<%@ page contentType="text/html; charset=gb2312" language="java" import="java.sql.*"%>
<%@ page import="java.sql.*"%> 
<%@ page import="java.util.*"%>
<%@ page import="java.util.Date"%>
<%@ page import="java.text.*"%>
<%@ include file="../inc/conn.jsp"%>
<%
  String username = new String(request.getParameter("bbsuser").getBytes("iso-8859-1"));
  String pass = new String(request.getParameter("password").getBytes("iso-8859-1"));
  String rand = (String)session.getAttribute("rand");
  String useryz = request.getParameter("useryz");
  if (rand.equals(useryz))
     {
    String sql="select * from clubuser where clubuser_name='"+username+"' and clubuser_password='"+pass+"'";
    ResultSet rs=stmt.executeQuery(sql);
     //rs.next();
	 if (rs.next())
	    {
		String bbsuser=rs.getObject("clubuser_nickname").toString();
		String name=rs.getObject("clubuser_name").toString();
		String bz=rs.getObject("bbsmanager").toString();
		String bbsadmin=rs.getObject("bbsadmin").toString();
		String payuser=rs.getObject("payuser").toString();
	    if (rs.getObject("payuser").toString().equals("3"))
	       {
           out.print("<script language='javascript'>");
           out.print("alert('對不起,你的用戶名被管理員封鎖了!');");
           out.print("history.go(-1);");
           out.print("</script>");
           out.close();
		   }
		else
		  {
     //Cookie c=new Cookie("clubusername",username);
     //response.addCookie(c);
	 //Cookie d=new Cookie("pass",pass);
     //response.addCookie(d);
	 session.setAttribute("bbsuser",bbsuser);
	 session.setAttribute("name",name);
	 session.setAttribute("bz",bz);
	 session.setAttribute("bbsadmin",bbsadmin);
	 session.setAttribute("payuser",payuser);
	 
	 String sqlstr="update clubuser set clubuser_lasttime=DATE(),tili=tili+100 where clubuser_name='"+(String)session.getAttribute("name")+"'";
     stmt.executeUpdate(sqlstr);
	 
     out.print("<script language='javascript'>");
     out.print("window.location.href='main.jsp';");
     out.print("parent.left.document.location.reload();");
	 //out.print("history.go(-1);");
     out.print("</script>");
     out.close();
	      }
	    }
	 else
	   {
  	     out.print("<script>");
         out.print("alert('用戶名或密碼錯誤');");
         out.print("window.location.href='userlogin.jsp';");
         out.print("</script>");		   
		}
	 stmt.close(); 
     conn.close();
	}
  else
	{
  	     out.print("<script>");
         out.print("alert('驗證碼輸入有誤!請核對!');");
         out.print("window.location.href='userlogin.jsp';");
         out.print("</script>");	
	}
%>