loginservlet.java~18~

一个oracle和JSP做的论坛

package hcit.Servlet;

import javax.servlet.*;
import javax.servlet.http.*;
import java.io.*;
import java.util.*;
import hcit.common.DBConnect;
import java.sql.*;
import oracle.jdbc.OracleTypes;

public class LoginServlet extends HttpServlet {
    private static final String CONTENT_TYPE = "text/html; charset=GBK";

    //Initialize global variables
    public void init() throws ServletException {
    }

    //Process the HTTP Get request
    public void doGet(HttpServletRequest request, HttpServletResponse response) throws
            ServletException, IOException {
        response.setContentType(CONTENT_TYPE);
        PrintWriter out = response.getWriter();

        HttpSession s = request.getSession();
        DBConnect db = new DBConnect();

        String uname = request.getParameter("bbsuser");
        String pwd = request.getParameter("password");
        String useryz = request.getParameter("useryz");
        //System.out.println(useryz);
        String OriYZ = (String) s.getAttribute("rand");
        //String flag="n";
        //System.out.println(OriYZ);

        CallableStatement st;
        String proc = "{call usercheck(?,?,?,?)}";
        if (!useryz.equals(OriYZ)) {
            //System.out.println("YZ Error");
            s.setAttribute("check", "f");
            response.sendRedirect("login.jsp");
        } else {
            try {
                st = db.conn.prepareCall(proc);
                st.setString(1, uname);
                st.setString(2, pwd);
                st.registerOutParameter(3, OracleTypes.VARCHAR);
                st.registerOutParameter(4, OracleTypes.VARCHAR);
                st.executeUpdate();
                String state = st.getString(3);
                String uid = st.getString(4);
                if (state.equals("t")) {
                    s.setAttribute("userid", uid);
                    s.setAttribute("username", uname);
                    response.sendRedirect("main.jsp");
                } else {
                    response.sendRedirect("login.jsp");
                }
            } catch (Exception ex) {

            }
        }
    }

    //Process the HTTP Post request
    public void doPost(HttpServletRequest request, HttpServletResponse response) throws
            ServletException, IOException {
        doGet(request, response);
    }

    //Clean up resources
    public void destroy() {
    }
}