网上书城网上书城网上书城

package com.wangsheng.ebook.dao.impl; import java.sql.Connection; import java.sql.PreparedStatement; import java.sql.ResultSet; import java.sql.SQLException; import com.wangsheng.ebook.dao.CustomerDao; import com.wangsheng.ebook.model.Customer; import com.wangsheng.ebook.util.JDBC; public class CustomerDaoImpl implements CustomerDao { public static final String sql= "select * from customer where name=? and password=?"; public Customer creatCustomer(Customer customer) { Connection conn = null; PreparedStatement ps = null; PreparedStatement p = null; try { conn = JDBC.createConn(); String sql = "insert into Customer(name, password, sex,email, phone, address,question,answer)" + "values(?, ?, ?, ?, ?,?,?,?)"; ps = conn.prepareStatement(sql); ps.setString(1, customer.getName()); String k=customer.getName(); ps.setString(2, customer.getPassword()); ps.setString(3, customer.getSex()); ps.setString(4, customer.getEmail()); ps.setString(5, customer.getPhone()); ps.setString(6,customer.getAddress()); ps.setString(7,customer.getQuestion()); ps.setString(8,customer.getAnswer()); ps.executeUpdate(); String sqlp="select id from customer where name='"+k+"'"; p=conn.prepareStatement(sqlp); ResultSet r=null; r=p.executeQuery(sqlp); while(r.next()){ int id=(r.getInt("id")); customer.setId(id); System.out.println("==========================================="); System.out.println(customer.getId()); System.out.println(customer.getPassword()); System.out.println(customer.getEmail()); System.out.println(customer.getPhone()); System.out.println(customer.getQuestion()); System.out.println(customer.getSex()); System.out.println("==========================================="); } } catch (SQLException e) { e.printStackTrace(); } finally { if (ps != null) { try { ps.close(); } catch (SQLException e) { e.printStackTrace(); } } if (conn != null) { try { conn.close(); } catch (SQLException e) { e.printStackTrace(); } } } return customer; } public Customer getCustomer(String name, String password) throws SQLException { Connection conn = null; PreparedStatement pstmt = null; ResultSet rs = null; try { conn = JDBC.createConn(); pstmt = conn.prepareStatement(sql); pstmt.setString(1, name); pstmt.setString(2, password); rs = pstmt.executeQuery(); System.out.println(); return assembleCustomer(rs); } catch (SQLException e) { e.printStackTrace(); throw e; }finally { rs.close(); } } public Customer selectOne(int id) throws SQLException { Connection conn = null; PreparedStatement pstmt = null; ResultSet rs = null; try { conn = JDBC.createConn(); pstmt = conn.prepareStatement("select * from customer where id=?"); pstmt.setInt(1, id); rs = pstmt.executeQuery(); return assembleCustomer(rs); } catch (SQLException e) { e.printStackTrace(); throw e; }finally { rs.close(); } } public void updateCustomer(Customer customer) throws SQLException{ Connection conn = null; PreparedStatement ps = null; try { conn = JDBC.createConn(); String sql = "update Customer set name=?, password=?, sex=?, email=?, phone=?, address=?, question=?, answer=? where id=?"; ps = conn.prepareStatement(sql); ps.setString(1, customer.getName()); ps.setString(2, customer.getPassword()); ps.setString(3, customer.getSex()); ps.setString(4, customer.getEmail()); ps.setString(5, customer.getPhone()); ps.setString(6,customer.getAddress()); ps.setString(7,customer.getQuestion()); ps.setString(8,customer.getAnswer()); ps.setInt(9, customer.getId()); ps.executeUpdate(); } catch (SQLException e) { e.printStackTrace(); } finally { if (ps != null) { try { ps.close(); } catch (SQLException e) { e.printStackTrace(); } } if (conn != null) { try { conn.close(); } catch (SQLException e) { e.printStackTrace(); } } } } private Customer assembleCustomer(ResultSet rs) throws SQLException{ Customer customer = new Customer(); if(null!=rs&&rs.next()){ customer = new Customer(); customer.setId(rs.getInt("id")); customer.setName(rs.getString("name")); customer.setPassword(rs.getString("password")); customer.setSex(rs.getString("sex")); customer.setPhone(rs.getString("phone")); customer.setEmail(rs.getString("email")); customer.setAddress(rs.getString("address")); customer.setQuestion(rs.getString("question")); customer.setAnswer(rs.getString("answer")); } return customer; } public Customer select(String name) throws SQLException { Connection conn = null; PreparedStatement pstmt = null; ResultSet rs = null; try { conn = JDBC.createConn(); pstmt = conn.prepareStatement("select * from customer where name=?"); pstmt.setString(1, name); rs = pstmt.executeQuery(); return assembleCustomer(rs); } catch (SQLException e) { e.printStackTrace(); throw e; }finally { rs.close(); } } public Customer find(String name) throws SQLException { Connection conn = null; PreparedStatement pstmt = null; ResultSet rs = null; try { conn = JDBC.createConn(); pstmt = conn.prepareStatement("select * from customer where name=?"); pstmt.setString(1, name); rs = pstmt.executeQuery(); return assembleCustomer(rs); } catch (SQLException e) { e.printStackTrace(); throw e; }finally { rs.close(); } } public Customer findend(String name, String email, String question,String answer) throws SQLException { Connection conn = null; PreparedStatement pstmt = null; ResultSet rs = null; try { System.out.println("HHHHHHHHHHHHHHHHHHHHHHHHHHH"); conn = JDBC.createConn(); // pstmt = conn.prepareStatement("select * from customer where name=?,question=?"); pstmt = conn.prepareStatement("select * from customer where name=? and email=? and question=? and answer=?"); System.out.println("UUUUUUUUUUUUUUUUUUUUUUU"); pstmt.setString(1, name); pstmt.setString(2, email); pstmt.setString(3, question); pstmt.setString(4, answer); System.out.println("KKKKKKKKKKKKKKKKKKKK"); rs = pstmt.executeQuery(); System.out.println("MMMMMMMMMMMMMMMMM"); return assembleCustomer(rs); } catch (SQLException e) { e.printStackTrace(); throw e; }finally { rs.close(); } // Connection conn = null; // PreparedStatement pstmt = null; // ResultSet rs = null; // try { // System.out.println("HHHHHHHHHHHHHHHHHHHHHHHHHHH"); // conn = JDBC.createConn(); // // pstmt = conn.prepareStatement("select * from customer where name=?,email=?,question=?,answer=?"); // System.out.println("UUUUUUUUUUUUUUUUUUUUUUU"); // pstmt.setString(1, name); // pstmt.setString(2, email); // pstmt.setString(3, question); // pstmt.setString(4, answer); // System.out.println("KKKKKKKKKKKKKKKKKKKK"); // rs = pstmt.executeQuery(); // System.out.println("MMMMMMMMMMMMMMMMM"); // return assembleCustomer(rs); // } catch (SQLException e) { // e.printStackTrace(); // throw e; // }finally { // rs.close(); // } } public void xgmm(String name, String password) throws SQLException { Connection conn = null; PreparedStatement ps = null; try { conn = JDBC.createConn(); String sql = "update Customer set password=? where name=?"; ps = conn.prepareStatement(sql)