<%@ page contentType="text/html; charset=gb2312" import="java.sql.*"%>
<jsp:useBean id="db" class="xwfb.connectDB" />
<%
	String name = request.getParameter("user");
	String psw = request.getParameter("psw");
	ResultSet rs = null;
	if(psw != null && name != null)
	{
		String sql = "select * from XWFB_USER where username = '"+name+"' and password = '"+psw+"'";
		try
		{
			rs = db.executeQuery(sql);
			if(rs.next())
			{
				session.setAttribute("username",rs.getString("username"));
				session.setAttribute("priority",rs.getString("priority"));
				%>
				<script language="javascript">
					alert("登陸成功!");
					top.location.href="index.html";
				</script>
				<%
			}
			else
			{
				%>
				<script language="javascript">
					alert("登陸失敗!");
					top.location.href="index.html";
				</script>
				<%
			}
		}
		catch(Exception e)
		{
			session.setAttribute("error","1");
			%>
			<script language="javascript">
				alert("登陸不成功!");
				top.location.href="index.html";
			</script>
			<%
		}
		finally
		{
			try
			{
				db.closeDB();
				rs.close();
			}
			catch(Exception ee)
			{
				session.setAttribute("error","1");
				%>
			<script language="javascript">
				alert("登陸不成功!");
				top.location.href="index.html";
			</script>
			<%
			}
		}
	}
%>