dealaddmessage.jsp

机械工业出版社的《jsp2.0动态网站开发实例指南》的源代码

<%@ page contentType="text/html;charset=gb2312"%>
<%@ page import="shop.logBean"%>
<%@ page import="java.sql.*"%>
<%@ page import="java.util.*"%>
<%!
	public String codeString(String s){
		String str=s;
                try{
			byte b[]=str.getBytes("ISO-8859-1");
			str=new String (b);
			return str;
		}catch(Exception e){return str;}
	}
%>
<%
	if(session.isNew()){
		response.sendRedirect("index.jsp");
	}
	else {
		%>
		<jsp:useBean id="log" class="shop.logBean" scope="session"/>
		<%
		String islog=log.getIslog();
		if(!islog.equals("true")){
			response.sendRedirect("index.jsp");
		}
		else{
			String title=request.getParameter("title");
			String message=request.getParameter("message");
			String userid=request.getParameter("userid");
			String fromid=log.getId(); 
			if(title==null)title="";
			if(message==null)message="";
			if(userid==null)userid="";
			if(fromid.equals(userid)||userid.equals("")||(title.equals("")&&message.equals(""))){
				response.sendRedirect("addmessage.jsp");
			}
			else{
				java.util.Date date = new java.util.Date();
				String time=date.toString();
				title=codeString(title);
				message=codeString(message);
				userid=codeString(userid);
  				fromid=codeString(fromid);
				try{
					Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
     					Connection con=DriverManager.getConnection("jdbc:odbc:myshop","","");
    					Statement sql = con.createStatement();
    					String condition="select * from user where id="+"'"+userid+"'";
    					ResultSet rs=sql.executeQuery(condition);
     					if(!rs.next()){
        					con.close();
        					response.sendRedirect("addmessage.jsp");
      					}
      					else{
    						String insert="insert into message values (?,?,?,?,?);";
        					PreparedStatement pstmt=con.prepareStatement(insert);
        					pstmt.setString(1,time);
        					pstmt.setString(2,message);
        					pstmt.setString(3,fromid);
        					pstmt.setString(4,userid);
        					pstmt.setString(5,title);
        					pstmt.executeUpdate();
        					pstmt.close();
       						con.close();
       						response.sendRedirect("message.jsp");
       					}
      				}catch(SQLException e){
      					response.sendRedirect("index.jsp");

      				}catch(ClassNotFoundException e){
  					response.sendRedirect("index.jsp");
  				}
  			}
		}
	}
%>