struts用户注册登录用校验器校验信息

package com.x3408.visitor; import java.sql.Connection; import java.sql.ResultSet; import java.sql.SQLException; import java.sql.Statement; import com.x3408.visitor.DBConnetion; public class checkuser { Connection conn = null; Statement stmt = null; //登录系统 public boolean ifLoginSuccess(User login) throws SQLException { boolean flag = false; String Username=login.getUsername(); String Password=login.getPassword(); try { conn = DBConnetion.getDBC(); stmt = conn.createStatement(); String sql = "select UserName,Password from T_User where UserName='" +Username+"' and Password = '" + Password + "'"; ResultSet rs = stmt.executeQuery(sql); if (rs.next()) { flag = true; rs.close(); } } catch (Exception e) { e.printStackTrace(); } finally { stmt.close(); conn.close(); } return flag; } public int executeAdd(del_regist tt)throws SQLException{ int icount=0; String Username=tt.getRegist().getUsername(); String Password=tt.getRegist().getPassword(); String Sex=tt.getSex(); String City=tt.getCity(); String About=tt.getAbout(); int Age=tt.getAge(); System.out.println(Username); try { conn = DBConnetion.getDBC(); stmt = conn.createStatement(); String sql = "insert into T_User(UserName,Password,Sex,City,About,Age) values('"+Username+"','"+Password + "','"+Sex+"','"+City+"','"+About+"',"+Age+")"; icount= stmt.executeUpdate(sql); } catch (Exception e) { e.printStackTrace(); } finally { stmt.close(); conn.close(); } return icount; } }