新建checklogin.jsp

文件位置data/checklogin.jsp

<%@ page contentType="text/html; charset=utf-8" language="java" import="java.sql.*" errorPage="" %>
<%@ include file="conn.jsp"%>
<%
request.setCharacterEncoding("UTF-8");
String sessionNam="";
String sessionUid="";
String StrName= new String(request.getParameter("username").getBytes("ISO-8859-1"),"utf-8");
String StrPSD= new String(request.getParameter("password").getBytes("ISO-8859-1"),"utf-8");
String sql_User="select * from users where username='"+StrName+"' and password='"+StrPSD+"'";
ResultSet rs_User=stmt.executeQuery(sql_User);
if(rs_User.next()){
	session.setMaxInactiveInterval(3600*24);
	session.setAttribute("login","ok");
	session.setAttribute("sessionNam",StrName);
	session.setAttribute("sessionUid",rs_User.getString("id"));
	String loginIP=new String(request.getRemoteAddr());//获取客户IP
	response.sendRedirect("../admin/index.jsp");
}else{
	//document.loginForm.UserName.value="信息错误，重新输入"
	session.setAttribute("sessionNam","");
	session.removeAttribute("sessionNam");
	session.setAttribute("sessionUid","");
	session.removeAttribute("sessionUid");
	session.invalidate();//注销后再登陆会引发错误
	out.print("用户名或密码错误，请重新登陆，3秒后跳转到登录页面");
	response.setHeader("refresh", "3;url=../login.jsp");
	//out.print("信息错误，请重新输入！");
}
stmt.close();
conn.close();
%>

文章导航