Untitled

<%@ page language="java" contentType="text/html; charset=ISO-8859-1"
    pageEncoding="ISO-8859-1"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>Login</title>
</head>
<body>

    <form action="richiestaLogin" method="post">
        <div>Nome: <input type="text" name="username"/></div>
        <div>Password: <input type="password" name="password"/></div>
        <div><font color="red">${ errorLogin }</font></div>
        <div><input type="submit" name="submit" value="Invia"/></div>
    </form>

</body>
</html>

package it.uniroma3.siw.controller;

import java.io.IOException;

import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

@WebServlet("/richiestaLogin")
public class LoginController extends HttpServlet {
    private static final long serialVersionUID = 1L;

    protected void doPost(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {

        HttpSession session = request.getSession();

        String username = request.getParameter("username");
        String password = request.getParameter("password");

        if (username.equals("admin") && password.equals("admin")) {
            session.setAttribute("username", username);

            response.sendRedirect("pannelloControllo.jsp");
        }
        else {
            session.setAttribute("errorLogin", "Accesso non consentito.");

            response.sendRedirect("login.jsp");
        }

    }

}