Is this code need to be enhanced further? If yes,please give your inputs

Question

Hai Coders,
The code below is a part of a java file for authentication. Its working version. I want to know how can i write optimized code for authentication of username and password. Comment on my code how can I improve it.
Is it up to Standard ( up to good java programmer )
Is it possible to optimize my coder further?
Any other alternatives that works better than this code for authentication?
As a java Programmer rate my code(1 to 10)..
try {
Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
Connection con=DriverManager.getConnection("jdbc:odbc:srcname","","");
Statement stmt=con.createStatement();
String str1="";//username & assume that getting input from user
String str2="";//password & assume that getting input from user
ResultSet rs=stmt.executeQuery("select * from tablename");
while(rs.next()) {
String s1=rs.getString(8);
String s2=rs.getString(1);
if((s1.equals(str1))&&(s2.equals(str2))) {           
System.out.println("Success");
} catch(Exception e) {
System.out.println("Fail");
}

Answer 1

Friends My new updated code,
Give comments to improve my code further,
package javaapplication1;
import java.sql.*;
* @author m.senthil kumar
public class Main {
public static void main(String[] yahoo) {
Connection con=null;
PreparedStatement pstmt=null;
ResultSet rs=null;
try {
Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
con = DriverManager.getConnection("jdbc:odbc:tecch", "uuu", "ppp");
String userName = "jav1a";//username & assume that getting input from user
String password = "java";//password & assume that getting input from user
pstmt = con.prepareStatement("select username from test where username=? and password=?");
pstmt.setString(1, userName);
pstmt.setString(2, password);
rs = pstmt.executeQuery();
boolean b = false;
while (rs.next()) {
b = true;
break;
if (b) {
System.out.print("Success");
} else {
throw new unauthorized();
} catch (Exception e) {
System.out.print(e);
} finally {
try{
if(rs!=null)
rs.close();
if (pstmt != null) {
pstmt.close();
if (con != null) {
con.close();
catch(Exception e)
System.out.print(e);
class unauthorized extends Exception {
public String toString() {
return "You are not authorized person";
}