01.<%
02. if(request.getParameter("Action") != null)
03. {
04.
05. Connection connect = null;
06. Statement s = null;
07.
08. try {
09. Class.forName("com.mysql.jdbc.Driver");
10.
12.
13. String username = request.getParameter("user");
14. String password = request.getParameter("password");
15.
16. s = connect.createStatement();
17.
18. String sql = "SELECT * FROM members WHERE " +
19. " username = '" + username + "' AND " +
20. " password = '" + password + "' ";
21.
22. ResultSet rec = s.executeQuery(sql);
23.
24. if(!rec.next())
25. {
26. out.println("Username or Password ไม่ถูกต้อง");
27. } else {
28. rec.first();
29. session.setAttribute("sid",rec.getString("id"));
30. request.getRequestDispatcher("/index2.jsp").forward(request, response);
31. }
32.
33. } catch (Exception e) {
34.
35. out.println(e.getMessage());
36. e.printStackTrace();
37. }
38.
39. try {
40. if(s!=null){
41. s.close();
42. connect.close();
43. }
44. } catch (SQLException e) {
45.
46. out.println(e.getMessage());
47. e.printStackTrace();
48. }
49.
50. }
51.
52.%>
53. <div class="login">
54. <form action="index.jsp?Action=#login" method="post">
55. <input type="text" placeholder="username" name="user"><br>
56. <input type="password" placeholder="password" name="password"><br>
57. <input type="submit" typea="button" name="Submit" value="Login">
58. </form>
59. </div>
60. </div>
