package method;

import java.sql.ResultSet;
import java.sql.Connection;
import java.sql.PreparedStatement;
import data.*;

public class CheckUser {

  private String name = "";
  private String password = "";
  private int state = 1;

  public CheckUser(String name, String password, int state) {
   this.name = name;
   this.password = password;
   this.state = state;
  }

  //檢查用戶的方法
  public String checkLogin(){
    String message = "";
    Connection conn = null;
    try{
      LoginData loginData = new LoginData();
      //取得數據庫連接
      conn = loginData.setupConn();
      //創建數據表的查詢SQL語句
      String sql = "select * from login where userName = ? and userPassword = ? " +
                   "and userState = ?";
      //創建數據集
      ResultSet rs;
      //創建查詢的PreparedStatement類
      PreparedStatement queryPs = conn.prepareStatement(sql);
      //設置查詢類的3個參數
      queryPs.setString(1,name);
      queryPs.setString(2,password);
      queryPs.setInt(3,state);
      //執行查詢操作
      rs = queryPs.executeQuery();
      if(rs.next()){
        //取得用戶名和密碼
        String nameData = rs.getString(2);
        String passwordData = rs.getString(3);
        //檢查用戶名和密碼的大小寫
        if ( (name.compareTo(nameData) == 0) &&
            (password.compareTo(passwordData) == 0)) {
          if(state == 0){
            message = "0";    //管理員用戶信息
          }else{
            message = "1";    //用戶信息
          }
        }else{
          message = "-1";     //登陸不成功信息
        }
      }else{
        message = "-1";       //登陸不成功信息
      }
    }catch(Exception e){
      e.printStackTrace();
      return e.getMessage();
    }finally{
      try{conn.close();} catch(Exception e){}
    }
    return message;
  }
}