如何实现前台账号和密码登陆后台验证后，前台返回姓名和部门

jakkyz 2014-11-04 09:13:53

前台ajax用账号和密码登陆，后台用的access数据库验证账号和密码是否正确，如果正确，则传回前台该帐号对应的姓名和和所属部门，设置cookie，然后跳转到管理界面，获取cookies，显示当前用户姓名和所在部门
目前我已经实现了设置cookis并在管理界面显示用户帐号，不知道怎么把后台取得姓名和部门传给前台，请大侠帮忙

前台ajax部分代码

	var login = function(){

	    var loginName = $("input[name='loginName']").val();

	    var loginPwd = $("input[name='loginPwd']").val();

	    if($("#savePass").hasClass("selected")){

	        setCookie("savePass","true");

	    }else{

	        delCookie("savePass");

	    }

		

	    if($("#autoLogin").hasClass("selected")){

	        setCookie("autoLogin","true");

	    }else{

	        delCookie("autoLogin");

	    }

	    var loginName = document.getElementById("loginName").value;

	    var loginPwd = document.getElementById("loginPwd").value;



	    if ($('#loginName').val() == "" || $('#loginPwd').val() == "") {

	        $("#errorMessage").html("用户名和密码不能为空");

	        $(".alert").slideDown(1000);

	    }

	    else {

	        $.ajax({



	            type: "POST",

	            url: "login.ashx",

	            data: "loginName=" + escape($('#loginName').val()) + "&loginPwd=" + escape($('#loginPwd').val()),

	            success: function (msg) {

	                if (msg == "success") {

	                    SetCookie('user_name', loginName);

	                    SetCookie('user_pwd', loginPwd);

	                    parent.document.location.href = "main.htm"; //如果登录成功则跳到管理界面

	                }

	                if (msg == "fail") {

	                    $("#errorMessage").html("用户名或密码错误");

	                    $(".alert").slideDown(1000);

	                }

	            },

	            error: function (XMLHttpRequest, textStatus, thrownError) {

	            }

	        });

	    }

	};

后台登录验证代码

public class login : IHttpHandler {

    

    public void ProcessRequest (HttpContext context) {



        context.Response.ContentType = "text/html";

        if (context.Request["loginName"] != null && context.Request["loginPwd"] != null)

        {

            string loginName = context.Request["loginName"].ToString();

            string loginPwd = context.Request["loginPwd"].ToString();

            string sql = string.Format("select * from [user] where (用户名='" + loginName + "' or  姓名='" + loginName + "')" + " and 密码='" + loginPwd + "'");

            OleDbConnection conn = new OleDbConnection(@"Provider=Microsoft.Jet.OLEDB.4.0;Data Source=|DataDirectory|\baoxiao.mdb");//建立连接access数据库的对象 

            OleDbCommand cmd = new OleDbCommand(sql, conn);

            conn.Open(); //打开链接 

            OleDbDataReader dr = cmd.ExecuteReader();

            if (dr.Read())

            {

                context.Response.Write("success");

            }

            else

            {

                context.Response.Write("fail");

            }

            dr.Close();

            conn.Close();

        }  

    }