import java.io.*; import java.sql.*; import javax.servlet.*; import javax.servlet.http.*; public class ProcessLogin extends HttpServlet { public static Connection conn; public static Statement stmt; public void doGet (HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { doPost(request,response); } public void doPost (HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { response.setContentType("text/html"); PrintWriter out = response.getWriter(); String mid[] = request.getParameterValues("memberid"); String pwd[] = request.getParameterValues("password"); try { Class.forName("oracle.jdbc.driver.OracleDriver"); } catch(ClassNotFoundException e){ out.println("Error loading the Driver:"+e.getMessage()); return; } Connection conn = null; try { conn = DriverManager.getConnection ( "jdbc:oracle:thin:@tinman.cs.gsu.edu:1521:sid8i","book","book"); } catch (SQLException e1) { out.println("Error connecting to Oracle:"+e1.getMessage()); return; } if (conn == null) { out.println("Null Connection"); return; } Statement stmt = null; try { stmt = conn.createStatement (); } catch (SQLException e) { out.println("createStatement " + e.getMessage()); try {conn.close();} catch (SQLException e2) {}; return; } ResultSet rset = null; String query = "select password from member where mid='"+mid[0]+"'"; try { rset = stmt.executeQuery(query); } catch (SQLException e) { out.println("executeQuery " + e.getMessage()); return; } try { if (rset.next()) { if (pwd[0].equals(rset.getString(1))) { out.println(""); out.println(" "); out.println(" Member Menu"); out.println(" "); out.println(" "); out.println(" "); out.println(" "); out.println(" "); out.println(" "); out.println(" "); out.println(" "); out.println(""); } else { out.println("Invalid Password
"); } } else { out.println("Invalid Member Id
"); } } catch (SQLException e) { out.println("executeQuery " + e.getMessage()); return; } try { stmt.close(); conn.close(); } catch (SQLException e) { out.println("executeQuery " + e.getMessage()); return; } out.close(); } public String getServletInfo() { return "This Servlet processes Member Login"; } }