BBS系统（JSP，课程设计）

package com; import java.sql.Connection; import java.sql.ResultSet; import java.sql.SQLException; import java.sql.Statement; import java.util.Date; import java.util.Hashtable; import java.util.Vector; public class Cart { public Vector Wares; private Connection con; public Cart() { Wares = new Vector(); } public void setWares(String[] wares) { for(int i = 0;i < wares.length;i ++) { try { int one = (NullToInt(wares[i])); if(one==0) continue; addWares(one); } catch(Exception e) { } } } public void setConnection(Connection con) { this.con = con; } public CartWares one(int index) { return (CartWares)Wares.elementAt(index); } public void addWares(int WaresId) { for(int i = 0;i < Wares.size();i ++) { if(one(i).getWaresId() ==WaresId) return; } CartWares one= new CartWares (); if(one.setWares(WaresId,con)) Wares.addElement(one); } public int getNumber() { return Wares.size(); } public void deleteWares(int index) { if(index >= 0 && index < Wares.size()) Wares.removeElementAt(index); } public void clearCart() { Wares.removeAllElements(); } public String getSubDate(){ return DateTime.getDateTime(); } public Vector storeOrder(Hashtable paras,String UserName) { Vector out = new Vector(0); out.add(0,"0"); out.add(1,"0"); int total = 0; for(int i = 0;i < Wares.size();i ++){ CartWares one = (CartWares)Wares.get(i); int WaresId = one.getWaresId(); String NumStr = (String)paras.get("Number"+WaresId); int Number= 0; if(NumStr != null && !NumStr.equals("")) { try { Number = Integer.parseInt(NumStr); } catch(Exception e) { out.add(0,"1"); return out; } if(Number < 0){ out.add(0,"1"); return out;} if(Number > 0) { total += Number; one.setNumber(Number); } } } if(total == 0) {out.add(0,"3"); return out;} String date=DateTime.getDateTime(); //Date date = new Date(); try { Statement stmt = con.createStatement(); String sql="insert into order_info(UserName,Status,SubTime) values('"+UserName+"',0,'"+date+"')"; //String sql="insert into orders(UserName) values('"+UserName+"')"; stmt.executeUpdate(sql); String sql2="select Id from order_info where UserName='"+UserName+"'and SubTime='"+date+"'"; ResultSet rs= stmt.executeQuery(sql2); int OrderId = 0; if(rs.next()) { OrderId = rs.getInt("Id"); for(int i = 0;i < Wares.size();i ++) { CartWares one = one(i); one.insert(OrderId,con); } String sql3="update order_info set Status=1 where id="+OrderId+""; stmt.executeUpdate(sql3); out.add(1,OrderId+""); } rs.close(); stmt.close(); } catch(SQLException e) { System.out.println(DateTime.getDateTime()+" "+e.toString()); out.add(0,"3"); return out; } return out; } public int storeUser( String id,String UserName, String RealName, String Address, String PostNumber, String Phone, String PayWay, String TransWay, String subdate) { try { Statement stmt = con.createStatement(); String sql="select Email from user_info where UserName='"+UserName+"'"; String Email=""; ResultSet rs = stmt.executeQuery(sql); if(rs.next()) Email=rs.getString("Email"); String sql2="update order_info set " + " RealName='"+RealName+"'," + "Email='"+Email+"'," + "Address='"+Address+"',PostNumber='"+PostNumber+"',Phone='"+Phone+"',PayWay='"+PayWay+"',TranWay='"+TransWay+"'" + " where Id="+id+""; stmt.executeUpdate(sql2); String sql3="UPDATE order_info SET Status=2 WHERE Id="+id+""; stmt.executeUpdate(sql3); } catch(SQLException e) { System.out.println(DateTime.getDateTime()+" "+e.toString()); return 1; } return 0; } public static int NullToInt(Object str) { if (str == null || str.equals("")) { str = Integer.valueOf(0); } return Integer.parseInt(str.toString()); } }