<%@ page contentType="text/html; charset=gb2312" language="java" import="java.sql.*" errorPage="" %>
<%! String name=new String();
    String pass=new String();
 %>
<%
String name1=request.getParameter("text1");
String pass1=request.getParameter("text2");
Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
Connection conn=DriverManager.getConnection("jdbc:odbc:bookstore");
Statement stmt=conn.createStatement();
String sql="select * from b_user where u_name='"+name+"'";
ResultSet rs=stmt.executeQuery(sql);
while(rs.next())
{
name=rs.getString("U_name");
pass=rs.getString("U_pass");
}
if(name1.equals(name)&& pass1.equals(pass))
{
response.sendRedirect("main.jsp");
session.setAttribute("name",name);
}
else
{
response.sendRedirect("login.jsp");
}
rs.close();
stmt.close();
conn.close();
}
catch(Exception e){}
%>