<%@page contentType="text/html;charset=GBK"%>
<%@page import="java.sql.*"%>
<jsp:useBean id="conn" scope="page" class="test.ConnOracle"/>

<%!
    ResultSet rs     = null;                 // 執行Sql語句返回的結果集
    String username  = "";
	String password  = "";
	String sql = "";
    int priv = 0;
%>
<%
    username = request.getParameter("username");
 	password = request.getParameter("password");

	if(username ==null || password == null || username.equals("") || password.equals("")) {
        out.println( "<center>" );	
        out.println( "<h1>用戶名或密碼輸入非法！請返回重新輸入！</h1><BR><BR>");	
        out.println("<a href=javascript:history.back()>返回</a>");
        out.println( "</center>" );	

		return;
	}
		
 	sql = "select * from test_admin where loginname='" + username;
	sql+= "' and password='" + password + "'";

	try {
			rs = conn.executeQuery( sql );
	
			// 如果是非法用戶名或密碼，回到登陸界面
			if(!rs.next()) {
%>
				<jsp:forward page="/admin/index.jsp">
	               <jsp:param name="errmsg" value="invalid user or password"/>
				</jsp:forward>
<%			    
			}
			priv = rs.getInt("priviledge");                  // 得到用戶權限
	
	}catch(Exception ee) { // 其他異常情況
System.out.println( ee.toString() );
%>
				<jsp:forward page="/public/dberror.jsp"/>
<%			    
	}
	session.setAttribute("adminpriv", priv + "");        // 將權限信息保存到session中
    session.setAttribute("adminname", username);         // 將管理員登錄信息保存到session中
	session.setMaxInactiveInterval(60*60*24);
	response.sendRedirect("/test/admin/manager.jsp");   
%>