spassword.java

windows系统下用java开发的网络入侵检测程序

import java.io.DataInputStream;
import java.io.DataOutputStream;
import java.io.IOException;
import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.sql.Statement;
/**
 * 
 * Tranct user modify password action.<p>
 * 2005.8.31
 * @version 0.1.2
 * @author Daxin Tian
 *
 */
public class Spassword {
	/**
	 * User's name.
	 */
	String user_name;
	/**
	 * User's old password.
	 */
	String oldpassword;
	/**
	 * User's new password.
	 */
	String newpassword;
	/** 
	 * Stream between server to JIDX Client.
	 */
	DataInputStream s_dis=null;
	/** 
	 * Stream between server to JIDX Client.
	 */
	DataOutputStream s_dos=null;
	Connection con;
	Statement sql;
	ResultSet rs;
	String info;
	StringBuffer s_sb=new StringBuffer();
	/**
	 * 
	 * @param name Who want to modify password.
	 * @param oldp Old password.
	 * @param newp New password.
	 * @param dis  Server's DataInputStream.
	 * @param dos  Server's DataOutputStream.
	 */
	Spassword(String name,String oldp,String newp, DataInputStream dis,DataOutputStream dos)
	{
		user_name=name;
		oldpassword=oldp;
		newpassword=newp;
		s_dis=dis;
	    s_dos=dos;
	    
	    
		try
		{
			Class.forName("com.mysql.jdbc.Driver");
			//Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
		}
		catch(ClassNotFoundException e)
		{
			info="db driver wrong";
			
		}
		try
		{
			con=DriverManager.getConnection("jdbc:mysql://localhost/jidx");
			//con=DriverManager.getConnection("jdbc:odbc:jidxdb","","");
			sql=con.createStatement();
			
			if(user_name!=null)
			{
				rs=sql.executeQuery("select info from register where username='"+user_name+"' and password='"+oldpassword+"'");
				if(rs.next())
				{
					sql.execute("update register set password='"+newpassword+"' where username='"+user_name+"'");
					s_sb.append("<msg><ok><num>"+3+"</num><info></info></ok></msg>");
				}
				else
				{
					s_sb.append("<msg><error><num>"+4+"</num><info></info></error></msg>");
				}
				
				con.close();

				
				try
				{
					//System.out.println("send ack sig: "+s_sb.toString());
					s_dos.writeUTF(s_sb.toString());
				}
				catch(IOException e)
				{
					
				}
			}
		}
		catch(SQLException e)
		{
			System.out.println(e);
		}
	}

}