wareinservlet.java

本系统是一个具有交互功能的C2C类型的电子商务网站（客户与客户之间进行商品交易的平台）

package myservlet.s;
import mybean.b.*;
import java.sql.*;
import java.io.*;
import javax.servlet.*;
import javax.servlet.http.*;
public class WareInServlet extends HttpServlet{
  public void init(ServletConfig config) throws ServletException{
    super.init(config);
    try{
        Class.forName("com.microsoft.sqlserver.jdbc.SQLServerDriver");
    }catch(Exception e){}
  }
 public String handleString(String str){
  String s=str; 
  try{
     byte b[]=s.getBytes("ISO-8859-1");
     s=new String(b);
   }catch(Exception e){}
   return s;
 }
 
  public void doPost(HttpServletRequest request,HttpServletResponse response) throws ServletException,IOException{

       HttpSession session=request.getSession(true);
       LogInBean loginbean=(LogInBean)session.getAttribute("loginbean");
       boolean boo=true;
       if(loginbean==null){
         boo=false;
         response.sendRedirect("index.html");
       }
       if(boo==true){
         boolean issuccess=loginbean.getIssuccess();
         String loginname=loginbean.getLoginname();
         continueDoPost(request,response,loginname,issuccess);
       }
  }
  public void continueDoPost(HttpServletRequest request,HttpServletResponse response,String loginname,boolean issuccess) throws ServletException,IOException{
       Connection con;
       Statement sql;
       String role="";
       String backnews;


       WareInBean wareinbean=new WareInBean();
       request.setAttribute("wareinbean",wareinbean);

       String swarename=handleString(request.getParameter("warename"));
       String sprice=handleString(request.getParameter("price"));    
       String scompany=handleString(request.getParameter("company"));
       String sintro=handleString(request.getParameter("intro"));
       String spicurl=handleString(request.getParameter("picurl"));
       String ssortname=handleString(request.getParameter("sortname"));

   try{
       con=DriverManager.getConnection("jdbc:sqlserver://127.0.0.1:1433;DatabaseName=shopping","shop","123");
       sql=con.createStatement();
        String querystr="select Role from users where UserName='"+loginname+"'";
          ResultSet rs=sql.executeQuery(querystr);
          if(rs.next()){role=rs.getString(1);}

          if(issuccess&&role.equals("1")){


          String insertstr="insert into wares (WareName,Company,Price,PicUrl,Intro,SortName) values('"+swarename+"','"+scompany+"','"+sprice+"','"+spicurl+"','"+sintro+"','"+ssortname+"')";
          int m=sql.executeUpdate(insertstr);
          if(m!=0){
             backnews="插入成功!";
             wareinbean.setBacknews(backnews);
             wareinbean.setWarename(swarename);          
             wareinbean.setPrice(sprice);      
             wareinbean.setCompany(scompany);
             wareinbean.setPicurl(spicurl);
             wareinbean.setIntro(sintro);
             wareinbean.setSortname(ssortname);
          }
          else{
             backnews="插入失败!";
             wareinbean.setBacknews(backnews);
          }
         }else {
           backnews="您没有正确登陆!";
           wareinbean.setBacknews(backnews);  
         }
       con.close();
    }catch(Exception ee){
       backnews=""+ee;
       wareinbean.setBacknews(backnews);       
    }
    RequestDispatcher dispatcher=request.getRequestDispatcher("wareinresult.jsp");
    dispatcher.forward(request,response);    
  }
  public void doGet(HttpServletRequest request,HttpServletResponse response) throws ServletException,IOException{
    doPost(request,response);
  }
}