<%@page contentType="text/html;charset=gb2312" import="java.sql.*"%>
<jsp:useBean id="user" scope="request" class="myapp.User"/>
<jsp:useBean id="md5" scope="request" class="myapp.MD5"/>
<jsp:useBean id="dateTimeFormat" scope="request" class="myapp.DateTimeFormat"/>
<%
  //用戶登錄驗證
  String username = new String(request.getParameter("username").trim().getBytes("ISO-8859-1"));
  String password = new String(request.getParameter("password").trim().getBytes("ISO-8859-1"));
  String password1 = md5.getMD5ofStr(password); //數據加密
  if (user.userExist(username)) {
    response.sendRedirect("error.jsp?errorMessage=User is not valid.");
  }
  else if (!user.isValidUser(username, password1)) {
    response.sendRedirect("error.jsp?errorMessage=Password is not valid.");
  }
  else {
    String rights = user.userRights(username, password1); //獲取用戶權限
    String loginIP = request.getRemoteAddr(); //獲取用戶IP
    String loginDateTime = dateTimeFormat.getCurrentDateTime(); //獲取當前日期時間
    session.setAttribute("username", username); //保存用戶名
    session.setAttribute("rights", rights); //保存用戶權限
    session.setAttribute("loginIP", loginIP); //保存用戶IP
    session.setAttribute("loginDateTime", loginDateTime); //保存當前日期時間
    user.setUserLoginInfo(loginDateTime, loginIP, username); //記錄用戶登錄信息
    user.saveUserLoginLog(username, loginDateTime); //保存用戶登錄日志
    response.sendRedirect("main.jsp"); //打開主頁面
  }
%>