<%@page contentType="text/html;charset=gb2312"%>
<%@ include file="incoming/common.jsp"%>

<%
	String userid = new String(request.getParameter("userid").trim().getBytes("ISO-8859-1"));
	String password = new String(request.getParameter("password").trim().getBytes("ISO-8859-1"));
 
	String sql = "SELECT * FROM userpassword WHERE USER_ID='"+userid+"' AND USER_PASSWORD='"+password+"'";
 	DBSQLManager dbsm = new DBSQLManager();
 	dbsm.setSqlStr(sql);
	dbsm.executeQuery();
	ResultSet rs =  dbsm.getRs();
	if (!rs.next()) 
    	{
  		String errmsg="error1";
  		response.sendRedirect("login.jsp?errmsg="+errmsg);
  		return;
    	} 
    
	request.getSession(true);
	String chk="true";
	session.putValue("Enter",chk);
	session.putValue("userid",userid);
	response.sendRedirect("booklist.jsp");
%>