editnews.java

：一个用JavaScript开发的新闻管理系统。

package news;
import java.io.*;
import java.sql.*;
import java.util.Date;
import java.io.IOException;
import javax.servlet.http.HttpSession;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

public class EditNews  extends HttpServlet{
  PrintWriter out;
String nid,title,style,from,nickname,content,ip,datetime;

public void doPost(HttpServletRequest request,
                HttpServletResponse response)
  throws IOException
{
 response.setContentType("text/html;charset=GBK");
 out=response.getWriter();
 HttpSession session=request.getSession(false);
 //String id=(String)session.getAttribute("adminid");
 int adminid=(Integer)session.getAttribute("adminid");//Integer.parseInt(id);
 int power=(Integer)session.getAttribute("power");
 StrEncode SE=new StrEncode();
 nid=request.getParameter("nid");
 int nnid=Integer.parseInt(nid);
 title=SE.Encode(request.getParameter("title"));
 style=SE.Encode(request.getParameter("style"));
 from=SE.Encode(request.getParameter("from"));
 content=SE.Encode(request.getParameter("content"));
 content=SE.HtmlRep(content);
 Date date=new Date();
 datetime=date.toLocaleString();
 DBConn conn=new DBConn();
 try{
   NewsAdmin NA=new NewsAdmin();
   if(NA.canAdmin(adminid,nnid)||power>10){
     String sql ="UPDATE news SET title=?,style=?,pfrom=?,content=? WHERE id="+nid;
     PreparedStatement pstmt = conn.getPstmt(sql);
     pstmt.setString(1, title);
     pstmt.setString(2, style);
     pstmt.setString(3, from);
     pstmt.setString(4, content);
     int flag = pstmt.executeUpdate();
     pstmt.close();
     conn.DBclose();
     if (flag > 0) {
       response.sendRedirect("shownews.jsp?nid=" + nid);
     }
   }
   else{
     out.print("你无权操作！");
   }
  }
  catch(Exception e){
   out.print("发表评论写入数据库失败！"+e.toString());
   }
}
 public void doGet(HttpServletRequest request,
                    HttpServletResponse response)
      throws IOException
  {
      doPost(request, response);
  }

}