用户名或密码不正确怎么提示？

*/
protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
request.setCharacterEncoding(“utf-8”);
response.setContentType(“text/html;charset=utf-8”);

	String userns = request.getParameter("username");
	String psws = request.getParameter("password");
	
	 boolean flag=false; 
	 PreparedStatement pstats=null;   
	 ResultSet rs=null;  

	
	try {
		Class.forName(driver);
		conn= DriverManager.getConnection(url,username,password);
		pstats = conn.prepareStatement("select * from user where username=? and password=?"); 
		pstats.setString(1,userns);   
		pstats.setString(2,psws);  
		rs=pstats.executeQuery();   
		if (rs.next()) {    
			flag=true;  
			}  
		rs.close();  
		pstats.close(); 
		conn.close();
	} catch (ClassNotFoundException e) {
		
		e.printStackTrace();
		
	} catch (SQLException e) {
		
		e.printStackTrace();
	}        

	
	//User user = new User();
	//user.setUsername(username);
	//user.setPassword(password);
	//UserDao dao = new UserDaoImp();
	//dao.add(user);
	//User user = dao.findById(username,password);
	
	//if(user != null){
		if(userns.equals("admin")&&psws.equals("123456")){
			response.sendRedirect("welcome.jsp");
		}else if(flag==true){
			response.sendRedirect("welcome.jsp");
		}else{
			
			request.getRequestDispatcher("/index.jsp").forward(request, response);
		}
	}