/// summary>
  /// 用户修改密码模型
  /// /summary>
  [NotMapped]
  public class UserChangePassword
  {
    /// summary>
    /// 原密码
    /// /summary>
    [Display(Name = "原密码")]
    [Required(ErrorMessage = "×")]
    [StringLength(20, MinimumLength = 6, ErrorMessage = "×")]
    [DataType(DataType.Password)]
    public string Password { get; set; }
    /// summary>
    /// 新密码
    /// /summary>
    [Display(Name = "新密码", Description = "6-20个字符。")]
    [Required(ErrorMessage = "×")]
    [StringLength(20, MinimumLength = 6, ErrorMessage = "×")]
    [DataType(DataType.Password)]
    public string NewPassword { get; set; }
    /// summary>
    /// 确认密码
    /// /summary>
    [Display(Name = "确认密码", Description = "再次输入密码。")]
    [Compare("NewPassword", ErrorMessage = "×")]
    [DataType(DataType.Password)]
    public string ConfirmPassword { get; set; }
  }

/// summary>
    /// 更新用户信息
    /// /summary>
    /// param name="user">/param>
    /// returns>/returns>
    public override bool Update(User user)
    {
      dbContext.Users.Attach(user);
      dbContext.EntryUser>(user).State = System.Data.EntityState.Modified;
      if (dbContext.SaveChanges() > 0) return true;
      else return false;
    }

/// summary>
    /// 查找用户
    /// /summary>
    /// param name="UserName">用户名/param>
    /// returns>/returns>
    public User Find(string UserName)
    {
      return dbContext.Users.SingleOrDefault(u => u.UserName == UserName);
    }

/// summary>
    /// 修改密码
    /// /summary>
    /// returns>/returns>
    [UserAuthorize]
    public ActionResult ChangePassword()
    {
      return View();
    }
    [HttpPost]
    [UserAuthorize]
    public ActionResult ChangePassword()
    {
      return View();
    }

@model Ninesky.Models.UserChangePassword
@{ 
  ViewBag.Title = "修改密码";
  Layout = "~/Views/Shared/_Layout.cshtml";
}

div class="banner">
  img src="~/Skins/Default/Images/banner.jpg" />
/div>

@using (Html.BeginForm())
{
  @Html.ValidationSummary(true)

  div class="form">
    dl>
      dt>修改密码/dt>
      dd>
        div class="label">@Html.LabelFor(model => model.Password)：/div>
        div class="ctrl">@Html.PasswordFor(model => model.Password)
          @Html.ValidationMessageFor(model => model.Password)
          @Html.DisplayDescriptionFor(model => model.Password)
        /div>
      /dd>
      dd>
        div class="label">@Html.LabelFor(model => model.NewPassword)：/div>
        div class="ctrl">@Html.PasswordFor(model => model.NewPassword)
          @Html.ValidationMessageFor(model => model.NewPassword)
          @Html.DisplayDescriptionFor(model => model.NewPassword)
        /div>
      /dd>
      dd>
        div class="label">@Html.LabelFor(model => model.ConfirmPassword)：/div>
        div class="ctrl">@Html.PasswordFor(model => model.ConfirmPassword)
          @Html.ValidationMessageFor(model => model.ConfirmPassword)
          @Html.DisplayDescriptionFor(model => model.ConfirmPassword)
        /div>
      /dd>
      dd>
        div class="label">/div>
        div class="ctrl">
          input type="submit" value="修改密码" />@Html.ValidationMessage("Message")
        /div>
      /dd>
    /dl>
    div class="clear">/div>
  /div>
}
@section Scripts {
  @Scripts.Render("~/bundles/jqueryval")
}

[HttpPost]
    [UserAuthorize]
    public ActionResult ChangePassword(UserChangePassword userChangePassword)
    {
      userRsy = new UserRepository();
      if (userRsy.Authentication(UserName, Common.Text.Sha256(userChangePassword.Password)) == 0)
      {
        var _user = userRsy.Find(UserName);
        if (_user == null)
        {
          Error _e = new Error { Title = "修改密码失败", Details = "修改密码时，系统查询不到用户信息", Cause = Server.UrlEncode("li>用户在修改密码界面停留的时间过长，登录信息已失效。/li>li>系统错误。/li>"), Solution = Server.UrlEncode("li>返回a href='" + Url.Action("ChangePassword", "User") + "'>修改密码/a>页面，输入正确的信息后重新注册/li>li>联系网站管理员/li>") };

          return RedirectToAction("Error", "Prompt", _e);
        }
        _user.Password = Common.Text.Sha256(userChangePassword.NewPassword);
        if (userRsy.Update(_user))
        {
          Notice _n = new Notice { Title = "成功修改密码", Details = "您已经成功修改密码，请牢记您的新密码！", DwellTime = 5, NavigationName = "登陆页面", NavigationUrl = Url.Action("Login", "User") };
          return RedirectToAction("Notice", "Prompt", _n);
        }
        else
        {
          Error _e = new Error { Title = "修改密码失败", Details = "修改密码时，更新数据库失败！", Cause = Server.UrlEncode("li>系统错误。/li>"), Solution = Server.UrlEncode("li>返回a href='" + Url.Action("ChangePassword", "User") + "'>修改密码/a>页面，输入正确的信息后重新注册/li>li>联系网站管理员/li>") };
          return RedirectToAction("Error", "Prompt", _e);
        }
      }
      else
      {
        ModelState.AddModelError("Password", "原密码不正确，请重新输入");
        return View();
      }
      
    }

/// summary>
    /// 获取用户名
    /// /summary>
    public string UserName { 
      get {
        HttpCookie _cookie = Request.Cookies["User"];
        if (_cookie == null) return "";
        else return _cookie["UserName"];
        }
    }