简单的jsp新闻发布网站

package com.Look.news; import java.io.IOException; import java.sql.Connection; import java.sql.Statement; import java.sql.ResultSet; import com.Look.news.ConnectionUtrl; import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; public class NewsAddStage extends HttpServlet { /** * The doPost method of the servlet. <br> * * This method is called when a form has its tag value method equals to * post. * * @param request * the request send by the client to the server * @param response * the response send by the server to the client * @throws ServletException * if an error occurred * @throws IOException * if an error occurred */ public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { request.setCharacterEncoding("gb2312"); String modelsID, writeTime, newsSource, newsAuthor, trueName, userID, keyWords, newsTitle, newsMatter; String sql1, sql; try { modelsID = request.getParameter("models"); writeTime = ConnectionUtrl.Nowdate; newsSource = request.getParameter("newsSource"); newsAuthor = request.getParameter("newsAuthor"); trueName = request.getParameter("trueName"); keyWords = request.getParameter("keyWords"); newsTitle = request.getParameter("newsTitle"); newsMatter = request.getParameter("newsMatter"); sql1 = "select userID from Users where trueName='" + trueName + "'"; Connection conn = ConnectionUtrl.getConnection(); Statement smt1 = conn.createStatement(); ResultSet rs = smt1.executeQuery(sql1); if (rs.next()) { userID = rs.getString("userID"); if (newsAuthor == "" || keyWords == "" || newsTitle == "" || newsMatter == "") { response.sendRedirect("../admin/newsAppend.jsp"); } else { sql = "insert into News (modelsID,writeTime, newsSource, newsAuthor,userID, keyWords, newsTitle, newsMatter) values('" + modelsID + "','" + writeTime + "','" + newsSource + "','" + newsAuthor + "','" + userID + "','" + keyWords + "','" + newsTitle + "','" + newsMatter + "')"; // Connection conn = ConnectionUtrl.getConnection(); Statement smt = conn.createStatement(); int getOK = smt.executeUpdate(sql); if (getOK == 1) { response.sendRedirect("../admin/newsList.jsp"); } conn.close(); } } } catch (Exception e) { System.out.print(e.toString()); } } }