admin.java

新闻采用在线编辑器

package popten.web;
/**
*  Title  POPTEN
*  @author: 边缘孤客
*  Company: http://www.popten.com
*  Copyright: Copyright (c) 2002-10-1
*  @version 1.0 beta
*/
import popten.db.DBConnect;
import popten.util.*;
import java.sql.*;
import java.util.*;
import javax.servlet.*;
import javax.servlet.http.*;
public class Admin{
	public Admin(){}
private String name,password,sex,qq,email,phone,dat,clas,user_id,question,answer,news_coun;
public String getname() { return name;}
public String getpassowrd(){return password;}
public String getclas() { return clas;}
public String getqq() { return qq;}
public String getemail() { return email;}
public String getphone() { return phone;}
public String getquestion() { return question;}
public String getuser_id() { return user_id;}
public String getsex() { return sex;}
public String getanswer() { return answer;}
public String getdat() { return dat;}
public String getnews_coun() { return news_coun;}
public void setname(String name) { this.name =name ; }
public void setsex(String sex) { this.sex = sex;}
public void setpassword(String password){this.password = password;}
public void setclas(String clas) { this.clas = clas; }
public void setqq(String qq) { this.qq = qq; }
public void setemail(String email) { this.email = email; }
public void setphone(String phone) { this.phone = phone; }
public void setquestion(String question) { this.question = question; }
public void setuser_id(String user_id) { this.user_id = user_id; }
public void setanswer(String answer) { this.answer = answer; }
public void setdat(String dat) { this.dat = dat; }
public void setnews_coun(String news_coun) { this.news_coun = news_coun; }
		/**
		* 验证管理员身份
		*/
		public static void loginAdmin(HttpServletRequest request) throws Exception {
		boolean foundErr = false;
		String errMsg="";
		String name = ParamUtils.getString(request,"name","");
		String password = ParamUtils.getString(request,"password","");
		ResultSet rs;
		if(name.equals("") || name==null){
			errMsg = errMsg + "□ 您没有输入用户名！<br>□ 五秒钟后会自动返回上一页。<br><meta HTTP-EQUIV=REFRESH CONTENT='5; URL=javascript:history.go(-1)'>";
			foundErr = true;
		}
		if(password.equals("") || password==null){
			errMsg = errMsg + "□ 您没有输入密码！<br>□ 五秒钟后会自动返回上一页。<br><meta HTTP-EQUIV=REFRESH CONTENT='5; URL=javascript:history.go(-1)'>";
			foundErr = true;
		}
		if(!foundErr){
			password=MD5.toMD5(password);
			DBConnect dbc = new DBConnect();
			dbc.prepareStatement("SELECT * FROM admin WHERE name = ? and password = ?");
			dbc.setBytes(1,name.getBytes("GBK"));
			dbc.setBytes(2,password.getBytes("GBK"));
			rs =  dbc.executeQuery();
		if(rs.next()){
			String clas=rs.getString("clas");
			Admin user=new Admin();
			user.setname(name);
			user.setpassword(password);
			user.setclas(clas);
			user.setuser_id(rs.getString("user_id"));
			user.setsex(rs.getString("sex"));
			user.setqq(rs.getString("qq"));
			user.setemail(rs.getString("email"));
			user.setphone(rs.getString("phone"));
			user.setquestion(rs.getString("question"));
			user.setanswer(rs.getString("answer"));
			HttpSession session=request.getSession(true);
			GetSession.addAdminSession(session,user);
			rs.close();
			dbc.close();

			}
		else{
			errMsg = errMsg +"□ 您输入的用户名或密码错误！<br>□ 五秒钟后会自动返回登录页。<br><meta HTTP-EQUIV=REFRESH CONTENT='5; URL=javascript:history.go(-1)'>";
			foundErr = true;
		}
		}
		if(foundErr) throw new Exception(errMsg);
		}

		/**
		* 验证网站管理员是否登陆
		*/
		public static void chkLogin1(HttpSession session) throws Exception {
		boolean foundErr = false;
		String errMsg="";
		Admin user=(Admin)session.getAttribute("admin");
		String name=user.getname();
		String password=user.getpassowrd();
		String clas=user.getclas();
		int cc=Integer.parseInt(clas);
		if (name!=null && name!="" && password!=null && password!="" && clas!="" && clas!=null)
			{
			if(cc<2 && cc>0){}
			else{
			errMsg = errMsg + "□ 你企图越权访问本页！<br>□ 五秒钟后会自动返回上一页。<br><meta HTTP-EQUIV=REFRESH CONTENT='5; URL=javascript:history.go(-1)'>";
			foundErr = true;
				}
			}
		else{
			errMsg = errMsg + "□ 您没有登录或企图非法浏览本页。<br>";
			foundErr = true;
			}
		if(foundErr) throw new Exception(errMsg);
		}

		/**
		* 验证目录管理员是否登陆
		*/
		public static void chkLogin2(HttpSession session) throws Exception {
		boolean foundErr = false;
		String errMsg="";
		Admin user=(Admin)session.getAttribute("admin");
		String name=user.getname();
		String password=user.getpassowrd();
		String clas=user.getclas();
		int cc=Integer.parseInt(clas);
		if (name!=null && name!="" && password!=null && password!="" && clas!="" && clas!=null)
			{
			if(cc<3 && cc>0){}
			else{
			errMsg = errMsg + "□ 你无权访问本页！<br>□ 五秒钟后会自动返回上一页。<br><meta HTTP-EQUIV=REFRESH CONTENT='5; URL=javascript:history.go(-1)'>";
			foundErr = true;
				}
			}
		else{
			errMsg = errMsg + "□ 您没有登录或企图非法浏览本页。<br>";
			foundErr = true;
			}
		if(foundErr) throw new Exception(errMsg);
		}
		/**
		* 验证资料管理员是否登陆
		*/
		public static void chkLogin3(HttpSession session) throws Exception {
		boolean foundErr = false;
		String errMsg="";
		Admin user=(Admin)session.getAttribute("admin");
		String name=user.getname();
		String password=user.getpassowrd();
		String clas=user.getclas();
		int cc=Integer.parseInt(clas);
		if (name!=null && name!="" && password!=null && password!="" && clas!="" && clas!=null)
			{
			if(cc<4 && cc>0){}
			else{
			errMsg = errMsg + "□ 你无权访问本页！<br>□ 五秒钟后会自动返回上一页。<br><meta HTTP-EQUIV=REFRESH CONTENT='5; URL=javascript:history.go(-1)'>";
			foundErr = true;
				}
			}
		else{
			errMsg = errMsg + "□ 您没有登录或企图非法浏览本页。<br>";
			foundErr = true;
			}
		if(foundErr) throw new Exception(errMsg);
		}
		/**
		* 注册管理员名字、密码
		*/
		public static void regAdmin(HttpServletRequest request) throws Exception {
			boolean foundErr = false;
			String errMsg="";
			String name = ParamUtils.getString(request,"name","");
			String password = ParamUtils.getString(request,"password","");
			String repassword = ParamUtils.getString(request,"repassword","");
			String question = ParamUtils.getString(request,"question","");
			String sex = ParamUtils.getString(request,"sex","");
			String answer = ParamUtils.getString(request,"answer","");
			String email = ParamUtils.getString(request,"email","");
			int qq = ParamUtils.getInt(request,"qq",0);
			String phone = ParamUtils.getString(request,"phone","");
			//String dat=GetDate.getStringDate();
			DBConnect dbc = new DBConnect();
			ResultSet rs;
			if(name.equals("") || name==null){
				errMsg = errMsg + "□ 您没有输入用户名！<br>□ 五秒钟后会自动返回上一页。<br><meta HTTP-EQUIV=REFRESH CONTENT='5; URL=javascript:history.go(-1)'>";
				foundErr = true;
			}
			if(password.equals("") || password==null){
				errMsg = errMsg + "□ 您没有输入密码！<br>□ 五秒钟后会自动返回上一页。<br><meta HTTP-EQUIV=REFRESH CONTENT='5; URL=javascript:history.go(-1)'>";
				foundErr = true;
			}
			if(repassword.equals("") || repassword==null){
				errMsg = errMsg + "□ 您没有输入确认密码！<br>□ 五秒钟后会自动返回上一页。<br><meta HTTP-EQUIV=REFRESH CONTENT='5; URL=javascript:history.go(-1)'>";
				foundErr = true;
			}
			if(email.equals("") || email==null){
				errMsg = errMsg + "□ 您没有输入email！<br>□ 五秒钟后会自动返回上一页。<br><meta HTTP-EQUIV=REFRESH CONTENT='5; URL=javascript:history.go(-1)'>";
				foundErr = true;
			}
			if(qq<=0){
				errMsg = errMsg + "□ 您没有输入qq号码！<br>□ 五秒钟后会自动返回上一页。<br><meta HTTP-EQUIV=REFRESH CONTENT='5; URL=javascript:history.go(-1)'>";
				foundErr = true;
			}
			if(phone.equals("") || phone==null){
				errMsg = errMsg + "□ 您没有输入电话号码！<br>□ 五秒钟后会自动返回上一页。<br><meta HTTP-EQUIV=REFRESH CONTENT='5; URL=javascript:history.go(-1)'>";
				foundErr = true;
			}
			if(question.equals("") || question==null){
				errMsg = errMsg + "□ 您没有输入忘记密码提示问题！<br>□ 五秒钟后会自动返回上一页。<br><meta HTTP-EQUIV=REFRESH CONTENT='5; URL=javascript:history.go(-1)'>";
				foundErr = true;
			}
			if(answer.equals("") || answer==null){
				errMsg = errMsg + "□ 您没有输入问题答案！<br>□ 五秒钟后会自动返回上一页。<br><meta HTTP-EQUIV=REFRESH CONTENT='5; URL=javascript:history.go(-1)'>";
				foundErr = true;
			}
			if(!password.equals(repassword)){
				errMsg = errMsg + "□ 您两次输入的密码不一致！<br>□ 五秒钟后会自动返回上一页。<br><meta HTTP-EQUIV=REFRESH CONTENT='5; URL=javascript:history.go(-1)'>";
				foundErr = true;
			}
			if(!foundErr){

				dbc.prepareStatement("Select * from admin where name=?");
				dbc.setBytes(1,name.getBytes("GBK"));
				rs=dbc.executeQuery();
				if(rs.next()){
					rs.close();
					errMsg = errMsg + "□ 您输入的用户名已经存在！<br>□ 五秒钟后会自动返回上一页。<br><meta HTTP-EQUIV=REFRESH CONTENT='5; URL=javascript:history.go(-1)'>";
					foundErr = true;