userupdatepwd.jsp

java + sqlserver2000编写的一个网上购书系统,实现了一些基本的功能,但对于初学者来说这个系统已经足以起到帮助作用

<%@ page contentType="text/html;charset=gb2312"%>
<%@ page import="java.sql.*"%>
<%@ page import="MD5.MD5"%>
<jsp:useBean id="databean" scope="session" class="ConnBean.conn" />
<%
	ResultSet rset = null;
	String userName = (String) session.getAttribute("user");
	String password = request.getParameter("password");
	MD5 md5=new MD5();
				password=md5.getMD5ofStr(password);
	String password1 = request.getParameter("password1");
	String password2 = request.getParameter("password2");
	if (password1 != "") {
		if (password1.equals(password2)) {
			try {

				String sql = "select * from userinfo where userName='"
						+ userName + "'";
				

				rset = databean.executeQuery(sql);

				if (rset.next()) {
					if (rset.getString("UserPass").equals(password)) {
					
				password1=md5.getMD5ofStr(password1);
				String sql1 = "update userinfo set UserPass='"
						+ password1 + "' where UserName='" + userName + "'";
						int a = databean.executeUpdate(sql1);
						rset.close();

						out
								.print("<script language=\"JavaScript\">alert(\"修改成功！\");location.href=\"mybandao.jsp\"</script>");

					} else {
						out
								.print("<script language=\"JavaScript\">alert(\"请正确输入现在的密码！！\");location.href=\"mybandao.jsp\"</script>");
					}

				} else {
					out
							.print("<script language=\"JavaScript\">alert(\"网页上有错误，请重新操作！\");location.href=\"mybandao.jsp\"</script>");
				}
			} catch (SQLException e) {
				e.printStackTrace();
			}
		} else {
			out
					.print("<script language=\"JavaScript\">alert(\"确认密码于新密码不同，请重新操作！\");location.href=\"mybandao.jsp\"</script>");
		}
	} else {
		out
				.print("<script language=\"JavaScript\">alert(\"新密码不能为空，请重新操作！\");location.href=\"mybandao.jsp\"</script>");
	}
%>