jsp数据库连接查询

<%@ page language="java" import="java.util.*,java.sql.*" pageEncoding="UTF-8"%>
<%
request.setCharacterEncoding("utf-8");
out.print("登录处理界面");
//1.取得表单提交过来的数据
String name=request.getParameter("name");
String pwd=request.getParameter("pwd");
//2.加载JDBC驱动
Class.forName("com.mysql.jdbc.Driver");
//3.使用驱动管理类创造连接对象
String url="jdbc:mysql://127.0.0.1:3306/news?user=root&password=root";
Connection conn=DriverManager.getConnection(url);
//4.通过连接对象  创建执行对象 
Statement stm=conn.createStatement();
//5.通过命令执行对象执行sql脚本
String sql="select * from users where uname='"+name+"' and upwd='" +pwd+"'";
//6.执行查询语句 得到结果集
ResultSet rs=stm.executeQuery(sql);
//7.判断结果集是否有数据
if(rs.next()){
session.setAttribute("NAME", name);//
if(name.equals("admin")){
response.sendRedirect("admin.jsp");
}
%>
<script type="text/javascript">
alert("登录成功！");
open("index.jsp","_self");
</script>
<%
}else{
%>
<script type="text/javascript">
alert("登录失败！");
open("index.jsp","_self");
</script>
<%
}
//8.关闭资源
rs.close();
stm.close();
conn.close();
//9.跳会首页getRequestDispatcher 相等于forword跳转动作
request.getRequestDispatcher("../index.jsp");
%>