useredit.jsp

学生管理系统 对学生成绩的操作

<%@page contentType="text/html; charset=GBK" import="java.sql.*"%>
<%
String driver = "com.microsoft.jdbc.sqlserver.SQLServerDriver"; //驱动程序
String url="jdbc:microsoft:sqlserver://localhost:1433;DatabaseName=stuManager";//数据库连接语句
String userID="sa",pwd="sa",sql="";
  try {
    Class.forName(driver); //调入JDBC-ODBC桥的驱动程序
    Connection conn = DriverManager.getConnection(url, userID, pwd); //建立与数据的连接
    //request对象
    Statement stmt = conn.createStatement(); //建立Statement的实例，相当于创建一个查询分析器的运行环境
    sql = "select * from users where userID='" + session.getAttribute("userid") + "' and password='" + request.getParameter("oldPwd") + "'"; ;
    //System.out.println(sql);
    ResultSet rs = stmt.executeQuery(sql); //把查询结果放入ResultSet对象
    if (rs.next()) { //判断用户是否存在
      sql = "update users set password='" + request.getParameter("pwd") + "' where userID='" + session.getAttribute("userid") + "'";
      if (stmt.executeUpdate(sql) > 0) {
        response.sendRedirect("UserList.jsp"); //response对象见第四章,连接到memCenter.jsp页面
      }
    }
    else {
%>
<script language="javascript">
alert("旧密码错误");
window.history.go(-1);
</script>
<%
  }
  } catch (Exception e) {
    System.out.println(e.getMessage());
  }
%>