<%@ page contentType="text/html;charset=gb2312" %>
<LINK href="images/mainstylectrl.css" type=text/css rel=stylesheet>
<%@ include file="../conn/conn.jsp"%>
<%@ include file="../conn/time.jsp"%>
<%
stmt = con.createStatement() ;
String username=request.getParameter("username");
String password=request.getParameter("password");
rs=stmt.executeQuery("SELECT * from member where username='"+username+"'");
if(!rs.next())
{%>
<script language=JavaScript>{window.alert('登錄失敗!請確認您的密碼是否太小寫正確?');window.history.go(-1);}</script>
<%//response.sendRedirect("index.jsp");
}
else
{

if(rs.getString("flag").compareTo("0")==0){%>
<script language=JavaScript>{window.alert('帳號尚在審核中!');window.history.go(-1);}</script>
<%}else{


	rs.first();
	String passDB = rs.getString("password");//拿到數據庫中的密碼
	if(passDB.equals(password)){//與用戶填寫的密碼比較,


String loginname=rs.getString("username");
String bumen=rs.getString("bumen");
String systemop=rs.getString("systemop");
String lastlogintime=rs.getString("lastlogintime");
session.setAttribute("username",loginname);
session.setAttribute("bumen",bumen);
session.setAttribute("systemop",systemop);
session.setAttribute("lastlogintime",lastlogintime);
String sql="update member set lastlogintime='"+time+"' where username='"+loginname+"'";
stmt.executeUpdate(sql);
%>
<script language="javascript">
window.open('office/desktop.jsp','','top=50,left=150,scrollbars=yes')
</script><br><br><br><bR>
<center>
<input type="submit" name="a" value="關閉此頁" onClick="window.close()" class="buttonlinear"></center>
<%//response.sendRedirect("office.jsp");


	}else{%>
<script language=JavaScript>{window.alert('登錄失敗!請確認您的密碼是否太小寫正確?');window.history.go(-1);}</script>
<%
		//response.sendRedirect("index.jsp");
	}
}
}
stmt.close(); 
con.close();
%>