package cn.edu.ccut;

import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.RequestDispatcher;
import javax.servlet.ServletException;
import javax.naming.Context;
import javax.sql.DataSource;
import java.sql.*;
import java.io.PrintWriter;
import java.io.IOException;

/**
 * Created by IntelliJ IDEA.
 * User: hvst
 * Date: 2008-8-21
 * Time: 12:11:39
 * To change this template use File | Settings | File Templates.
 */
public class ChangePassWord extends HttpServlet {

    public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException{

        String strSql        = "";
        String strSqll       = "";
        String strSelectPW   = "";

        Context ctx          = null;
        DataSource ds        = null;
        Connection conn      = null;
        Statement stmt       = null;
        ResultSet rs         = null;
        PrintWriter out      = null;
        String strUserId = (String)request.getSession().getAttribute("userId");

        try {
             response.setContentType("text/html;charset=gb2312");
             out = response.getWriter();

            Class.forName("com.mysql.jdbc.Driver");
            conn = DriverManager.getConnection("jdbc:mysql://localhost/bank?useUnicode=true&characterEncoding=gb2312", "root", "");
            stmt = conn.createStatement();
            String strChangePW = request.getParameter("password");
            String strNewChangePW = request.getParameter("newpassword");

            strSql = " select userpassword " +
                    " from `usermessaget`" +
                    " where userid='" + strUserId + "'";

            rs = stmt.executeQuery(strSql);
            while(rs.next()){
                strSelectPW = rs.getString("userpassword");
            }

            if(strChangePW.trim().equals(strSelectPW.trim())){

                strSqll = " update usermessaget " +
                          " set userpassword='" + strNewChangePW + "'" +
                          " where userid='" + strUserId + "'";
                String strSqlll = "update enrollmessaget " +
                                  "set userpassword='" + strNewChangePW + "'" +
                                  "where userid='" + strUserId + "'";
                stmt.execute(strSqll);
                stmt.execute(strSqlll);

                RequestDispatcher dispatcher = request.getRequestDispatcher("/jsp/operate.jsp");
                dispatcher.forward(request,response);
            }
            else {

                out.println("<script language='javascript'>");
                out.println("   alert('修改失敗！');");
                out.println("   window.history.back();");
                out.println("</script>");
            }

        } catch (Exception e) {
            e.printStackTrace();  //To change body of catch statement use File | Settings | File Templates.
        } finally {
            try {
                if (rs != null) rs.close();
                if(stmt != null) stmt.close();
                if(conn != null) conn.close();
            } catch (SQLException e) {
                e.printStackTrace();  //To change body of catch statement use File | Settings | File Templates.
            }
        }
    }
}