<%@page contentType="text/html" pageEncoding="UTF-8"%>
<%@ page import="java.sql.*" %>
<%
String name,password;
Connection con;
Statement stmt;
ResultSet rs;
%>

<%

name=request.getParameter("uname");
password=request.getParameter("pwd");


try
{
rs=null;
Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
con=DriverManager.getConnection("Jdbc:Odbc:ERP");
stmt=con.createStatement();

rs=stmt.executeQuery("select * from erplogin where name='" + name + "' and password='" + password + "'");

if (rs.next()){

     String auth = rs.getString("name");
        System.out.println("-----------------getting auth"+auth);
        session=request.getSession();
 session.setAttribute("uname",name);
 session.setAttribute("pwd",password);
 response.sendRedirect("./MyAccount.jsp");
 session.setAttribute("auth",new String(auth));

}
else{

       response.sendRedirect("./error/accountError.jsp");
}

}
catch(Exception ee)
{
out.println(ee.getMessage());
}
%>

<%@page contentType="text/html"%>
    <%@page pageEncoding="UTF-8"%>
    <%@page import="java.io.*,java.util.*,java.sql.*"%>
        <%!
                    String name="",password="";
            Connection con;
                        Statement stmt;
                        ResultSet rs=null;
            int i=0,auth=-1;
            String PageName="";
          %>

           <%

    try{
    name=(String)session.getAttribute("uname");
    auth=((Integer)session.getAttribute("auth")).intValue();
    System.out.println("---Authentication--"+auth);
    if(name.equals(null)||name.equals("")||name.equals(" "))
        response.sendRedirect("./error/accountError.jsp");
    }catch(Exception e){
        response.sendRedirect("./error/accountError.jsp");
    }
    try{
             Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
             con=DriverManager.getConnection("Jdbc:Odbc:ERP");
             stmt=con.createStatement();
         rs=stmt.executeQuery("Select count(*) from Messages where name='"+name+"'");

    while(rs.next()){
        i = rs.getInt(1);
    }
    rs.close();

    rs = stmt.executeQuery("select name from templates where username='"+name+"'");
    while(rs.next()){
        PageName = rs.getString(1);
    }

    rs.close();
    con.close();
    }catch(Exception ex){
    }
    %>

try{
        name=(String)session.getAttribute("uname");
        auth=((Integer)session.getAttribute("auth")).intValue();
        System.out.println("---Authentication--"+auth);
        if(name.equals(null)||name.equals("")||name.equals(" "))
            response.sendRedirect("./error/accountError.jsp");
        }catch(Exception e){
            response.sendRedirect("./error/accountError.jsp");
        }