords = search; }
                //显示分页条数
                string size = filterContext.HttpContext.Request.QueryString["example_length"];
                if (!string.IsNullOrEmpty(size) && System.Text.RegularExpressions.Regex.IsMatch(size.ToString(), @"^d+$"))
                {
                    pagesize = int.Parse(size.ToString());
                }
                else
                {
                    pagesize = 10;
                }
                #endregion
            }
            #endregion
    
            //public void WriteLog(string Operator,string Msg, Common.Enums.enumLog4net level)
            //{
            //    log.Error(Utils.GetIP(), this.CurrentUser.LogName, HttpContext.Request.Url.ToString(), "Module/Detail", Msg);
            //}
        }
    }
  • 相关阅读:
    应用安全
    协议
    应用安全
    数据库-redis
    应用安全
    WEB中间件--Jboss未授权访问,加固,绕过
    WEB中间件--tomcat爆破,burp和python脚本,getshell,war包
    WEB中间件漏洞--IIS
    文件包含漏洞(RFI)
    sql注入记录------类型转换错误---convert()函数,一句话图片马制作
  • 原文地址:https://www.cnblogs.com/xsj1989/p/7930174.html
Copyright © 2011-2022 走看看