One time Password的使用方法C#版本

One time Password的使用方法C#版本

 

在微云中我的电脑→D盘→第三方学习资料→otp_z201_csharp

 

使用步骤

一、要先将ET_OTPVerify.dll拷贝到网页服务器系统目录下，一般为C:\windows\system32目录。

实例代码如下：

using System;
using System.Collections;
using System.Configuration;
using System.Data;
using System.Linq;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.HtmlControls;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Xml.Linq;
using Eazytec.Common;
using Eazytec.BLL;
using Eazytec.Model;
using System.Runtime.InteropServices;
using Eazytec.DBUtility;

namespace Eazytec.web
{
    public partial class login : System.Web.UI.Page
    {
        protected void Page_Load(object sender, EventArgs e)
        {
            if (!Page.IsPostBack)
            {
                
            }
        }

        

        //请将ET_OTPVerify.dll拷贝到SYSTEM32目录，方便调用。
        [DllImport("ET_OTPVerify.dll")]
        public static extern int ET_CheckPwdz201(string authkey, UInt64 t, UInt64 t0, uint x, int drift, int authwnd, UInt64 lastsucc, string otp, int otplen, ref UInt64 currsucc, ref int currdft);


        [DllImport("ET_OTPVerify.dll")]
        public static extern int ET_Syncz201(string authkey, UInt64 t, UInt64 t0, uint x, int drift, int syncwnd, UInt64 lastsucc, string otp1, int otp1len, string otp2, int otp2len, ref UInt64 currsucc, ref int currdft);



        int test_auth(string otpkey, string otp)
        {


           
            string sql = "select * from dbo.OTPTab where OTPNo =(select OTPNo from dbo.TUsers where UserName='" + txtUserName.Text + "') ";
             DataTable dt = SqlHelper.ExecuteDataSet(sql);
             UInt64 currsucc1=0;
             int currdft1=0;
             if (dt.Rows.Count > 0)
             {
                 currsucc1 = Convert.ToUInt64(dt.Rows[0]["currsucc"]);
                 currdft1 = Convert.ToInt32(dt.Rows[0]["currdft"]);
             }


            int iRet = 0;
             sql = "select authkey from dbo.OTPTab where OTPNo =(select OTPNo from dbo.TUsers where UserName='" + txtUserName.Text + "') ";

            string authkey = SqlHelper.ExecuScale2(sql).ToString(); //令牌密钥，应从服务器端的数据库中检索得到。此处为了方便测试，直接从客户端获取。
             UInt64 currsucc=0;
             int currdft=0;
             if (dt.Rows.Count > 0)
             {
                  currsucc = Convert.ToUInt64(dt.Rows[0]["currsucc"]);
                  currdft = Convert.ToInt32(dt.Rows[0]["currdft"]);
             }

            TimeSpan tsTimeSpan = DateTime.UtcNow - new DateTime(1970, 1, 1);
            ulong ulgTimeStamp = (ulong)tsTimeSpan.TotalSeconds;

            iRet = ET_CheckPwdz201(authkey, ulgTimeStamp, 0, 60, currdft1, 40, currsucc1, otp, 6, ref currsucc, ref currdft);
            if (iRet == 0)
            {
                //Message.Text += "<br>认证成功！";

                currsucc1 = currsucc;   //认证成功后应将“成功值”写回数据库，供接口调用。失败不要写回数据库。

                currdft1 = currdft;		//认证成功后应将“漂移值”写回数据库，供接口调用。失败不要写回数据库。
                sql = "update dbo.OTPTab set currsucc='" + currsucc1 + "',currdft='" + currdft1 + "' where OTPNo=(select OTPNo from dbo.TUsers where UserName='" + txtUserName.Text + "')";
                //Message.Text += "<br> otp: " + otp;
                //Message.Text += "<br> currsucc: " + currsucc;
               // Message.Text += "<br> currdft: " + currdft;
            }
            else
            {
                //Message.Text = "认证失败！";
            }
            return iRet;
        }



        protected void btnSubmit_Click(object sender, EventArgs e)
        {
            string userName = txtUserName.Text.Trim();
            string userPwd = txtUserPwd.Text.Trim();
            string code = txtCode.Text.Trim();

            if (userName.Equals("") || userPwd.Equals(""))
            {
                lblTip.Visible = true;
                lblTip.Text = "请输入用户名或密码";
                return;
            }



            string demoType = "auth";

            if (demoType == "auth")
            {
                string otpkey = Request.Form["otpkey"];
                string otp = TextBox1.Text;
                //Message.Text = "otpkey: " + otpkey + "<br>";
                int Result = test_auth(otpkey, otp);
                if (Result == 0)
                {
                    //  Message.Text += "<br> Congratulations! Authenticate OK!";
                }
                else
                {
                    lblTip.Visible = true;
                    lblTip.Text = "动态密码不正确，请核实";
                    return;   // Message.Text += "<br>Sorry ,maybe your password is not correct! " + "<br>ErrorCode: " + Result;
                }
            }


            //if (code.Equals(""))
            //{
            //    lblTip.Visible = true;
            //    lblTip.Text = "请输入验证码";
            //    return;
            //}
            //if (Session[DTKeys.SESSION_CODE] == null)
            //{
            //    lblTip.Visible = true;
            //    lblTip.Text = "系统找不到验证码";
            //    return;
            //}
            //if (code.ToLower() != Session[DTKeys.SESSION_CODE].ToString().ToLower())
            //{
            //    lblTip.Visible = true;
            //    lblTip.Text = "验证码输入不正确";
            //    return;
            //}





            TUsersbl tus = new TUsersbl();
            int result = tus.GetAllUsersbynameandpsw(userName, userPwd);
            if (result == 0)
            {
                lblTip.Visible = true;
                lblTip.Text = "用户名或密码有误";
                return;
            }
            else
            {
                TUsers user = tus.GetAllUsersbynameandpswto(userName, userPwd);
                Session[DTKeys.SESSION_USERS_INFO] = user;
                Session.Timeout = 45;
            }

            //写入登录日志

            //写入Cookies
            Response.Redirect("qxsz/index.html");
            return;
        }
    }
}