query_save.jsp

用JSP写的一个在线购物网站的代码

<%@ page contentType="text/html;charset=gb2312" import="java.sql.*" %>
<jsp:useBean id="data" scope="page" class="shop.data.conn" />
<%
String admin=(String)session.getValue("admin");
if(admin=="" || admin==null)
{%>
<script language="javascript">
alert("请登陆后再执行管理操作");
self.location="index.jsp";
</script>
<%}else{
String sql="select * from admin where admin='"+admin+"'";
ResultSet rs=data.executeQuery(sql);
if(!rs.next())
{%>
<script language="javascript">
alert("对不起，无此管理员帐号");
history.back();
</script>
<%}}%>
<%
String id=request.getParameter("id");
String pwdquery=request.getParameter("pwdquery");
pwdquery=new String(pwdquery.getBytes("ISO8859_1"),"GBK");

String sql="update pwdquery set pwdquery='"+pwdquery+"' where id='"+id+"'";
ResultSet rs=data.executeQuery(sql);
response.sendRedirect("reg_setup.jsp");
%>