Login Check SQL

<%@ page language="java" contentType="text/html; charset=windows-1255" pageEncoding="windows-1255"%>
<%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %>
<%@ taglib uri="http://java.sun.com/jsp/jstl/sql" prefix="sql"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1255">
<link rel="stylesheet" type="text/css" href="Style.css">
<title>Checker</title>
</head>
<body>
<sql:setDataSource var="snapshot" driver="com.mysql.jdbc.Driver"
     url="jdbc:mysql://localhost/members"
     user="root"  password="1234"/>

<sql:query dataSource="${snapshot}" var="result">
select * from users where user ='${param.uname}';
</sql:query>


<c:choose>
    <c:when test="${param.pass==result.rows[0].pass}">
        <%session.setAttribute("user", request.getParameter("uname")); %>
        <%session.setMaxInactiveInterval(-1); %>
        <%response.sendRedirect("loginSuccess.jsp"); %>

    </c:when>
    <c:otherwise>
        <%response.sendRedirect("loginFail.jsp"); %>
    </c:otherwise>
</c:choose>

</body>
</html>