save_add_user.java

jsp留言板 对刚学的希望有帮助,程序很简单的

import java.io.IOException;
import java.io.PrintWriter;

import javax.servlet.ServletException;
import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import db.*;
import java.sql.*;

public class save_add_user extends HttpServlet {

	/**
	 * Constructor of the object.
	 */
	public save_add_user() {
		super();
	}

	/**
	 * Destruction of the servlet. <br>
	 */
	public void destroy() {
		super.destroy(); // Just puts "destroy" string in log
		// Put your code here
	}

	/**
	 * The doPost method of the servlet. <br>
	 *
	 * This method is called when a form has its tag value method equals to post.
	 * 
	 * @param request the request send by the client to the server
	 * @param response the response send by the server to the client
	 * @throws ServletException if an error occurred
	 * @throws IOException if an error occurred
	 */
	public void doPost(HttpServletRequest request, HttpServletResponse response)
			throws ServletException, IOException {
		response.setContentType("text/html");
		response.setCharacterEncoding("GBK");
		PrintWriter out = response.getWriter();
		
    	String user_id=null;
		Cookie[] cks = request.getCookies();
    	for(int i=0;cks!=null && i<cks.length;i++){
    		if(cks[i].getName().equals("user_id")){
    			user_id = cks[i].getValue();
    		}
    	}
    	if(user_id == null){
    		response.sendRedirect("../login.html");
    	}
    
    	//out.println(user_id);	//测试当前登录的User_ID
    	try{
    		Connection con = DBConnection.getConnection();
    		PreparedStatement stm = con.prepareStatement("select * from Users where Id='" + user_id + "' and Popedom='1'");
    		ResultSet rs1 = stm.executeQuery();
    		if(!rs1.next()){
    			out.println("对不起！您不是管理员，没有权限进行此操作！");
    		}
    		else{
    			String name=request.getParameter("name");
    			String pwd=request.getParameter("pwd");
    			String popedom=request.getParameter("popedom");
        		
    			Statement stm2 = con.createStatement();
    			stm2.execute("insert  Users  values ('" + name + "','" + pwd + "','" +popedom+ "')");
    			
        		response.sendRedirect("../view_user.jsp");
    		}
    		
    		rs1.close();
    		con.close();
    	}catch (SQLException e){
    		e.printStackTrace();
    	}

		
	}

	/**
	 * Initialization of the servlet. <br>
	 *
	 * @throws ServletException if an error occure
	 */
	public void init() throws ServletException {
		// Put your code here
	}

}