• ASP.NET中散列加密密码

  private void LoginButton_Click(object sender,System.EventArgs e)
  {
          String sql=String.Format("select password from Administrator where AdminID='{0}',UseridBox.Text);
          SqlConnection conn=new SqlConnection(ConfigurationSettings.AppSettings["connectionString"]);
          SqlDataReader myreader=new SqlCommand(sql,conn).ExecuteReader();
          if(myreader.Read())
          {
                  String hashed=FormsAuthentication.HashPasswordForStoringInConfigFile(PasswordTextBox.Text,"SHA1");
                  //将用户输入的密码哈希后再与数据库是的哈希值进行比较
                  if(hash==myreader["password"]).ToString())
                  {
                          FormsAuthentication.RedirectFromLoginPage(UseridBox.Text,true);//转到请求页
                  }
                  else
                          Result.Text="密码错误";
          }
          else
                  Result.Text="用户不存在";
          conn.Close();