chklogin.jsp

来自「LyNews凌云新闻系统」· JSP 代码 · 共 50 行

<%
/*##################################################################**
**#  项目名称：LyNews『凌云新闻』                                  #**
**#                                                                #**
**#  程序开发: teddy 『星语凌』                                    #**
**#                                                                #**
**#  版权所有: 凌云创作室 (原流星电脑工作室)                       #**
**#                                                                #**
**#  主页地址: http://www.lybbs.com                                #**
**#            http://www.lybbs.net                                #**
**#  电邮地件: [e-mail]                                    #**
**#                                                                #**
**##################################################################*/
%>
<%@ include file="config.jsp"%>
<%@page contentType="text/html;charset=GBK"%> 
<%
ParameterUtils.setCharacterEncoding(request);
String username = ParameterUtils.getString(request,"username");
String password = ParameterUtils.getString(request,"password");
String MD5Password = "";
if(username.equals("") || password.equals(""))
  throw new Exception("请输入您的用户名和密码。");
else if(username.indexOf("\'")!=-1 || username.indexOf("\"")!=-1 || username.indexOf(",")!=-1 || username.indexOf("\\")!=-1)
  throw new Exception("用户名不能包括 \' \" \\ , 等非法字符。");
else if(password.indexOf("\'")!=-1 || password.indexOf("\"")!=-1 || password.indexOf("*")!=-1 || password.indexOf("\\")!=-1)
  throw new Exception("密码不能包括 \' \" \\ * 等非法字符。");
MD5Password = (new MD5()).getMD5ofStr(password);
Factory factory =  Factory.getInstance();

User user = factory.getUser();
user.setUsername(username);
user.setPassword(MD5Password);

UserFactory userFactroy = factory.getUserFactory();

try {
  user = userFactroy.checkUser(user);
}
catch(Exception e) {
  throw new Exception(e.getMessage());
}

SessionManager.setUserMsg(session,"usermsg",user);

if(user.getFlag()==1)
  response.sendRedirect("main.jsp");
else
  response.sendRedirect("../admin/main.jsp");
%>