Untitled

<%@page language="java"%>
<%@page import="java.sql.*"%>
<head>
<title>Edit Student</title>
</head>
<form method="post" action="update.jsp">
<table border="1">
<tr><th>Name</th><th>No</th><th>ClassName</th><th>Lesson Name</th></tr>
<%
String sid=request.getParameter("sid");
int no=Integer.parseInt(sid);
int sumcount=0;
try {
Class.forName("com.mysql.jdbc.Driver").newInstance();
Connection conn = DriverManager.getConnection("jdbc:mysql://localhost:3306/deney", "root", "root");
String query = "select student.sid, student.cid, student_lesson.lid, student.name, student.no, class.classname, lesson.lesson_name from student left outer join class on student.cid = class.cid , student_lesson left outer join lesson on student_lesson.lid = lesson.lid where student.sid='"+no+"' and student_lesson.sid='"+no+"'";

Statement st = conn.createStatement();
ResultSet rs= st.executeQuery(query);
while(rs.next()){
%>
<tr>
<td><input type="text" name="name" value="<%=rs.getString("name")%>"></td>
<td><input type="text" name="no" value="<%=rs.getString("no")%>"></td>
<td><input type="text" name="classname" value="<%=rs.getString("classname")%>"></td>
<td><input type="text" name="lesson_name" value="<%=rs.getString("lesson_name")%>"></td>
<td style="display:none;"><input type="hidden" name="sid" value="<%=rs.getString(1)%>"></td>

</tr>
<tr>
<td><input type="submit" name="Submit" value="Update" style="background-color:#49743D;font-weight:bold;color:#ffffff;"></td>
</tr>
<%
}
}
catch(Exception e){}
%>
</table>
</form>

<%@page import="java.sql.*"%>

<%
String side=request.getParameter("sid");
int num=Integer.parseInt(side);

String name=request.getParameter("name");
String no=request.getParameter("no");
int num2=Integer.parseInt(no);
String className=request.getParameter("className");
String lesson_name=request.getParameter("lesson_name");

try{
Connection conn = null;
Class.forName("com.mysql.jdbc.Driver").newInstance();
conn = DriverManager.getConnection("jdbc:mysql://localhost:3306/deney","root", "root");
Statement st=null;
st=conn.createStatement();

st.executeUpdate("update lesson set lesson_name='"+lesson_name+"' where lid=(select lid from student_lesson where sid=(select sid from student where student.no='"+num2+"' and student.sid = student_lesson.sid))");
st.executeUpdate("update class set classname='"+className+"' where cid=(select cid from student_class where sid=(select sid from student where student.no='"+num2+"'))");
st.executeUpdate("update student set student.name='"+name+"', student.no='"+no+"' where student.sid='"+num+"'");
response.sendRedirect("/yeni/student.jsp");
}
catch(Exception e){
System.out.println(e);
    }
%>