<%@ page contentType="text/html;charset=gb2312" import="java.sql.*"%>
<jsp:useBean id="conn" class="dbBean.DBBean" scope="session"/>
<jsp:setProperty name="conn" property="connStr" value="jdbc:odbc:download"/>
<%
	request.setCharacterEncoding("gb2312");
	String user=request.getParameter("user");
	String pw=request.getParameter("pw");
	String sql="select * from admin where name='"+user+"' and password='"+pw+"'";
	ResultSet rs=conn.executeQuery(sql);
	if(rs.next())
	{
		rs.close();
		conn.close();
		session.setAttribute("admin","ok");
%>
	<jsp:forward page="manage.jsp"/>
<%
	}
	else
	{
		rs.close();
		conn.close();
%>
	<jsp:forward page="login.jsp">
		<jsp:param name="warning" value="對不起，您的用戶名或密碼不正確"/>
	</jsp:forward>
<%
	}
%>