flex+java+mysql登录

package com.bluefox.impl; import java.sql.ResultSet; import java.sql.SQLException; import java.sql.Statement; import java.util.ArrayList; import java.util.List; import com.bluefox.dao.LoginDAO; import com.bluefox.entry.Userinfo; import com.bluefox.utils.DBUtils; public class LoginImpl implements LoginDAO { DBUtils db = new DBUtils(); Statement sta = null; ResultSet rs = null; List ls = new ArrayList(); String psw = null; int i = 0; public int Login(String username, String password) { String sql = "select password from users where userid ='" +username+"'"; int i = 0; String psw = null; sta = db.getSta(); try { rs = sta.executeQuery(sql); while(rs.next()) { psw = rs.getString("password"); if(psw .equals(password)) { return 1; }else{ return 0; } } } catch (SQLException e) { // TODO Auto-generated catch block e.printStackTrace(); } return 0; } public List getUerinfo(String userid) { String sql = "select * from userinfo where userid ='"+userid+"'"; sta = db.getSta(); try { rs = sta.executeQuery(sql); while(rs.next()) { Userinfo ui = new Userinfo(); ui.username = rs.getString("username"); ui.age = Integer.parseInt(rs.getString("age")); ui.sex = Integer.parseInt(rs.getString("sex")); ls.add(ui); } } catch (SQLException e) { // TODO Auto-generated catch block e.printStackTrace(); } return ls; } /* * 查询旧密码 */ public String getPassword(String uid) { System.out.println("get password ..."); String sql = "select password from users where userid ='"+uid+"'"; sta = db.getSta(); try { rs = sta.executeQuery(sql); while(rs.next()) { psw = rs.getString("password"); } } catch (SQLException e) { // TODO Auto-generated catch block e.printStackTrace(); } return psw; } /* * 修改密码 */ public int updatePsw(String newpassword,String userid,String oldpsw) { System.out.println("reset password...."); String sql = "update users set password = '"+newpassword+"'where userid='"+userid+"'"; String oldpassword = this.getPassword(userid); System.out.println(oldpassword.equals(oldpsw)); if(oldpassword.equals(oldpsw)) { sta = db.getSta(); try { i = sta.executeUpdate(sql); } catch (SQLException e) { // TODO Auto-generated catch block e.printStackTrace(); } System.out.println(i); return i; } else { return 2; } } }