databean.java

基于jsp的电子商务网站

// FrontEnd Plus GUI for JAD
// DeCompiled : DataBean.class

package com.wang.bean;

import java.io.PrintStream;
import java.sql.*;
import java.util.ArrayList;

// Referenced classes of package com.wang.bean:
//            UserBean, CDBean

public class DataBean
{

    private Connection conn;
    private ResultSet res;
    private PreparedStatement prepar;
    private CallableStatement proc;
    public static int PAGECOUNT;

    public DataBean()
    {
        conn = null;
        res = null;
        prepar = null;
        proc = null;
        try
        {
            Class.forName("com.microsoft.jdbc.sqlserver.SQLServerDriver");
            conn = DriverManager.getConnection("jdbc:microsoft:sqlserver://127.0.0.1:1433;databasename=MyData", "daidai", "lkp");
        }
        catch(SQLException ex)
        {
            System.out.println((new StringBuilder()).append(ex.getMessage()).append("1\u8DEF\u5F84\u9519\u8BEF").toString());
        }
        catch(ClassNotFoundException ex)
        {
            System.out.println((new StringBuilder()).append(ex.getMessage()).append("\u9A71\u52A8\u9519\u8BEF").toString());
        }
    }

    public UserBean checkUsersLogin(String userName, String userPwd)
    {
        UserBean ub = null;
        if(!checkParameter((new StringBuilder()).append(userName).append(userPwd).toString()))
        {
            userName = "null";
            userPwd = "null";
        }
        try
        {
            String sql = "select count(*) from admin where userName=? and userPwd=?";
            prepar = conn.prepareStatement(sql);
            prepar.setString(1, userName);
            prepar.setString(2, userPwd);
            res = prepar.executeQuery();
            if(res.next())
                if(res.getInt(1) > 0)
                    ub = getUser(userName);
                else
                    ub = null;
        }
        catch(Exception e)
        {
            ub = null;
            e.printStackTrace();
        }
        return ub;
    }

    public UserBean getUser(String userName)
    {
        UserBean ub = new UserBean();
        String sql = "select * from admin where userName=?";
        try
        {
            prepar = conn.prepareStatement(sql);
            prepar.setString(1, userName);
            for(res = prepar.executeQuery(); res.next(); ub.setUserId(res.getLong("userId")))
            {
                ub.setUserName(res.getString("userName"));
                ub.setUserPwd(res.getString("userPwd"));
            }

        }
        catch(SQLException ex)
        {
            ex.printStackTrace();
        }
        return ub;
    }

    public boolean checkParameter(String para)
    {
        int flag = 0;
        flag += para.indexOf("'") + 1;
        flag += para.indexOf(";") + 1;
        flag += para.indexOf("1=1") + 1;
        flag += para.indexOf("|") + 1;
        flag += para.indexOf("<") + 1;
        flag += para.indexOf(">") + 1;
        if(flag != 0)
        {
            System.out.println("\u63D0\u4EA4\u4E86\u975E\u6CD5\u5B57\u7B26!!!");
            return false;
        } else
        {
            return true;
        }
    }

    public ArrayList selectCDBean(String selectValue, int page, int count)
    {
        ArrayList list = new ArrayList();
        if(!checkParameter(selectValue))
            selectValue = "";
        try
        {
            proc = conn.prepareCall("{call proc_page(?,?,?,?)}");
            proc.setInt(1, page);
            proc.setInt(2, count);
            proc.setString(3, selectValue);
            proc.registerOutParameter(4, 4);
            CDBean cb;
            for(res = proc.executeQuery(); res.next(); list.add(cb))
            {
                cb = new CDBean();
                cb.setCdAlbum(res.getString("CDalbum"));
                cb.setCdCompany(res.getString("CDcompany"));
                cb.setCdName(res.getString("CDname"));
                cb.setCdId(res.getLong("CDid"));
                cb.setCdType(getCDType(res.getInt("CDtypeId")));
            }

            PAGECOUNT = proc.getInt(4);
        }
        catch(SQLException ex)
        {
            ex.printStackTrace();
        }
        return list;
    }

    public String getCDType(int cdtypeId)
    {
        ResultSet res1;
        PreparedStatement prepar1 = conn.prepareStatement("select display from CDtype where CDtypeId=?");
        prepar1.setLong(1, cdtypeId);
        res1 = prepar1.executeQuery();
        res1.next();
        return res1.getString("display");
        SQLException ex;
        return null;
    }

    public boolean setCDBean(CDBean cb)
    {
        if(!checkParameter((new StringBuilder()).append(cb.getCdName()).append(cb.getCdCompany()).append(cb.getCdAlbum()).append(cb.getCdType()).toString()))
            return false;
        boolean flag = false;
        String sql = "update CDinfo set CDname=?,CDcompany=?,CDalbum=?,CDtypeId=? where CDid=?";
        try
        {
            prepar = conn.prepareStatement(sql);
            prepar.setString(1, cb.getCdName());
            prepar.setString(2, cb.getCdCompany());
            prepar.setString(3, cb.getCdAlbum());
            prepar.setInt(4, Integer.parseInt(cb.getCdType()));
            prepar.setLong(5, cb.getCdId());
            int result = prepar.executeUpdate();
            if(result > 0)
                flag = true;
            else
                flag = false;
        }
        catch(Exception ex)
        {
            flag = false;
            ex.printStackTrace();
        }
        return flag;
    }

    public CDBean getCDBean(long id)
    {
        CDBean cb = new CDBean();
        String sql = "select * from CDinfo where CDid=?";
        try
        {
            prepar = conn.prepareStatement(sql);
            prepar.setLong(1, id);
            for(res = prepar.executeQuery(); res.next(); cb.setCdType(getCDType(res.getInt("CDtypeId"))))
            {
                cb.setCdAlbum(res.getString("CDalbum"));
                cb.setCdCompany(res.getString("CDcompany"));
                cb.setCdName(res.getString("CDname"));
                cb.setCdId(res.getLong("CDid"));
            }

        }
        catch(SQLException ex)
        {
            ex.printStackTrace();
        }
        return cb;
    }

    public boolean deleteCDBean(long id)
    {
        boolean flag = false;
        String sql = "delete from CDinfo where CDid=?";
        try
        {
            prepar = conn.prepareStatement(sql);
            prepar.setLong(1, id);
            int result = prepar.executeUpdate();
            if(result > 0)
                flag = true;
            else
                flag = false;
        }
        catch(Exception ex)
        {
            flag = false;
            ex.printStackTrace();
        }
        return flag;
    }

    public boolean addCDBean(CDBean cb)
    {
        boolean flag = false;
        if(!checkParameter((new StringBuilder()).append(cb.getCdName()).append(cb.getCdCompany()).append(cb.getCdAlbum()).append(cb.getCdType()).toString()))
            return false;
        String sql = "insert into CDinfo values(?,?,?,?)";
        try
        {
            prepar = conn.prepareStatement(sql);
            prepar.setString(1, cb.getCdName());
            prepar.setString(2, cb.getCdCompany());
            prepar.setString(3, cb.getCdAlbum());
            prepar.setInt(4, Integer.parseInt(cb.getCdType()));
            int result = prepar.executeUpdate();
            if(result > 0)
                flag = true;
            else
                flag = false;
        }
        catch(Exception ex)
        {
            flag = false;
            ex.printStackTrace();
        }
        return flag;
    }

    public boolean setUserBean(UserBean ub)
    {
        String sql;
        boolean flag = false;
        sql = "update admin set userPwd=? where userId=?";
        if(!checkParameter(ub.getUserPwd()))
            return false;
        boolean flag;
        try
        {
            prepar = conn.prepareStatement(sql);
            prepar.setString(1, ub.getUserPwd());
            prepar.setLong(2, ub.getUserId());
            int result = prepar.executeUpdate();
            if(result > 0)
                flag = true;
            else
                flag = false;
        }
        catch(Exception ex)
        {
            flag = false;
            ex.printStackTrace();
        }
        return flag;
    }

    public boolean addUserBean(UserBean ub)
    {
        boolean flag = false;
        String sql = "insert into admin values(?,?)";
        if(!checkParameter((new StringBuilder()).append(ub.getUserPwd()).append(ub.getUserName()).toString()))
            return false;
        if(hasUser(ub.getUserName()))
            return false;
        try
        {
            prepar = conn.prepareStatement(sql);
            prepar.setString(1, ub.getUserName());
            prepar.setString(2, ub.getUserPwd());
            int result = prepar.executeUpdate();
            if(result > 0)
                flag = true;
            else
                flag = false;
        }
        catch(Exception ex)
        {
            flag = false;
            ex.printStackTrace();
        }
        return flag;
    }

    public boolean hasUser(String userName)
    {
        boolean flag = true;
        String sql = "select count(*) from admin where userName=?";
        try
        {
            prepar = conn.prepareStatement(sql);
            prepar.setString(1, userName);
            res = prepar.executeQuery();
            res.next();
            int result = res.getInt(1);
            if(result > 0)
                flag = true;
            else
                flag = false;
        }
        catch(SQLException ex)
        {
            ex.printStackTrace();
            flag = true;
        }
        return flag;
    }
}