package Controller;
/*
 * Login.java
 *
 * Created on 2008年4月25日, 下午4:29
 */

import java.io.*;
import java.net.*;
import Model.User;
import javax.servlet.*;
import javax.servlet.http.*;
import java.sql.*;
import Model.DataOperation;
/**
 *
 * @author iss_whu
 * @version
 */
public class Logins extends HttpServlet {
    
    /** Processes requests for both HTTP <code>GET</code> and <code>POST</code> methods.
     * @param request servlet request
     * @param response servlet response
     */
    protected void processRequest(HttpServletRequest request, HttpServletResponse response)
    throws ServletException, IOException {
        response.setContentType("text/html;charset=UTF-8");
        PrintWriter out = response.getWriter();
        String CustomerID=request.getParameter("CustomerID");
        String pwd=request.getParameter("Pwd");
        DataOperation db=new DataOperation();
        Connection con=db.getConnection();
        User user=null;
        try{
            Statement st=con.createStatement();
            ResultSet rs=st.executeQuery("select * from Customer where CustomerID='"+CustomerID+"'");
            rs.next();
            String dbpwd=rs.getString("Pwd");
            if(dbpwd==null)
            {
            out.println("用戶不存在");
             }
            else if(dbpwd.equals(pwd))
            {
                if(request.getParameter("Submit")!=null)
                {
                    user=new User();
                    user.setFName(rs.getString("FName"));
                    user.setMName(rs.getString("MName"));
                    user.setLName(rs.getString("LName"));
                    user.setMaillingAddress(rs.getString("MaillingAddress"));
                    user.setMethodShipment(rs.getInt("MethodShipment"));
                    user.setPhoneNumber(rs.getString("PhoneNumber"));
                    user.setCreditCardID(rs.getString("CreditCardID"));
                    user.setEmailAddress(rs.getString("EmailAddress"));
                    user.setExpirationDate(rs.getString("Expirationdate"));
                    user.setUserID(rs.getString("CustomerID"));
                    request.getSession(true).setAttribute("user",user);
                    response.sendRedirect("SureBuy.jsp");
                }
                else
                {
                    response.sendRedirect("index.jsp");
                }
            }
            else
            {
             out.println("輸入密碼錯誤");
             }
        }
        catch(Exception e)
        {
            out.println("登陸失敗");
        }
        out.close();
 }
    
    // <editor-fold defaultstate="collapsed" desc="HttpServlet methods. Click on the + sign on the left to edit the code.">
    /** Handles the HTTP <code>GET</code> method.
     * @param request servlet request
     * @param response servlet response
     */
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
    throws ServletException, IOException {
        processRequest(request, response);
    }
    
    /** Handles the HTTP <code>POST</code> method.
     * @param request servlet request
     * @param response servlet response
     */
    protected void doPost(HttpServletRequest request, HttpServletResponse response)
    throws ServletException, IOException {
        processRequest(request, response);
    }
    
    /** Returns a short description of the servlet.
     */
    public String getServletInfo() {
        return "Short description";
    }
    // </editor-fold>
}