How to use httpsession with dao factory

[Rochal Collins]

Hi. I'm trying to build a simple login page and registration page. People login through the login page. I use a DAO Factory to check the database to see if their username and password is in there. I'm having problems setting up the httpsession. I had it working with the Httpsession but now I have problems. I also want the person redirected to a welcome page if their username and password has been found in the database.

userservlet.java

public class UserServlet extends HttpServlet {

private static final long serialVersionUID = 1L;


public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException{
 
String error;
String address=null;

if (request.getParameter("user_action") == "logon"){


// create the required DAO Factory
DAOFactory myFactory =   
  DAOFactory.getDAOFactory(DAOFactory.MYSQL);

// Create a DAO
UserDAO userDAO = 
  myFactory.getUserDAO();



String username = request.getParameter("user");
String pass = request.getParameter("pwd");


// Find a user object. Get the Transfer Object.

User user;

user = userDAO.findUser(username, pass);

if (user.getFName() == null){

}else{
HttpSession session = request.getSession(true); 
session.setAttribute("username", username); 
response.sendRedirect("user_home.jsp");
}

}

else if ((request.getParameter("user_action") == "register")){


// create the required DAO Factory
DAOFactory myFactory =   
  DAOFactory.getDAOFactory(DAOFactory.MYSQL);

// Create a DAO
UserDAO userDAO = 
  myFactory.getUserDAO();

String username = request.getParameter("username");
String pass = request.getParameter("pass");
String pass2 = request.getParameter("pwd2");
String first = request.getParameter("first");
String last = request.getParameter("last");
String addr1 = request.getParameter("addr1");
String addr2 = request.getParameter("addr2");
String city = request.getParameter("city");
String state = request.getParameter("state");
String zip = request.getParameter("zip");
String phNum = request.getParameter("phone");
String em = request.getParameter("email");

User user = new User();

user.setUserName(username);
user.setUserPassword(pass);
user.setFName(first);
user.setLName(last);
user.setAddress1(addr1);
user.setAddress2(addr2);
user.setCity(city);
user.setState(state);
user.setZipCode(zip);
user.setPhoneNumber(phNum);
user.setEmail(em);

boolean newuser = userDAO.insertUser(user);

System.out.println("Add user: "+ newuser);



}

}

 
 
mysqluserdao.java
 
 
public class MySQLUserDAO implements UserDAO {
    
    /**
     * Stores a connection to a MySQL database.
     */
    private Connection connection;
    
    /**
     * Creates a MySQLUserDAO with a given 
     * MySQL database connection.
     * 
     * @param connection
     */
    public MySQLUserDAO(Connection connection) {
this.connection = connection;
System.out.println("MySQLUserDAO created!");
    }
    
    /**
     * Add a new user.
     * 
     * @param a User object.
     * @return a boolean indicating the user was successfully added.
     */
    public boolean insertUser(User user){
try {
    // Set up the PreparedStatement.
    PreparedStatement insertUserSQL = connection.prepareStatement(
            "insert into app_user(user_name, user_password, first_name, last_name, phone_number, email_address, address_line1, address_line2, address_city, address_state, address_zip) " +
            "values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)");
    insertUserSQL.setString(1, user.getUserName());
    insertUserSQL.setString(2, user.getUserPassword());
    insertUserSQL.setString(3, user.getFName());
    insertUserSQL.setString(4, user.getLName());
    insertUserSQL.setString(5, user.getPhoneNumber());
    insertUserSQL.setString(6, user.getEmail());
    insertUserSQL.setString(7, user.getAddress1());
    insertUserSQL.setString(8, user.getAddress2());
    insertUserSQL.setString(9, user.getCity());
    insertUserSQL.setString(10, user.getState());
    insertUserSQL.setString(11, user.getZipCode());
    // Execute the PreparedStatement.
            insertUserSQL.executeUpdate();
            // Commit the transaction.
            connection.commit();
            // Close the PreparedStatement.
            insertUserSQL.close();
            return true;
        } catch(SQLException sqlEx) {
            System.out.println("SQLException occurred: Problem adding user!");
    System.out.println("Message: " + sqlEx.getMessage());
    System.out.println("SQLState: " + sqlEx.getSQLState());
    System.out.println("ErrorCode: " + sqlEx.getErrorCode() );
    sqlEx.printStackTrace();
    try {
// Rollback the transaction.
connection.rollback();
    } catch (SQLException rsqlex) {
System.out.println("Rollback SQLException occurred!");
System.out.println("Message: " + rsqlex.getMessage());
System.out.println("SQLState: " + rsqlex.getSQLState());
System.out.println("ErrorCode: " + rsqlex.getErrorCode());
rsqlex.printStackTrace();
    }
    return false;
        }
    }
    
    
    /**
     * Find an user by username and password.
     * 
     * @param strings representing the username and password.
     * @return a User object.
     */
    public User findUser(String username, String pwd) {
// Initialize User object to be returned.
    User user = new User();
        try {
            // Set up the PreparedStatement.
            PreparedStatement findUserSQL = connection.prepareStatement(
                "select  user_name, first_name, last_name, phone_number, email_address, address_line1, address_line2, address_city, address_state, address_zip " +
                "from     app_user " + 
                "where    user_name = ? AND user_password= ?");
            findUserSQL.setString(1, username);
            findUserSQL.setString(2, pwd);
            // Execute the Statement.
            ResultSet resultSet = findUserSQL.executeQuery();
            // Go through ResultSet.
            if(resultSet.next()) {
            user.setUserName(resultSet.getString("user_name"));
                user.setFName(resultSet.getString("first_name"));
                user.setLName(resultSet.getString("last_name"));
                user.setPhoneNumber(resultSet.getString("phone_number"));
                user.setEmail(resultSet.getString("email_address"));
                user.setAddress1(resultSet.getString("address_line1"));
                 user.setAddress2(resultSet.getString("address_line2"));
                 user.setCity(resultSet.getString("address_city"));
                user.setState(resultSet.getString("address_state"));
                user.setZipCode(resultSet.getString("address_zip"));
                
            }
            else{
            user.setUserName(resultSet.getString(null));
                user.setFName(resultSet.getString(null));
                user.setLName(resultSet.getString(null));
                user.setPhoneNumber(resultSet.getString(null));
                user.setEmail(resultSet.getString(null));
                user.setAddress1(resultSet.getString(null));
                 user.setAddress2(resultSet.getString(null));
                 user.setCity(resultSet.getString(null));
                user.setState(resultSet.getString(null));
                user.setZipCode(resultSet.getString(null));
            }
            // Close the Statement.
            findUserSQL.close();
            return user;
        } catch(SQLException sqlEx) {
       
        System.out.println("SQLException occurred: Problem finding employees!");
    System.out.println("Message: " + sqlEx.getMessage());
    System.out.println("SQLState: " + sqlEx.getSQLState());
    System.out.println("ErrorCode: " + sqlEx.getErrorCode() );
    sqlEx.printStackTrace();
    
    return user;
        }
    }
}

Can someone tell me what I'm doing wrong???


[BSouther: Added UBB CODE tags]
[ September 26, 2007: Message edited by: Ben Souther ]

[Bear Bibeault]

Please be sure to use UBB code tags when posting to the forums. Please read this for more information.

[siva kumar]

What problem/Error message are you getting???

[Rochal Collins]

Nothing is happening. It should find the user and password in the database and forward to the user home page.

[subodh gupta]

Hi,

Use:

user.setFName(null);  

INTEAD OF:

 user.setFName(resultSet.getString(null));  

AND

    
if (user.getFName() == null) {
    response.sendRedirect("url of ur login screen");
}

instead of

    
if (user.getFName() == null) {
}