WebSphere Application Server - IBM Redbooks

Get data from HTML form
String user = request.getParameter("username").trim();
String pass = request.getParameter("password").trim();
// Verify that user exists
if (hasPriv(user, pass)) {
// Send user to admin page
response.sendRedirect(response.encodeRedirectURL("/OnlineCatalog/administration
/admin.html"));
}
else {
PrintWriter pw = response.getWriter();
pw.println("LOGIN ERROR - Invalid user or
password");
pw.println("Click here to Try
Again");
}
}
private boolean hasPriv(String user, String pass) {
boolean result = false;
try {
// Connect to the database
DBConnection dbConnection = new DBConnection();
// Query database
ResultSet rs = dbConnection.getFromDB("SELECT password, username FROM
users WHERE username = '" + user + "'");
if (!rs.next()) {
try {
common.LogWriter.getInstance().writeToLog("Login Error: Invalid
username " + user);
} catch (InterruptedException ex) {}
return false;
}//if
// Get password for user from database
String realPass = rs.getString("password").trim();
238 IBM WebSphere Application Server - Express V5.0.2 Developer Handbook