用户登录验证

import java.io.IOException;
import java.io.PrintWriter;
import java.sql.*;

import javax.servlet.RequestDispatcher;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

public class dlyz extends HttpServlet {
    public void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        
        String usercheckcode = request.getParameter("checkcode");
        HttpSession session = request.getSession();
        String servercheckcode = (String) session.getAttribute("checkCode");
        String info = "";
        if (!servercheckcode.equalsIgnoreCase(usercheckcode)) {
            //response.sendRedirect("error1.jsp");
            info = "验证码不正确，请重新输入";
            request.setAttribute("info", info);
            RequestDispatcher rd = request.getRequestDispatcher("/denglu.jsp");
            rd.forward(request, response);
        }
        else{
    String driverName = "com.mysql.jdbc.Driver";   //驱动程序名
    String userName = "root";       //数据库用户名
    String userPwd = "123456";      //密码
    String dbName = "students";        //数据库名  
    String  url1="jdbc:mysql://localhost:3306/"+dbName;
    String url2 ="?user="+userName+"&password="+userPwd; 
     String url3="&useUnicode=true&characterEncoding=utf-8";
     String url =url1+url2+url3;
     request.setCharacterEncoding("utf-8"); 
     String name=request.getParameter("userName");
     String pw=request.getParameter("userPwd");
   
     session.setAttribute("u_name",name);
     //RequestDispatcher dis=null;//设置转发的对象
     try {
       Class.forName(driverName);
        Connection conn=DriverManager.getConnection(url); 
        String  sql="select * from yonghu  where(Sname=? and Spassword=?)";
        PreparedStatement pstmt= conn.prepareStatement(sql);
        pstmt.setString(1,name);
        pstmt.setString(2,pw);    
        ResultSet  rs=pstmt.executeQuery(); 
        if(rs.next()){ 
              if(rs!=null)rs.close();   
             if(pstmt!=null)pstmt.close();
              if(conn!=null)conn.close();
             response.sendRedirect("/kaoshi/admin/shouye.html");
              
        }
        else{
              if(rs!=null)rs.close(); 
             if(pstmt!=null)pstmt.close();
             if(conn!=null)conn.close(); 
             info = "用户名或密码错误，请重新输入";
             request.setAttribute("info", info);
             RequestDispatcher rd = request.getRequestDispatcher("/denglu.jsp");
             rd.forward(request, response);
        }
    } catch (Exception e) {
        e.printStackTrace();
    }    
        }
}
public void doPost(HttpServletRequest request, HttpServletResponse response)
        throws ServletException, IOException {
    doGet(request, response);
}

}