import java.io.*;
import java.net.*;
import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.ResultSet;
import java.sql.Statement;

import javax.servlet.*;
import javax.servlet.http.*;

/**
 *
 * @author wlz
 * @version
 */
public class CheckServlet extends HttpServlet {
    
    /** Processes requests for both HTTP <code>GET</code> and <code>POST</code> methods.
     * @param request servlet request
     * @param response servlet response
     */
    protected void processRequest(HttpServletRequest request, HttpServletResponse response)
    throws ServletException, IOException {
        HttpSession hsession = request.getSession();
        response.setContentType("text/html;charset=UTF-8");
        PrintWriter out = response.getWriter();
        String userid =  request.getParameter("userid");
        String pass =  request.getParameter("pass");
        int result = 0;
        Connection conn = null;
        Statement stat;
        String hostName = "localhost"; // 主機名或者IP地址
        String portNumber = "1433"; // 端口號，默認為1521
        String databaseSID = "dbName"; // SID名稱
        String userName = "sa"; // 用戶名
        String password = "sa"; // 用戶密碼
        String url = "jdbc:microsoft:sqlserver://" + hostName + ":" + portNumber +
                ";databaseName=" + databaseSID; // 連接字符串
        try {
            Class.forName("com.microsoft.jdbc.sqlserver.SQLServerDriver"); // 裝載驅動程序
            conn = DriverManager.getConnection(url, userName, password); // 建立連接
        } catch (Exception e) {
            e.printStackTrace();
        }
        try {
            stat = conn.createStatement();
            String actionStat = "select userid,username from users where userid='"+userid+"' and pass='"+pass+"'";
            ResultSet rs = stat.executeQuery(actionStat);//執(zhí)行查詢
            result = rs.next() ? 1 : 0;//該記錄集是否有數據，如果有數據result=1
            if (result == 1) {//如果存在這樣的用戶，則...
              
                if(hsession!=null){//在session中記錄該用戶信息
                    hsession.setAttribute("userid",userid); 
                    hsession.setAttribute("pass",pass);
                }
                response.sendRedirect("index.htm");//轉到首頁
                  
            }else{
                try{
                     hsession.removeAttribute("userid");
                     hsession.removeAttribute("pass");
                }catch(Exception e){
                    e.printStackTrace();
                }
                response.sendRedirect("login.htm");//轉到登陸頁面
                 
            }
        } catch (Exception e) {
            System.out.println("驅動錯誤!" + e.getMessage());
        }
        out.close();
    }
    
    // <editor-fold defaultstate="collapsed" desc="HttpServlet methods. Click on the + sign on the left to edit the code.">
    /** Handles the HTTP <code>GET</code> method.
     * @param request servlet request
     * @param response servlet response
     */
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
    throws ServletException, IOException {
        processRequest(request, response);
    }
    
    /** Handles the HTTP <code>POST</code> method.
     * @param request servlet request
     * @param response servlet response
     */
    protected void doPost(HttpServletRequest request, HttpServletResponse response)
    throws ServletException, IOException {
        processRequest(request, response);
    }
    
    /** Returns a short description of the servlet.
     */
    public String getServletInfo() {
        return "Short description";
    }
    // </editor-fold>
}