__JavaWeb_________________MySQL______.zip

package wzt.com.servlet; import java.io.IOException; import java.sql.Connection; import java.sql.DriverManager; import java.sql.ResultSet; import java.sql.SQLException; import java.sql.Statement; import javax.servlet.RequestDispatcher; import javax.servlet.ServletConfig; import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import wzt.com.bean.*; public class HandleLogin extends HttpServlet { private RequestDispatcher dispatcher; public void init(ServletConfig config) throws ServletException{ super.init(config); try{ Class.forName("com.mysql.jdbc.Driver"); } catch(Exception e){} } public String handleString(String s){ try{ byte bb[]=s.getBytes("iso-8859-1"); s=new String(bb); } catch(Exception ee){} return s; } public void doPost(HttpServletRequest request,HttpServletResponse response) throws ServletException,IOException{ Connection con; Statement sql; login loginBean=null; String backNews="欢迎进入登陆界面！"; HttpSession session=request.getSession(true); try{ loginBean=(login)session.getAttribute("login"); if(loginBean==null){ loginBean=new login(); session.setAttribute("login",loginBean); } } catch(Exception ee){ loginBean=new login(); session.setAttribute("login",loginBean); } String aname=request.getParameter("aname").trim(), apwd=request.getParameter("apwd").trim(), atype=request.getParameter("atype").trim(); boolean ok=loginBean.getSuccess(); aname=handleString(aname); apwd=handleString(apwd); atype=handleString(atype); System.out.print(aname); System.out.print(apwd); System.out.print(atype); if(ok==true&&aname.equals(loginBean.getAname())){ backNews=aname+"已经登录了"; loginBean.setBackNews(backNews); } else{ String uri="jdbc:mysql://localhost/hotelmanage"; boolean boo=(aname.length()>0)&&(apwd.length()>0); try{ con=DriverManager.getConnection(uri,"root","root"); String condition="select * from auser where aname = '"+aname+"' and apwd = '"+apwd+"' and atype = '"+atype+"' "; sql=con.createStatement(); if(boo){ ResultSet rs=sql.executeQuery(condition); boolean m=(rs.next()); if(m==true&&atype.equals("0")){ backNews="酒店管理员登录成功！."; loginBean.setBackNews(backNews); loginBean.setSuccess(true); loginBean.setAname(aname); dispatcher= request.getRequestDispatcher("adminMain.jsp"); } else if(m==true&&atype.equals("1")){ backNews="第三方管理员登录成功！."; loginBean.setBackNews(backNews); loginBean.setSuccess(true); loginBean.setAname(aname); dispatcher= request.getRequestDispatcher("adminMain2.jsp"); } } else{ backNews="您输入的用户名不存在，或密码不匹配"; loginBean.setBackNews(backNews); loginBean.setSuccess(false); loginBean.setAname(aname); loginBean.setApwd(apwd); dispatcher= request.getRequestDispatcher("validatelogon.jsp"); } con.close(); } catch(SQLException exp){ backNews=""+exp; loginBean.setBackNews(backNews); dispatcher= request.getRequestDispatcher("validatelogon.jsp"); } } dispatcher.forward(request,response); } public void doGet(HttpServletRequest request,HttpServletResponse response) throws ServletException,IOException{ doPost(request,response); } }