如何在 ASP.NET 应用程序中使用超时

Question

我正在 ASP.NET 做一个登录页面，我想在 3 次尝试失败后阻止用户，并在 10 分钟后取消阻止他。我没有使用登录控件，因此无法使用成员资格提供程序，因此我想使用超时。如何修改下面的代码来阻止和取消阻止用户？

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Data.SqlClient;
using System.Configuration;
using System.Data;
using Replicon.Cryptography.SCrypt;
namespace WebApplication1
{
    public partial class SignIn : System.Web.UI.Page
    {
        protected void Page_Load(object sender, EventArgs e)
        {
        }
        public class LoginAttempt {  public DateTime AttemptTime {get;set;} }
        protected void Button1_Click(object sender, EventArgs e)
        {
            String CS = ConfigurationManager.ConnectionStrings["MyDatabaseConnectionString1"].ConnectionString;
            using (SqlConnection con = new SqlConnection(CS))
            {
                SqlCommand cmd = new SqlCommand("select * from Users where Username=@Username", con);
                cmd.Parameters.Add("@Username", Username.Text);
                con.Open();
                SqlDataAdapter sda = new SqlDataAdapter(cmd);
                DataTable dt = new DataTable();
                sda.Fill(dt);
                if (dt.Rows.Count != 0)
                {
                    foreach (DataRow row in dt.Rows)
                    {
                        if (Replicon.Cryptography.SCrypt.SCrypt.Verify(Password.Text, (string)row["Password"]))
                        {  
                            Session["USERNAME "] = Username.Text;
                            Response.Redirect("~/UserHome.aspx");
                            return;
                        }
                        { lblError.Text = "Invalid Username or Password !"; }
                    }
                }

            }
        }

    }
}

Answer 1

您可以使用会话如果您遇到错误，则需要在全局ASAX中初始会话值

if(Session["DateTime"]==null)
{
String CS = ConfigurationManager.ConnectionStrings["MyDatabaseConnectionString1"].ConnectionString;
            using (SqlConnection con = new SqlConnection(CS))
            {
                SqlCommand cmd = new SqlCommand("select * from Users where Username=@Username", con);
                cmd.Parameters.Add("@Username", Username.Text);
                con.Open();
                SqlDataAdapter sda = new SqlDataAdapter(cmd);
                DataTable dt = new DataTable();
                sda.Fill(dt);


               if (dt.Rows.Count != 0)
                {
                    foreach (DataRow row in dt.Rows)
                    {
                        if (Replicon.Cryptography.SCrypt.SCrypt.Verify(Password.Text, (string)row["Password"]))
                        {  
                            Session["USERNAME "] = Username.Text;
                            Response.Redirect("~/UserHome.aspx");
                            return;
                        }
                        { lblError.Text = "Invalid Username or Password !"; }
                    }
                }
else
{
if(Convert.ToInt32(Session["errorlogin"])>3)
{
    Session["DateTime"]=DateTime.Now;
}
Session["errorlogin"]=Convert.ToInt32(Session["errorlogin"])+1;

}
}
}