admin_check.jsp

基于jsp的网络百宝箱

<%@ page language="java" contentType="text/html; charset=GBK"
 pageEncoding="GB18030" import="java.sql.*"%>
<%@ include file="config.ini"%>
<%@ include file="conn.jsp"%>
<%@ include file="md5.jsp"%>
<%
//接收管理员提交的登录用户名和密码
String username=codeToString(request.getParameter("username"));
String password=codeToString(request.getParameter("password"));
try
{
 //根据管理员登录名进行查询
 sqlstr="select id,password from admin where username='"+username+"'";
 rs=iCanDb.doSelect(sqlstr);
 //将查询后得到的结果集中的密码字段与管理员登录密码进行匹配
 if(rs.next())
 {
  String pwd=rs.getString("password").trim();
  String id=rs.getString("id").trim();
  //如果匹配成功，则表示登录密码正确
  if(md5(password).equals(pwd))
  {
   session.setAttribute("iCanadmin",id);
   response.sendRedirect("admin.jsp");
  }
  //否则输出登录错误信息
  else
  {
   out.print("<script>");
   out.print("alert('密码错误！');");
   out.print("history.back();");
   out.print("</script>");
  }
 }
 else
 {
  out.print("<script>");
  out.print("alert('管理员信息错误！');");
  out.print("history.back();");
  out.print("</script>");
 }
}
catch(Exception e)
{
  out.print("<script>");
  out.print("alert('数据库错误！');");
  out.print("history.back();");
  out.print("</script>");
}
%>