WebSphere Application Server - IBM Redbooks

If password matches one in database, then successful login
if (realPass.equals(pass)) {
result = true;
} else {
try {
common.LogWriter.getInstance().writeToLog("Login Error: Invalid
password entered for " + user);
} catch (InterruptedException ex) {}
}//if
}
}
// Close the connection
rs.close();
dbConnection.close();
return result;
} catch (Throwable e) {
try {
common.LogWriter.getInstance().writeToLog("Login Exception: " + e);
return false;
} catch (InterruptedException ex) {
return result;
}
}
Note: The login component illustrated in this section is only mentioned here to
show the use of servlets in Studio Site Developer. The login component is not
a proper Web site security solution and is not recommended for “real-life”
situations. To reiterate, when the user logs in, a servlet will verify that the user
and password exist in a database table and forward the user to a new page.
No session information is used in the process, therefore if the user knew the
full path of the location he or she could get there without using the login.
Chapter 7. Working with servlets 239