Servlets/HTTP

[Anonymous]

I am working on a project with servlets.
We are currently using HTTP authorization. When user logs in user name/password is send to the servlet and checks with the Netscape database for the validation of user Id and the password. If it is validated a page will be send to the user back.
Now we are planning to avoid netscape database.
we are planning to get the username/passwd from HTTP string and try to use a store procedure againt sql server for validation.
can anybody help me how to proceed.
tho code is somthing like this.
Can anyone help me how to make connection with sql server and running a stored procedure for verification.
Thanks in advance.

public class AuthServlet extends HttpServlet {
  public void init(ServletConfig config) throws ServletException {
    System.out.println("Starting Authentication Servlet..."+config.toString());
super.init(config);
    // Get initialization parameters from the servlet preferences
Enumeration enum = getInitParameterNames();
Properties props = new Properties();
    System.out.println("Startup parameters:");
    if (enum != null) {
      while (enum.hasMoreElements()) {
    String param = (String) enum.nextElement();
        String value = getInitParameter(param);
        System.out.println("  "+param+": "+value);
        props.put(param,value);
      }
    }
    if (enum==null) System.out.println("Enum of init config parms is null!");
  }
public void doGet(HttpServletRequest req, HttpServletResponse res) throws ServletException, IOException {
ServletOutputStream out = res.getOutputStream();
System.out.println("************************************************");
System.out.println("Requested URL:");
System.out.println ("    "+HttpUtils.getRequestURL (req).toString ());
System.out.println("************************************************");
System.out.println("Request information:");
print("Request method", req.getMethod());
print("Request URI", req.getRequestURI());
print("Request protocol", req.getProtocol());
print("Servlet path", req.getServletPath());
print("Path info", req.getPathInfo());
print("Path translated", req.getPathTranslated());
print("Query string", req.getQueryString());
print("Content length", req.getContentLength());
print("Content type", req.getContentType());
print("Server name", req.getServerName());
print("Server port", req.getServerPort());
print("Remote user", req.getRemoteUser());
print("Remote address", req.getRemoteAddr());
print("Remote host", req.getRemoteHost());
print("Authorization scheme", req.getAuthType());
Association headers=new Association();
Enumeration en = req.getHeaderNames();
    if(en.hasMoreElements()) {
System.out.println("************************************************");
System.out.println("Request headers:");
while (en.hasMoreElements()) {
String name = (String)en.nextElement();
System.out.println("    " + name + ": " + req.getHeader(name));
headers.put(name,req.getHeader(name));
}
}
Association params=new Association();
en = req.getParameterNames();
if(en.hasMoreElements()) {
System.out.println("************************************************");
System.out.println("Servlet parameters (Single Value style):");
while (en.hasMoreElements()) {
String name = (String)en.nextElement();
System.out.println("    " + name + " = " + req.getParameter(name));
params.put(name,req.getParameter(name));
}
}
/*  if(req.getPathInfo()==null | | req.getPathInfo().equals("")) {
res.setContentType("text/html");
out.print("authorized=no\n");
out.print("msg=Access has been denied. Invalid authorization request.\n");
return;
}*/
/*  if(req.getRemoteUser()==null) {
res.setContentType("text/html");
out.print("authorized=no\n");
out.print("msg=Access has been denied. Resource is not protected.\n");
return;
}
if(!req.getRemoteUser().equals(params.get("RepCode"))) {
res.setContentType("text/html");
out.print("authorized=no\n");
out.print("msg=Access has been denied by the server. Access violation\n");
return;
}  */
System.out.println("************************************************");
System.out.println("* Number of active threads is "+Thread.activeCount());
System.out.println("* RepCode: "+params.get("RepCode"));
System.out.println("************************************************");
/*if(params.get("RepCode")==null) {
res.setContentType("text/html");
out.print("authorized=no\n");
out.print("msg=Access (1/27/99-1) has been denied by the server. Invalid user\n");
return;
} 
        
try {
out.print("authorized=yes\n");
out.print("userid="+params.get("RepCode")+":"+req.getRemoteAddr()+"\n");
out.print("username="+params.get("RepCode")+"\n");
Enumeration pars=getInitParameterNames();
while(pars.hasMoreElements()) {
String name=(String)pars.nextElement();
out.print(name+"="+getInitParameter(name)+"\n");
}
} catch(Exception e) {
res.setContentType("text/html");
out.print("authorized=no;");
out.print("msg=Access (1/27/99-2)has been denied by the server. Access violation;");
}
finally {
;
}
System.out.println("************************************************");
}
}

[This message has been edited by Frank Carver (edited February 02, 2000).]