Actually someone has written the code and I am assigned with buf fixing..So I am not understanind the code properly..This is the code written in authUser1.jsp
<%@ include file="conn/dbConn.jsp" %>
<%@ page session="true"%>
<%@ page errorPage="genErrorPage.jsp"%>
<%@ page import="javax.naming.*"%>
<%
boolean bEmployee = false,bConsultant=false;
int iEID=0,iAccess=0,iHR=0;
String sQuery="";
PreparedStatement pstmt;
String sRetVal="",sNickName="",sLocation="",sDivision="";
ResultSet rst;
int iFirstIndex=0,iLastIndex=0,iFirstTilde=0,iLastTilde=0,iDivision=0;
boolean isValid=false;
//out.println("isValid :"+isValid);
try{
//String sUserName =(String)session.getValue("name");
//String sPassword = (String)session.getValue("password");
//String sPassword = request.getParameter("Password");
String sUserName = request.getParameter("UserName");
String sPassword = request.getParameter("Password");
//isValid = authJNDI.isValidUser(sUserName,sPassword);
isValid =isValidUser(sUserName,sPassword);
//isValid=true;
if (isValid){
CallableStatement cstmt = oConnection.prepareCall("begin ?:=fn_authenticate(?,?);end;");
cstmt.registerOutParameter(1,Types.VARCHAR);
cstmt.setString(2,sUserName);
cstmt.setString(3,sPassword);
cstmt.execute();
sRetVal=cstmt.getString(1);
if(sRetVal.equalsIgnoreCase("NOTFOUND")){
response.sendRedirect("genInvalidUser.htm");
}else{
try{
// out.println(sRetVal);
iFirstIndex = sRetVal.indexOf("~");
iLastIndex = sRetVal.lastIndexOf("~");
iFirstTilde = sRetVal.indexOf("^");
iLastTilde = sRetVal.lastIndexOf("^");
iDivision = sRetVal.indexOf("!");
// out.println(" iFirstIndex:"+iFirstIndex);
// out.println(" iLastIndex:"+iLastIndex);
// out.println(" iFirstTilde :"+iFirstTilde );
// out.println(" iLastTilde :"+iLastTilde );
// out.println(" iDivision:"+iDivision);
sNickName = sRetVal.substring(0,iFirstIndex);
iEID = Integer.parseInt(sRetVal.substring(iFirstIndex+1,iLastIndex));
iAccess = Integer.parseInt(sRetVal.substring(iLastIndex+1,iFirstTilde));
sLocation = sRetVal.substring(iFirstTilde+1,iLastTilde);
iHR = Integer.parseInt(sRetVal.substring(iLastTilde+1,iDivision ));
sDivision = sRetVal.substring(iDivision+1,sRetVal.length());
// out.println(" sNickName :"+sNickName );
// out.println(" iEID :"+iEID );
// out.println(" sLocation :"+sLocation );
// out.println(" iAccess :"+iAccess );
// out.println(" HR :"+iHR);
// out.println(" Division :"+sDivision);
session.putValue("EmpId",new Integer(iEID));
session.putValue("NickName",sNickName);
session.putValue("RRF", new Integer(iAccess));
session.putValue("EmpLoc", sLocation);
session.putValue("HR", new Integer(iHR));
session.putValue("EmpDiv", sDivision);
}catch(Exception ee){
out.println(ee.toString());
throw new Exception("Bad Parameters...");
}
}
if(sUserName.equalsIgnoreCase("guest")){
response.sendRedirect("demoframe.jsp");
}else{
response.sendRedirect("newframe.jsp");
}
cstmt.close();
oConnection.close();
}else{
response.sendRedirect("genInvalidUser.htm");
}
}catch(Exception e){
throw new Exception("Authentication Failed "+e.getMessage());
}
%>
and dbConn.jsp is
<%@page import="java.sql.*,javax.util.*,com.microsoft.jdbc.sqlserver.SQLServerDriver" %>
<% //@ page errorPage="ErrorPage.jsp"%>
<%Connection oConnection = null;
try{
//Class.forName("oracle.jdbc.driver.OracleDriver");
Class.forName("com.microsoft.jdbc.sqlserver.SQLServerDriver");
oConnection = DriverManager.getConnection("jdbc:sqlserver://192.168.1.109:1433;DatabaseName=KHRMS","sa", "Welcome12");
}
catch(Exception e){
out.println(e.toString());
//throw new Exception("Error Accessing Database: "+e.getMessage());
}
%>
