check.jsp

基于jsp的网络百宝箱

<%@ page language="java" contentType="text/html; charset=GBK"
 pageEncoding="GB18030" import="java.sql.*"%>
<%@ include file="config.ini"%>
<%@ include file="conn.jsp"%>
<%@ include file="md5.jsp"%>
<%
//获取用户提交的登录名和密码
String username=codeToString(request.getParameter("username"));
String password=codeToString(request.getParameter("password"));
try
{
 sqlstr="select password,id from users where username='"+username+"'";
 //调用conn.jsp页面中引入的JavaBean对象iCanDb的doSelect()方法执行查询操作
 rs=iCanDb.doSelect(sqlstr);
 //将查询得到的结果集中的密码字段与用户输入的密码进行匹配
 if(rs.next())
 {
  String pwd=rs.getString("password").trim();
  String userid=rs.getString("id").trim();
  //登录成功，则转向index.jsp页面
  if(md5(password).equals(pwd))
  {
   session.setAttribute("iCan",userid);
   response.sendRedirect("index.jsp");
  }
  //否则显示错误信息
  else
  {
   out.print("<script>");
   out.print("alert('密码错误！');");
   out.print("history.back();");
   out.print("</script>");
  }
 }
 else
 {
  out.print("<script>");
  out.print("alert('该用户不存在！');");
  out.print("history.back();");
  out.print("</script>");
 }
}
catch(Exception e)
{
  out.print("<script>");
  out.print("alert('数据库错误！');");
  out.print("history.back();");
  out.print("</script>");
}
%>