{

//

// Global connection string, generated password length, generic exception message, event log info.

//

private readonly int newPasswordLength = 8;

private readonly string eventSource = "NpgsqlMembershipProvider";

private readonly string eventLog = "Application";

private readonly string exceptionMessage = "An exception occurred. Please check the Event Log.";

private readonly string tableName = "Users";

private string connectionString;

private const string encryptionKey = "AE09F72B007CAAB5";

//

// If false, exceptions are thrown to the caller. If true,

// exceptions are written to the event log.

//

private bool pWriteExceptionsToEventLog;

public bool WriteExceptionsToEventLog

{

get { return pWriteExceptionsToEventLog; }

set { pWriteExceptionsToEventLog = value; }

}

//

// System.Configuration.Provider.ProviderBase.Initialize Method

//

public override void Initialize(string name, NameValueCollection config)

{

//

// Initialize values from web.config.

//

if (config == null)

{

throw new ArgumentNullException("config");

}

if (string.IsNullOrEmpty(name))

{

name = "NpgsqlMembershipProvider";

}

if (String.IsNullOrEmpty(config["description"]))

{

config.Remove("description");

config.Add("description", "Sample Npgsql Membership provider");

}

// Initialize the abstract base class.

base.Initialize(name, config);

pApplicationName = GetConfigValue(config["applicationName"], HostingEnvironment.ApplicationVirtualPath);

pMaxInvalidPasswordAttempts = Convert.ToInt32(GetConfigValue(config["maxInvalidPasswordAttempts"], "5"));

pPasswordAttemptWindow = Convert.ToInt32(GetConfigValue(config["passwordAttemptWindow"], "10"));

pMinRequiredNonAlphanumericCharacters =

Convert.ToInt32(GetConfigValue(config["minRequiredNonAlphanumericCharacters"], "1"));

pMinRequiredPasswordLength = Convert.ToInt32(GetConfigValue(config["minRequiredPasswordLength"], "7"));

pPasswordStrengthRegularExpression =

Convert.ToString(GetConfigValue(config["passwordStrengthRegularExpression"], ""));

pEnablePasswordReset = Convert.ToBoolean(GetConfigValue(config["enablePasswordReset"], "true"));

pEnablePasswordRetrieval = Convert.ToBoolean(GetConfigValue(config["enablePasswordRetrieval"], "true"));

pRequiresQuestionAndAnswer = Convert.ToBoolean(GetConfigValue(config["requiresQuestionAndAnswer"], "false"));

pRequiresUniqueEmail = Convert.ToBoolean(GetConfigValue(config["requiresUniqueEmail"], "true"));

pWriteExceptionsToEventLog = Convert.ToBoolean(GetConfigValue(config["writeExceptionsToEventLog"], "true"));

string temp_format = config["passwordFormat"];

if (temp_format == null)

{

temp_format = "Hashed";

}

switch (temp_format)

{

case "Hashed":

pPasswordFormat = MembershipPasswordFormat.Hashed;

break;

case "Encrypted":

pPasswordFormat = MembershipPasswordFormat.Encrypted;

break;

case "Clear":

pPasswordFormat = MembershipPasswordFormat.Clear;

break;

default:

// use fully qualified name so as not to conflict with System.Data.ProviderException

// in System.Data.Entity assembly

throw new System.Configuration.Provider.ProviderException("Password format not supported.");

}

//

// Initialize NpgsqlConnection.

//

ConnectionStringSettings ConnectionStringSettings =

ConfigurationManager.ConnectionStrings[config["connectionStringName"]];

if (ConnectionStringSettings == null || string.IsNullOrEmpty(ConnectionStringSettings.ConnectionString.Trim()))

{

// use fully qualified name so as not to conflict with System.Data.ProviderException

// in System.Data.Entity assembly

throw new System.Configuration.Provider.ProviderException("Connection string cannot be blank.");

}

connectionString = ConnectionStringSettings.ConnectionString;

}

//

// A helper function to retrieve config values from the configuration file.

//

private static string GetConfigValue(string configValue, string defaultValue)

{

if (String.IsNullOrEmpty(configValue))

{

return defaultValue;

}

return configValue;

}

//

// System.Web.Security.MembershipProvider properties.

//

private string pApplicationName;

private bool pEnablePasswordReset;

private bool pEnablePasswordRetrieval;

private bool pRequiresQuestionAndAnswer;

private bool pRequiresUniqueEmail;

private int pMaxInvalidPasswordAttempts;

private int pPasswordAttemptWindow;

private MembershipPasswordFormat pPasswordFormat;

public override string ApplicationName

{

get { return pApplicationName; }

set { pApplicationName = value; }

}

public override bool EnablePasswordReset

{

get { return pEnablePasswordReset; }

}

public override bool EnablePasswordRetrieval

{

get { return pEnablePasswordRetrieval; }

}

public override bool RequiresQuestionAndAnswer

{

get { return pRequiresQuestionAndAnswer; }

}

public override bool RequiresUniqueEmail

{

get { return pRequiresUniqueEmail; }

}

public override int MaxInvalidPasswordAttempts

{

get { return pMaxInvalidPasswordAttempts; }

}

public override int PasswordAttemptWindow

{

get { return pPasswordAttemptWindow; }

}

public override MembershipPasswordFormat PasswordFormat

{

get { return pPasswordFormat; }

}

private int pMinRequiredNonAlphanumericCharacters;

public override int MinRequiredNonAlphanumericCharacters

{

get { return pMinRequiredNonAlphanumericCharacters; }

}

private int pMinRequiredPasswordLength;

public override int MinRequiredPasswordLength

{

get { return pMinRequiredPasswordLength; }

}

private string pPasswordStrengthRegularExpression;

public override string PasswordStrengthRegularExpression

{

get { return pPasswordStrengthRegularExpression; }

}

//

// System.Web.Security.MembershipProvider methods.

//

//

// MembershipProvider.ChangePassword

//

public override bool ChangePassword(string username, string oldPwd, string newPwd)

{

if (!ValidateUser(username, oldPwd))

{

return false;

}

ValidatePasswordEventArgs args = new ValidatePasswordEventArgs(username, newPwd, true);

OnValidatingPassword(args);

if (args.Cancel)

{

if (args.FailureInformation != null)

{

throw args.FailureInformation;

}

else

{

throw new MembershipPasswordException("Change password canceled due to new password validation failure.");

}

}

NpgsqlConnection conn = new NpgsqlConnection(connectionString);

NpgsqlCommand cmd =

new NpgsqlCommand(

string.Format("UPDATE {0} SET Password = @Password, last_password_changed_date = @last_password_changed_date WHERE user_name = @user_name AND application_name = @application_name", tableName), conn);

cmd.Parameters.Add("@Password", NpgsqlDbType.Text, 255).Value = EncodePassword(newPwd);

cmd.Parameters.Add("@last_password_changed_date", NpgsqlDbType.Timestamp).Value = DateTime.Now;

cmd.Parameters.Add("@user_name", NpgsqlDbType.Text, 255).Value = username;

cmd.Parameters.Add("@application_name", NpgsqlDbType.Text, 255).Value = pApplicationName;

int rowsAffected = 0;

try

{

conn.Open();

rowsAffected = cmd.ExecuteNonQuery();

}

catch (NpgsqlException e)

{

if (WriteExceptionsToEventLog)

{

WriteToEventLog(e, "ChangePassword");

// use fully qualified name so as not to conflict with System.Data.ProviderException

// in System.Data.Entity assembly

throw new System.Configuration.Provider.ProviderException(exceptionMessage);

}

else

{

throw;// e;

}

}

finally

{

cmd.Dispose();

conn.Close();

}

return (rowsAffected > 0); }

//

// MembershipProvider.ChangePasswordQuestionAndAnswer

//

public override bool ChangePasswordQuestionAndAnswer(string username, string password, string newPwdQuestion,

string newPwdAnswer)

{

if (!ValidateUser(username, password))

{

return false;

}

NpgsqlConnection conn = new NpgsqlConnection(connectionString);

NpgsqlCommand cmd =

new NpgsqlCommand(

string.Format("UPDATE {0} SET password_question = @Question, password_answer = @Answer WHERE user_name = @user_name AND application_name = @application_name", tableName), conn);

cmd.Parameters.Add("@Question", NpgsqlDbType.Text, 255).Value = newPwdQuestion;

cmd.Parameters.Add("@Answer", NpgsqlDbType.Text, 255).Value = EncodePassword(newPwdAnswer);

cmd.Parameters.Add("@user_name", NpgsqlDbType.Text, 255).Value = username;

cmd.Parameters.Add("@application_name", NpgsqlDbType.Text, 255).Value = pApplicationName;

int rowsAffected = 0;

try

{

conn.Open();

rowsAffected = cmd.ExecuteNonQuery();

}

catch (NpgsqlException e)

{

if (WriteExceptionsToEventLog)

{

WriteToEventLog(e, "ChangePasswordQuestionAndAnswer");

// use fully qualified name so as not to conflict with System.Data.ProviderException

// in System.Data.Entity assembly

throw new System.Configuration.Provider.ProviderException(exceptionMessage);

}

else

{

throw;// e;

}

}

finally

{

cmd.Dispose();

conn.Close();

}

return (rowsAffected > 0);

}

//

// MembershipProvider.CreateUser

//

public override MembershipUser CreateUser(string username, string password, string email, string passwordQuestion,

string passwordAnswer, bool isApproved, object providerUserKey,

out MembershipCreateStatus status)

{

ValidatePasswordEventArgs args = new ValidatePasswordEventArgs(username, password, true);

OnValidatingPassword(args);

if (args.Cancel)

{

status = MembershipCreateStatus.InvalidPassword;

return null;

}

if (RequiresUniqueEmail && !string.IsNullOrEmpty(GetUserNameByEmail(email)))

{

status = MembershipCreateStatus.DuplicateEmail;

return null;

}

MembershipUser u = GetUser(username, false);

if (u == null)

{

DateTime createDate = DateTime.Now;

if (providerUserKey == null)

{

providerUserKey = Guid.NewGuid();

}

else

{

if (!(providerUserKey is Guid))

{

status = MembershipCreateStatus.InvalidProviderUserKey;

return null;

}

}

NpgsqlConnection conn = new NpgsqlConnection(connectionString);

NpgsqlCommand cmd =

new NpgsqlCommand(

string.Format("INSERT INTO {0} (UserId, user_name, Password, Email, password_question, password_answer, is_approved, Comment, creation_date, last_password_changed_date, last_activity_date, application_name, is_locked_out, last_locked_out_date, failed_password_attempt_count, failed_password_attempt_window_start, failed_password_answer_attempt_count, failed_password_answer_attempt_window_start) Values(@UserId, @user_name, @Password, @Email, @password_question, @password_answer, @is_approved, @Comment, @creation_date, @last_password_changed_date, @last_activity_date, @application_name, @is_locked_out, @last_locked_out_date, @failed_password_attempt_count, @failed_password_attempt_window_start, @failed_password_answer_attempt_count, @failed_password_answer_attempt_window_start)", tableName), conn);

cmd.Parameters.Add("@UserId", NpgsqlDbType.Text).Value = providerUserKey.ToString();

cmd.Parameters.Add("@user_name", NpgsqlDbType.Text, 255).Value = username;

cmd.Parameters.Add("@Password", NpgsqlDbType.Text, 255).Value = EncodePassword(password);

cmd.Parameters.Add("@Email", NpgsqlDbType.Text, 128).Value = email;

cmd.Parameters.Add("@password_question", NpgsqlDbType.Text, 255).Value = passwordQuestion;

cmd.Parameters.Add("@password_answer", NpgsqlDbType.Text, 255).Value = passwordAnswer == null

? null

: EncodePassword(passwordAnswer);

cmd.Parameters.Add("@is_approved", NpgsqlDbType.Boolean).Value = isApproved;

cmd.Parameters.Add("@Comment", NpgsqlDbType.Text, 255).Value = "";

cmd.Parameters.Add("@creation_date", NpgsqlDbType.Timestamp).Value = createDate;

cmd.Parameters.Add("@last_password_changed_date", NpgsqlDbType.Timestamp).Value = createDate;

cmd.Parameters.Add("@last_activity_date", NpgsqlDbType.Timestamp).Value = createDate;

cmd.Parameters.Add("@application_name", NpgsqlDbType.Text, 255).Value = pApplicationName;

cmd.Parameters.Add("@is_locked_out", NpgsqlDbType.Boolean).Value = false; //false

cmd.Parameters.Add("@last_locked_out_date", NpgsqlDbType.Timestamp).Value = createDate;

cmd.Parameters.Add("@failed_password_attempt_count", NpgsqlDbType.Integer).Value = 0;

cmd.Parameters.Add("@failed_password_attempt_window_start", NpgsqlDbType.Timestamp).Value = createDate;

cmd.Parameters.Add("@failed_password_answer_attempt_count", NpgsqlDbType.Integer).Value = 0;

cmd.Parameters.Add("@failed_password_answer_attempt_window_start", NpgsqlDbType.Timestamp).Value = createDate;

try

{

conn.Open();

int recAdded = cmd.ExecuteNonQuery();

if (recAdded > 0)

{

status = MembershipCreateStatus.Success;

}

else

{

status = MembershipCreateStatus.UserRejected;

}

}

catch (NpgsqlException e)

{

if (WriteExceptionsToEventLog)

{

WriteToEventLog(e, "CreateUser");

}

status = MembershipCreateStatus.ProviderError;

}

finally

{

cmd.Dispose();

conn.Close();

}

return GetUser(username, false);

}

else

{

status = MembershipCreateStatus.DuplicateUserName;

}

return null;

}

//

// MembershipProvider.DeleteUser

//

public override bool DeleteUser(string username, bool deleteAllRelatedData)

{

NpgsqlConnection conn = new NpgsqlConnection(connectionString);

NpgsqlCommand cmd =

new NpgsqlCommand(

string.Format("DELETE FROM {0} WHERE user_name = @user_name AND application_name = @application_name", tableName), conn);

cmd.Parameters.Add("@user_name", NpgsqlDbType.Text, 255).Value = username;

cmd.Parameters.Add("@application_name", NpgsqlDbType.Text, 255).Value = pApplicationName;

int rowsAffected = 0;

try

{

conn.Open();

rowsAffected = cmd.ExecuteNonQuery();

if (deleteAllRelatedData)

{

// Process commands to delete all data for the user in the database.

}

}

catch (NpgsqlException e)

{

if (WriteExceptionsToEventLog)

{

WriteToEventLog(e, "DeleteUser");

// use fully qualified name so as not to conflict with System.Data.ProviderException

// in System.Data.Entity assembly

throw new System.Configuration.Provider.ProviderException(exceptionMessage);

}

else

{

throw;//e;

}

}

finally

{

cmd.Dispose();

conn.Close();

}

return (rowsAffected > 0); }

//

// MembershipProvider.GetAllUsers

//

public override MembershipUserCollection GetAllUsers(int pageIndex, int pageSize, out int totalRecords)

{

NpgsqlConnection conn = new NpgsqlConnection(connectionString);

NpgsqlCommand cmd =

new NpgsqlCommand(string.Format("SELECT Count(*) FROM {0} WHERE application_name = @application_name", tableName), conn);

cmd.Parameters.Add("@application_name", NpgsqlDbType.Text, 255).Value = ApplicationName;

MembershipUserCollection users = new MembershipUserCollection();

NpgsqlDataReader reader = null;

totalRecords = 0;

try

{

conn.Open();

totalRecords = Convert.ToInt32(cmd.ExecuteScalar());

if (totalRecords <= 0)

{

return users;

}

cmd.CommandText = string.Format("SELECT UserId, user_name, Email, password_question, Comment, is_approved, is_locked_out, creation_date, last_login_date, last_activity_date, last_password_changed_date, last_locked_out_date FROM {0} WHERE application_name = @application_name ORDER BY user_name Asc", tableName);

using (reader = cmd.ExecuteReader())

{

int counter = 0;

int startIndex = pageSize*pageIndex;

int endIndex = startIndex + pageSize - 1;

while (reader.Read())

{

if (counter >= startIndex)

{

MembershipUser u = GetUserFromReader(reader);

users.Add(u);

}

if (counter >= endIndex)

{

cmd.Cancel();

}

counter++;

}

reader.Close();

}

}

catch (NpgsqlException e)

{

if (WriteExceptionsToEventLog)

{

WriteToEventLog(e, "GetAllUsers");

// use fully qualified name so as not to conflict with System.Data.ProviderException

// in System.Data.Entity assembly

throw new System.Configuration.Provider.ProviderException(exceptionMessage);

}

else

{

throw;// e;

}

}

finally

{

if (reader != null)

{

reader.Close();

}

cmd.Dispose();

conn.Close();

}

return users;

}

//

// MembershipProvider.GetNumberOfUsersOnline

//

public override int GetNumberOfUsersOnline()

{

TimeSpan onlineSpan = new TimeSpan(0, Membership.UserIsOnlineTimeWindow, 0);

DateTime compareTime = DateTime.Now.Subtract(onlineSpan);

NpgsqlConnection conn = new NpgsqlConnection(connectionString);

NpgsqlCommand cmd =

new NpgsqlCommand(

string.Format("SELECT Count(*) FROM {0} WHERE last_activity_date > @CompareDate AND application_name = @application_name", tableName), conn);

cmd.Parameters.Add("@CompareDate", NpgsqlDbType.Timestamp).Value = compareTime;

cmd.Parameters.Add("@application_name", NpgsqlDbType.Text, 255).Value = pApplicationName;

int numOnline = 0;

try

{

conn.Open();

numOnline = Convert.ToInt32(cmd.ExecuteScalar());

}

catch (NpgsqlException e)

{

if (WriteExceptionsToEventLog)

{

WriteToEventLog(e, "GetNumberOfUsersOnline");

// use fully qualified name so as not to conflict with System.Data.ProviderException

// in System.Data.Entity assembly

throw new System.Configuration.Provider.ProviderException(exceptionMessage);

}

else

{

throw;// e;

}

}

finally

{

cmd.Dispose();

conn.Close();

}

return numOnline;

}

//

// MembershipProvider.GetPassword

//

public override string GetPassword(string username, string answer)

{

if (!EnablePasswordRetrieval)

{

// use fully qualified name so as not to conflict with System.Data.ProviderException

// in System.Data.Entity assembly

throw new System.Configuration.Provider.ProviderException("Password Retrieval Not Enabled.");

}

if (PasswordFormat == MembershipPasswordFormat.Hashed)

{

// use fully qualified name so as not to conflict with System.Data.ProviderException

// in System.Data.Entity assembly

throw new System.Configuration.Provider.ProviderException("Cannot retrieve Hashed passwords.");

}

NpgsqlConnection conn = new NpgsqlConnection(connectionString);

NpgsqlCommand cmd =

new NpgsqlCommand(

string.Format("SELECT Password, password_answer, is_locked_out FROM {0} WHERE user_name = @user_name AND application_name = @application_name", tableName), conn);

cmd.Parameters.Add("@user_name", NpgsqlDbType.Text, 255).Value = username;

cmd.Parameters.Add("@application_name", NpgsqlDbType.Text, 255).Value = pApplicationName;

string password = "";

string passwordAnswer = "";

NpgsqlDataReader reader = null;

try

{

conn.Open();

using (reader = cmd.ExecuteReader(CommandBehavior.SingleRow))

{

if (reader.HasRows)

{

reader.Read();

if (reader.GetBoolean(2))

{

throw new MembershipPasswordException("The supplied user is locked out.");

}

password = reader.GetString(0);

passwordAnswer = reader.GetString(1);

}

else

{

throw new MembershipPasswordException("The supplied user name is not found.");

}

reader.Close();

}

}

catch (NpgsqlException e)

{

if (WriteExceptionsToEventLog)

{

WriteToEventLog(e, "GetPassword");

// use fully qualified name so as not to conflict with System.Data.ProviderException

// in System.Data.Entity assembly

throw new System.Configuration.Provider.ProviderException(exceptionMessage);

}

else

{

throw e;

}

}

finally

{

if (reader != null)

{

reader.Close();

}

cmd.Dispose();

conn.Close();

}

if (RequiresQuestionAndAnswer && !CheckPassword(answer, passwordAnswer))

{

UpdateFailureCount(username, "passwordAnswer");

throw new MembershipPasswordException("Incorrect password answer.");

}

if (PasswordFormat == MembershipPasswordFormat.Encrypted)

{

password = UnEncodePassword(password);

}

return password;

}

/// <summary>

///

/// </summary>

/// <param name="Id"></param>

/// <returns></returns>

public string GetUserNameById(string Id)

{

NpgsqlMembershipProvider _provider = null;

ProviderCollection _providers = null;

// Get a reference to the <imageService> section

MembershipSection section = (MembershipSection) WebConfigurationManager.GetSection("system.web/membership");

// Load registered providers and point _provider

// to the default provider

_providers = new ProviderCollection();

ProvidersHelper.InstantiateProviders(section.Providers, _providers, typeof (NpgsqlMembershipProvider));

_provider = (NpgsqlMembershipProvider) _providers[section.DefaultProvider];

NpgsqlConnection conn = new NpgsqlConnection(_provider.connectionString);

NpgsqlCommand cmd =

new NpgsqlCommand(

"SELECT user_name FROM " + tableName + " WHERE userid = @user_id AND application_name = @application_name", conn);

cmd.Parameters.Add("@user_id", NpgsqlDbType.Text, 50).Value = Id;

cmd.Parameters.Add("@application_name", NpgsqlDbType.Text, 255).Value = _provider.ApplicationName;

string UserName = "";

try

{

conn.Open();

UserName = cmd.ExecuteScalar().ToString();

}

catch (NpgsqlException e)

{

if (WriteExceptionsToEventLog)

{

WriteToEventLog(e, "GetUserNameById(Guid Id)");

// use fully qualified name so as not to conflict with System.Data.ProviderException

// in System.Data.Entity assembly

throw new System.Configuration.Provider.ProviderException(exceptionMessage);

}

else

{

throw e;

}

}

finally

{

cmd.Dispose();

conn.Close();

}

return UserName;

}

/// <summary>

///

/// </summary>

/// <returns></returns>

public string GetUserId()

{

NpgsqlMembershipProvider _provider = null;

ProviderCollection _providers = null;

// Get a reference to the <imageService> section

MembershipSection section = (MembershipSection) WebConfigurationManager.GetSection("system.web/membership");

// Load registered providers and point _provider

// to the default provider

_providers = new ProviderCollection();

ProvidersHelper.InstantiateProviders(section.Providers, _providers, typeof (NpgsqlMembershipProvider));

_provider = (NpgsqlMembershipProvider) _providers[section.DefaultProvider];

HttpContext currentContext = HttpContext.Current;

NpgsqlConnection conn = new NpgsqlConnection(_provider.connectionString);

NpgsqlCommand cmd =

new NpgsqlCommand(

"SELECT UserId FROM " + tableName + " WHERE user_name = @user_name AND application_name = @application_name", conn);

cmd.Parameters.Add("@user_name", NpgsqlDbType.Text, 255).Value = currentContext.User.Identity.Name;

cmd.Parameters.Add("@application_name", NpgsqlDbType.Text, 255).Value = _provider.ApplicationName;

string UserId = "";

try

{

conn.Open();

UserId = cmd.ExecuteScalar().ToString();

}

catch (NpgsqlException e)

{

if (WriteExceptionsToEventLog)

{

WriteToEventLog(e, "GetUserId()");

// use fully qualified name so as not to conflict with System.Data.ProviderException

// in System.Data.Entity assembly

throw new System.Configuration.Provider.ProviderException(exceptionMessage);

}

else

{

throw e;

}

}

finally

{

cmd.Dispose();

conn.Close();

}

return UserId;

}

/// <summary>

///

/// </summary>

/// <param name="username"></param>

/// <returns></returns>

public MembershipUser GetCustomUser(string username)

{

NpgsqlMembershipProvider _provider = null;

ProviderCollection _providers = null;

// Get a reference to the <imageService> section

MembershipSection section = (MembershipSection) WebConfigurationManager.GetSection("system.web/membership");

// Load registered providers and point _provider

// to the default provider

_providers = new ProviderCollection();

ProvidersHelper.InstantiateProviders(section.Providers, _providers, typeof (NpgsqlMembershipProvider));

_provider = (NpgsqlMembershipProvider) _providers[section.DefaultProvider];

NpgsqlConnection conn = new NpgsqlConnection(_provider.connectionString);

NpgsqlCommand cmd =

new NpgsqlCommand(

"SELECT UserId, user_name, Email, password_question," +

" Comment, is_approved, is_locked_out, creation_date, last_login_date," +

" last_activity_date, last_password_changed_date, last_locked_out_date" + " FROM " + tableName +

" WHERE user_name = @user_name AND application_name = @application_name", conn);

cmd.Parameters.Add("@user_name", NpgsqlDbType.Text, 255).Value = username;

cmd.Parameters.Add("@application_name", NpgsqlDbType.Text, 255).Value = _provider.ApplicationName;

MembershipUser u = null;

NpgsqlDataReader reader = null;

try

{

conn.Open();

using (reader = cmd.ExecuteReader())

{

if (reader.HasRows)

{

reader.Read();

u = GetUserFromReader(reader);

reader.Close();

}

reader.Close();

}

}

catch (NpgsqlException e)

{

if (WriteExceptionsToEventLog)

{

WriteToEventLog(e, "GetUser(String, Boolean)");

// use fully qualified name so as not to conflict with System.Data.ProviderException

// in System.Data.Entity assembly

throw new System.Configuration.Provider.ProviderException(exceptionMessage);

}

else

{

throw e;

}

}

finally

{

if (reader != null)

{

reader.Close();

}

cmd.Dispose();

conn.Close();

}

return u;