package SQLOdbc;

import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.ResultSet;
import java.sql.Statement;

public class SQLinjekt {

	/**
	 * @param args
	 */
	public static void main(String[] args) {
		// TODO Auto-generated method stub
		try {
			System.out.println("Indtast brugernavn");
			BufferedReader inLine = new BufferedReader(new InputStreamReader(System.in));
			String s1 = inLine.readLine();
			System.out.println("Indtast password");
			String s2 = inLine.readLine();
			Connection minConnection;
			// Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
			minConnection = DriverManager
					.getConnection("jdbc:sqlserver://ZIGGY;databaseName=Sikkerhed3;user=sa;password=Mikkel12;");
			Statement stmt = minConnection.createStatement();
			ResultSet res = stmt
					.executeQuery("select * from brugere where brugerid = '" + s1 + "' and passw = '" + s2 + "'");
			if (res.next()) {
				System.out.print("Velkommen du er nu logget ind");
			} else {
				System.out.print("Ukorrekt logon");
			}

			if (stmt != null) {
				stmt.close();
			}
			if (minConnection != null) {
				minConnection.close();
			}
		} catch (Exception e) {
			System.out.print("fejl:  " + e.getMessage());
		}

	}

}