<%@ page contentType="text/html; charset=gb2312" language="java" import="java.sql.*" errorPage="" %>
<%@page import="java.security.*"%>
<%@page import="java.math.*"%>
<%@ include file="conn.jsp" %>
<%
	
  String adminname = new String(request.getParameter("adminname").getBytes("iso-8859-1"));
  String adminpassword = new String(request.getParameter("adminpassword").getBytes("iso-8859-1"));
  String  condition="select adminname,adminpassword from system";
    rs=stmt.executeQuery(condition);
  if(rs.next())
	{
		MessageDigest md=MessageDigest.getInstance("MD5");
		//計算md5函數
		md.update((adminname+adminpassword).getBytes());
		//digest()最后確定返回md5 hash值，返回值為8為字符串。因為md5 hash值是16位的hex值，實際上就是8位的字符
		//BigInteger函數則將8位的字符串轉換成16位hex值，用字符串來表示；得到字符串形式的hash值

	 if(rs.getString("adminname").equals(adminname)&&rs.getString("adminpassword").equals(adminpassword))
	    {
     		session.setAttribute("adminname",adminname);     
	 			response.sendRedirect("index.jsp");
	    }
	}
	 else
		   {
  	         
             out.print("用戶名或密碼錯誤！");%> <a href="login.jsp">返回</a><%
                
		   }
		   
	 stmt.close(); 
     conn.close();
	
%>