insertcomm.java

：一个用JavaScript开发的新闻管理系统。

package news;
import java.io.*;
import java.sql.*;
import java.util.Date;
import java.io.IOException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

public class InsertComm extends HttpServlet {
  PrintWriter out;
  String nid,nickname,content,ip,datetime;

public void doPost(HttpServletRequest request,
                  HttpServletResponse response)
    throws IOException
{
   response.setContentType("text/html;charset=GBK");
   out=response.getWriter();
   StrEncode SE=new StrEncode();
   nid=request.getParameter("nid");
   int nnid=Integer.parseInt(nid);
   nickname=SE.Encode(request.getParameter("nickname"));
   content=SE.Encode(request.getParameter("content"));
   content=SE.HtmlRep(content);
   ip=request.getRemoteAddr();
   Date date=new Date();
   datetime=date.toLocaleString();
   DBConn conn=new DBConn();
   try{
     String sql = "INSERT INTO commentary VALUES(?,?,?,?,?,?)";
     PreparedStatement pstmt = conn.getPstmt(sql);
     pstmt.setInt(1,0);
     pstmt.setInt(2,nnid);
     pstmt.setString(3,nickname);
     pstmt.setString(4,content);
     pstmt.setString(5,datetime);
     pstmt.setString(6,ip);
     int flag=pstmt.executeUpdate();
     pstmt.close();
     conn.DBclose();
     if(flag>0){
       response.sendRedirect("shownews.jsp?nid="+nid);
     }
   }
   catch(Exception e){
     out.print("发表评论写入数据库失败！"+e.toString());
   }
}
public void doGet(HttpServletRequest request,
                      HttpServletResponse response)
        throws IOException
    {
        doPost(request, response);
    }

}