dealupdateuser.jsp

课程设计中的在线书店源码

<%@ page contentType="text/html;charset=gb2312" import="java.sql.*"%>
<%@ include file="check.jsp"%>
<jsp:useBean id="conn" class="dbBean.DBBean" scope="session"/>
<%
String id="";
String password="";
String sex="";
String age="";
String phone="";
String email="";
String address="";
String face="";
String rank="0";
String logrank="";
String logid="";
ResultSet rs=null;
request.setCharacterEncoding("gb2312");
if(session.getAttribute("rank")!=null)
	logrank=(String)session.getAttribute("rank");
if(session.getAttribute("id")!=null)
	logid=(String)session.getAttribute("id");
if(request.getParameter("updateid")!=null)
	id=request.getParameter("updateid");
if(!logrank.equals("4")&&!logid.equals(id))
	response.sendRedirect("error.jsp");
else{
if(request.getParameter("password")!=null)
	password=request.getParameter("password");
if(request.getParameter("sex")!=null)
	sex=request.getParameter("sex");
if(request.getParameter("age")!=null)
	age=request.getParameter("age");
if(request.getParameter("phone")!=null)
	phone=request.getParameter("phone");
if(request.getParameter("email")!=null)
	email=request.getParameter("email");
if(request.getParameter("address")!=null)
	address=request.getParameter("address");
if(request.getParameter("face")!=null)
	face=request.getParameter("face");
if(request.getParameter("rank")!=null)
	rank=request.getParameter("rank");

	String sql="update user set password='"+password+"',sex='"+sex+"',age='"+age+"',phone='"+phone+"',email='"+email+"',address='"+address+"',face='"+face+"' where userid="+id;
	conn.executeUpdate(sql);
	if(logrank.equals("4"))
	{
		sql="update user set rank="+rank+" where userid="+id;
		conn.executeUpdate(sql);
	}	
	conn.close();
	if(logrank.equals("4"))
		response.sendRedirect("manage.jsp");
	else
		response.sendRedirect("home.jsp");
}
%>