<%@ page contentType="text/html;charset=gb2312" import="java.sql.*"%>
<jsp:useBean id="conn" class="dbBean.DBBean" scope="session"/>
<jsp:setProperty name="conn" property="connStr" value="jdbc:odbc:bookstore"/>
<%
	request.setCharacterEncoding("gb2312");
	session.setMaxInactiveInterval(-1);
	String user=request.getParameter("user");
	String pw=request.getParameter("pw");
	String sql="select * from user where name='"+user+"' and password='"+pw+"'";
	ResultSet rs=conn.executeQuery(sql);
	if(rs.next())
	{
		session.setAttribute("rank",rs.getString("rank"));
		session.setAttribute("id",rs.getString("userid"));
		session.setAttribute("name",rs.getString("name"));
		rs.close();
		conn.close();
%>
	<jsp:forward page="home.jsp"/>
<%
	}
	else
	{
		rs.close();
		conn.close();
%>
	<jsp:forward page="login.jsp">
		<jsp:param name="warning" value="對(duì)不起，您的用戶(hù)名或密碼不正確"/>
	</jsp:forward>
<%
	}
%>