<%@ page language="java" import="java.util.*" %> 
<%@ page language="java" import="java.sql.*" %>
<jsp:useBean id="DB" scope="page" class="dbcon.mydb" />
<jsp:useBean id="doit" scope="page" class="dbcon.doit" />
<jsp:include page=init.jsp />
<%
String strUsername,strPassword;
int  intRowCount;
strUsername=(String)request.getParameter("username");
strUsername=strUsername.trim();
strPassword=(String)request.getParameter("password");
strPassword=strPassword.trim();
ResultSet sqlRst=DB.executeQuery("SELECT INT_ID FROM LOGIN WHERE STR_USER='"+strUsername+"' AND STR_PASSWORD='"+strPassword+"' ");


if(sqlRst.next()){

session.setAttribute("uid",new Integer(sqlRst.getInt("INT_ID")));
sqlRst.close();
strUsername=strUsername.toLowerCase();
strUsername=doit.replace(strUsername,true);


if(session.isNew()){
Vector vctAll=(Vector)application.getAttribute("vctOnline");
vctAll.addElement(strUsername);
application.setAttribute("vctOnline",vctAll);
}
session.setAttribute("user", strUsername.toLowerCase());

String strRemote=request.getRemoteUser()+"/"+request.getRemoteHost();
String sqlLog="INSERT INTO ONLINE (STR_IP,STR_USER,STR_LOGINTIME,STR_REMOTEUSER,STR_BROWSERTYPE) VALUES('";
sqlLog=sqlLog+request.getRemoteAddr()+"','";
sqlLog=sqlLog+strUsername+"','";
sqlLog=sqlLog+doit.strNowtime()+"','";
sqlLog=sqlLog+strRemote+"','";
sqlLog=sqlLog+request.getHeader("User-Agent")+"')";
DB.executeUpdate(sqlLog);


%>
<jsp:include page=checkmail.jsp />
<%

response.sendRedirect("area.jsp"); 
}else{
  out.print("error");
}

%>