登陆功能中有一项是当用户忘记密码后需要找回密码
1、当用户点忘记密码后我们呈现的是一个表单，要求用户输入用户名和邮箱号，输完信息后点击发送邮件，发邮件的代码如下：
public string SendMail(string userid, string email) { if(string.IsNullOrEmpty(userid)) return "请输入用户登录名！"; if (string.IsNullOrEmpty(email)) return "请输入邮箱地址！"; MembershipUser user = Membership.GetUser(userid, false); if (user == null) { return string.Format("找不到用户:{0}！", userid); } ProfileBase profile = ProfileBase.Create(userid); if (profile.GetPropertyValue("EmailAddresses") != null) { bool IsApprovaled = user.IsApproved; bool IsLocked = user.IsLockedOut; if (!IsApprovaled) { return string.Format("用户:{0}已被禁用，无法登录，请联系管理员！", userid); } if (IsLocked) { return string.Format("用户:{0}已被锁定，无法登录，请联系管理员！", userid); } string myemail = profile.GetPropertyValue("EmailAddresses").ToString(); if (myemail.ToUpper().Trim() != email.ToUpper().Trim()) { return string.Format("用户:{0}对应的邮箱:{1}不存在，请重新输入邮箱！", userid, email); } else { string unitname = string.Empty; try { string unitcode = profile.GetPropertyValue("UnitCode").ToString(); unitname = UnitService.GetUnitByCode(unitcode).Name; } catch (Exception ep) { } string username = profile.GetPropertyValue("Name").ToString(); string userinfo = string.Format("{0}您好！<br/>姓名：{1}<br/>单位：{2}<br/>", user.UserName, username, unitname); string paramuid = DESHelper.Encrypt(string.Format("{0}|{1}", user.UserName, DateTime.Now), "findpassword"); string callbackUrl =string.Format("admin/resetpassword.aspx?userid={0}",paramuid); string content = userinfo + "请通过单击 <a href=\"" + ConfigHelper.CurrentConfig.FindpasswordUrl + callbackUrl + "\">此处</a>来重置你的密码"; new MailService().SendMail(email, "中石油出国系统系统：找回密码", content, null, null,true); return ""; } } else { return string.Format("用户:{0}邮箱不存在，请重新输入邮箱！", userid); } }
注：new MailService().SendMail(email, "中石油出国系统系统：找回密码", content, null, null,true);这个方法是我项目中已有的发送邮件的方法。DESHelper也是我项目中封装好的类，在后面会全部给出
2、邮件发送后用户需要进入邮箱点击进行验证，点击后访问系统中 resetpassword.aspx 页面，该页面有一个密码重置按钮，我们来看看这个页面的后台代码
protected void Page_Load(object sender, EventArgs e) { string userid = GetStringPara("userid", ""); string encodeuserid = DESHelper.Decrypt(userid, "findpassword"); string[] stringuid = encodeuserid.Split('|'); string userId = stringuid[0]; DateTime logtime = DateTime.Parse(stringuid[1]); if (logtime >= DateTime.Now.AddMinutes(-30)) { lbUserId.Text = userId; } else Response.Redirect("FindPassword.aspx"); }
注：在这个页面的后台我们将用户的数据进行解密，存入到一个服务端控件中去
3、点击重置密码后用户的密码被重置成了默认的值、看下面的方法
protected void btReset_Click(object sender, EventArgs e) { string userid = lbUserId.Text; MembershipUser user = Membership.GetUser(userid, false); if (user == null) { ShowInfo(string.Format("用户:{0}不存在，无法重置密码，请联系管理员！", userid)); return; } bool IsApprovaled = user.IsApproved; bool IsLocked = user.IsLockedOut; if (!IsApprovaled) { ShowInfo(string.Format("用户:{0}已被禁用，无法登录，请联系管理员！", userid)); return; } if (IsLocked) { ShowInfo(string.Format("用户:{0}已被锁定，无法登录，请联系管理员！", userid)); return; } string newPassword = user.ResetPassword(); user.ChangePassword(newPassword, tbPassword.Text); Response.Write(string.Format("<script language='JavaScript'>alert('重置密码成功，请重新登录！');window.location='{0}';</script>",ConfigHelper.CurrentConfig.ShowNewsUrl)); }
注：项目中用的 Membership 框架，重置和改变密码都是用了框架中的方法
至此密码重置完成了，最后贴上我们项目中已有的类的方法：
MailService类
public class MailService { public static MailMessage mailMessage = new MailMessage(); public static string AttachmentPath; public List<Attachment> attchments; /// <summary> /// 发送邮件的方法 /// </summary> /// <param name="toMail">目的邮件地址</param> /// <param name="title">发送邮件的标题</param> /// <param name="content">发送邮件的内容</param> /// <param name="CopytoMail">抄送邮件地址</param> /// <param name="FilePath">附件路径，附件之间以"|"相间隔</param> public void SendMail(string toMail, string title, string content, string CopyMail, string FilePath, bool isBodyHtml) { try { mailMessage.To.Clear(); mailMessage.CC.Clear(); mailMessage.AlternateViews.Clear(); mailMessage.Headers.Clear(); Encoding chtEnc = Encoding.BigEndianUnicode;//Encoding.UTF8 AttachmentPath = FilePath; AddMailTo(toMail, chtEnc); AddCopyTo(CopyMail, chtEnc); //邮件标题编码 mailMessage.SubjectEncoding = chtEnc; //邮件主题 mailMessage.Subject = string.IsNullOrEmpty(title) ? "No Subject".ToString() : title.ToString(); mailMessage.SubjectEncoding = System.Text.Encoding.UTF8; //邮件内容 mailMessage.Body = string.IsNullOrEmpty(content) ? "No Content".ToString() : content.ToString(); //邮件内容编码 mailMessage.BodyEncoding = System.Text.Encoding.UTF8; mailMessage.IsBodyHtml = isBodyHtml;//是否允许内容为 HTML 格式 AddAttach(FilePath);//添加多个附件 //如果发送失败，SMTP 服务器将发送失败邮件告诉我 mailMessage.DeliveryNotificationOptions = DeliveryNotificationOptions.OnFailure; //发送邮件的优先等级（有效值为High,Low,Normal） mailMessage.Priority = MailPriority.Normal; mailMessage.DeliveryNotificationOptions = DeliveryNotificationOptions.OnSuccess; SmtpClient client = new SmtpClient(); client.Timeout = 120000; //异步发送完成时的处理事件 client.SendCompleted += new SendCompletedEventHandler(client_SendCompleted); //发送邮件 client.Send(mailMessage); //同步发送 //client.SendAsync(mailMessage, mailMessage.To); //异步发送 （异步发送时页面上要加上Async="true" ） } catch (Exception ep) { throw new ApplicationException(string.Format("发送邮件失败：\r\n {0}",ep.Message)); } } /// <summary> /// 增加抄送人(支持多个) /// </summary> /// <param name="CopyMail">抄送人地址列表</param> /// <param name="chtEnc">编码</param> private void AddCopyTo(string CopyMail, Encoding chtEnc) { if (!string.IsNullOrEmpty(CopyMail)) { string strCopyMail = CopyMail.Replace("；", ";"); if (strCopyMail.Contains(";")) { string[] mails = strCopyMail.Split(';'); foreach (string mail in mails) { if (!string.IsNullOrEmpty(mail)) mailMessage.CC.Add(new MailAddress(mail, mail.ToString(), chtEnc)); } } else { mailMessage.CC.Add(new MailAddress(CopyMail, CopyMail.ToString(), chtEnc)); } } } //<summary> //增加收件人(支持多个) //</summary> //<param name="toMail">收件人地址列表</param> //<param name="chtEnc">编码</param> private void AddMailTo(string toMail, Encoding chtEnc) { string strToMail = toMail.Replace("；", ";"); if (strToMail.Contains(";")) { string[] mails = strToMail.Split(';'); foreach (string mail in mails) { if (!string .IsNullOrEmpty(mail)) mailMessage.To.Add(new MailAddress(mail, mail.ToString(), chtEnc)); } } else { mailMessage.To.Add(new MailAddress(toMail, toMail.ToString(), chtEnc)); } } /// <summary> /// 添加附件 /// </summary> /// <param name="FilePath">文件路径</param> private void AddAttach(string FilePath) { attchments = GetAttachByPath(FilePath); if (attchments.Count > 0) { if (mailMessage.Attachments.Count > 0) mailMessage.Attachments.Clear(); foreach (Attachment item in attchments) { mailMessage.Attachments.Add(item); } } } /// <summary> /// 根据文件路径获得要添加的附件文件列表 /// </summary> /// <param name="FilePath">文件路径</param> /// <returns>附件文件列表</returns> private List<Attachment> GetAttachByPath(string FilePath) { List<Attachment> attachs = new List<Attachment>(); //校验 if (string.IsNullOrEmpty(FilePath)) { return new List<Attachment>(); } if (!FilePath.Contains("|")) { return new List<Attachment>(); } //去掉路径最后一位的"|" List<string> paths = GetPaths(ref FilePath); foreach (string path in paths) { attachs.Add(new Attachment(path, MediaTypeNames.Application.Octet)); } return attachs; } /// <summary> /// 获得附件文件路径列表 /// </summary> /// <param name="FilePath"></param> /// <returns></returns> private static List<string> GetPaths(ref string FilePath) { FilePath = FilePath.Remove(FilePath.Length - 1); string[] filepaths = FilePath.Split('|'); List<string> paths=new List<string>(); foreach (string path in filepaths) { paths.Add(path); } return paths; } //发送完毕后的事件 void client_SendCompleted(object sender, System.ComponentModel.AsyncCompletedEventArgs e) { if (e.Cancelled) { System.Web.HttpContext.Current.Response.Write("发送的邮件已被取消！"); } if (e.Error == null) { System.Web.HttpContext.Current.Response.Write("邮件已成功发送！"); ////释放资源 //mailMessage.Dispose(); mailMessage.Attachments.Clear(); //邮件发送完毕，释放对附件的锁定(这种方式会有问题,如果第二次发同一个文件,会报异常) DisposeAttchment();//邮件发送完毕，释放对附件的锁定 //DeleteAttachFile(); } else { System.Web.HttpContext.Current.Response.Write(e.Error.Message + " 原因是：" + e.Error.InnerException); } } /// <summary> /// 删除附件的源文件 /// </summary> private static void DeleteAttachFile() { List<string> paths = GetPaths(ref AttachmentPath); foreach (string path in paths) { if (System.IO.File.Exists(path)) { System.IO.File.Delete(path); } } } /// <summary> /// 邮件发送完毕，释放对附件的锁定 /// </summary> private void DisposeAttchment() { if(attchments.Count>0) { foreach (Attachment attach in attchments) { attach.Dispose(); } } } }
DESHelper类
/// <summary> /// DES对称加密 /// </summary> public static class DESHelper { /// <summary> /// 根据用户名解密 /// </summary> /// <param name="val"></param> /// <param name="userid"></param> /// <returns></returns> public static string Decrypt(string val, string userid = "") { var key = GetKey(userid); var iv = GetDefaultIV(); return Decrypt(val, key, iv); } /// <summary> /// 根据用户名加密 /// </summary> /// <param name="val"></param> /// <param name="userid"></param> /// <returns></returns> public static string Encrypt(string val, string userid = "") { var key = GetKey(userid); var iv = GetDefaultIV(); return Encrypt(val, key, iv); } /// <summary> /// Des加密方法 /// </summary> /// <param name="val"></param> /// <param name="key"></param> /// <param name="IV"></param> /// <returns></returns> public static string Encrypt(string val, string key, string IV, CipherMode cipherMode = CipherMode.ECB) { try { if (string.IsNullOrEmpty(key) || string.IsNullOrEmpty(key)) { throw new Exception("密钥和偏移向量不足8位"); } if (key.Length > 8) key = key.Substring(0, 8); if (IV.Length > 8) IV = IV.Substring(0, 8); DESCryptoServiceProvider des = new DESCryptoServiceProvider(); byte[] btKey = Encoding.Default.GetBytes(key); byte[] btIV = Encoding.Default.GetBytes(IV); StringBuilder builder = new StringBuilder(); using (MemoryStream ms = new MemoryStream()) { byte[] inData = Encoding.Default.GetBytes(val); using (CryptoStream cs = new CryptoStream(ms, des.CreateEncryptor(btKey, btIV), CryptoStreamMode.Write)) { cs.Write(inData, 0, inData.Length); cs.FlushFinalBlock(); } foreach (byte num in ms.ToArray()) { builder.AppendFormat("{0:X2}", num); } } return builder.ToString(); } catch // (Exception ex) { return ""; } } /// <summary> /// Des解密方法 /// cbc模式：（key值和iv值一致） /// </summary> /// <param name="val"></param> /// <param name="key"></param> /// <param name="IV"></param> /// <returns></returns> public static string Decrypt(string val, string key, string IV, CipherMode cipherMode = CipherMode.ECB) { try { if (string.IsNullOrEmpty(key) || string.IsNullOrEmpty(key)) { throw new Exception("密钥和偏移向量不足8位"); } if (key.Length > 8) key = key.Substring(0, 8); if (IV.Length > 8) IV = IV.Substring(0, 8); DESCryptoServiceProvider des = new DESCryptoServiceProvider(); byte[] btKey = Encoding.Default.GetBytes(key); byte[] btIV = Encoding.Default.GetBytes(IV); using (MemoryStream ms = new MemoryStream()) { byte[] inData = new byte[val.Length / 2]; for (int i = 0; i < (val.Length / 2); i++) { int num2 = Convert.ToInt32(val.Substring(i * 2, 2), 0x10); inData[i] = (byte)num2; } using (CryptoStream cs = new CryptoStream(ms, des.CreateDecryptor(btKey, btIV), CryptoStreamMode.Write)) { cs.Write(inData, 0, inData.Length); cs.FlushFinalBlock(); } return Encoding.Default.GetString(ms.ToArray()); } } catch // (System.Exception ex) { return ""; } } /// <summary> /// Md5加密 /// </summary> /// <param name="str"></param> /// <returns></returns> public static string MD5(string str) { if (string.IsNullOrEmpty(str)) return str; System.Security.Cryptography.MD5 md5 = System.Security.Cryptography.MD5.Create(); string encoded = BitConverter.ToString(md5.ComputeHash(Encoding.UTF8.GetBytes(str))).Replace("-", ""); return encoded; } private static string GetKey(string key) { string defaultKey = "C560F02F693B4A0BA62D2B3B5FB74534"; string sTemp = defaultKey; if (!string.IsNullOrEmpty(key)) { sTemp = string.Concat(key, defaultKey.Substring(key.Length, 32 - key.Length)); } return MD5(sTemp).Substring(0, 8); } /// <summary> /// 获得初始向量IV /// </summary> /// <returns>初试向量IV</returns> private static string GetDefaultIV() { string sTemp = "87DE696F56DE49C0B96EB85139A48805"; return MD5(sTemp).Substring(0, 8); } }