login.jsp

在线投票系统代码

<%@ page contentType="text/html;charset=gb2312" language="java" import="java.sql.*,java.io.*"%>
<%@ include file="include.inc"%>
<%
	String username=request.getParameter("username");
	String password=request.getParameter("password");
	
	Class.forName(CLASSFORNAME);
	Connection con=DriverManager.getConnection(SERVER,USER,PWD);
	Statement stmt=con.createStatement();
	String isCorrect="select * from user_info where username='"+username+"'and password='"+password+"'";
	ResultSet rs=stmt.executeQuery(isCorrect);
	
	if(!rs.next())
	{
		response.sendRedirect("login.html");
		rs.close();
		stmt.close();
		con.close(); 				
	}
	else if(rs.getString("isCheck").equals("0"))
	{
		session.setAttribute("username",rs.getString("username"));
		session.setAttribute("password",rs.getString("password"));
		session.setAttribute("isCheck",rs.getString("isCheck"));
		try
		{
		stmt.executeQuery("update user_info set isCheck='"+1+"'where username='"+username+"'");
		stmt.close();
		con.close();
		rs.close();
		}
		catch(Exception e)
		{
			e.printStackTrace();
		}
		response.sendRedirect("index.html");
	}
	
	else
	{
		response.sendRedirect("watch.jsp");
		stmt.close();
		con.close();
		rs.close();
	}
%>