|
|
|
@ -17,24 +17,24 @@ public class UserService {
|
|
|
|
|
conn = db.getConnection();
|
|
|
|
|
Statement sttmt = null;
|
|
|
|
|
try{
|
|
|
|
|
sttmt = conn.createStatement();//SAD
|
|
|
|
|
sttmt = conn.createStatement();
|
|
|
|
|
String sql = "select * from user where username = '"+username+"'";
|
|
|
|
|
PreparedStatement ps = conn.prepareStatement(sql);
|
|
|
|
|
ResultSet rs1 = ps.executeQuery();
|
|
|
|
|
boolean flag1 = rs1.next();
|
|
|
|
|
if(!flag1){
|
|
|
|
|
sttmt.close();
|
|
|
|
|
return 0;
|
|
|
|
|
return 0; //当用户名不存在时返回0
|
|
|
|
|
}
|
|
|
|
|
ResultSet rs2 = sttmt.executeQuery("select * from user where username = '"+username+"'&&password = '"+password+"'");
|
|
|
|
|
boolean flag2 = rs2.next();
|
|
|
|
|
if(!flag2){
|
|
|
|
|
rs2.close();
|
|
|
|
|
sttmt.close();
|
|
|
|
|
return 1;
|
|
|
|
|
return 1; //当用户名存在,密码错误时返回1
|
|
|
|
|
}
|
|
|
|
|
sttmt.close();
|
|
|
|
|
return 2;
|
|
|
|
|
return 2; //都正确时,返回2
|
|
|
|
|
}catch (Exception e){
|
|
|
|
|
e.printStackTrace();
|
|
|
|
|
}
|
|
|
|
|