bbscheck.java

TopiclistTagExtraInfo~~JSP网站方面的

package org.jetic.web.techbbs;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;
import java.sql.*;

/**
 * Title:        华源技术论坛
 * Description:
 * Copyright:    Copyright (c) 2001
 * Company:      GBSOURCE
 * @author fainter
 * @version 1.0
 */

public class bbscheck {

	public int check(HttpServletRequest request)
	{
		HttpSession session = request.getSession(false);
		String UserID = request.getParameter("UserID").trim();
		String password = request.getParameter("Password");
       	try{
			Mssql mssql = new Mssql();
           		ResultSet rs = mssql.executeQuery("select id from users where userid='" + UserID + "' and password='" + password + "'");
			if(rs.next()){
                              session.putValue("userid",UserID);
                              rs.close();
                              mssql.close();
                            return 1;
			}
                      else
			      return 0;
                }
               catch(Exception e){return 0;}
      	}
        public boolean checkagain(HttpSession session){
                String userid;
                userid = (String) session.getValue("userid");
               return!(userid == null || userid.equals(""));
        }
        public boolean checkmanager(HttpSession session,int managerid){
                String mainmanager = "";
                String manager = (String) session.getValue("userid");
               try {
                     Mssql mssql = new Mssql();
                     ResultSet rs = mssql.executeQuery("select fdcmanager from tbmain where id=" + managerid);
                    while(rs.next()){
                     mainmanager = rs.getString("fdcmanager");
                     }
                     rs.close();
                     mssql.close();
                   return manager.equals(mainmanager);
                }
               catch (Exception ex) {
                     System.err.println("error");
                     ex.printStackTrace(System.err);
                   return false;
                }
        }
       public boolean checkwriter(HttpSession session,int contentid){
                String writer = "";
                String user = (String) session.getValue("userid");
               try {
                     Mssql mssql = new Mssql();
                     ResultSet rs = mssql.executeQuery("select fdcwriter from tbtopic where id=" + contentid);
                    while(rs.next()){
                     writer = rs.getString("fdcwriter");
                     }
                     rs.close();
                     mssql.close();
                   return user.equals(writer);
                }
               catch (Exception ex) {
                     System.err.println("error");
                     ex.printStackTrace(System.err);
                   return false;
                }
        }
       public void del(int delid){
               try {
                     Mssql mssql = new Mssql();
                     mssql.executeUpdate("delete from tbtopic where id=" + delid);
                     mssql.close();
                }
               catch (Exception ex) {
                     System.err.println("error");
                     ex.printStackTrace(System.err);
                }
        }
       public void mark(int markid,int mainid){
               try {
                     Mssql mssql = new Mssql();
                     mssql.executeUpdate("update tbtopic set fdcmark = 'M' where id=" + markid);
                     mssql.executeUpdate("update tbmain set fdimark = fdimark + 1 where id=" + mainid);
                     mssql.close();
                }
               catch (Exception ex) {
                     System.err.println("error");
                     ex.printStackTrace(System.err);
                }
        }
       public void dismark(int dismarkid,int mainid){
               try {
                     Mssql mssql = new Mssql();
                     mssql.executeUpdate("update tbtopic set fdcmark = ' ' where id=" + dismarkid);
                     mssql.executeUpdate("update tbmain set fdimark = fdimark - 1 where id=" + mainid);
                     mssql.close();
                }
               catch (Exception ex) {
                     System.err.println("error");
                     ex.printStackTrace(System.err);
                }
        }
       public boolean checkmark(int id){
                String mark = "";
               try {
                     Mssql mssql = new Mssql();
                     ResultSet rs = mssql.executeQuery("select fdcmark from tbtopic where id=" + id);
                    while(rs.next()){
                     mark = rs.getString("fdcmark");
                     }
                     rs.close();
                     mssql.close();
                   return mark.equals("M");
                }
               catch (Exception ex) {
                     System.err.println("error");
                     ex.printStackTrace(System.err);
                   return false;
                }
        }

}