https://blog.csdn.net/IT_xiao_guang_guang/article/details/104299983
前言
??1.发送手机验证码用的是网建的SMS接口（http://sms.webchinese.cn/）
??2.手机验证码简单的做了以下限制：
????①发送验证码1分钟只能点击发送1次
????②相同IP手机号码1天最多提交20次（这里我用的是本地局域网IP）
????③加入图形验证码
??注：SMS官网上的建议还有要对手机号码次数进行限制：单个手机号码30分钟最多提交10次。（这个和IP限制次数方法是一样的，我这里没加）
功能实现
一、功能界面
|
|
|
二、创建图形验证码类
关于图形验证码，也可以参照我的这篇文章：C# WinForm 登录界面的图片验证码
创建产生图形验证码的类：
??①生成随机验证码字符串，用的是Random随机函数，用GUID生成6位随机数
??②创建验证码图片，将该字符串画在PictureBox控件中
ImageVeriCodeClass：
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Drawing;//绘图
using System.Windows.Forms;
namespace SMSVeriCode
{
public class ImageVeriCodeClass
{
#region 图片验证码功能
/// <summary>
/// 生成随机验证码字符串
/// </summary>
public static string CreateRandomImageCode(int CodeLength)
{
int randNum;
char code;
string randomCode = String.Empty;//随机验证码
//生成一定长度的随机验证码
//Random random = new Random();//生成随机数对象
for (int i = 0; i < CodeLength; i++)
{
//利用GUID生成6位随机数
byte[] buffer = Guid.NewGuid().ToByteArray();//生成字节数组
int seed = BitConverter.ToInt32(buffer, 0);//利用BitConvert方法把字节数组转换为整数
Random random = new Random(seed);//以生成的整数作为随机种子
randNum = random.Next();
//randNum = random.Next();
if (randNum % 3 == 1)
{
code = (char)('A' + (char)(randNum % 26));//随机大写字母
}
else if (randNum % 3 == 2)
{
code = (char)('a' + (char)(randNum % 26));//随机小写字母
}
else
{
code = (char)('0' + (char)(randNum % 10));//随机数字
}
randomCode += code.ToString();
}
return randomCode;
}
/// <summary>
/// 创建验证码图片
/// </summary>
public static void CreateImage(string strValidCode, PictureBox pbox)
{
try
{
int RandAngle = 45;//随机转动角度
int MapWidth = (int)(strValidCode.Length * 21);
Bitmap image = new Bitmap(MapWidth, 28);//验证码图片大小-宽和高
//创建绘图对象Graphics
Graphics graph = Graphics.FromImage(image);
graph.Clear(Color.AliceBlue);//清除绘画面,填充背景色
graph.DrawRectangle(new Pen(Color.Black, 0), 0, 0, image.Width - 1, image.Height - 1);//画一个边框
graph.SmoothingMode = System.Drawing.Drawing2D.SmoothingMode.AntiAlias;//模式
Random rand = new Random();
//背景噪点生成
Pen blackPen = new Pen(Color.LightGray, 0);
for (int i = 0; i < 50; i++)
{
int x = rand.Next(0, image.Width);
int y = rand.Next(0, image.Height);
graph.DrawRectangle(blackPen, x, y, 1, 1);
}
//验证码旋转，防止机器识别
char[] chars = strValidCode.ToCharArray();//拆散字符串成单字符数组
//文字居中
StringFormat format = new StringFormat(StringFormatFlags.NoClip);
format.Alignment = StringAlignment.Center;
format.LineAlignment = StringAlignment.Center;
//定义颜色
Color[] c = { Color.Black, Color.Red, Color.DarkBlue, Color.Green, Color.Orange, Color.Brown, Color.DarkCyan, Color.Purple };
//定义字体
string[] font = { "Verdana", "Microsoft Sans Serif", "Comic Sans MS", "Arial", "宋体" };
for (int i = 0; i < chars.Length; i++)
{
int cindex = rand.Next(7);
int findex = rand.Next(5);
Font f = new System.Drawing.Font(font[findex], 13, System.Drawing.FontStyle.Bold);//字体样式(参数2为字体大小)
Brush b = new System.Drawing.SolidBrush(c[cindex]);
Point dot = new Point(16, 16);
float angle = rand.Next(-RandAngle, RandAngle);//转动的度数
graph.TranslateTransform(dot.X, dot.Y);//移动光标到指定位置
graph.RotateTransform(angle);
graph.DrawString(chars[i].ToString(), f, b, 1, 1, format);
graph.RotateTransform(-angle);//转回去
graph.TranslateTransform(2, -dot.Y);//移动光标到指定位置
}
pbox.Image = image;
}
catch (ArgumentException)
{
MessageBox.Show("验证码图片创建错误");
}
}
#endregion
}
}三、创建存储IP地址的数据库表
对于IP次数的限制，我是把IP地址存在了数据库的表里。
①先创建一个数据库SMSVeriCode
②创建tIP表的sql语句：
create table tIP
(
IP nvarchar(32), --IP地址
SendTimes int, --发送次数
SMSVeriCodeTime datetime2 --手机验证码发送时间
)四、创建手机验证码类
创建发送手机验证码的类：
??①发送手机验证码功能
??②验证国内手机号
??③根据IP地址限制手机号码1天最多提交20次
??④获取本地IP地址信息（局域网IP）
SMSVeriCodeClass：
using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
//需要用到的命名空间
using System.IO;
using System.Net;
using System.Text;
using System.Windows.Forms;
using System.Text.RegularExpressions;
using System.Data.SqlClient;
using System.Net.Sockets;
namespace SMSVeriCode
{
public class SMSVeriCodeClass
{
#region 手机验证码功能
/// <summary>
/// 获取随机验证码
/// 利用GUID获取随机数
/// </summary>
/// <param name="Phone">手机号</param>
/// <param name="MinSeed">随机数最小值</param>
/// <param name="MaxSeed">随机数最大值</param>
/// <returns>随机验证码</returns>
public static string GetSMSValidCode(int MinSeed, int MaxSeed)
{
byte[] pbyte = Guid.NewGuid().ToByteArray();//生成字节数组
int seed = BitConverter.ToInt32(pbyte, 0);//利用BitConvert方法把字节数组转换为整数
Random random = new Random(seed);//以生成的整数作为随机种子
string smsVeriCode = random.Next(MinSeed, MaxSeed).ToString();
return smsVeriCode;
}
/// <summary>
/// 发送验证码的函数
/// </summary>
/// <param name="Phone"></param>
/// <param name="textContent"></param>
/// <returns>返回发送的结果：数字</returns>
public static string SendSMSVeriCode(string UidName, string KeyMD5, string Phone, string TextContent)
{
string strUrl = "http://utf8.sms.webchinese.cn/?";//UTF-8编码Url
string strUidName = "Uid=";//SMS平台的用户名
string strKeyMD5 = "&key=";//SMS平台的接口密匙；strKeyMD5=接口密钥32位MD5加密(大写)
string strPhone = "&smsMob=";//目的手机号码
string strTextContent = "&smsText="; //短信内容；普通短信70个字/条
strUrl = strUrl + strUidName + UidName + strKeyMD5 + KeyMD5 + strPhone + Phone + strTextContent + TextContent;
string SMSResult = GetFromUrl(strUrl);//发送短信,得到返回值
//MessageBox.Show(Result);
//string JudgeResult = GetResult(SMSResult);//判断返回值
//return JudgeResult;
return SMSResult;
}
/// <summary>
/// 发送短信,得到返回值
/// </summary>
public static string GetFromUrl(string url)
{
string strReturn = null;
if (url == null || url.Trim().ToString() == "")
{
return strReturn;
}
else//手机号正确
{
string targeturl = url.ToString();
try
{
HttpWebRequest hr = (HttpWebRequest)WebRequest.Create(targeturl);
hr.UserAgent = "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)";
hr.Method = "GET";
hr.Timeout = 30 * 60 * 1000; //30分钟超时
WebResponse hs = hr.GetResponse();
Stream sr = hs.GetResponseStream();
StreamReader ser = new StreamReader(sr, Encoding.Default);
strReturn = ser.ReadToEnd();
}
catch (Exception ex)
{
strReturn = null;
MessageBox.Show(ex.Message);
}
}
return strReturn;
}
/// <summary>
/// 判断返回值
/// </summary>
public static string GetResult(string strReturn)
{
int result = 0;
try
{
result = int.Parse(strReturn);
switch (result)
{
case -1:
strReturn = "没有该用户账户";
break;
case -2:
strReturn = "接口密钥不正确,不是账户登陆密码";
break;
case -21:
strReturn = "MD5接口密钥加密不正确";
break;
case -3:
strReturn = "短信数量不足";
break;
case -11:
strReturn = "该用户被禁用";
break;
case -14:
strReturn = "短信内容出现非法字符";
break;
case -4:
strReturn = "手机号格式不正确";
break;
case -41:
strReturn = "手机号码为空";
break;
case -42:
strReturn = "短信内容为空";
break;
case -51:
strReturn = "短信签名格式不正确,接口签名格式为：【签名内容】";
break;
case -52:
strReturn = "短信签名太长";
break;
case -6:
strReturn = "IP限制";
break;
default:
strReturn = "成功发送" + result + "条短信！";
break;
}
}
catch (Exception ex)
{
strReturn = ex.Message;
}
return strReturn;
}
#endregion
/// <summary>
/// 验证国内手机号
/// </summary>
/// <param name="phone">手机号</param>
/// <returns></returns>
public static bool CheckMobilePhone(string phone)
{
//电信手机号码正则
string dianxin = @"^1[3578][01379]\d{8}$";
Regex dReg = new Regex(dianxin);
//联通手机号正则
string liantong = @"^1[34578][01256]\d{8}$";
Regex tReg = new Regex(liantong);
//移动手机号正则
string yidong = @"^(134[012345678]\d{7}|1[34578][012356789]\d{8})$";
Regex yReg = new Regex(yidong);
if (dReg.IsMatch(phone) || tReg.IsMatch(phone) || yReg.IsMatch(phone))
{
return true;
}
return false;
}
#region 根据IP限制手机号码1天最多提交20次
/// <summary>
/// 发送次数清零
/// </summary>
public static int ResetSendTimes(string IP)
{
string connString = "server=.;database=SMSVeriCode;uid=test;pwd=test";
SqlConnection pSqlConnection = new SqlConnection(connString);
pSqlConnection.Open();
string sqlReset = "update tIP set SendSMSTimes=0 where IP='" + IP + "'";
SqlCommand sqlcmdReset = new SqlCommand(sqlReset, pSqlConnection);
return sqlcmdReset.ExecuteNonQuery();
}
/// <summary>
/// 更新已发送的次数
/// </summary>
public static int UpdateSendTimes(string IP)
{
string connString = "server=.;database=SMSVeriCode;uid=test;pwd=test";
SqlConnection pSqlConnection = new SqlConnection(connString);
pSqlConnection.Open();
string sqlUdpate = "update tIP set SendSMSTimes = SendSMSTimes + 1 where IP='" + IP + "'";
SqlCommand sqlcmdUpdate = new SqlCommand(sqlUdpate, pSqlConnection);
return sqlcmdUpdate.ExecuteNonQuery();
}
/// <summary>
/// 更新手机验证码发送时间
/// </summary>
public static int UpdateSMSCodeTime(string IP)
{
string connString = "server=.;database=SMSVeriCode;uid=test;pwd=test";
SqlConnection pSqlConnection = new SqlConnection(connString);
pSqlConnection.Open();
string sqlUpdateTime = "update tIP set SMSVeriCodeTime=getdate() where IP='" + IP + "'";
SqlCommand sqlcmdUpdateTime = new SqlCommand(sqlUpdateTime, pSqlConnection);
return sqlcmdUpdateTime.ExecuteNonQuery();
}
#endregion
/// <summary>
/// 获取本地IP地址信息
/// </summary>
public static string GetLocalIP()
{
try
{
string HostName = Dns.GetHostName();//主机名
IPHostEntry ip = Dns.GetHostEntry(HostName);
for (int i = 0; i < ip.AddressList.Length; i++)
{
//AddressFamily.InterNetwork表示IPV4
//AddressFamily.InterNetworkV6表示IPV6
if (ip.AddressList[i].AddressFamily == AddressFamily.InterNetwork)
{
return ip.AddressList[i].ToString();
}
}
return "";
}
catch (Exception ex)
{
MessageBox.Show("GetLocalIP Error!" + ex.Message);
return "";
}
}
}
}五、在Form1中调用以上两个类中的函数，实现功能
注：
??以下代码中的"用户名"和"密钥"，要去SMS网站中查看。
string UidName = "XXXXXXX";//SMS平台的用户名
string KeyMD5 = "XXXXXXXX";//SMS平台的接口密匙；IP次数限制的大致思路——相同IP手机号码1天最多提交20次：
??①用户发送验证码，获取其IP地址，判断数据表中是否已经有了这个IP;
??如果没有就向数据表中插入这个新的IP地址，接着发送验证码，在表中更新发送次数+1；
??②如果查询到表中已经有了这个IP地址，就判断其是否满足条件（发送次数<=20，时间<24小时）；
??③如果不满足条件,直接返回，不往下继续执行程序；
??④如果满足条件,往下执行程序,发送验证码。（同时要注意查询表中的发送次数是否为0，要更新发送时间）
Form1.cs：
using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Data.SqlClient;
using System.Drawing;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Windows.Forms;
namespace SMSVeriCode
{
public partial class Form1 : Form
{
public Form1()
{
InitializeComponent();
}
#region 图片验证码
private const int ImageVeriCodeLength = 4;//验证码长度
private String strImageVeriCode = "";//验证码
//更新图片验证码
private void UpdateImageVeriCode()
{
strImageVeriCode = ImageVeriCodeClass.CreateRandomImageCode(ImageVeriCodeLength);//生成随机验证码
if (strImageVeriCode == "") return;
ImageVeriCodeClass.CreateImage(strImageVeriCode, pbox1);//创建验证码图片
}
#endregion
//窗体加载时更新图片验证码
private void Form1_Load(object sender, EventArgs e)
{
UpdateImageVeriCode();
}
//点击PictureBox更新图片验证码
private void pbox1_Click(object sender, EventArgs e)
{
UpdateImageVeriCode();
}
/// <summary>
/// 获取手机验证码
/// </summary>
int seconds1 = 60;//倒计时60s
int seconds2 = 60 * 5;//验证码有效时间5分钟
string strSMSVeriCode;
private void btnSendVeriCode_Click(object sender, EventArgs e)
{
//获取文本框中的数据
string phone = txtPhone.Text.Trim();//手机号
string imagevericode = txtImageVeriCode.Text.Trim();//图片验证码
strSMSVeriCode = SMSVeriCodeClass.GetSMSValidCode(100000, 999999);//随机6位SMS验证码
int totalTime = 5;//SMS验证码有效时长
string smsTextContent = "验证码：" + strSMSVeriCode + "，" + totalTime + "分钟内有效,请勿泄漏于他人。如非本人操作，请忽略。";//SMS短信文本内容
string UidName = "XXXXXXX";//SMS平台的用户名
string KeyMD5 = "XXXXXXXX";//SMS平台的接口密匙；
if (String.IsNullOrEmpty(phone))//判断是否输入了手机号
{
MessageBox.Show("请输入手机号！", "提示", MessageBoxButtons.OK, MessageBoxIcon.Information);
txtPhone.Focus();
}
else if (SMSVeriCodeClass.CheckMobilePhone(phone) == false)//判断手机号格式是否正确
{
MessageBox.Show("请输入有效的11位手机号码", "警告", MessageBoxButtons.OK, MessageBoxIcon.Exclamation);
txtPhone.Focus();
}
else if (String.IsNullOrEmpty(imagevericode))//判断是否输入了图片验证码
{
MessageBox.Show("请输入图片验证码！", "提示", MessageBoxButtons.OK, MessageBoxIcon.Information);
txtImageVeriCode.Focus();
}
else if (imagevericode.ToLower() != strImageVeriCode.ToLower())//判断图片验证码输入是否正确；不区分大小写
{
MessageBox.Show("您输入的验证码有误！", "警告", MessageBoxButtons.OK, MessageBoxIcon.Exclamation);
UpdateImageVeriCode();
txtImageVeriCode.Text = "";
txtImageVeriCode.Focus();
}
else//发送SMS验证码
{
string ip = SMSVeriCodeClass.GetLocalIP();
string connString = "server=.;database=SMSVeriCode;uid=test;pwd=test";
SqlConnection pSqlConnection = new SqlConnection(connString);
pSqlConnection.Open();
string sqlIP = "select *,datediff(hour,SMSVeriCodeTime,getdate()) as TimeIntervel from tIP where IP='" + ip + "'";
SqlCommand sqlcmdIP = new SqlCommand(sqlIP, pSqlConnection);
SqlDataReader sdr = sqlcmdIP.ExecuteReader();
sdr.Read();
if (sdr.HasRows == true)//表中已有此IP地址
{
if (sdr.GetInt32(1) == 20 && sdr.GetInt32(3) <= 24)//20次，24小时
{
MessageBox.Show("相同IP手机号码1天最多提交20次！", "提示", MessageBoxButtons.OK, MessageBoxIcon.Information);
UpdateImageVeriCode();
txtImageVeriCode.Text = "";
return;
}
else if (sdr.GetInt32(1) == 20 && sdr.GetInt32(3) > 24)
{
SMSVeriCodeClass.ResetSendTimes(ip);//发送次数置零
}
if (sdr.GetInt32(1) == 0)//次数为0时
{
string SMSResult = SMSVeriCodeClass.SendSMSVeriCode(UidName, KeyMD5, phone, smsTextContent);//发送
if (Convert.ToInt32(SMSResult) > 0)//成功发送SMS验证码
{
//倒计时开始
timer1.Interval = 1000;
timer1.Start();
timer2.Interval = 1000;
timer2.Start();
btnSendVeriCode.Enabled = false;
UpdateImageVeriCode();
txtImageVeriCode.Text = "";
SMSVeriCodeClass.UpdateSendTimes(ip);//更新发送次数+1
SMSVeriCodeClass.UpdateSMSCodeTime(ip);//更新发送时间
}
else//发送SMS验证码失败
{
string JudetResult = SMSVeriCodeClass.GetResult(SMSResult);
MessageBox.Show(JudetResult, "提示", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}
else
{
string SMSResult = SMSVeriCodeClass.SendSMSVeriCode(UidName, KeyMD5, phone, smsTextContent);//发送
if (Convert.ToInt32(SMSResult) > 0)//成功发送SMS验证码
{
//倒计时开始
timer1.Interval = 1000;
timer1.Start();
timer2.Interval = 1000;
timer2.Start();
btnSendVeriCode.Enabled = false;
UpdateImageVeriCode();
txtImageVeriCode.Text = "";
SMSVeriCodeClass.UpdateSendTimes(ip);//更新发送次数+1
}
else//发送SMS验证码失败
{
string JudetResult = SMSVeriCodeClass.GetResult(SMSResult);
MessageBox.Show(JudetResult, "提示", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}
}
else//表中没有此IP地址—第一次发送验证码
{
string smsSendTime = DateTime.Now.ToString();//SMS验证码发送时间
//--------向数据表tIP中添加信息------//
pSqlConnection.Close();
pSqlConnection.Open();
string sqlInsert = "insert into tIP(IP,SendSMSTimes,SMSVeriCodeTime)";
sqlInsert += "values('{0}','{1}','{2}')";
sqlInsert = string.Format(sqlInsert, ip,"0",smsSendTime);
SqlCommand sqlcmdInsert = new SqlCommand(sqlInsert, pSqlConnection);
sqlcmdInsert.ExecuteNonQuery();
//--------------发送验证码----------------//
string SMSResult = SMSVeriCodeClass.SendSMSVeriCode(UidName, KeyMD5, phone, smsTextContent);//发送
if (Convert.ToInt32(SMSResult) > 0)//成功发送SMS验证码
{
//倒计时开始
timer1.Interval = 1000;
timer1.Start();
timer2.Interval = 1000;
timer2.Start();
btnSendVeriCode.Enabled = false;
UpdateImageVeriCode();
txtImageVeriCode.Text = "";
SMSVeriCodeClass.UpdateSendTimes(ip);//更新发送次数+1
}
else//发送SMS验证码失败
{
string JudetResult = SMSVeriCodeClass.GetResult(SMSResult);
MessageBox.Show(JudetResult, "提示", MessageBoxButtons.OK, MessageBoxIcon.Information);
}
}
}
}
/// <summary>
/// 倒计时—SMS验证码1分钟只能点击发送1次
/// </summary>
private void timer1_Tick(object sender, EventArgs e)
{
if (seconds1 > 0)
{
seconds1--;
btnSendVeriCode.Text = "剩余" + seconds1.ToString() + "秒";
}
else
{
timer1.Stop();
btnSendVeriCode.Text = "获取验证码";
btnSendVeriCode.Enabled = true;
}
}
/// <summary>
/// 手机SMS验证码5分钟内有效；但是如果有新的验证码出现,旧验证码就会失效
/// </summary>
private void timer2_Tick(object sender, EventArgs e)
{
if (seconds2 == 0)
{
timer2.Stop();
//旧的验证码过期,生成一个新的验证码
strSMSVeriCode = SMSVeriCodeClass.GetSMSValidCode(100000, 999999);
}
}
/// <summary>
/// 确认按钮
/// </summary>
private void btnConfirm_Click(object sender, EventArgs e)
{
//获取文本数据
string smsvericode = txtSMSVeriCode.Text.Trim();//手机SMS验证码
if (String.IsNullOrEmpty(smsvericode))
{
MessageBox.Show("请输入手机验证码！", "提示", MessageBoxButtons.OK, MessageBoxIcon.Information);
txtSMSVeriCode.Focus();
}
else if (smsvericode != strSMSVeriCode)//判断手机SMS验证码是否输入正确
{
MessageBox.Show("您输入的验证码有误！", "警告", MessageBoxButtons.OK, MessageBoxIcon.Exclamation);
txtSMSVeriCode.Focus();
}
else
{
MessageBox.Show("验证成功!");
}
}
}
}