submitorder.jsp

一个用MYECLIPSE开发的网上购物系统。 基本功能都已经实现

<%@ page language="java" import="java.util.*" import="java.sql.*" import="db.LineItem" 
import="db.Cart"
contentType="text/html;charset=gb2312" %>
<%request.setCharacterEncoding("gb2312");%>
<%
String path = request.getContextPath();
String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+path+"/";
%>
<jsp:useBean id = "connBean" scope="page" class="db.DbAccess"/>
<%@include file="../header.htm"%>
<% if(session.isNew()){
		response.sendRedirect("../default.jsp");
	}
	boolean sign = true;
	String username = (String)session.getAttribute("username");
	try{
		Cart cart = (Cart)session.getAttribute("cart");
		Connection conn = connBean.getConnection();
		java.sql.Statement dstmt = conn.createStatement();
		Iterator i = cart.getItemIterator();
		for(;i.hasNext();){
			LineItem item = (LineItem)i.next();	
			String itemId = item.getItemid();
			int quantity = item.getQuantity();
			ResultSet rs = dstmt.executeQuery("select qty from inventory where itemid = '"+itemId+"'");
			while(rs.next()){
				int quantity2 = rs.getInt("qty");
				if(quantity2 < quantity){
					sign = false;
					break;
				}
			}
			rs.close();
			if(!sign) {
				response.sendRedirect("../cart/cart.jsp");
			}
		}	
		
		int orderId = 0;
		ResultSet rs = dstmt.executeQuery("select count(*) as number from orders");
		while(rs.next()){
			orderId = rs.getInt("number")+1;
		}
		rs.close();
		
		String sqlStmt = "insert into orders(orderid,userid,orderdate,shipaddr1,shipaddr2,shipcity,"
			+"shipstate,shipzip,shipcountry,billaddr1,billaddr2,billcity,billstate,billzip,"
			+"billcountry,courier,totalprice,billtofirstname,billtolastname,"
			+"shiptofirstname,shiptolastname,creditcard,exprdate,cardtype,locale) "
			+"values ("+ orderId + ",'" + username + "','" + request.getParameter("expirydate")
			+"','"+request.getParameter("shipaddress1") +"','" + request.getParameter("shipaddress2")
			+ "','" + request.getParameter("shipcity") + "','" + request.getParameter("shipstate") 
			+"','" + request.getParameter("shipzip") + "','"+ request.getParameter("shipcountry")
			+"','" + request.getParameter("billaddress1")+"','" + request.getParameter("billaddress2")
			+"','" + request.getParameter("billcity") + "','" + request.getParameter("billstate")
			+"','" + request.getParameter("billzip") + "','" + request.getParameter("billcountry")
			+"','test'," +String.valueOf(cart.getTotalPrice())+",'" + request.getParameter("billfirstname")
			+"','"+ request.getParameter("billlastname") +"','" + request.getParameter("shipfirstname") 
			+"','" + request.getParameter("shiplastname") + "','" + request.getParameter("creditcard")
			+"','05-12-1','" + request.getParameter("cardtype")
			+"','CA')";
			
		dstmt.executeUpdate(sqlStmt);
		
		Iterator j = cart.getItemIterator();
		int m = 1;
		for(;j.hasNext();){
			LineItem item = (LineItem)j.next();	
			String itemId = item.getItemid();
			int quantity = item.getQuantity();
			java.sql.Statement stmt = conn.createStatement();
			sqlStmt = "insert into lineitem values ("+ orderId + "," + m++ + ",'" + itemId
			+ "'," + quantity + "," + item.getUnitprice()+")";
			stmt.executeUpdate(sqlStmt);
			sqlStmt = "update inventory set qty= qty - "+  quantity +"where itemid = '"+itemId +"'";
			stmt.executeUpdate(sqlStmt);
		}	
		out.println("submit successfully!");
		dstmt.close();
		conn.close();
		session.removeAttribute("cart");
	}
	catch(Exception ex){
		out.println(ex.getMessage());
	}
%>
<style type="text/css">
<!--
.style6 {font-family: Verdana, Arial, Helvetica, sans-serif; color: #9900CC; }
.style7 {color: #9900CC}
-->
</style>
<table width="100%" border="0">
  <tr>
    <td width="21%" height="229"><p align="center"><a href="../cart/cart.jsp"><img src="../images/index_n_06.gif" width="78" height="34" border="0"></a></p>
        <p align="center" class="style7"><a href="../product/viewCatalog.jsp" class="style7">mainPage</a></p>
    <p align="center" class="style1"><a href="../sign/signout.jsp" class="style7">signout</a></p></td>
    <td width="79%"><table width="397" border="1" cellspacing="0" bordercolor="#CCCCCC">
      <tr>
        <td height="27" colspan="4" bgcolor="#FFFFFF"><div align="center"></div>
            <div align="center" class="style6">
              <div align="left">Below is your order </div>
            </div>
<div align="left"></div>
            <div align="left"></div></td>
      </tr>
      <tr>
        <td width="94" bgcolor="#CCCCCC"><div align="center"><span class="style6">Order ID </span></div></td>
        <td width="136" bgcolor="#CCCCCC" class="style1"><div align="center"><span class="style6">Order Date </span></div></td>
        <td width="148" bgcolor="#CCCCCC" class="style6"><div align="center">Total Price </div></td>
        <td width="1" bgcolor="#CCCCCC" class="style1">&nbsp;</td>
      </tr>
<%  try{
		Connection conn = connBean.getConnection();
	
		if(conn != null){
			java.sql.Statement dstmt = conn.createStatement(); 
   		 	ResultSet rs = dstmt.executeQuery("select orderid,orderdate,totalprice from orders where userid = '"+username+"'");
   		 	while(rs.next()){
   		 		int orderid = rs.getInt("orderid");
   		 		String date = rs.getString("orderdate");
   		 		double price = rs.getDouble("totalprice");
%>
      <tr>
        <td><div align="center"><span class="style7"><%=orderid%></span></div></td>
        <td><div align="center"><span class="style7"><%= date%></span></div></td>
        <td colspan="2"><div align="center"><span class="style7"><%= price%></span></div>          <div align="center" class="style6 style10"></div></td>
        </tr>
      <%            }
    			 rs.close();
        	}
     }
    catch(Exception e){
     }
%>
    </table>
  <div align="center"></div>
    </tr>
</table>
<%@include file="../bottom.htm"%>