公司真实项目源码（java）

package New; import java.io.File; import java.io.FileInputStream; import java.io.FileOutputStream; import java.sql.Connection; import java.sql.PreparedStatement; import java.sql.ResultSet; import java.sql.Statement; import java.text.SimpleDateFormat; import java.util.ArrayList; import java.util.Hashtable; import javax.servlet.http.HttpSession; import javax.servlet.http.HttpServletRequest; import javax.servlet.jsp.PageContext; import Bean.SQL_Bean; public class NewBean { private String Title="",Content="",Image="",Pms=""; private int NewsID=0, CategoryID=0,DeptID=0,UserID=0, Hits=0,Auditing=0,Pmstype=0,ID=0,CheckImage=0,FixUp=0,Type=0; private Hashtable table = null; private ArrayList list = null; private Connection con=null; private Statement stmt=null; private PreparedStatement stmt1=null; private ResultSet rs = null; private PageContext pageContext; //该类别下新闻的集合 public int getPage(int categoryID,int id,int type) { int allCol=0; String sql = "SELECT COUNT(*) FROM News where CategoryID="+categoryID; if(type==1) { DeptID = id; sql+=" and DeptID="+DeptID; }else if(type==2) { UserID = id; sql+=" and UserID = "+UserID; }else if(type==3) { sql+=" and Auditing =2 "; } try{ SQL_Bean sqlbean = new SQL_Bean(); con = sqlbean.getConnection(); stmt = con.createStatement(); rs = stmt.executeQuery(sql); if(rs.next()) { allCol=rs.getInt(1); } rs.close(); stmt.close(); con.close(); } catch(Exception e){ } return allCol; } //新闻的集合 public ArrayList getselectnews(int ipage,int cpage,int categoryID,int id,int type) { // type 为区分登陆人身份不同查询不同的新闻 // type=1时部门主管登陆查询整个属于该部门用户录入的新闻 // type=2时普通职工登陆查询自己录入的新闻 // type=3时查询审核全部通过的新闻 // 系统管理员可以查询所有用户录入的新闻 // 传入的id 可以是部门的标识 可以是用户的标识 list = new ArrayList(); String sql = "select Top "+ipage+" * from News where CategoryID="+categoryID; if(type==1) { DeptID = id; sql+=" and DeptID="+DeptID; }else if(type==2) { UserID = id; sql+=" and UserID = "+UserID; }else if(type==3) { sql+=" and Auditing =2 "; } sql+= " and NewsID not in (select top "+(cpage-1)*ipage+" NewsID from News where CategoryID="+categoryID; if(type==1) { DeptID = id; sql+=" and DeptID="+DeptID; }else if(type==2) { UserID = id; sql+=" and UserID = "+UserID; }else if(type==3) { sql+=" and Auditing =2 "; } sql+=" order by NewsID desc)order by NewsID desc"; try{ SQL_Bean sqlbean = new SQL_Bean(); con = sqlbean.getConnection(); stmt = con.createStatement(); rs = stmt.executeQuery(sql); while(rs.next()) { table = new Hashtable(); NewsID = rs.getInt("NewsID"); Title = rs.getString("Title"); java.util.Date PublishTime=rs.getDate("PublishTime"); Auditing = rs.getInt("Auditing"); DeptID = rs.getInt("DeptID"); table.put("newsid",NewsID+""); table.put("title",Title); table.put("publishtime",PublishTime+""); table.put("auditing",Auditing+""); table.put("deptid",DeptID+""); list.add(table); } rs.close(); stmt.close(); con.close(); } catch(Exception e){ } return list; } //站内搜索新闻的集合 public ArrayList getselectnewsSearch(String title) { list = new ArrayList(); String sql = "select * from News where Title like '%"+ title +"%'"; sql+=" order by NewsID desc"; try{ SQL_Bean sqlbean = new SQL_Bean(); con = sqlbean.getConnection(); stmt = con.createStatement(); rs = stmt.executeQuery(sql); while(rs.next()) { table = new Hashtable(); NewsID = rs.getInt("NewsID"); Title = rs.getString("Title"); CategoryID = rs.getInt("CategoryID"); java.util.Date PublishTime=rs.getDate("PublishTime"); Auditing = rs.getInt("Auditing"); DeptID = rs.getInt("DeptID"); table.put("newsid",NewsID+""); table.put("title",Title); table.put("categoryid",CategoryID+""); table.put("publishtime",PublishTime+""); table.put("auditing",Auditing+""); table.put("deptid",DeptID+""); list.add(table); } rs.close(); stmt.close(); con.close(); } catch(Exception e){ } return list; } //新闻的添加 public int inserttable(HttpServletRequest request,String dir) throws Exception{ HttpSession session = request.getSession(); // SmartUpload mySmartUpload = new SmartUpload(); // // //初始化 // mySmartUpload.initialize(pageContext); // mySmartUpload.setMaxFileSize(500 * 1024 * 1024 * 1024); // mySmartUpload.upload(); // System.out.println(mySmartUpload.getFiles().getCount() + "个文件上传成功！<br>"); // //=mySmartUpload.getRequest().getParameter("xxzt"); // // // String SaveName="",strImageName="",newFileNameUrl=""; // Title = mySmartUpload.getRequest().getParameter("Title"); System.out.println("titile==="+session.getAttribute("Image")); if(session.getAttribute("Image")==null) { Image=""; }else { Image = session.getAttribute("Image").toString(); } Title = request.getParameter("Title"); String userid=request.getParameter("userid"); UserID=Integer.parseInt(userid); String categoryid=request.getParameter("categoryid"); CategoryID=Integer.parseInt(categoryid); // String oldFileNameUrl = request.getParameter("Image"); // if(oldFileNameUrl!=null&&!"".equals(oldFileNameUrl)) // { // strImageName = oldFileNameUrl.substring(oldFileNameUrl.lastIndexOf("\\")+1); // newFileNameUrl = dir+"\\"+strImageName; // copyFile(oldFileNameUrl,newFileNameUrl); // } // Image = strImageName; Content = request.getParameter("Content"); if(Content.equals("")) { Content=" "; } String pmstype=request.getParameter("pmstype"); Pmstype=Integer.parseInt(pmstype); String type=request.getParameter("Type"); Type=Integer.parseInt(type); if(Pmstype==1) { String[] result = request.getParameterValues("pms1"); for (int i = 0; result!=null && i<result.length;i++){ String resultStr = result[i]; ID=Integer.parseInt(resultStr); Pms=Pms+ID+","; } if(!Pms.equals("")) { Pms=Pms.substring(0,Pms.length()-1); } }else { String[] result = request.getParameterValues("pms0"); for (int i = 0; result!=null && i<result.length;i++){ String resultStr = result[i]; ID=Integer.parseInt(resultStr); Pms=Pms+ID+","; } if(!Pms.equals("")) { Pms=Pms.substring(0,Pms.length()-1); } } String deptid = request.getParameter("deptid"); DeptID = Integer.parseInt(deptid); String checkimage = request.getParameter("CheckImage"); CheckImage = Integer.parseInt(checkimage); int returnvalues = 0; String sql = "insert into News (Title,CategoryID,Image,Content,PublishTime,UserID,Type,DeptID,Pmstype,Pms,CheckImage) values( '"+Title +"',"+CategoryID+",'"+Image+"',?,'"+new SimpleDateFormat("yyyy-MM-dd").format(new java.util.Date())+"',"+UserID+","+Type+","+DeptID+ ","+Pmstype+",'"+Pms+"',"+CheckImage+")"; try{ SQL_Bean sqlbean=new SQL_Bean(); con=sqlbean.getConnection(); stmt1=con.prepareStatement(sql,ResultSet.TYPE_SCROLL_INSENSITIVE, ResultSet.CONCUR_READ_ONLY); stmt1.setString(1,Content); returnvalues=stmt1.executeUpdate(); sqlbean.CloseStatement(stmt1); sqlbea