<%@ page import="java.sql.*"%>
<%@ page language="java" contentType="text/html; charset=UTF-8"
pageEncoding="UTF-8"%>
Insert title here
<%
String user = request.getParameter("userid");
String book = request.getParameter("bookid");
String date1 = request.getParameter("date1");
String date2 = request.getParameter("date2");
String sql1 = "select * from borrow_card where ID =" + user;
ResultSet rs1 = borrow.executeQuery(sql1);
if(session.getAttribute("manager")!=null){
if (rs1.next()) {
int cardstatus = Integer.parseInt(rs1.getString("STATUS"));
if(cardstatus!=0){
String sql2 = "select * from books where ID =" + book;
ResultSet rs2 = borrow.executeQuery(sql2);
if(rs2.next()){
//out.println(psw1 + " " + psw2);
//String id = session.getAttribute("manager").toString();
int status=Integer.parseInt(rs2.getString("STATUS"));
if(status==1){
String sql = "insert borrow_books(CARD_ID,BOOK_ID,BORROW_DATE,END_DATE)values('" + user + "','" + book
+ "','" + date1 + "','" + date2 + "');";
try {
int i = borrow.executeUpdate(sql);
if (i == 1) {
%>
<%
String sql3="update books set STATUS=0 where ID="+book;
borrow.executeUpdate(sql3);
} else {
%>
<%
}
} catch (Exception e) {
%>
<%
}
}else{
%>
<%
}
}else{
%>
<%
}
}else{
%>
<%
}
} else {
%>
<%
}
}else{
%>
<%
}
%>