JdbcController

package util;

import java.io.IOException;
import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.sql.Statement;

import javax.servlet.ServletConfig;
import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

@WebServlet("/comp.html")
public class JbdcController extends HttpServlet {
    Connection conn;
    public void init(ServletConfig config) throws ServletException {
        super.init(config);

        try
        {
            Class.forName(config.getInitParameter("jdbcClassName"));
            //System.out.println("jdbcClassName: " + config.getInitParameter("jdbcClassName"));
            String username = config.getInitParameter("dbUserName");
                String password = config.getInitParameter("dbPassword");
                StringBuffer url = new StringBuffer(config.getInitParameter("jdbcDriverURL"));
                conn = DriverManager.getConnection(url.toString(),username,password);
            }

            catch (SQLException sqle)
            {
                    System.out.println("SQLException error occured - "
                            + sqle.getMessage());
            }
            catch (ClassNotFoundException nfe)
            {
                    System.out.println("ClassNotFoundException error occured - "
                    + nfe.getMessage());
            }
    }

    protected void processRequest(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        try
        {
            if (conn != null)
            {
                Statement stmt = conn.createStatement();
                PreparedStatement ps = conn.prepareStatement("SELECT * FROM LOGIN WHERE USERNAME=? AND PASS=?");
                String username = request.getParameter("username");
                String password = request.getParameter("password");
                ps.setString(1,username);
                ps.setString(2,password);
                ResultSet rs = ps.executeQuery();

                if(rs.getString("password").equals(password) && rs.getString("username").equals(username))
                {
                    response.sendRedirect("succ.jsp");
                }

                else
                {
                    response.sendRedirect("error2.jsp");
                }
            }

            else
            {
                response.sendRedirect("error.jsp");
            }
        }
        catch (SQLException sqle){
                response.sendRedirect("error.html");
        }
    }


}