jsp入门教程：用户登陆密码判断代码

jsp入门教程：用户登陆密码判断代码

<%@ page contentType="text/html; charset=gb2312" language="java" import="java.sql.*" errorPage="" %>
<%@include file="../DB.jsp"%>

http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
http://www.w3.org/1999/xhtml">

<%
String UserName = request.getParameter("admin");
String UserPwd = request.getParameter("UserPassword");
UserPwd=loginMD5.getMD5ofStr(UserPwd);
String rand = (String)session.getAttribute("rand");
String CheckCode = request.getParameter("CheckCode");
//String sel = request.getParameter("sel_admin");

Statement stmt_Check=conn.createStatement(ResultSet.TYPE_SCROLL_SENSITIVE,ResultSet.CONCUR_UPDATABLE);
String sql = "select * from hl_admin where fPassword='"+ UserPwd + "' and fUserName='" + UserName +"'";
ResultSet RsLoginCheck = stmt_Check.executeQuery(sql);

if(RsLoginCheck.next()){
 if(rand.equals(CheckCode)){
 //out.print("成功");
 session.setAttribute("AdminName",UserName);
 session.setAttribute("Aforder",RsLoginCheck.getString("forder"));
 //if(sel.equals("2")){
 // response.sendRedirect("../enadmin/Ad_Index.jsp");
 //}else{
  response.sendRedirect("Ad_Index.jsp");
 //}
 }
 else
 {
 out.print("您输入的确认码和系统产生的不一致，请重新输入。");
 }
}
else
{
 out.print("用户名或密码错误！！！");
}
%>

=================

<%
RsLoginCheck.close();
stmt_Check.close();
conn.close();
%>