bigaction.jsp

用JSP写的一个在线购物网站的代码

<%@ page contentType="text/html;charset=gb2312" import="java.sql.*" %>
<jsp:useBean id="data" scope="page" class="shop.data.conn" />
<%
String admin=(String)session.getValue("admin");
if(admin=="" || admin==null)
{%>
<script language="javascript">
alert("请登陆后再执行管理操作");
self.location="index.jsp";
</script>
<%}else{
String sql="select * from admin where admin='"+admin+"' and system='"+"1"+"'";
ResultSet rs=data.executeQuery(sql);
if(!rs.next())
{%>
<script language="javascript">
alert("对不起，您不是系统管理员不能进行相应操作");
history.back();
</script>
<%}}%>
<%
String del=request.getParameter("del");
if(del!="" && del!=null)
{
String id=request.getParameter("id");
String big=request.getParameter("big");
String small=request.getParameter("small");
String name=request.getParameter("name");
String sql="delete from ware where id='"+del+"'";
ResultSet rs=data.executeQuery(sql);
%>
<script language="JavaScript">
window.location="hyclass.jsp?id=<%=id%>&big=<%=big%>&small=<%=small%>&name=<%=name%>";
</script>
<%}
String delete=request.getParameter("delete");
if(delete!="" && delete!=null)
{
String id=request.getParameter("id");
String sql="delete from class_small where bigid='"+id+"' and smallid='"+delete+"'";
ResultSet rs=data.executeQuery(sql);
%>
<script language="JavaScript">
window.location="hyclass.jsp?id=<%=id%>";
</script>
<%}
String id=request.getParameter("id");
if(id!="" && id!=null)
{
String sql="update class_big set dustbin='"+"0"+"' where id='"+id+"'";
ResultSet rs=data.executeQuery(sql);
sql="update class_small set dustbin='"+"0"+"' where bigid='"+id+"'";
rs=data.executeQuery(sql);
sql="update ware set dustbin='"+"0"+"' where class_big='"+id+"'";
rs=data.executeQuery(sql);
%>
<script language="JavaScript">
window.close();
</script>
<%}%>