<%@page import="Database.*"%>
<%@page import="com.mysql.jdbc.ResultSet" %>

<%

    String submit=request.getParameter("btnLogin");
    String status="";

    if(submit!=null){
           String uid=request.getParameter("txtEmpId");
           String pwd=request.getParameter("txtPass");
           boolean remember = Boolean.parseBoolean(request.getParameter("autologin"));

           if(uid.equals("") || pwd.equals("")){
               status="Blank user id/password not accepted!";
           }else{
                Database db=new Database();
                String sql="Select l.*,e.first_name,e.last_name from log_info l, employee e where e.emp_id=l.emp_id and user_name='"+uid+"' and password='"+pwd+"'";
                ResultSet rs=db.execute(sql);

                if(rs.next()){

                    User user=new User();
                    user.setLog_id(rs.getString("log_id"));
                    user.setEmp_id(rs.getString("emp_id"));
                    user.setUser_name(uid);
                    user.setPassword(pwd);
                    user.setFirst_name(rs.getString("first_name"));
                    user.setLast_name(rs.getString("last_name"));

                    session.setAttribute("logged_user", user);


                    int emp_type=Integer.parseInt(rs.getString("user_type"));
                    if(emp_type==1)
                        response.sendRedirect("admin/home.jsp");
                    else
                        response.sendRedirect("emp/home.jsp");
                }else{
                      status="Invalid user id/password!";
                }
           }
    }

%>