package cn.com.blogonline;

import java.io.IOException;
import java.io.PrintWriter;
import javax.servlet.ServletConfig;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;


public class LoginAction extends HttpServlet {
    
	public void init(ServletConfig config) throws ServletException {
    }
    
    /*
     *  處理<GET> 請求方法.
     */
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
    throws ServletException, IOException {
    	//設置接收信息的字符集
    	request.setCharacterEncoding("UTF-8");
    	//接收瀏覽器端提交的信息
		String uname = request.getParameter("uname");
		String psw = request.getParameter("psw");		
		String checkwd = request.getParameter("checkwd");		

		HttpSession session = request.getSession();
        String checkwd2 = (String)session.getAttribute("rand");
		//設置輸出信息的格式及字符集        
        response.setContentType("text/xml; charset=UTF-8");
        response.setHeader("Cache-Control", "no-cache");
        //創建輸出流對象
        PrintWriter out = response.getWriter();

        //依據驗證結果輸出不同的數據信息
        out.println("<response>");		
		Blog blog=new DbOperate().getBlog(uname);
      
		if (blog==null){            //用戶名錯誤
    		out.println("<res>1</res>");
		}
		else{
			String dbPassword = blog.getPassword();
			if (!dbPassword.equals(psw)) {  //口令錯誤
	    		out.println("<res>2</res>");
			}
			else if (!checkwd.equals(checkwd2)) {  //驗證碼錯誤
	    		out.println("<res>3</res>");
			}
			else{
				session.setAttribute(Constants.LOGIN_USER_KEY,blog);
	    		out.println("<res>0</res>");
	    		out.println("<id>" + blog.getId() + "</id>");
			}
		}
		out.println("</response>");
		out.close();
    }
}