QueryRunner-2

String param[] = {username,password};
   OracleUtil db = new OracleUtil(" java:/comp/env/jdbc/oracleds");
   db.init();
   
   //List result = (List) db.queryU("select * from admin where username='"+param[0]+"' and  upassword='"+param[1]+"' ", new BeanHandler(Users.class));
   //List result = (List) db.queryU("select * from admin", new BeanHandler(Users.class));
    List result =  (List)db.queryU("select * from admin where username='"+param[0]+"' and  upassword='"+param[1]+"' ", new BeanListHandler(Users.class));
   if(result.size()==0 ){
    message = "对不起，密码不能为空，请重新输入！";
    request.setAttribute("guestbook.admin.login.message", message);
    request.getRequestDispatcher("/admin/loginFail.jsp").forward(request, response);
   }else{
    HttpSession session = request.getSession();
    session.setAttribute("guestbook.admin.username",username);
    response.sendRedirect("/liuyanban/servlet/getMessages?username="+param[0]);
    //response.sendRedirect(request.getContextPath() + "/admin/secure/manage?q=list");
   }