<%@ page import="java.sql.*" %>
<%@ page contentType="text/html;charset=gb2312" %>

<jsp:useBean id="myConnect" scope="request" class="db.DBConnection"/>

<%
    String userName=null;
    String password=null;
    request.setCharacterEncoding("gb2312");
    userName=request.getParameter("name");
    if(userName!=null)
   {
       password=request.getParameter("pass");
       String sql="select * from user WHERE name='"+userName+"'";
       myConnect.getConnection();
       ResultSet rs=myConnect.query(sql);
     if(rs.next())
    {
        String dbPass=rs.getString("password");

	if(password.equals(dbPass))
        {
              session.setAttribute("login","OK");
              session.setAttribute("name",userName);
              response.sendRedirect("bookQuery.jsp");
        }else{
              out.println("密碼錯誤！");
        }
    }else{
        out.println("登陸失敗！");
    }
    myConnect.close();
  }

%>