saveform.jsp

用JSP写的一个在线购物网站的代码

<%@ page contentType="text/html;charset=gb2312" import="java.sql.*,java.util.*,shop.buy.buy" %>
<jsp:useBean id="data" scope="page" class="shop.data.conn" />
<%
String manager=(String)session.getValue("manager");
if(manager=="" || manager==null)
{%>
<script language="JavaScript">
alert("请您先登陆后再进行购物操作");
</script>
<%}else{
Vector buy=(Vector)session.getValue("ware");
if(buy==null || buy.size()==0)
{%>
<script language="JavaScript">
alert("您的购物车为空，请购物后在结帐");
window.location="index.jsp";
</script>
<%}else{
String explain=request.getParameter("explain");
explain=new String(explain.getBytes("ISO8859_1"),"GBK");

java.util.Date today=new java.util.Date();
String buydate=today.toLocaleString();

String sql="select id,ddnum from manager where name='"+manager+"'";
ResultSet rs=data.executeQuery(sql);
rs.next();
String id=rs.getString("id");
int ddnum=rs.getInt("ddnum");
rs.close();
ddnum=ddnum+1;

sql="update manager set ddnum='"+ddnum+"' where name='"+manager+"'";
rs=data.executeQuery(sql);

String idbuy=id+"000"+ddnum;
int buyid=Integer.parseInt(idbuy);

for(int i=0;i<buy.size();i++)
{
buy mybuy=(buy)buy.elementAt(i);
String name=mybuy.name;
sql="insert into buyware(warename,wareid,number,price,buyid,buyname,buydate) values(\'"+name+"\',\'"+mybuy.id+"\',\'"+mybuy.number+"\',\'"+mybuy.price+"\',\'"+buyid+"\',\'"+manager+"\',\'"+buydate+"\')";
rs=data.executeQuery(sql);
}

sql="insert into dingdan(dingdanid,buyid,censor_yes,explain,send,preordainShop,actiontime) values(\'"+buyid+"\',\'"+manager+"\',\'"+"0"+"\',\'"+explain+"\',\'"+"0"+"\',\'"+"0"+"\',\'"+buydate+"\')";
rs=data.executeQuery(sql);

session.removeValue("ware"); 
%>
<script language="JavaScript">
alert("定单已发出，汇款后立即发货");
window.close();
</script>
<%}}
%>