login.cs
head#region head
//------------------------------------------------------------------------------
// <copyright company="Telligent Systems">
//     Copyright (c) Telligent Systems Corporation.  All rights reserved.
// </copyright> 
//------------------------------------------------------------------------------

using System;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using CommunityServer.Components;

#endregion
namespace CommunityServer.Controls 
{
    [
        ParseChildren(true)
    ]
    public class Login : SecureTemplatedWebControl {

        CSContext csContext = CSContext.Current;
        TextBox username;
        TextBox password;
        IButton loginButton;
        CheckBox autoLogin;

        Other Code#region Other Code
        // *********************************************************************
        //  Login
        //
        /**//// <summary>
        /// Constructor
        /// </summary>
        // ***********************************************************************/
        public Login() : base() 
        {

    
        }

        protected string ReferralLink
        {
            get
            {
                return ViewState["ReferralLink"] as string;
            }
            set
            {
                ViewState["ReferralLink"] = value;
            }
        }

        protected override void OnInit(EventArgs e)
        {
            this.EnableViewState = true;
            base.OnInit (e);
        }


        protected override void OnLoad(EventArgs e)
        {


            base.OnLoad (e);

            if(!Page.IsPostBack)
            {
                Uri referral =  Context.Request.UrlReferrer;
                if(referral != null)
                    ReferralLink = referral.ToString();
            }
        }


        // *********************************************************************
        //  CreateChildControls
        //
        /**//// <summary>
        /// This event handler adds the children controls.
        /// </summary>
        // ***********************************************************************/
        protected override void CreateChildControls() 
        {
            // If the user is already authenticated we have no work to do
            if(Page.Request.IsAuthenticated)
            {
                // If the URL is for the login page and the user is already logged in
                // we need to throw an access denied exception
                if (Globals.GetSiteUrls().Login.StartsWith(csContext.Context.Request.Path)) 
                    throw new CSException (CSExceptionType.UserAlreadyLoggedIn, csContext.ReturnUrl);

                return;
            }

            base.CreateChildControls();
        }
        #endregion

        protected override void AttachChildControls()
        {
            // Find the username control
            username = (TextBox) FindControl("username");

            // Find the password control
            password = (TextBox) FindControl("password");

            // Find the login button
            loginButton = ButtonManager.Create(FindControl("loginButton"));

            loginButton.Click += new EventHandler(LoginButton_Click);
            loginButton.Text = ResourceManager.GetString("LoginSmall_Button");

            // Find the autologin checkbox
            autoLogin = (CheckBox) FindControl("autoLogin");
            autoLogin.Text = ResourceManager.GetString("LoginSmall_AutoLogin");        
            //autoLogin.AutoPostBack = true;
            //autoLogin.CheckedChanged += new EventHandler( AutoLogin_OnCheckedChanged );
            
            // Restore autologin status from the auto login cookie
            AutoLoginCookie alCookie = new AutoLoginCookie();
            autoLogin.Checked = alCookie.GetValue();

            RegisterSetFocusScript();
        }

        Other Codes#region Other Codes
        /**//// <summary>
        /// Event handler to update auto login cookie value.
        /// </summary>
        protected void AutoLogin_OnCheckedChanged (Object sender, EventArgs e) 
        {
            AutoLoginCookie alCookie = new AutoLoginCookie();
            alCookie.Write( autoLogin.Checked );
        }

        // *********************************************************************
        //  LoginButton_Click
        //
        /**//// <summary>
        /// Event handler to handle the login button click event
        /// </summary>
        // ***********************************************************************/
        public void LoginButton_Click (Object sender, EventArgs e) {
            User userToLogin = new User();
            string redirectUrl = null;

            // Save in cookie auto login user's preference
            // only if it wasn't previously set or the cookie value differs from
            // login's autologin checkbox status.
            //
            AutoLoginCookie alCookie = new AutoLoginCookie();
            if (!alCookie.HasValue ||
                (alCookie.HasValue && (alCookie.GetValue() != autoLogin.Checked))) 
            {
                alCookie.Write( autoLogin.Checked );
            } 

            if (!Page.IsValid)
                return;

            userToLogin.Username = username.Text;
            userToLogin.Password = password.Text;
            
            LoginUserStatus loginStatus = Users.ValidUser(userToLogin);
            bool enableBannedUsersToLogin = CSContext.Current.SiteSettings.EnableBannedUsersToLogin;
            
            // Change to let banned users in
            //
            if (loginStatus == LoginUserStatus.Success || 
                (enableBannedUsersToLogin && loginStatus == LoginUserStatus.AccountBanned)) {
                // Are we allowing login?
                // TODO -- this could be better optimized
                if (!CSContext.Current.SiteSettings.AllowLogin && !userToLogin.IsAdministrator) {
                    throw new CSException(CSExceptionType.UserLoginDisabled);
                }

                    HttpCookie formsAuthCookie;
                formsAuthCookie = FormsAuthentication.GetAuthCookie(userToLogin.Username, autoLogin.Checked);
                UserCookie userCookie = csContext.User.GetUserCookie();
                userCookie.WriteCookie(formsAuthCookie, 30, autoLogin.Checked);

                // Get the link from the context
                if ((CSContext.Current.ReturnUrl != null) && (CSContext.Current.ReturnUrl.Trim() != string.Empty))
                    redirectUrl = CSContext.Current.ReturnUrl;

                // If none, get the stored redirect url
                if ((redirectUrl == null) && (ReferralLink != null) && (ReferralLink.Trim() != string.Empty))
                    redirectUrl = ReferralLink;

                // Check to ensure we aren't redirecting back to a Message prompt or back to the logout screen
                // Or ChangePassword*, or CreateUser*, or EmailForgottenPassword*
                // Or, if no URL, use appPath
                if (Globals.IsNullorEmpty(redirectUrl)
                    || (redirectUrl.IndexOf("MessageID") != -1)
                    || (redirectUrl.IndexOf(Globals.GetSiteUrls().Logout) != -1)
                    || (redirectUrl.IndexOf("ChangePassword") != -1)
                    || (redirectUrl.IndexOf("EmailForgottenPassword") != -1))
                    redirectUrl = Globals.GetSiteUrls().Home;

                LeaveSecureConnection(redirectUrl);
            }
            else if (loginStatus == LoginUserStatus.InvalidCredentials) { 
                // Invalid Credentials
                Page.Response.Redirect( Globals.GetSiteUrls().Message(CSExceptionType.UserInvalidCredentials), true );
            } 
            else if (loginStatus == LoginUserStatus.AccountPending) { 
                // Account not approved yet
                Page.Response.Redirect( Globals.GetSiteUrls().Message(CSExceptionType.UserAccountPending), true );
            } 
            else if (loginStatus == LoginUserStatus.AccountDisapproved) { 
                // Account disapproved
                Page.Response.Redirect( Globals.GetSiteUrls().Message(CSExceptionType.UserAccountDisapproved), true );
            }
            else if (loginStatus == LoginUserStatus.UnknownError) { 
                // Unknown error because of miss-syncronization of internal data
                throw new CSException(CSExceptionType.UserUnknownLoginError);
            }
            // Reject banned users if they are not allowed to
            // pass through login.
            //
            else if (!enableBannedUsersToLogin && loginStatus == LoginUserStatus.AccountBanned) { 
                // Account banned
                Page.Response.Redirect( Globals.GetSiteUrls().Message(CSExceptionType.UserAccountBanned), true );
            }
        }

        private void RegisterSetFocusScript()
        {
            string key = "LoginOnFocus";
            if(Page.IsStartupScriptRegistered(key))
                return;

            string script = @"
                    <script language=""javascript"">
                    <!--
                        document.forms[0].{0}.focus()
                    -->
                    </script>";
      
            Page.RegisterStartupScript("LoginOnFocus", string.Format(script, username.ClientID) ) ;
            
        }
        #endregion
    }
}