upware.jsp

用JSP写的一个在线购物网站的代码

<%@ page contentType="text/html;charset=gb2312" import="java.sql.*,com.jspsmart.upload.*" %>
<jsp:useBean id="upload" scope="page" class="com.jspsmart.upload.SmartUpload" />
<jsp:useBean id="data" scope="page" class="shop.data.conn" />
<%
String admin=(String)session.getValue("admin");
if(admin=="" || admin==null)
{%>
<script language="javascript">
alert("请登陆后再执行管理操作");
self.location="index.jsp";
</script>
<%}else{
String sql="select * from admin where admin='"+admin+"' and system='"+"1"+"'";
ResultSet rs=data.executeQuery(sql);
if(!rs.next())
{%>
<script language="javascript">
alert("对不起，您不是系统管理员不能进行相应操作");
history.back();
</script>
<%}}%>
<%
int quan;
String setbig_pic="";
String setsmall_pic="";
upload.initialize(pageContext);
upload.upload();   
String big_pic=upload.getFiles().getFile(0).getFileName();
String small_pic=upload.getFiles().getFile(1).getFileName();
try{
    int i=upload.save("C:\\Program Files\\Apache Group\\Tomcat 4.1\\webapps\\examples\\shop\\upload\\");
    }catch(Exception e){
    out.println("文件没有上传成功！");
     }  
	 
String intid=upload.getRequest().getParameter("intid");	 	 
String bigpic=upload.getRequest().getParameter("bigpic");
String smallpic=upload.getRequest().getParameter("smallpic");	 
String censor_yes=upload.getRequest().getParameter("censor_yes");
String class_big=upload.getRequest().getParameter("class_big");
String class_small=upload.getRequest().getParameter("class_small");
String big_class=upload.getRequest().getParameter("big_class");
int intbig=Integer.parseInt(big_class);
String small_class=upload.getRequest().getParameter("small_class");
int intsmall=Integer.parseInt(small_class);
String warename=upload.getRequest().getParameter("warename");
String marketprice=upload.getRequest().getParameter("marketprice");
int mark=Integer.parseInt(marketprice);
String managerprice=upload.getRequest().getParameter("managerprice");
int manager=Integer.parseInt(managerprice);
String vipprice=upload.getRequest().getParameter("vipprice");
int vip=Integer.parseInt(vipprice);
String specification=upload.getRequest().getParameter("specification");
if(specification.equals(""))
{ specification="无"; }
String color=upload.getRequest().getParameter("color");
if(color.equals(""))
{ color="无"; }
String getpackage=upload.getRequest().getParameter("package");
if(getpackage.equals(""))
{ getpackage="无"; }
String number=upload.getRequest().getParameter("number");
String quantity=upload.getRequest().getParameter("quantity");
if(quantity.equals(""))
{ quan=0; }
else{
quan=Integer.parseInt(quantity);
}
String wareunit=upload.getRequest().getParameter("wareunit");
String produce=upload.getRequest().getParameter("produce");
if(produce.equals(""))
{ produce="无"; }
String cctime=upload.getRequest().getParameter("cctime");
if(cctime.equals(""))
{ cctime="无"; }
String explain=upload.getRequest().getParameter("explain");
if(explain.equals(""))
{ explain="无"; }
String text=upload.getRequest().getParameter("text");
if(text.equals(""))
{ text="无"; }
String nominate=upload.getRequest().getParameter("nominate");
if(nominate=="" || nominate==null)
{ nominate="0"; }
String add=upload.getRequest().getParameter("addware");
java.util.Date today=new java.util.Date();
String addtime=today.toLocaleString();
if(big_pic.equals(""))
{ setbig_pic=bigpic; }
else{ setbig_pic=big_pic; }
if(small_pic.equals(""))
{ setsmall_pic=smallpic; }
else{ setsmall_pic=small_pic; }

String sql1="warename='"+warename+"',explain='"+explain+"',text='"+text+"',marketprice='"+mark+"',managerprice='"+manager+"',vipprice='"+vip+"',";
sql1=sql1+"big_pic='"+setbig_pic+"',small_pic='"+setsmall_pic+"',class_small='"+intsmall+"',class_big='"+intbig+"',nominate='"+nominate+"',";
sql1=sql1+"produce='"+produce+"',specification='"+specification+"',color='"+color+"',number='"+number+"',package='"+getpackage+"',cctime='"+cctime+"',quantity='"+quan+"',wareunit='"+wareunit+"'";
String sql2=" where class_small='"+class_small+"' and class_big='"+class_big+"' and id='"+intid+"'";
String sql="update ware set "+sql1+sql2;
ResultSet rs=data.executeQuery(sql);
response.sendRedirect("admin_index.jsp");
%>