<%
String sql="select * from members";
String usrnme=(String)session.getAttribute("name");
String psswrd=(String)session.getAttribute("pass");
sql="select * from members where username='"+usrnme+"' and password='"+psswrd+"'";


  if(request.getMethod().equals("POST"))
  {

         String username=request.getParameter("username");
         String password=request.getParameter("password");

         if (session.getAttribute("pass").equals(password) && session.getAttribute("name").equals(username))
         {
         db.insertUpdateDelete("delete from members where password='"+password+"' and username='"+username+"'");
         session.invalidate();
         response.sendRedirect("index.html");
         }
         else
             response.sendRedirect("deleteForMember.jsp");
  }
%>