Untitled


import java.sql.ResultSet;
import eskuel.CMI_SQL;
import java.io.IOException;
import java.io.PrintWriter;
import java.sql.SQLException;
import javax.servlet.*;
import javax.servlet.http.*;

/**
 *
 * @author Ilse Beijk 0814147
 */
public class LoginAuth extends HttpServlet {

    protected void processRequest(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        response.setContentType("text/html;charset=UTF-8");
        PrintWriter out = response.getWriter();
        try {

            CMI_SQL sql = new CMI_SQL("jdbc:mysql://mysql.cmi-hro.nl:3306/cmi0814619", "cmi0814619", "-----");

            String username = request.getParameter("user");
            String password = request.getParameter("pass");
            String passWord = "";
            String userName = "";
            String accommodatie, land, accomodatie_nr;

            String query = "SELECT reserverings_nr, achternaam FROM klanten WHERE achternaam ='" + username + "' AND reserverings_nr ='" + password + "'";
            ResultSet resultaat = sql.selectieQuery(query);

            try {
                while (resultaat.next()) {
                    passWord += resultaat.getString("reserverings_nr");
                    userName += resultaat.getString("achternaam");
                }
            } catch (SQLException e_sql) {
            }


            if (userName.equals(username) && passWord.equals(password)) {
                request.getSession().setAttribute("authorized", "yes");
                request.getSession().setAttribute("username", userName);
                request.getSession().setAttribute("password", passWord);


                String dbkoppel = "SELECT accomodatie_nr FROM reserveringen WHERE reserverings_nr ='" + password + "'";
                ResultSet dbkoppeldata = sql.selectieQuery(dbkoppel);

                try {

                    while (dbkoppeldata.next()) {
                        accomodatie_nr = dbkoppeldata.getString("accomodatie_nr");
                        String accomodatie = "SELECT accommodatie, land FROM reserveringen WHERE accomodatie_nr ='" + accomodatie_nr + "'";
                        ResultSet accomodatiedata = sql.selectieQuery(accomodatie);
                        accommodatie = accomodatiedata.getString("accommodatie");
                        land = accomodatiedata.getString("land");
                        request.getSession().setAttribute("accommodatie", accommodatie);
                        request.getSession().setAttribute("land", land);

                    }
                } catch (SQLException e_sql) {
                }

                String nextJSP = "/enq_p1.jsp";
                RequestDispatcher dispatcher = getServletContext().getRequestDispatcher(nextJSP);
                dispatcher.forward(request, response);

            } else {

                out.println("<html><body>");
                out.println("Foutieve inlog, probeer opnieuw  <a href=/index.jsp>in te loggen</a>");
                out.println("</body></html>");
            }


        } finally {
            out.close();
        }

    }

    // <editor-fold defaultstate="collapsed" desc="HttpServlet methods. Click on the + sign on the left to edit the code.">
    /**
     * Handles the HTTP <code>GET</code> method.
     * @param request servlet request
     * @param response servlet response
     */
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        processRequest(request, response);
    }

    /**
     * Handles the HTTP <code>POST</code> method.
     * @param request servlet request
     * @param response servlet response
     */
    protected void doPost(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        processRequest(request, response);
    }

    /**
     * Returns a short description of the servlet.
     */
    public String getServletInfo() {
        return "Short description";
    }
    // </editor-fold>
}