liuyan.rar_out

<%@ page contentType="text/html; charset=gb2312" language="java" import="java.sql.*"%> <jsp:useBean id="DBConnection" scope="page" class="com.guestbook.DBConnection"/> <% //1.注册驱动 try { Class.forName("com.microsoft.jdbc.sqlserver.SQLServerDriver").newInstance(); } catch (InstantiationException e) { // TODO Auto-generated catch block e.printStackTrace(); } catch (IllegalAccessException e) { // TODO Auto-generated catch block e.printStackTrace(); } catch (ClassNotFoundException e) { // TODO Auto-generated catch block System.out.println("Driver not found"); } //2.获取数据库的连接 String url="jdbc:microsoft:sqlserver://localhost:1433;DatabaseName=guesbook"; String user="sa"; String password =null; Connection conn = DriverManager.getConnection(url, user, password); //3.获取表达式 Statement stmt= conn.createStatement(ResultSet.TYPE_SCROLL_SENSITIVE,ResultSet.CONCUR_UPDATABLE);String admin=request.getParameter("admin"); String passwords=request.getParameter("password"); String sql="select * from admin where admin='"+request.getparameter("admin")+"' && ' and password='"+request.getparameter("password")+"'"; ResultSet rs=stmt.executeQuery(sql); while(rs.next()) { out.println((rs.getString("admin").equals(admin)) &&( rs.getString("password").equals(passwords))); if((rs.getString("admin").equals(admin)) &&( rs.getString("password").equals(passwords))){ session.setAttribute("a",new Boolean("true")); response.sendRedirect("index.jsp"); }else{ out.print("<script>"); out.print("alert('用户名或密码错误！');"); out.print("history.back();"); out.print("</script>"); } } //关闭数据库 if(conn!=null) { conn.close(); } if(stmt!=null) { stmt.close(); } %>