NULLPointer
PreparedStatement pst = conn.prepareStatement(sql);
和
pst.setString(1, new String(user.getUsername().getBytes("ISO-8859-1"),"utf-8"));
pst.setString(5, new String(user.getSex().getBytes("ISO-8859-1"),"utf-8"));
pst.setString(7, new String(user.getGrade().getBytes("ISO-8859-1"),"utf-8"));
pst.setString(8, new String(convert.arrStr(user.getLanguage()).getBytes("ISO-8859-1"),"utf-8"));
pst.setString(9, new String(user.getTextarea().getBytes("ISO-8859-1"),"utf-8"));
pst.setString(10,new String(user.getFile().getBytes("ISO-8859-1"),"utf-8"));
的位置写反了