Untitled

<%@ page contentType="text/html; charset=iso-8859-1" language="java" import="java.sql.*" errorPage="" %>
<html>
<body>
<%
Class.forName("oracle.jdbc.driver.OracleDriver");
String hostname = "172.16.60.13";
int port = 1521;
String sid = "orcl";
String oracleURL = "jdbc:oracle:thin:@"+hostname+":"+port+":"+sid;
String username = "E183383";
String password = "183383";
Connection conn = DriverManager.getConnection(oracleURL, username, password);
Statement stmt = conn.createStatement();
String query = "Select * from lb_user where user_id="+request.getParameter("user_id")+" and user_pw = '"+request.getParameter("user_pw")+"' ";
ResultSet rs = stmt.executeQuery(query);
Object rs_data;
out.println(request.getParameter("user_id"));
out.println(query);
%>
<%if (!rs.isBeforeFirst()){%>
	<script>
	alert("Your ID or your password do not match!");
	alert("Please enter again!");
	</script>
<%	response.setHeader("Refresh", "0;url=LogIn-User.html");
}
else{
	while(rs.next()){
	session.setAttribute("user_fname", rs.getString(1));
	session.setAttribute("user_lname", rs.getString(2));
	session.setAttribute("user_id", rs.getString(3));
	session.setAttribute("user_pw", rs.getString(4));
	session.setAttribute("user_addr", rs.getString(5));
	session.setAttribute("user_phone", rs.getString(6));
	session.setAttribute("user_type", rs.getString(7));
	session.setAttribute("user_logd", rs.getString(8));
	}
	response.setHeader("Refresh", "0;url=Logged-In.jsp");
}%>
<%
conn.close();
%>
</body>
</html>