<%@ page contentType="text/html; charset=gb2312" import="java.sql.*,school.*"%>
<%
 try{
            String name=request.getParameter("name");
            String password=request.getParameter("password");
            out.println(name);
            out.println(password);
            if(name==null||password==null){

            }else{
              Connection  con=DataBaseConnection.getConnection();
          Statement statement = con.createStatement();
          String isCorrect = "select * from admin  where name='" + name +
          "'and password='" + password + "'";
          ResultSet result = statement.executeQuery(isCorrect);
          request.getSession().setAttribute("isAdmin", new String("0"));

          if (!result.next()) {
            request.getSession().setAttribute("aerror","1");
            response.sendRedirect("adminlogin.jsp");
            statement.close();
          }
          else {
              session.setAttribute("aerror","0");
           session.setAttribute("nickname",result.getString("name"));
            session.setAttribute("isAdmin", new String("true"));
            session.setAttribute("level",(new Integer(result.getInt("level"))).toString());
            statement.close();
            con.close();
            response.sendRedirect("viewAll");
          }

            }
        }catch(Exception e){

            response.sendRedirect("adminlogin.jsp");
        }

%>