I'm trying to do login validation from my jsp page. I have two jsp page. One login.jsp which create login form and second is validation.jsp..which should check username and password to database table, to make sure that username and password exit.And if it does it should send user to other page,or if it doesnt then send to error page. so how im missing something in my validation.jsp. i cant seems to figure it out.
Here is my validation.jsp code
<html>
<head>
<title>store data in database</title>
</head>
<%@ page import="java.sql.*" %>
<body>
<%
String userName=request.getParameter("userName"
;
String secretWord=request.getParameter("secretWord"
%>
<%
String connURL = "jdbcracle:thinorca.csc.ncsu.edu:1521:ORCL";
Connection conn = null;
Statement stmt = null;
ResultSet rs = null;
try{
Class.forName("oracle.jdbc.driver.OracleDriver".newInstance();
conn = DriverManager.getConnection(connURL, "vapatel","pjdas"
stmt = conn.createStatement();
String sqlStatement = "SELECT * FROM Login WHERE Username = '"+userName+"' AND Password='"+secretWord+"'" ; stmt.executeUpdate(sqlStatement);
stmt.close();
} catch (ClassNotFoundException e) {
System.err.println("Couldn't find the mm " + "database driver: "
+ e.getMessage());
} catch (InstantiationException e) {
System.err.println(e.getMessage());
} catch (IllegalAccessException e) {
System.err.println(e.getMessage());
} catch (SQLException e) {
System.err.println("SQL problem: " + e.getMessage());
System.err.println("SQL state: " + e.getSQLState());
System.err.println("Vendor error: " + e.getErrorCode());
} finally {
try {
if (conn != null) {
conn.close();
}
} catch (SQLException e) {
System.err.println(e.getMessage());
}
}
%>
<h2> Thank You</h2>
The Database has been updated.
</body>
Here is my validation.jsp code
<html>
<head>
<title>store data in database</title>
</head>
<%@ page import="java.sql.*" %>
<body>
<%
String userName=request.getParameter("userName"
;String secretWord=request.getParameter("secretWord"
;%>
<%
String connURL = "jdbc
racle:thinorca.csc.ncsu.edu:1521:ORCL";Connection conn = null;
Statement stmt = null;
ResultSet rs = null;
try{
Class.forName("oracle.jdbc.driver.OracleDriver"
.newInstance();conn = DriverManager.getConnection(connURL, "vapatel","pjdas"
;stmt = conn.createStatement();
String sqlStatement = "SELECT * FROM Login WHERE Username = '"+userName+"' AND Password='"+secretWord+"'" ; stmt.executeUpdate(sqlStatement);
stmt.close();
} catch (ClassNotFoundException e) {
System.err.println("Couldn't find the mm " + "database driver: "
+ e.getMessage());
} catch (InstantiationException e) {
System.err.println(e.getMessage());
} catch (IllegalAccessException e) {
System.err.println(e.getMessage());
} catch (SQLException e) {
System.err.println("SQL problem: " + e.getMessage());
System.err.println("SQL state: " + e.getSQLState());
System.err.println("Vendor error: " + e.getErrorCode());
} finally {
try {
if (conn != null) {
conn.close();
}
} catch (SQLException e) {
System.err.println(e.getMessage());
}
}
%>
<h2> Thank You</h2>
The Database has been updated.
</body>