Results 1 to 8 of 8

Thread: servlet issue

  1. 05-19-2010, 06:14 PM #1
    tjhodge
    tjhodge is offline Member
    Join Date
    Feb 2009
    Posts
    7
    Rep Power
    0

    Default servlet issue

    I am running this program but instead of redirecting to the next page, the servlet LoginServlet just opens a blank page. Can anyone spot where i may have gone wrong? The servlet is in a package called Login.

    Java Code: 
    <%@page contentType="text/html" pageEncoding="UTF-8"%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
   "http://www.w3.org/TR/html4/loose.dtd">

<html>


    <body bgcolor="blue">
        <form name="f1" method="post" action="LoginServlet">
            <table>
                <tr>
                    <td>Username</td>
                    <td><input type="text" name="t1" ></td>
                </tr>
                <tr>
                    <td>Password</td>
                    <td><input type="password" name="t2"></td>
                </tr>
                <tr>
                    <td></td>
                    <td><input type="submit" name="b1" value="LOGIN"></td>
                </tr>
            </table>
        </form>
    </body>
</html>
    Java Code: 
    package Login;

import java.io.*;
import javax.servlet.*;
import javax.servlet.http.*;
import java.sql.*;

public class LoginServlet extends HttpServlet {

    @Override
    protected void doPost(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {

        PrintWriter pw = response.getWriter();
        response.setContentType("text/html");
        String name = request.getParameter("t1");
        String password = request.getParameter("t2");

        try {

            
            Connection con = DBConnect.DbConnection.getConnection();
            Statement st = con.createStatement();
            ResultSet rs = st.executeQuery("SELECT username, password "
                    + "FROM users "
                    + "WHERE username = " + name + " "
                    + "AND password = " + password);

            if (rs != null) {
                HttpSession session = request.getSession();
                session.setAttribute("username", name);
                response.sendRedirect("next.jsp");
            } else {
                response.sendRedirect("elogin.jsp");
            }


        } catch (Exception e) {
            e.getMessage();
        }
    }
}
    Reply With Quote Reply With Quote
  2. 05-20-2010, 06:27 AM #2
    r035198x
    r035198x is offline Senior Member
    Join Date
    Aug 2009
    Posts
    2,388
    Rep Power
    6

    Default

    Check the logs to see what exceptions were thrown.
    Reply With Quote Reply With Quote
  3. 05-20-2010, 06:50 AM #3
    tjhodge
    tjhodge is offline Member
    Join Date
    Feb 2009
    Posts
    7
    Rep Power
    0

    Default

    I seem to have it working now, the only issue i am having is the redirecting to the error page. There are no errors but its not redirecting. It redirects if the details are correct but if they are wrong it does not .

    Java Code: 
     Connection con = DBConnect.DbConnection.getConnection();
                Statement st = con.createStatement();

                String user = request.getParameter("t1");
                String pass = request.getParameter("t2");
                String strSQL = "SELECT username, password FROM users "
                        + "WHERE username = '" + user + "' "
                        + "AND password = '" + pass + "'";
                ResultSet rs = st.executeQuery(strSQL);
                String username, password;
                HttpSession session = request.getSession();

                while (rs.next()) {
                    username = rs.getString("username");
                    password = rs.getString("password");

                    if (user.equals(username) && pass.equals(password)) {

                        response.sendRedirect("next.jsp");
                    } else {
                        response.sendRedirect("errorlogin.jsp");
                    }
                }
    Reply With Quote Reply With Quote
  4. 05-20-2010, 06:54 AM #4
    r035198x
    r035198x is offline Senior Member
    Join Date
    Aug 2009
    Posts
    2,388
    Rep Power
    6

    Default

    Is the name of the JSP correct? Is it in the same folder as the next.jsp?
    You should still have got an error message somewhere not just a blank page.

    P.S Hopefully you are closing the connections in some finally block that you have not posted.
    Reply With Quote Reply With Quote
  5. 05-20-2010, 09:58 AM #5
    Tolls
    Tolls is offline Moderator
    Join Date
    Apr 2009
    Posts
    10,460
    Rep Power
    16

    Default

    Your logic's wrong.

    First off:
    Java Code: 
            } catch (Exception e) {
            e.getMessage();
        }
    This is just eating an exception. You should be doing e.printStackTrace().

    Second:
    Java Code: 
                    while (rs.next()) {
                    username = rs.getString("username");
                    password = rs.getString("password");

                    if (user.equals(username) && pass.equals(password)) {

                        response.sendRedirect("next.jsp");
                    } else {
                        response.sendRedirect("errorlogin.jsp");
                    }
                }
    If the username and password aren't in the db the resultset will be empty, so rs.next() will be false. So the code is never entered.

    There's no point rechecking the username/password against what was enetered since the SQL has already done that. So you want to do an "if" not a "while", and the else will be your error login page.
    Reply With Quote Reply With Quote
  6. 05-20-2010, 10:00 AM #6
    Tolls
    Tolls is offline Moderator
    Join Date
    Apr 2009
    Posts
    10,460
    Rep Power
    16

    Default

    In fact why are you getting the result from the db based on "t1" and "t2" and then comparing the returned values against "username" and "password"?
    Reply With Quote Reply With Quote
  7. 05-20-2010, 11:43 AM #7
    tjhodge
    tjhodge is offline Member
    Join Date
    Feb 2009
    Posts
    7
    Rep Power
    0

    Default

    Thanks for the help, i removed the comparison between username and password and used the if statement and it works great! You help was much appreciated!! Thanks again
    Reply With Quote Reply With Quote
  8. 05-20-2010, 11:55 AM #8
    Tolls
    Tolls is offline Moderator
    Join Date
    Apr 2009
    Posts
    10,460
    Rep Power
    16

    Default

    No probs.
    At least you did the check in the SQL.
    You won't believe the number of people who simply get a resultset from the user table and have Java cycle through it all checking for username and password.
    Reply With Quote Reply With Quote
« need opinion on public static final etc ... | Drawing an image on JPanel »

Similar Threads

  1. Performance issue - How to Queue and process Servlet Requests
    By gemgb in forum Java Servlet
    Replies: 1
    Last Post: 09-27-2009, 03:36 AM
  2. Memory issue in servlet application in a tomcat container
    By bedhinesh in forum Java Servlet
    Replies: 2
    Last Post: 07-24-2009, 01:26 PM
  3. how can i link html+servlet+xml to form servlet
    By balachandarr in forum Java Servlet
    Replies: 0
    Last Post: 04-15-2009, 04:06 PM
  4. Servlet - apache tomcat/glassfish server shuts down on servlet usage
    By StewS in forum Java Servlet
    Replies: 1
    Last Post: 12-02-2008, 12:23 AM
  5. javax.servlet.ServletException: Wrapper cannot find servlet class util.t2
    By osval in forum Advanced Java
    Replies: 1
    Last Post: 08-07-2007, 03:47 PM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules