电子商务（网上鲜花销售系统）

package dao; import java.sql.Connection; import java.sql.PreparedStatement; import java.sql.ResultSet; import java.sql.SQLException; import java.sql.Statement; import java.util.ArrayList; import java.util.List; import util.DB; import bean.Customer; public class CustomerDao { public void addCustomer(Customer customer){ String sql = "insert into customer(cusno,cusname,password,sex,email,mobile,post,address) " +"values(?,?,?,?,?,?,?,?)"; Connection conn = null; PreparedStatement pstmt = null; conn = DB.getconn(); try { pstmt = conn.prepareStatement(sql); pstmt.setString(1,customer.getCusno()); pstmt.setString(2,customer.getCusname()); pstmt.setString(3,customer.getPassword()); pstmt.setString(4,customer.getSex()); pstmt.setString(5,customer.getEmail()); pstmt.setString(6, customer.getMobile()); pstmt.setString(7,customer.getPost()); pstmt.setString(8,customer.getAddress()); pstmt.execute(); System.out.println(sql); } catch (SQLException e) { e.printStackTrace(); } } public List<Customer> findAll(){ Connection conn=null; Statement sta=null; String sql="select * from customer order by cusno asc"; ResultSet rs=null; List list=new ArrayList(); try{ conn=DB.getconn(); sta = conn.createStatement(); rs=sta.executeQuery(sql); while(rs.next()){ Customer cus = new Customer(); cus.setCusno(rs.getString("cusno")); cus.setCusname(rs.getString("cusname")); cus.setPassword(rs.getString("password")); cus.setSex(rs.getString("sex")); cus.setEmail(rs.getString("email")); cus.setMobile(rs.getString("mobile")); cus.setPost(rs.getString("post")); cus.setAddress(rs.getString("address")); list.add(cus); } }catch(SQLException e){ e.printStackTrace(); } finally{ DB.closeRs(rs); DB.closeStmt(sta); DB.closeConn(conn); } return list; } public boolean checkLogin(String cusno,String password){ boolean flag = false; String sql ="select * from customer where cusno="+"'"+cusno+"'"+" and password='"+password+"'"; Connection conn=null; Statement sta=null; ResultSet rs=null; conn=DB.getconn(); try { sta = conn.createStatement(); System.out.println(sql); rs=sta.executeQuery(sql); } catch (SQLException e) { e.printStackTrace(); } try { if(rs.next()){ flag = true ; } } catch (SQLException e) { // TODO Auto-generated catch block e.printStackTrace(); } return flag; } public boolean modifyKey(String cusno,String oldpassword,String newpassword ){ String sql ="update customer set password=" +"'"+newpassword+"' "+"where cusno="+"'"+cusno+"' " +"and password="+"'"+oldpassword+"'"; boolean flag = false; Connection conn=null; Statement sta=null; conn=DB.getconn(); int i = 0; try { sta = conn.createStatement(); System.out.println(sql); i = sta.executeUpdate(sql); } catch (SQLException e) { e.printStackTrace(); } if(i==1){ flag= true; } return flag; } public Customer showCustomerInfo(String cusno){ Customer cus = new Customer(); Connection conn=null; Statement sta=null; String sql="select * from customer where cusno='"+cusno+"'"+" order by cusno asc"; ResultSet rs=null; List list=new ArrayList(); try{ conn=DB.getconn(); sta = conn.createStatement(); System.out.println(sql); rs=sta.executeQuery(sql); while(rs.next()){ cus.setCusno(rs.getString("cusno")); cus.setCusname(rs.getString("cusname")); cus.setPassword(rs.getString("password")); cus.setSex(rs.getString("sex")); cus.setEmail(rs.getString("email")); cus.setMobile(rs.getString("mobile")); cus.setPost(rs.getString("post")); cus.setAddress(rs.getString("address")); } }catch(SQLException e){ e.printStackTrace(); } finally{ DB.closeRs(rs); DB.closeStmt(sta); DB.closeConn(conn); } return cus; } }