useropbean.java

网上书店代码实现文件的上传下载功能购书管理书的功能

package bean.db;
import java.security.MessageDigest;
import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import bean.db.common.dbOpertaion;
/**
 * @author 邓子云
 * 封装对用户表的操作
 */
public class userOPBean extends dbOpertaion{
    /**
     * 增加一个用户
     */  
    public int addUser(userBean user){
        int i=0;
        //------为密码计算摘要------
        String codeMD5=null;
        try{
            MessageDigest MD=MessageDigest.getInstance("MD5");
            MD.update((user.getUser_name()+user.getUser_password()).getBytes("UTF8"));
            byte[] passwordMD5Byte=MD.digest();
            codeMD5=new String(passwordMD5Byte);
            codeMD5=new String(codeMD5.getBytes("iso-8859-1"));
        }catch(Exception e){
    		e.printStackTrace();
    		i=0;
        }
        //------构造SQL语句------
        String sqlString="insert into netuser(user_name,user_true_name,user_address,"+
            "user_telephone,user_postalcode,user_role,user_password) values('"+
            user.getUser_name()+"','"+user.getUser_true_name()+"','"+user.getUser_address()+
            "','"+user.getUser_telephone()+"','"+user.getUser_postalcode()+"',"+
            user.getUser_role()+",?)";
        Connection conn=openDB();
        try{
            PreparedStatement preSQLInsert=conn.prepareStatement(sqlString);
            preSQLInsert.setString(1,codeMD5);
            i=preSQLInsert.executeUpdate();
        }catch(Exception e){
    		e.printStackTrace();
    		i=0;
        }
        closeDB(conn);
        return i;
    }
    /**
     * 用户检验,如果失败返回0,如果成功返回用户的ID号
     */
    public long certUser(String user_name,String user_password){
        long i=0;
        //------为密码计算摘要------
        String codeMD5=null;
        try{
            MessageDigest MD=MessageDigest.getInstance("MD5");
            MD.update((user_name+user_password).getBytes("UTF8"));
            byte[] passwordMD5Byte=MD.digest();
            codeMD5=new String(passwordMD5Byte);
            codeMD5=new String(codeMD5.getBytes("iso-8859-1"));
        }catch(Exception e){
    		e.printStackTrace();
        }
        //------构造SQL语句------
        String sqlString="select * from netuser where user_name='"+
        	user_name+"' and user_password=?";
        //------查询出数据------
        Connection conn=openDB();
        try{
            PreparedStatement preSQLSelect=conn.prepareStatement(sqlString);
            preSQLSelect.setString(1,codeMD5);
            ResultSet rs=preSQLSelect.executeQuery();
            if(rs.next())
                i=rs.getLong("user_id");
        }catch(Exception e){
    		e.printStackTrace();
        }
        closeDB(conn);
        return i;     
    }
}