Put_MES/WebAPI/Controllers/LoginController.cs

using QMAPP.BLL.Sys;
using QMAPP.DAL.Sys;
using QMAPP.Entity.Sys;
using System;
using System.Collections.Generic;
using System.Data;
using System.Linq;
using System.Net;
using System.Net.Http;
using System.Web.Http;
using WebAPI.App_Start;
using WebAPI.Models;

namespace WebAPI.Controllers
{
    public class LoginController : ApiController
    {
        /// <summary>
        /// 判断用户名密码
        /// </summary>
        /// <param name="UserName"></param>
        /// <param name="PassWord"></param>
        /// <returns></returns>
        public Response<LoginInfo> Get(string UserName,string PassWord)
        {
            var result = new Response<LoginInfo>();

            LoginInfo login = new LoginInfo();
            login.LoginUserID = UserName;

            login.PassWord = QMFrameWork.Common.Encrypt.DESEncrypt.Encrypt(PassWord);

            var sqlScript = $"select * from T_QM_USER where LOGINUSERID ='{UserName}' and PASSWORD = '{login.PassWord}'";

            DataSet dataSet = SqlHelper.ExecuteDataset(Config.maindbConnectionString, CommandType.Text, sqlScript);

            if (dataSet.Tables[0].Rows.Count > 0)
            {

                login.UserName = dataSet.Tables[0].Rows[0]["USERNAME"].ToString();
                login.Powers = Power(dataSet.Tables[0].Rows[0]["USERID"].ToString());
                result.Result = login;
            }
            else
            {
                result.Code = 201;
                result.Message = "用户信息不存在或密码错误";
            }
            
            return result;
        }

        public List<string> Power(string USERID)
        {
            var list = new List<string>();
            var sql = $"SELECT T1.AUTHORITYID FROM T_QM_ORGAIZATIONAUTHORITY T1,T_QM_USERORGAIZATION T2 WHERE T1.ORGAID = T2.ORGAID AND" +
                $" T2.USERID = '{USERID}' UNION SELECT T1.AUTHORITYID FROM T_QM_ROLEAUTHORITY T1,T_QM_USERROLE T2 WHERE T1.ROLEID = T2.ROLEID AND" +
                $" T2.USERID = '{USERID}' UNION SELECT AUTHORITYID FROM T_QM_USERAUTHORITY WHERE" +
                $" USERID = '{USERID}'";

            DataSet dataSet = SqlHelper.ExecuteDataset(Config.maindbConnectionString, CommandType.Text, sql);

            if (dataSet.Tables[0].Rows.Count > 0)
            {
                foreach (DataRow row in dataSet.Tables[0].Rows)
                {
                    list.Add(row["AUTHORITYID"].ToString());
                }
            }
            return list;
        }
    }
}