Explain to newbie in JSP how user login works in jsp

Question

I have so far been able to manually do login with resin's web.xml, but I'm supposed to do login for many users and each user has his own private thing that he sees ie. I want login kind of like in hotmail.

Answer 1

This is a schetch of my best effort so far:
<% String user=request.getParameter("user");
      String password=request.getParameter("password");
     if (user==null)
      Tools.displayLogin(); // somehow trace back to this page??
     else {
      String password=request.getParameter("password");
      if (!Tools.checkLogin(user, password)) %>
       <h1>bad login</h1> <%
  <-- display some database stuff for example -->
<form action="entries.jsp">
<input type=submit value="view entries">
<input type=hidden user="<%= user%>">
<input type=hidden password="<%= password%>">
</form>
<form action="queries.jsp">
<input type=submit value="make queries">
<input type=hidden user="<%= user%>">
<input type=hidden password="<%= password%>">
</form>The idea is to keep password and username with every where you go within secure area... how secure is this then that I don't know? Comments and better suggestions are welcome?