package com.ntsky.note;

/**
 * 用戶登陸
 */

import java.io.*;
import java.sql.*;
import java.util.*;
import javax.servlet.*;
import javax.servlet.http.*;

import com.ntsky.note.MD5;
import com.ntsky.note.SQLDBOperator;

public class LoadManage extends HttpServlet {
    private static final String CONTENT_TYPE = "text/html; charset=GBK";
    private SQLDBOperator sdbo=null;
    //Initialize global variables
    public void init() throws ServletException {
    }
    //Process the HTTP Post request
    public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
        request.setCharacterEncoding("GBK");
        response.setContentType(CONTENT_TYPE);
        PrintWriter out = response.getWriter();
        String adminName = CodeFilter.toHtml(request.getParameter("adminName")) ;
        //out.println(request.getParameter("adminPasswd"));
        String adminPasswd = MD5.toMD5(CodeFilter.toHtml(request.getParameter("adminPasswd")));
        //out.print(adminPasswd);
        //用戶名判斷
        if (sdbo==null)
            sdbo = SQLDBOperator.getInstance("Connection");
        String strSql = "select * from admin where adminName=?;";
        try{
            sdbo.prepareStatement(strSql);
            sdbo.setString(1,adminName);
            ResultSet rs = sdbo.executeQuery();
            try{
                rs.last();
                if(rs.getRow()>0){
                    String pwd = rs.getString("adminPasswd");
                    if(adminPasswd.equals(pwd)){
                        HttpSession session = request.getSession();
                        session.setAttribute("user",adminName);
                        URLServlet.getUrl(response,"default.jsp");
                    }
                    else
                        out.println("<Script language=JavaScript>alert('請輸入正確的密碼!');JavaScript:history.back();</Script>");
                }
                else
                    out.println("<Script language=JavaScript>alert('請輸入正確的用戶名!');JavaScript:history.back();</Script>");
            }
            catch(Exception e){
                e.printStackTrace(System.out);
                Debug.writeLog("ISLogin_rs isok(), Exception Occured ! Info :" + e.getLocalizedMessage());
            }
            finally{
                rs.close();
            }
        }
        catch(Exception e){
            e.printStackTrace(System.out);
            Debug.writeLog("ISLogin isok(), Exception Occured ! Info :" + e.getLocalizedMessage());
        }
        finally{
            sdbo.Close();
            out.close();
        }
    }
    //Clean up resources
    public void destroy() {
    }
}