posted 13 years ago
Presumably you'd only want to select from the table where the user name and password are the same as the values on the form, no? So change your HQL. If you get a result, it means there's a user with that username and password. If you don't, there isn't, and login has failed.