JSP怎么编写用户登入验证？

try
{
String sql="select * from user where name='" + name + "' and pass='" + pass + "'";
ResultSet rs=reg.executequery(sql);
if(rs.next())
{
String cat=rs.getString("cat");
Cookie User=new Cookie("User",cat);
User.setMaxAge(18000);//设置cookie时间
response.addCookie(User);//添加cookie
rs.close();
rs=null;
response.sendRedirect("edit.jsp?find=");
}
else//登录失败
{
%>
<p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p align="center">用户名或密码错误<br><input type="button" value="返回" onClick="window.history.back();"></p>
<%
rs.close();
rs=null;
reg.closecon();
}
}
catch(SQLException SQLe)
{
SQLe.printStackTrace();
}
%>

解决方案 »

  1.   

    <%@ page contentType="text/html;charset=GB2312" import="java.sql.*"%>
    <% 
    String ID=request.getParameter("id");
    String psw=request.getParameter("password");
    Class.forName("oracle.jdbc.driver.OracleDriver");
    String m="jdbc:oracle:thin:@192.168.0.129:1521:webs";
    Connection con=DriverManager.getConnection(m,"HF","HF");
    Statement st=con.createStatement();
    ResultSet str=st.executeQuery("select PASSWORD from HF.MANAGEMENT where ID='"+ID+"'");%>
    <html><head>
    <meta http-equiv="Content-Language" content="zh-cn">
    <meta http-equiv="Content-Type" content="text/html; charset=gb2312">
    <meta name="GENERATOR" content="Microsoft FrontPage 4.0">
    <meta name="ProgId" content="FrontPage.Editor.Document">
    <title>cheCk</title>
    </head><body background="haha.jpg" bgproperties='fixed'>
    <%
    if(str.next())
    {
    if(str.getString("PASSWORD").equals(psw))
    {
    session.setAttribute("ID",ID);
    response.sendRedirect("htgl-main.jsp");
    }
    else
    {%>
    <script>
    window.alert("输入用户名或密码有误!!");
    location="htgl.htm";
    </script>
    <%}}
    else{
    %>
    <script>
    window.alert("输入用户名或密码有误!!");
    location="htgl.htm";
    </script>
    <%}
    str.close();
    st.close();
    con.close();%>
    </body>
      

  2.   

    用户名和密码在服务器脚本中对比一下就行了，很simple
      

  3.   

    servlet中的代码 ,DBAccessBean是封装了的数据库操作的bean      request.setAttribute("login_message", "");
        request.setAttribute("hello_message", "");
        String name = request.getParameter("USER_NAME");
        String password = request.getParameter("USER_PWD");    DBAccessBean dbaccess = new DBAccessBean();
        rs = dbaccess.select_name(name);    try {
          if (!rs.next()) {
            url = "/login.htm";
            request.setAttribute("login_message", "name is not exist");
          }      else {
            rs = dbaccess.select(name, password);
            if (rs.next()) {
              url = "/hello.jsp";
              request.setAttribute("hello_message", "login successfully");
            }
            else {
              url = "/login.jsp";
              request.setAttribute("login_message", "password is wrong");
            }      }
          ServletContext sc = getServletContext();
          RequestDispatcher rd = sc.getRequestDispatcher(sql);
          rd.forward(request, response);
        }
        catch (Exception e) {
          e.printStackTrace();
        }