Program Statement

Write a JSP which inserts the details of 3 or 4 users who register with the website using a registration form. Authenticate the user when he submits the login form using the user name and password from the database.

The Real JSP + JDBC Code (Tomcat + MySQL)

<%-- register.jsp --%>
<%@ page import="java.sql.*" %>
<%
    String username = request.getParameter("username");
    String password = request.getParameter("password");
    Connection con = DriverManager.getConnection(
        "jdbc:mysql://localhost:3306/webtechlab", "root", "password");
    PreparedStatement ps = con.prepareStatement(
        "INSERT INTO members (username, password) VALUES (?, ?)");
    ps.setString(1, username);
    ps.setString(2, password);
    ps.executeUpdate();
    con.close();
%>
<p>Registered successfully! <a href="login.jsp">Login now</a></p>

<%-- login.jsp --%>
<%@ page import="java.sql.*" %>
<%
    String username = request.getParameter("username");
    String password = request.getParameter("password");
    Connection con = DriverManager.getConnection(
        "jdbc:mysql://localhost:3306/webtechlab", "root", "password");
    PreparedStatement ps = con.prepareStatement(
        "SELECT * FROM members WHERE username = ? AND password = ?");
    ps.setString(1, username);
    ps.setString(2, password);
    ResultSet rs = ps.executeQuery();
    if (rs.next()) {
%>
        <p>Welcome, <%= username %>! Login successful.</p>
<%  } else { %>
        <p>Invalid username or password.</p>
<%  }
    con.close();
%>

Browser Simulation

The demo below mirrors both JSP pages: a Register form inserts {username, password} rows into localStorage (standing in for the members table), and a Login form runs the equivalent of SELECT ... WHERE username = ? AND password = ? against those stored rows.

CO Mapping

CO5