Upload Handler

<%@page import="org.apache.commons.fileupload.*, java.util.List, java.io.File, java.util.Iterator" %>

<%@page contentType="text/html"%>
<%@page pageEncoding="UTF-8"%>
<%@ page import ="java.sql.*"%>
<%@include file="segarkan.jsp"%>

<%
    boolean sukses=false;
    String idProduk=request.getParameter("idProduk");
    DiskFileUpload upload = new DiskFileUpload();
    List items = upload.parseRequest(request);
    Iterator itr = items.iterator();
    try{
    while(itr.hasNext()){
      FileItem item = (FileItem) itr.next();

        if(item.isFormField()) {
            String fieldName = item.getFieldName();
                 } else {
                    File fullFile = new File(item.getName());
                    File savedFile = new File(getServletContext().getRealPath("/Gambar/Produk"), fullFile.getName());
                    item.write(savedFile);

                    Class.forName("com.mysql.jdbc.Driver").newInstance();
                    java.sql.Connection conn;
                    conn = DriverManager.getConnection("jdbc:mysql://localhost/gudangbarang","root","arif");
                    Statement stmt = conn.createStatement();
                    stmt.executeUpdate("insert into tbl_photoproduk (pr_produkid,photoproduk_name) values ("+idProduk+",'"+session.getAttribute("sesi_user")+"_"+fullFile+"')");
                    //out.println("upload to:"+savedFile);
                   // out.println("namFILE:"+fullFile);
                }
    }}catch(Exception e){out.println(e);}

//request.getRequestDispatcher("./index.jsp").forward(request, response);

%>