admin.java~6~

新闻发布系统

package dsp.web.admin;

/**
 * <p>Title: DSP实验室</p>
 * <p>Description: DSP教学网
 *                 管理员类
 * </p>
 * <p>Copyright: Copyright (c) 2004</p>
 * <p>Company: </p>
 * @author 李艳生
 * @version 1.0
 */

import java.io.*;
import java.net.*;
import java.sql.*;
import java.util.*;
import dsp.database.*;
import dsp.utils.*;

public class Admin {
	private String username, password;
	private int flag;        //权限标志
	private boolean status;  //记录用户是否登录成功
	private String msg;      //登录未成功时提示信息
	private boolean exist; //记录用户否存在

	/**
	 * 构造函数
	 */
	public Admin(){
		 username = "";
		 password = "";
		 flag = 0;
		 status = false;
		 msg = "";
		 exist = false;
	}

	/**
	 * 用户名
	 */
	public void setUsername(String username) {
		 this.username = username;
	}
	public String getUsername() {
		 return username;
	}

	/**
	 * 密码
	 */
	public void setPassword(String password) {
		this.password = MD5.toMD5(password);
	}
	public String getPassword() {
		 return password;
	}

	/**
	 * 用户权限
	 */
   public void setFlag(int flag) {
	   this.flag = flag;
   }
   public int getFlag() {
	   return flag;
   }

   /**
	* 登录是否成功，如果成功返回true,否则返回false
	*/
   public boolean isValid(){
	   return status;
   }

   /**
	* 相关提示
	*/
   public void setMsg(String msg){
	   this.msg = msg;
   }
   public String getMsg(){
	   return msg;
   }

   /** 检查用户是否存在,exist为true,则存在
	*/
   public void checkExist() throws ClassNotFoundException, SQLException{
		Operation conn = new Operation();
		String strSQL = "SELECT username FROM web_admin " +
						 "WHERE username='" + username + "'";
		ResultSet rs = conn.query(strSQL);

		if(rs.next()){
			exist = true;
		}
		else{
			 exist = false;
		}

		conn.closestmt();
		conn.closeconn();
   }

   /** 用户登录验证，status为true,则是合法用户,msg给出不成功的提示信息
	*/
   public void  validUser() throws ClassNotFoundException, SQLException{
		//检查用户是否存在
		checkExist();

		if(exist){
			//存在
			Operation conn = new Operation();
			String strSQL = "SELECT username, password,flag FROM web_admin " +
						 "WHERE (username='" + username + "') and " +
						 "(password='" + password + "')";
			ResultSet rs = conn.query(strSQL);
			if(rs.next()){
				status = true;
				if(rs.getInt("flag") == 1){
					flag = 1;
				}
				else{
					flag = 0;
				}
			}
			else{
				status = false;
				msg = username + "的密码错误，请重新登录！";
			}

			conn.closestmt();
			conn.closeconn();
		}
		else{
			status = false;
			msg = "对不起，没有" + username +"！";
		}
	}

	/** 添加用户,status为true,则添加成功,msg给出错误信息
	 */
	public void addUser() throws ClassNotFoundException,SQLException{
		 //检查用户是否存在
		 checkExist();
		 if(!exist){
			 //不存在
			 Operation conn = new Operation();
			 String strSQL = "INSERT INTO web_admin (username,password,flag) " +
			 "VALUES ('" + username + "','" + password + "'," + flag +")";
			 conn.update(strSQL);

			status = true;

			conn.closestmt();
			conn.closeconn();
		}
		else{
			 //存在
			 status = false;
			 msg = username + "已经存在，请重新换个用户名！";
		}
	}

	/** 删除用户
	 * status为true,则删除成功
	 */
	public void deluser(int id) throws  ClassNotFoundException, SQLException{
		Operation conn = new Operation();
		String sql = "DELETE FROM s_admin WHERE id=" + id;

		try{
			conn.update(sql);
			status = true;
		}
		catch(Exception e){
			msg = e.getMessage();
		}
		finally{
			conn.closestmt();
			conn.closeconn();
		}
	}

	/** 修改用户的密码
	 *  id:要修改密码的用户的id号
	 *  oldpass:用户的旧密码
	 *  newpass:新密码
	 *  如果status为true,则修改成功,msg存放不成功提示信息
	 */
	public void modpass(int id, String oldpass, String newpass) throws ClassNotFoundException, SQLException{
		Operation conn = new Operation();
		String sql = "SELECT password FROM s_admin WHERE id=" + id;
		String pass;
		try{
			ResultSet rs = conn.query(sql);
			rs.next();
			pass = rs.getString("password");
			oldpass = MD5.toMD5(oldpass);
			if(pass.equals(oldpass)){
				conn.closestmt();
				newpass = MD5.toMD5(newpass);
				sql = "UPDATE s_admin SET password='" + newpass + "' WHERE id=" + id;
				conn.update(sql);
				status = true;
			}
			else{
				status = false;
				msg = "你的旧密码输入错误！";
			}
		}
		catch(Exception e){
			System.err.print(e.getMessage());
		}
		finally{
			conn.closestmt();
			conn.closeconn();
		}
	}
}