import java.io.IOException;
import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.ResultSet;

import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import com.mysql.jdbc.PreparedStatement;

/**
 * Servlet implementation class Login
 */
@WebServlet("/Login")
public class Login extends HttpServlet {
	private static final long serialVersionUID = 1L;

    /**
     * @see HttpServlet#HttpServlet()
     */
    public Login() {
        super();
        // TODO Auto-generated constructor stub
    }

	/**
	 * @see HttpServlet#doGet(HttpServletRequest request, HttpServletResponse response)
	 */
	protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		// TODO Auto-generated method stub
		response.getWriter().append("Served at: ").append(request.getContextPath());
	}

	/**
	 * @see HttpServlet#doPost(HttpServletRequest request, HttpServletResponse response)
	 */
	protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {



        response.setContentType("text/html");
        Connection conn = null;
        String url="jdbc:mysql://localhost:3306/";
        String dbName="Tamir";
        String driver="com.mysql.jdbc.Driver";



    try{
    	 request.setAttribute("message", "");
		String nick = request.getParameter("check_name");
		String password = request.getParameter("check_password");


      Class.forName(driver).newInstance();
      conn = DriverManager.getConnection(url+dbName,"root", "tamir");
      //admin check
      /*
      java.sql.PreparedStatement st2 = conn.prepareStatement("SELECT * FROM users WHERE nickname = ? or email = ? and password = ? and admin = T");
      st2.setString(1, nick);
      st2.setString(2, nick);
      st2.setString(3, password);
      ResultSet r2=st2.executeQuery();

      if(r2.next()) {
  	    request.getSession().setAttribute("admin", nick);
    }
    */
      //regular check
      java.sql.PreparedStatement st = conn.prepareStatement("SELECT * FROM users WHERE nickname = ? or email = ? and password = ?");
      st.setString(1, nick);
      st.setString(2, nick);
      st.setString(3, password);
      ResultSet r1=st.executeQuery();

      if(r1.next()) {


    	    request.getSession().setAttribute("user", nick);
        	 request.getRequestDispatcher("/tf2main.jsp").forward(request, response);


      } else {



     	 request.setAttribute("message", "Username or password are incorrect.");
 	    request.getSession().setAttribute("user", null);
     	 request.getRequestDispatcher("/Login.jsp").forward(request, response);

      }

    }catch (Exception ex) {
    	System.out.println("Error");
    }
	}

}