do_login.jsp

java + sqlserver2000编写的一个网上购书系统,实现了一些基本的功能,但对于初学者来说这个系统已经足以起到帮助作用

<%@ page contentType="text/html;charset=gb2312"%>
<%@ page import="java.sql.*"%>
<%@ page import="MD5.MD5"%>
<jsp:useBean id="databean" scope="session" class="ConnBean.conn" />
<%
	ResultSet rset = null;
	String userName = request.getParameter("userName");
	String password = request.getParameter("password");
	MD5 md5=new MD5();
	password=md5.getMD5ofStr(password);
	String code = request.getParameter("code");

	if (session.getAttribute("rand").equals(code)) {
		try {
			String sql = "select * from userinfo where userName='"
					+ userName + "' and UserPass='" + password + "'";
			rset = databean.executeQuery(sql);
			if (rset.next()) {
				session.setAttribute("user", userName);
				out
						.print("<script language=\"JavaScript\">alert(\"欢迎进入半岛书城!\");location.href=\"../logindindex.jsp\"</script>");
				//response.sendRedirect("index.jsp");

			} else {
				out
						.print("<script language=\"JavaScript\">alert(\"用户名称或密码不正确,请重新登录\");location.href=\"../index.jsp\";</script>");
			}
		} catch (SQLException e) {
			e.printStackTrace();
		}
	} else {
		out
				.print("<script language=\"JavaScript\">alert(\"验证码错误,请重新登陆\");location.href=\"../index.jsp\";</script>");
	}
%>
<form action="do_login.jsp" method="post" align="center">
	<td>
		<input type="text" name="userName">
	</td>