actre.jsp

一个bug管理系统

<%@ page contentType="text/html; charset=gb2312" language="java"
	import="java.sql.*" errorPage=""%>
<%!public String gb2iso(String qs) {
		try {
			if (qs == null)
				return "NULL";
			else
				return new String(qs.getBytes("gb2312"), "iso-8859-1");
		} catch (Exception e) {
			log("gb2iso error：" + e.getMessage());
		}
		return "NULL";
	}%>
<%
	String host = "localhost";
	String user = "root";
	String pw = "123";
	String db = "numb1";
	String pass = null;
	pass = (String) session.getAttribute("pass");

	if ("y".equals(pass)) {
		Class.forName("com.mysql.jdbc.Driver").newInstance();
		String url = "jdbc:mysql://" + host + "/" + db;
		Connection con = DriverManager.getConnection(url, user, pw);
		Statement st = con.createStatement();
		request.setCharacterEncoding("gb2312");
		String id = request.getParameter("id");
		String txt = request.getParameter("text");

		String sql = "update lyb set retxt='" + gb2iso(txt)
		+ "',isre='y' where id=" + id;
		st.executeUpdate(sql);
		st.close();
		con.close();
		response.sendRedirect("show.jsp?id=" + id);
	} else {
		response.sendRedirect("login.jsp");
	}
%>