upmem.jsp

用JSP写的一个在线购物网站的代码

<%@ page contentType="text/html;charset=gb2312" import="java.sql.*" %>
<jsp:useBean id="data" scope="page" class="shop.data.conn" />
<%
String manager=(String)sesssion.getValue("manager");
if(manager=="" && manager==null)
{%>
<script language="JavaScript">
alert("请登陆后再进入用户管理后台");
history.back();
</script>
<%}%>
<%
String manager=request.getParameter("name");
String pwd=request.getParameter("pwd");
String newpwd=request.getParameter("newpwd");
if(!newpwd.equals(""))
{ pwd=newpwd; }
String pwdquery=request.getParameter("pwdquery");
pwdquery=new String(pwdquery.getBytes("ISO8859_1"),"GBK");
String pwdanswer=request.getParameter("pwdanswer");
pwdanswer=new String(pwdanswer.getBytes("ISO8859_1"),"GBK");
String sex=request.getParameter("sex");
sex=new String(sex.getBytes("ISO8859_1"),"GBK");
String realname=request.getParameter("realname");
realname=new String(realname.getBytes("ISO8859_1"),"GBK");
String email=request.getParameter("email");
String address=request.getParameter("address");
address=new String(address.getBytes("ISO8859_1"),"GBK");
String tel=request.getParameter("tel");
tel=new String(tel.getBytes("ISO8859_1"),"GBK");
String brith=request.getParameter("brith");
String IDcard=request.getParameter("IDcard");
String zipcode=request.getParameter("zipcode");
String mode=request.getParameter("mode");
mode=new String(mode.getBytes("ISO8859_1"),"GBK");

String sql="update manager set pwd='"+pwd+"',pwdquery='"+pwdquery+"',pwdanswer='"+pwdanswer+"',sex='"+sex+"'";
sql=sql+",realname='"+realname+"',email='"+email+"',address='"+address+"',tel='"+tel+"',brith='"+brith+"',IDcard='"+IDcard+"',";
sql=sql+"zipcode='"+zipcode+"',mode='"+mode+"' where name='"+manager+"'";
ResultSet rs=data.executeQuery(sql);
response.sendRedirect("manager.jsp");
%>