admincenter.jsp

一个小的图书管理系统供大家参考。有什么意见大家一起讨论一下

<%@ page pageEncoding="gbk" %>
<%@ include file="conn.jsp"%>
<%
String getword=request.getParameter("login");
if(getword!=null){
if(getword.compareTo("true")==0) {
//out.print("<div align=center>你提交了表单</div>");
String name,pwd;
name=request.getParameter("id");
pwd=request.getParameter("pwd");
name=Bytes(name);
pwd=Bytes(pwd);
//out.print(name);
//out.print(pwd);
Statement stmt=conn.createStatement(ResultSet.TYPE_SCROLL_SENSITIVE,ResultSet.CONCUR_UPDATABLE);
String sql="select * from eshow_admin where eshow_admin='"+name+"' and eshow_adminpwd='"+pwd+"' order by id"; 
ResultSet rs=stmt.executeQuery(sql); //操作数据库
if(rs.next()){//登陆成功
//out.print(rs.getString("eshow_admin"));
session.putValue("name",name);
session.putValue("pwd",pwd);
//out.print(session.getValue("name"));
out.print("<script>alert('登陆成功，确定后既可以进行管理操作');window.location.href='default.jsp';</script>");
}
else{
out.print("<div align=center>登陆失败，用户名或密码错误，请重试</div>");
}
rs.close();
stmt.close();
}
}
out.print("<table width='771' border='0' align='center' cellpadding='5' cellspacing='1' bgcolor='#000000'><form name='form1' method='post' action='admin.jsp?login=true'>");
out.print("<tr bgcolor='#FFFFFF'><td width='300' align=right>管理员</td><td width='471'>请勿尝试非法登陆，否则后果自负</td></tr><tr bgcolor='#FFFFFF'><td align=right>ID:</td><td><input name='id' type='text' id='id'></td></tr>");
out.print("<tr bgcolor='#FFFFFF'><td align=right>密码:</td><td><input name='pwd' type='password' id='pwd'></td></tr><tr bgcolor='#FFFFFF'><td>&nbsp;</td>");
out.print("<td><input type='submit' name='Submit' value='提交'><input type='reset' name='Submit' value='重置'></td></tr></form></table>");
%>