pass.jsp

论坛元程序

 <%@page contentType="text/html; charset=gb2312" language="java" import="java.sql.*,java.util.*"  %>
<jsp:useBean id="yy" scope="page" class="yy.jdbc"/>
<%!String User_Name,Pass_Word,sql;%>
<%
  User_Name=yy.ex_chinese(request.getParameter("username"));
 
  Pass_Word=request.getParameter("password");
  if ((User_Name.equals("")) || (Pass_Word.equals("")))
  {
  response.sendRedirect("err.jsp?id=1");
}     
 else
  {
    
    ResultSet  rs=null;
   String sql="Select * From User where user_name='"+User_Name+"' and user_password='"+Pass_Word+"'";
    rs=yy.executeQuery(sql);
     if(rs.next())
    {
     String state=rs.getString("state");
     if(state.equals("0"))
     {
        response.sendRedirect("err.jsp?id=8");
      }
      else{
     session.putValue("UserName",User_Name);
     session.putValue("UserClass",rs.getString("user_rank"));
     sql="update User set numofvisit=numofvisit+1 where user_name='"+User_Name+"'";
     yy.executeUpdate(sql);
     response.sendRedirect("index.jsp");
     }
    }
     else
          response.sendRedirect("err.jsp?id=4");
  
  }  
    %>