/// <summary>
  /// 用戶修改密碼模型
  /// </summary>
  [NotMapped]
  public class UserChangePassword
  {
    /// <summary>
    /// 原密碼
    /// </summary>
    [Display(Name = "原密碼")]
    [Required(ErrorMessage = "×")]
    [StringLength(20, MinimumLength = 6, ErrorMessage = "×")]
    [DataType(DataType.Password)]
    public string Password { get; set; }
    /// <summary>
    /// 新密碼
    /// </summary>
    [Display(Name = "新密碼", Description = "6-20個(gè)字符。")]
    [Required(ErrorMessage = "×")]
    [StringLength(20, MinimumLength = 6, ErrorMessage = "×")]
    [DataType(DataType.Password)]
    public string NewPassword { get; set; }
    /// <summary>
    /// 確認(rèn)密碼
    /// </summary>
    [Display(Name = "確認(rèn)密碼", Description = "再次輸入密碼。")]
    [Compare("NewPassword", ErrorMessage = "×")]
    [DataType(DataType.Password)]
    public string ConfirmPassword { get; set; }
  }

/// <summary>
    /// 更新用戶信息
    /// </summary>
    /// <param name="user"></param>
    /// <returns></returns>
    public override bool Update(User user)
    {
      dbContext.Users.Attach(user);
      dbContext.Entry<User>(user).State = System.Data.EntityState.Modified;
      if (dbContext.SaveChanges() > 0) return true;
      else return false;
    }

/// <summary>
    /// 查找用戶
    /// </summary>
    /// <param name="UserName">用戶名</param>
    /// <returns></returns>
    public User Find(string UserName)
    {
      return dbContext.Users.SingleOrDefault(u => u.UserName == UserName);
    }

/// <summary>
    /// 修改密碼
    /// </summary>
    /// <returns></returns>
    [UserAuthorize]
    public ActionResult ChangePassword()
    {
      return View();
    }
    [HttpPost]
    [UserAuthorize]
    public ActionResult ChangePassword()
    {
      return View();
    }

@model Ninesky.Models.UserChangePassword
@{ 
  ViewBag.Title = "修改密碼";
  Layout = "~/Views/Shared/_Layout.cshtml";
}

<div class="banner">
  <img src="~/Skins/Default/Images/banner.jpg" />
</div>

@using (Html.BeginForm())
{
  @Html.ValidationSummary(true)

  <div class="form">
    <dl>
      <dt>修改密碼</dt>
      <dd>
        <div class="label">@Html.LabelFor(model => model.Password)：</div>
        <div class="ctrl">@Html.PasswordFor(model => model.Password)
          @Html.ValidationMessageFor(model => model.Password)
          @Html.DisplayDescriptionFor(model => model.Password)
        </div>
      </dd>
      <dd>
        <div class="label">@Html.LabelFor(model => model.NewPassword)：</div>
        <div class="ctrl">@Html.PasswordFor(model => model.NewPassword)
          @Html.ValidationMessageFor(model => model.NewPassword)
          @Html.DisplayDescriptionFor(model => model.NewPassword)
        </div>
      </dd>
      <dd>
        <div class="label">@Html.LabelFor(model => model.ConfirmPassword)：</div>
        <div class="ctrl">@Html.PasswordFor(model => model.ConfirmPassword)
          @Html.ValidationMessageFor(model => model.ConfirmPassword)
          @Html.DisplayDescriptionFor(model => model.ConfirmPassword)
        </div>
      </dd>
      <dd>
        <div class="label"></div>
        <div class="ctrl">
          <input type="submit" value="修改密碼" />@Html.ValidationMessage("Message")
        </div>
      </dd>
    </dl>
    <div class="clear"></div>
  </div>
}
@section Scripts {
  @Scripts.Render("~/bundles/jqueryval")
}

[HttpPost]
    [UserAuthorize]
    public ActionResult ChangePassword(UserChangePassword userChangePassword)
    {
      userRsy = new UserRepository();
      if (userRsy.Authentication(UserName, Common.Text.Sha256(userChangePassword.Password)) == 0)
      {
        var _user = userRsy.Find(UserName);
        if (_user == null)
        {
          Error _e = new Error { Title = "修改密碼失敗", Details = "修改密碼時(shí)，系統(tǒng)查詢不到用戶信息", Cause = Server.UrlEncode("<li>用戶在修改密碼界面停留的時(shí)間過(guò)長(zhǎng)，登錄信息已失效。</li><li>系統(tǒng)錯(cuò)誤。</li>"), Solution = Server.UrlEncode("<li>返回<a href='" + Url.Action("ChangePassword", "User") + "'>修改密碼</a>頁(yè)面，輸入正確的信息后重新注冊(cè)</li><li>聯(lián)系網(wǎng)站管理員</li>") };

          return RedirectToAction("Error", "Prompt", _e);
        }
        _user.Password = Common.Text.Sha256(userChangePassword.NewPassword);
        if (userRsy.Update(_user))
        {
          Notice _n = new Notice { Title = "成功修改密碼", Details = "您已經(jīng)成功修改密碼，請(qǐng)牢記您的新密碼！", DwellTime = 5, NavigationName = "登陸頁(yè)面", NavigationUrl = Url.Action("Login", "User") };
          return RedirectToAction("Notice", "Prompt", _n);
        }
        else
        {
          Error _e = new Error { Title = "修改密碼失敗", Details = "修改密碼時(shí)，更新數(shù)據(jù)庫(kù)失敗！", Cause = Server.UrlEncode("<li>系統(tǒng)錯(cuò)誤。</li>"), Solution = Server.UrlEncode("<li>返回<a href='" + Url.Action("ChangePassword", "User") + "'>修改密碼</a>頁(yè)面，輸入正確的信息后重新注冊(cè)</li><li>聯(lián)系網(wǎng)站管理員</li>") };
          return RedirectToAction("Error", "Prompt", _e);
        }
      }
      else
      {
        ModelState.AddModelError("Password", "原密碼不正確，請(qǐng)重新輸入");
        return View();
      }
      
    }

/// <summary>
    /// 獲取用戶名
    /// </summary>
    public string UserName { 
      get {
        HttpCookie _cookie = Request.Cookies["User"];
        if (_cookie == null) return "";
        else return _cookie["UserName"];
        }
    }