我们的 ASP.Net 会员控制中有一个幽灵

Question

我们建立了一个使用两个不同数据库的网站。现在的设置方式是，当您访问 www.website.com 并登录时，经过身份验证后，您将拥有一个设置为 website1ConnectionString 的 cookie。每次我们使用 linq 调用 datacontext 时，我们都会发送功能来检查 cookie 名称并获取相应的连接字符串。 EX PortalDataContext db = new PortalDataContext(AuthenticatedUser.ConnectionString); 如果用户访问 www.website.com/2ndlogin，则会对用户进行身份验证，并使用 website2ConnectionString cookie 设置 cookie。我们现在遇到一个问题，用户名和 GUID 会随机更改为其他用户，从而显示错误的信息。

我们通过写出与登录用户关联的用户名并浏览网站来注意到这一点。经过一段时间的不活动后，每个页面顶部显示的用户名以及 GUID 会随机更改为另一个用户。有时它会变回来，有时我们被迫注销并重新登录。

最近发生了这样的情况：database1 上的用户的用户名和 GUID 更改为 Database2 上的用户。

我们使用的 AuthenticatedUser 类如下所示：

public static MembershipUser GetUser()
    {
        string connection = AuthenticatedUser.ConnectionString;
        string provider = "";
        if (connection.Contains("website2"))
        {
            provider = "website2MembershipProvider";
        }
        else
        {
            provider = "AspNetSqlMembershipProvider";
        }

        MembershipProvider prov = Membership.Providers[provider];
        MembershipUser m = prov.GetUser(UserName, true);

        return m;
    }

    public static MembershipProvider GetMembershipProvider()
    {
        string connection = AuthenticatedUser.ConnectionString;
        string provider = "";
        if (connection.Contains("website2"))
        {
            provider = "website2MembershipProvider";
        }
        else
        {
            provider = "AspNetSqlMembershipProvider";
        }

        MembershipProvider prov = Membership.Providers[provider];
        return prov;
    }

    public static Guid LoginUserID
    {
        get
        {
            Guid g = new Guid();

            string connection = AuthenticatedUser.ConnectionString;
            string provider = "";
            if (connection.Contains("website2"))
            {
                provider = "website2MembershipProvider";
            }
            else
            {
                provider = "AspNetSqlMembershipProvider";
            }

            MembershipProvider prov = Membership.Providers[provider];
            MembershipUser m = prov.GetUser(UserName, true);
            if (m != null)
            {
                g = (Guid)m.ProviderUserKey;
            }

            return g;
        }
    }

    private static string _UserName = "";
    public static string UserName
    {
        get
        {
            if (String.IsNullOrEmpty(_UserName))
            {
                if (Membership.GetUser() != null)
                {
                    return Membership.GetUser().UserName;
                }
            }
            else
            {
                return _UserName;
            }

            return "";
        }

        set
        {
            _UserName = value;
        }
    }

public static string ConnectionString
    {
        get
        {
            HttpCookie myCookie = HttpContext.Current.Request.Cookies["connectionString"];
            return GetConnectionStringFromName(myCookie);
        }
        set
        {
            if (HttpContext.Current.Request.Cookies["connectionString"] != null)
            {
                ExpireCookies(HttpContext.Current);
            }
            var allCookies = HttpContext.Current.Request.Cookies.AllKeys;
            HttpCookie cookie = new HttpCookie("connectionString");
            cookie.Value = value;
            cookie.Expires = DateTime.Now.AddYears(100);
            HttpContext.Current.Response.Cookies.Add(cookie);
        }
    }

Answer 1

您的 UserName 属性不使用选定的提供程序，它始终使用默认提供程序。您如何使用用户名？另外，什么时候将 m.ProviderUserKey 设置为 GUID？

---

顺便说一句，您可以重构一些重复的代码：

public static MembershipUser GetUser()
{
    return GetMembershipProvider().GetUser(UserName, true);
}

public static MembershipProvider GetMembershipProvider()
{
    string connection = AuthenticatedUser.ConnectionString;
    string provider;
    if (connection.Contains("website2"))
    {
        provider = "website2MembershipProvider";
    }
    else
    {
        provider = "AspNetSqlMembershipProvider";
    }

    return Membership.Providers[provider];
}

public static Guid LoginUserID
{
    get
    {
        Guid g = new Guid();

        MembershipUser m = GetUser();
        if (m != null)
        {
            g = (Guid)m.ProviderUserKey;
        }

        return g;
    }
 }