package org.bag;import java.io.IOException;
import java.io.PrintWriter;
import java.sql.*;import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;public class xiugai extends HttpServlet {
private Connection con;
private Statement stm;
private ResultSet ret;

public void destroy() {
super.destroy(); // Just puts "destroy" string in log
// Put your code here
}
public void doPost(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
String q=request.getParameter("name");
String d=request.getParameter("password");
String x=request.getParameter("sex");
String n=request.getParameter("phone");
String t=request.getParameter("departament");
String s=request.getParameter("class");
String c=request.getParameter("subject");
String xd=request.getParameter("xueid");
String pp=(String)request.getSession().getAttribute("ww");
int tt = 0;
String user="root";
String psd="root";
String url="jdbc:mysql://localhost:3306/feiyangit";
try {
Class.forName("com.mysql.jdbc.Driver");
} catch (ClassNotFoundException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}
try {
con=DriverManager.getConnection(url, user, psd);
stm=con.createStatement();

} catch (SQLException e) {
// TODO Auto-generated catch block
e.printStackTrace();

try {
ret=stm.executeQuery("select type from user where name='"+pp+"'");
} catch (SQLException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}

response.setCharacterEncoding("utf-8");
response.setContentType("text/html");
PrintWriter out = response.getWriter();
out
.println("<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\">");
out.println("<HTML>");
out.println("  <HEAD><TITLE>A Servlet</TITLE></HEAD>");
out.println("  <BODY>");

try {
if(ret.next()){
int yy=Integer.parseInt(ret.getString("type"));
if(yy==1){
ret=null;
ret=stm.executeQuery("select xueid from user where name='"+pp+"'");
if(ret.next()){
if(ret.getString("xueid")==xd){
tt=stm.executeUpdate("UPDATE user SET name ='"+q+"', password = '"+d+"',sex='"+x+"',phone='"+n+"',department='"+t+"',class='"+s+"',subject='"+c+"'WHERE  xueid='"+xd+"'");
if(tt==1){
out.println("更新修改成功(社员)");
}else{
out.println("更新修改失败(社员)");
}
}

}else{
out.println("shibai1");
}
}else{
out.println("shibai2");
}



}else{
out.println ("管理员修改社员信息");
tt=stm.executeUpdate("UPDATE user SET name = '"+q+"', password = '"+d+"',sex='"+x+"',phone='"+n+"',department='"+t+"',class='"+s+"',subject='"+c+"'WHERE  xueid='"+xd+"'");
    if(tt==1){
     out.println("成功修改(管)");
    }else{
     out.println("失败修改(管)");
    }
}  
} catch (SQLException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}


out.println("  </BODY>");
out.println("</HTML>");
out.flush();
out.close();
}
public void init() throws ServletException {
// Put your code here
}}