login.java~1~

用户登录

package myapp;

import java.sql.*;

/**
 * <p>用户登录管理类</p>
 */
public class login {
  Connection con = null;
  Statement stmt = null;
  PreparedStatement ps = null;
  ResultSet rs = null;

  private String username; //登录用户名称
  private String password; //登录用户密码
  private int userid = 0; //用户ID号
  private String rights; //用户权限

  /*public userLogin() {
     }
     public String getUsername() {
    return username;
     }
     public void setUsername(String user) {
    username = user;
     }
     public String getPassworrd() {
    return password;
     }
     public void setPassword(String pwd) {
    password = pwd;
     }
     public int getUserid() {
    return userid;
     }
     public void setUserid(int uid) {
    userid=uid;
     }
     public String getRights() {
    return rights;
     }
     public void setRights(String newrights) {
    rights = newrights;
     }
   */
  //检查用户是否存在
  public boolean userExist(String username) {
    Connection con = null;
    Statement stmt = null;
    PreparedStatement ps = null;
    ResultSet rs = null;
    boolean exist = false;
    String sql = "select * from admin where username=?"; //构造查询sql语句
    DBconn dbconn = new DBconn();
    dbconn.getConnect();
    try {
      con = dbconn.con;
      ps = con.prepareStatement(sql);
      ps.setString(1, username);
      rs = ps.executeQuery();
      if (!rs.next()) {
        exist = true;
      }
    }
    catch (SQLException e) {
      e.printStackTrace();
    }
    finally {
      dbconn.closeConn();
    }
    return exist;
  }

  //判断用户是否合法
  public boolean isValidUser(String username, String password) {
    Connection con = null;
    Statement stmt = null;
    PreparedStatement ps = null;
    ResultSet rs = null;
    boolean isValid = false;
    String sql = "select * from admin where username=? and password=?"; //构造查询sql语句
    DBconn dbconn = new DBconn();
    dbconn.getConnect();
    try {
      con = dbconn.con;
      ps = con.prepareStatement(sql);
      ps.setString(1, username);
      ps.setString(2, password);
      rs = ps.executeQuery();
      if (rs.next()) {
        isValid = true;
      }
    }
    catch (SQLException e) {
      e.printStackTrace();
    }
    finally {
      dbconn.closeConn();
    }
    return isValid;
  }

  //获取用户编号ID
  public int userID(String username, String password) {
    Connection con = null;
    Statement stmt = null;
    PreparedStatement ps = null;
    ResultSet rs = null;
    int id = 0;
    String sql = "select id from admin where username=? and password=?"; //构造查询sql语句
    DBconn dbconn = new DBconn();
    dbconn.getConnect();
    try {
      con = dbconn.con;
      ps = con.prepareStatement(sql);
      ps.setString(1, username);
      ps.setString(2, password);
      rs = ps.executeQuery();
      if (rs.next()) {
        id = rs.getInt("id");
      }
    }
    catch (SQLException e) {
      e.printStackTrace();
    }
    finally {
      dbconn.closeConn();
    }
    return id;
  }

  //获取用户权限
  public String userRights(String username, String password) {
    Connection con = null;
    Statement stmt = null;
    PreparedStatement ps = null;
    ResultSet rs = null;
    String rights = null;
    String sql = "select rights from admin where username=? and password=?"; //构造查询sql语句
    DBconn dbconn = new DBconn();
    dbconn.getConnect();
    try {
      con = dbconn.con;
      ps = con.prepareStatement(sql);
      ps.setString(1, username);
      ps.setString(2, password);
      rs = ps.executeQuery();
      if (rs.next()) {
        rights = rs.getString("rights");
      }
    }
    catch (SQLException e) {
      e.printStackTrace();
    }
    finally {
      dbconn.closeConn();
    }
    return rights;
  }

  //记录用户登陆日志
  public boolean setuserInformation(String username, String userIP,
                                    String datatime) {
    Connection con = null;
    Statement stmt = null;
    PreparedStatement ps = null;
    ResultSet rs = null;
    boolean flag = false;
    String sql = "update admin set loginTime='" + datatime + "',loginIP='" +
        userIP
        + "' where adminuser='" + username + "'"; //构造查询sql语句
    DBconn dbconn = new DBconn();
    dbconn.getConnect();
    try {
      con = dbconn.con;
      ps = con.prepareStatement(sql);
      ps.setString(1, datatime);
      ps.setString(2, userIP);
      ps.setString(3, username);
      ps.executeUpdate();
      flag = true;
    }
    catch (SQLException e) {
      e.printStackTrace();
    }
    finally {
      dbconn.closeConn();
    }
    return flag;
  }
}