C#编程忘记密码功能的实现方法

以下是引用片段：

int result = user.GetBackPassword(LoginName.Text.Trim(), Question.Text.Trim(), 
Answer.Text.Trim(), Email.Text);

if (result == 1) 
{ 
Message.Text = "您的密码已发送，请到邮箱查收"; 
//user.ChangePassword( 
} 
else 
{ 
Message.Text = "您的输入信息有误！"; 
}


public int GetBackPassword(string userName, string question, string answer, string email) 
{ 
object m_DBNull = Convert.DBNull; 
//获得新的随机密码 
string newPassword = MakePassword(6); 
//定义存储过程参数 
SqlParameter[] para = { 
new SqlParameter("@userName", userName), 
new SqlParameter("@question", question), 
new SqlParameter("@answer", answer), 
new SqlParameter("@newPassword", newPassword), 
new SqlParameter("@result", SqlDbType.Int, 8, ParameterDirection.Output, 
true, 0, 0, "", DataRowVersion.Default, m_DBNull) 
};

//执行存储过程 
try 
{ 
DAL.SQLHelper.ExecuteNonQuery(DAL.SQLHelper.CONN_STRING, CommandType.StoredProcedure, 
"GetBackPwd", para); 
} 
catch 
{ 
throw new Exception("邮件无法发送！"); 
} 
//获得输出参数的值 
int result = Convert.ToInt32(para[4].Value); 
//如果密码保护资料填写正确 
if (result == 1) 
{ 
//从Web.config获取发信人地址、邮件标题、邮件用户名和密码以及SmtpServer 
string sender = System.Configuration.ConfigurationSettings.AppSettings["mainSender"]; 
string title = System.Configuration.ConfigurationSettings.AppSettings["mailTitle"]; 
string mailUser = System.Configuration.ConfigurationSettings.AppSettings["mailUser"]; 
string mailPwd = System.Configuration.ConfigurationSettings.AppSettings["mailPwd"]; 
string smtpServer = System.Configuration.ConfigurationSettings.AppSettings["mailSmtpServer"]; 
//发信 
try 
{ 
Mail.CDOsendmail(sender, email, title, "您在eshop的密码已找回,新密码为"+newPassword 
, mailUser, mailPwd, smtpServer); 
} 
catch(Exception ex) 
{ 
throw new Exception(ex.Message); 
} 
}

return result; 
}


//随机生成密码 
private static string MakePassword(int pwdLength) 
{ 
//声明要返回的字符串 
string tmpstr = ""; 
//密码中包含的字符数组 
string pwdchars="abcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"; 
//数组索引随机数 
int iRandNum; 
//随机数生成器 
Random rnd = new Random(); 
for(int i=0;i<pwdLength;i++) 
{ 
//Random类的Next方法生成一个指定范围的随机数 
iRandNum = rnd.Next(pwdchars.Length); 
//tmpstr随机添加一个字符 
tmpstr += pwdchars[iRandNum]; 
} 
return tmpstr; 
}


ALTER PROCEDURE GetBackPwd 
@question nvarchar(50), 
@answer nvarchar(50), 
@userName nvarchar(50), 
@newPassword nvarchar(50), 
@result int output 
AS 
if exists (SELECT * FROM USERINFO WHERE USERNAME=@USERNAME AND QUESTION=@QUESTION 
AND ANSWER=@ANSWER) 
BEGIN 
SET @RESULT = 1 
UPDATE USERINFO 
SET USERPWD = @newPassword 
WHERE userName = @userName 
END 
ELSE 
BEGIN 
SET @RESULT = -1 
END 
GO 
SET QUOTED_IDENTIFIER OFF 
GO 
SET ANSI_NULLS ON 
GO


<add key="mailUser" value="" /> 
<add key="mailPwd" value="" /> 
<add key="mailSmtpServer" value="" /> 
<add key="mailSender" value="" /> 
<add key="mailTitle" value="" />