package mypack;

import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import javax.servlet.ServletException;

import mypack.*;


import java.io.IOException;


public class UserLoginServlet extends HttpServlet {

    public void init() throws ServletException {
        super.init();
    }



    public void doPost(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        try{
        check(request, response);
        }
         catch(Exception e){
  }
    }

    private void check(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        String username = request.getParameter("username");
        String password = request.getParameter("password");

        HttpSession session = request.getSession();
        
       try{
        Cdstore cdstore=new Cdstore();
        session.removeAttribute("username");
        String nextpage="";

        //檢查用戶的密碼
        if(cdstore.verifyAdmin(username,password))
        {
        nextpage="/admin.jsp";
        }
        else if (cdstore.verifyUser(username, password)) 
        {
            
            session.setAttribute("username",username);
			nextpage="/catalog.jsp";
        }
        else 
        nextpage="/login_failed.jsp";

        this.getServletContext().getRequestDispatcher(nextpage).forward(request, response);
        }
               catch(Exception e){
              }
    
      }

}