Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Login screen with security levels

Status
Not open for further replies.

kizzieb

Technical User
Oct 16, 2007
6
0
0
GB
Hello I am writing a login page and I am struggling a little. I am trying to get the pages to redirect to the following screen depending on their levels.

Management is level 1;
redirect to managment.jsp

Administration staff is level 2
redirect to staff

and Sales Assistants are level 3.
redirect to assistant.jsp

Here is an example of the login screen.
String Login = request.getRequestURI();
if (request.getQueryString()!= null)
{
String queryString = request.getQueryString();
}
String UserName=request.getParameter("username");
if (UserName != null) {
String AdminLoginSuccess="admin/main.jsp";
String LoginSuccess="feedback1.jsp";
String LoginFailed="registration.jsp";
String redirectLogin=LoginFailed;
String stmt = "SELECT GROUPNUMBER, USERNAME, PASSWORD";
stmt += " FROM REGISTRATION WHERE USERNAME=\'" + UserName.replace('\'', ' ') + "\' AND PASSWORD=\'" + request.getParameter("password").toString().replace('\'', ' ') + "\'";
PreparedStatement stmtU = con.prepareStatement(stmt);
ResultSet rs = stmtU.executeQuery();
boolean rs_isNotEmpty = rs.next();
if (rs_isNotEmpty) {

session.setAttribute("Username", UserName);
session.setAttribute("Accept", "");

int admin = 3;

if (admin <= rs.getInt("GROUPNUMBER"))
{
redirectLogin=LoginSuccess;
}
else
{
redirectLogin=AdminLoginSuccess;
}

}

rs.close();
con.close();
response.sendRedirect(response.encodeRedirectURL(redirectLogin));
return;
}
%>
<style type="text/css">
<!--
.style1 {color: #FF0000}
.style2 {font-size: 10px}
-->
</style>
<head>
<title>Login</title>
<script>

function Register() {

if(document.Login.username.value=="")
{
alert('Enter your Username, please!');
document.Login.username.focus();
return false;
}
if(document.Login.password.value=="")
{
alert('Enter your Password, please!');
document.Login.password.focus();
return false;
}
}

</script>
</head>
<body>
<center>
<form name="Login" id="Login" method="POST" onSubmit="return Register();" action="<%=Login%>">
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top