i create a html login page.. so after i click login, the tomcat appear a error sentence which says something like java.sql.SQLExc epton etc Syntax error in FROM clause.... the folowing java code are display below... what's wrong with my code?? please help.... thanks alot
Code:
import java.io.*;
import javax.servlet.*;
import javax.servlet.http.*;
import java.util.*;
import java.sql.*;
public class LoginServlet extends HttpServlet {
public void doPost(HttpServletRequest request, HttpServletResponse response)
throws IOException, ServletException {
String userName = request.getParameter("userName");
String password = request.getParameter("password");
if (adminLogin(userName, password))
{
RequestDispatcher rd = request.getRequestDispatcher("/test1.html");
rd.forward(request, response);
}
else if (teachLogin(userName, password))
{
RequestDispatcher rd = request.getRequestDispatcher("/test2.html");
rd.forward(request, response);
}
else if (studLogin(userName, password))
{
RequestDispatcher rd = request.getRequestDispatcher("/test3.html");
rd.forward(request, response);
}
else
{
RequestDispatcher rd = getServletContext().getRequestDispatcher("/InvalidUser");
rd.include(request, response);
rd = request.getRequestDispatcher("/login.html");
rd.include(request, response);
}
}
boolean adminLogin(String userName, String password){
try {
Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
Connection con = DriverManager.getConnection("jdbc:odbc:IT3504");
System.out.println("got connection");
Statement s = con.createStatement();
String sql = "SELECT userName, password FROM Admin" +
"WHERE userName='" + userName +"'"+
"AND password='" + password +"'" ;
ResultSet rs = s.executeQuery(sql);
if (rs.next()) {
rs.close();
s.close();
con.close();
return true;
}
rs.close();
s.close();
con.close();
}
catch (ClassNotFoundException e) {
System.out.println(e.toString());
}
catch (SQLException e) {
System.out.println(e.toString());
}
catch (Exception e) {
System.out.println(e.toString());
}
return false;
}
boolean teachLogin(String userName, String password){
try {
Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
Connection con = DriverManager.getConnection("jdbc:odbc:IT3504");
System.out.println("got connection");
Statement s = con.createStatement();
String sql = "SELECT userName, password FROM Teacher" +
"WHERE userName='" + userName +"'"+
"AND password='" + password +"'" ;
ResultSet rs = s.executeQuery(sql);
if (rs.next()) {
rs.close();
s.close();
con.close();
return true;
}
rs.close();
s.close();
con.close();
}
catch (ClassNotFoundException e) {
System.out.println(e.toString());
}
catch (SQLException e) {
System.out.println(e.toString());
}
catch (Exception e) {
System.out.println(e.toString());
}
return false;
}
boolean studLogin(String userName, String password){
try {
Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
Connection con = DriverManager.getConnection("jdbc:odbc:IT3504");
System.out.println("got connection");
Statement s = con.createStatement();
String sql = "SELECT adminNo, password FROM Student" +
"WHERE adminNo='" + userName +"'"+
"AND password='" + password +"'" ;
ResultSet rs = s.executeQuery(sql);
if (rs.next()) {
rs.close();
s.close();
con.close();
return true;
}
rs.close();
s.close();
con.close();
}
catch (ClassNotFoundException e) {
System.out.println(e.toString());
}
catch (SQLException e) {
System.out.println(e.toString());
}
catch (Exception e) {
System.out.println(e.toString());
}
return false;
}
}
Comment