Login form using Access(JSP)....

I have written the following code in JSP and connected to Access Database.
Aftre i run the JSP from browser the Login form is displayed. but aftre i enter the "userid" and "password" nothing hapens. the application is STUCK !!
<HTML>
<HEAD>
<TITLE> Login </TITLE>
<script language="Javascript">
function giveFocus()
     document.login.user.focus()
function submitForm()
     document.login.submit()
function resetForm()
     document.login.reset()
     document.passwd.reset()
     document.login.user.focus()
</script>
</HEAD>
<BODY onload="giveFocus()">
<form name="login" method="post" action="http://localhost//dcs/forward.jsp">
<table border="0" cellpadding="2" cellspacing="0" width="80%"> <tr><td bgcolor="#ffffff" align="center">
<table border="0" cellspacing="6" cellpadding="6" bgcolor="ffffff" width="80%" height="280">
<tr bgcolor="#ADADAD">
<td align="center"><font face="Verdana" SIZE="5">LOGIN FOR DDM</font><br>
<table border=0 cellpadding=4 cellspacing=0>
<tr> <td align="right">
<P ALIGN="LEFT"><font face="Verdana" size="3"><BR>Please enter your ID and password
<table border=0 cellpadding=10 cellspacing=10>
<tr>
     <td align="right" ><font face="Verdana" size="4">User Id   :</font></td>
     <td><font face="arial" size="-1"><b></b></font><input name="user" type="text" length="9" maxlength="9"></td>
</tr>
<tr>
     <td align="right" ><font face="Verdana" size="4">Password :</font></td>
     <td><input name="passwd" type="password" length="8" maxlength="8"></td>
</tr>
<tr>
     <td align=center valign=bottom>
     <input type="submit" name="login" value="     LOGIN     " ></td>
<td align=center valign=bottom><input type="button" name="cancel" value="   Cancel    " ></td>
<td align=center valign=bottom><input type="submit" name="chgp" value="Change Password"></td>
</tr>
</table>
</table>
</table>
</table>
</form>
</body>
</html> Kindly tell me wht is the problem with the code ? ? ?

the code for doing the connection between JSP and Access is as follows :
Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
Connection conn = DriverManager.getConnection("jdbc:odbc:rupa","system","manager");rupa is DSN which i created for MS ACCESS
is this ok?

Similar Messages

Login form using Access... (in JSP )

I have written the following code in JSP and connected to Access Database.
Aftre i run the JSP from browser the Login form is displayed. but aftre i enter the "userid" and "password" nothing hapens. the application is STUCK !!
<HTML>
<HEAD>
<TITLE> Login </TITLE>
<script language="Javascript">
function giveFocus()
     document.login.user.focus()
function submitForm()
     document.login.submit()
function resetForm()
     document.login.reset()
     document.passwd.reset()
     document.login.user.focus()
</script>
</HEAD>
<BODY onload="giveFocus()">
<form name="login" method="post" action="http://localhost//dcs/forward.jsp">
<table border="0" cellpadding="2" cellspacing="0" width="80%"> <tr><td bgcolor="#ffffff" align="center">
<table border="0" cellspacing="6" cellpadding="6" bgcolor="ffffff" width="80%" height="280">
<tr bgcolor="#ADADAD">
<td align="center"><font face="Verdana" SIZE="5">LOGIN FOR DDM</font><br>
<table border=0 cellpadding=4 cellspacing=0>
<tr> <td align="right">
<P ALIGN="LEFT"><font face="Verdana" size="3"><BR>Please enter your ID and password
<table border=0 cellpadding=10 cellspacing=10>
<tr>
     <td align="right" ><font face="Verdana" size="4">User Id   :</font></td>
     <td><font face="arial" size="-1"><b></b></font><input name="user" type="text" length="9" maxlength="9"></td>
</tr>
<tr>
     <td align="right" ><font face="Verdana" size="4">Password :</font></td>
     <td><input name="passwd" type="password" length="8" maxlength="8"></td>
</tr>
<tr>
     <td align=center valign=bottom>
     <input type="submit" name="login" value="     LOGIN     " ></td>
<td align=center valign=bottom><input type="button" name="cancel" value="   Cancel    " ></td>
<td align=center valign=bottom><input type="submit" name="chgp" value="Change Password"></td>
</tr>
</table>
</table>
</table>
</table>
</form>
</body>
</html> Kindly tell me wht is the problem with my code ? ?

http://forum.java.sun.com/thread.jspa?threadID=599315&tstart=0
Cross-post

To create login form using swing with sqlserver as backend

hi.
can anybody send me code to create login form using swings .
thnaks in advance..
sj

You do realise that you can't create Swing on a JSP page?
You have to use HTML.
If you want to use Swing, the java must be running at the client end, which means you need an Applet, and a completely different forum.

Login Form using struts

i'm new to struts...
can anyone help me out...with
Sample code that helps to build a login in form using struts ,that has interaction with data base...
kindly drop mail @ [email protected]

i'm new to struts...
can anyone help me out...withYou should look for a Struts forum, or post in the JSP forum here.
Sample code that helps to build a login in form using
struts ,that has interaction with data base...Google search.
kindly drop mail @ [email protected]
It could also mean spam. I advise against posting email addresses in public forums.

Login form using JSC n MySql

please send me full code for a simple login page using my jsc n mysql

here i hav got code for a simple login form usin
JAVA and MySQl
public String button1_action() {
String Username = (String) this.textField1.getValue();
String pwd = (String) this.passwordField1.getValue();
boolean isValidUser=false;
com.sun.sql.rowset.CachedRowSetXImpl loginRowSet=new com.sun.sql.rowset.CachedRowSetXImpl();
try {
loginRowSet.setDataSourceName("java:comp/env/jdbc/sms");
loginRowSet.setCommand("SELECT * FROM login");
loginRowSet.setTableName("login");
loginRowSet.execute();
loginRowSet.beforeFirst();
while(loginRowSet.next()){
String Username1 = loginRowSet.getString("name");
String Password1 = loginRowSet.getString("password");
if(Username.equals(Username1) && pwd.equals(Password1)){
return "case1";
if (!isValidUser){
staticText1.setValue( " logon failed");
catch (Exception e) {
error("Login Failed : " + e.getMessage());
throw new FacesException(e);
} finally {
loginRowSet.close();
return null;
Make some changes in session bean also
protected ApplicationBean1 getApplicationBean1() {
return (ApplicationBean1)getBean("ApplicationBean1");
plz add this also
public boolean do_rand() {
boolean do_rand = true;
try{
loginRowSet.setCommand("SELECT * FROM login ");
}catch(SQLException ex) {
if(ex != null ){
ex.printStackTrace();
errorRand = "error do random";
do_rand = false;
return do_rand;
} catch(Exception e) {
e.printStackTrace();
return false;
return true;
}

Trying to create a login form using j_security_check

Ok, here's the deal.
I have a login.jsp that uses the j_security_check. The page works great if I request a protected resource and the container forwards me to the login page.
However, if I access the login page directly "http:/server/app/login.jsp" and submit the form I get a 404 "Page not found" error. This really stinks because I need to add the login fields to the index page of the site and allow people to login at their discreation (only peices of the site are protected, but unprotected pieces have different functionality for logged in users). From personal experience Tomcat, JRun and WebSphere allow you to post to the j_security_check uri at anytime. What's the deal?

Steve,
Directly going to login page will not work because "j_security_check" cannot work independently and is supposed to work in conjuction with a protected URL.
I looked at Servlet specification (Section 11.5.3 of Servlet 2.2) and this does not say anything about directly going to login page.
You can create an index page and have that secured and whenever users can try to access that page they will be forwarded to the login page.
You may use Programmatic Security if Declarity security is insufficient for you.
regards
Debu

Help required with login form using applet

this is the code I'm working on. it does not show any errors but it does not successfully authenticate the login either.
please help
public class Loginex extends JApplet implements ActionListener
     public JPanel p;
     public JLabel l1,l2;
     public JTextField t1;
     public JPasswordField pw1;
     public JButton signin;
     public String uname,upwd,dname,dpwd;
     public void init()
          JPanel p=new JPanel();
          JLabel l1=new JLabel("Username");
          JLabel l2=new JLabel("Password");
          JTextField t1=new JTextField(20);
          JPasswordField pw1=new JPasswordField(20);
          JButton signin=new JButton("Sign in");
          p.add(l1);
          p.add(t1);
          p.add(l2);
          p.add(pw1);
          p.add(signin);
          signin.addActionListener(this);
          add(p);
          uname=t1.getText();
          upwd=pw1.getText();
     public void actionPerformed(ActionEvent ae)
          if(ae.getSource()==signin)
               System.out.println("You are trying to login as : "+uname);
          try
               Class.forName("com.microsoft.sqlserver.jdbc.SQLServerDriver");
               Connection
con=DriverManager.getConnection("jdbc:sqlserver://localhost;"+"user=sa;password=sysdba;"+"database=job_app");
               Statement stm = con.createStatement();
               String query = "SELECT emp_id, emp_pwd FROM Employee where emp_id= "+uname +";";
               ResultSet rs = stm.executeQuery(query);
               while(rs.next())
                    dname=rs.getString("emp_id");
                    dpwd=rs.getString("emp_pwd");
                    if((dname.equals(uname))&&(dpwd.equals(upwd)))
                         System.out.println("You are logged in as : "+uname);
                    else
                         System.out.println("Login failed");
               rs.close();
               stm.close();
               con.close();
          catch(Exception e)
               System.out.println("Error occured"+e);
}

njb7ty wrote:
Also, if uname had a single quote such as O'Conner, the originial sql statement would fail unless you properly escape the single quote. With preparedStatements, you dont have to escape it. I also believe preparedStatements are less suseptable to sql injection attacks.You are correct, prepared statements are the best thing since sliced bread. They are:
- easier to read and write
- easier to debug
- run faster if used more than once
- and are not susceptible to SQL injection attacks, this is especially important if the data being used in the parameter came in over the internet.
I always use them, even when they might be slightly less efficient, eg. where I build the SQL right before I prepare it and then never use it again.

Register & login form using shareobject ????

Hello Developers,
1 - How can i create register and login page in flash and i want to use shareobject please guide me, how can i use sharedobject.
2- How can i use mysql database to connect flash ...
Please HELP ME !!!

1. normally, a sharedobject would play no role in a login page except to autofill the login for re-visits.
2. use the urlloader class to call server-side script that communicates with your database.

I want to create a login form by using servlets with database validation.

Would you please provide me a code for a login form using servlets with Ms Access database validation?

No. This is not a free coding service. Your request is (a) ridiculous, (b) offensive, and (c) off-topic. Locking this thread for later deletion.

SSL and login form for form based login over ldap

Hello,
i have configured an apache reverse proxy with virtual named host and the the webgate is also running on this server.
On a second server i have configured a webserver with the login form.
Access to the protected ressources is working when i use the following parameters in my Authentication schema
form:/form/login.html
action:/dummy
creds:userid password
ssoCookie:httponly
passthrough:no
SSL Required No
Challenge Redirect http://dummyserver.dummy.org
Changing the SSL required to yes and the url to https has the following result.
After filling out the login form and pressing the submit button "the requested URL /dummy was not found on this server"
Any hints are welcome.
Kind regards

Hi Colin,
Yes the dummy url is protected. Otherwise it should not work when using http.
I assume that i am not redirected back to the origin source. The obSSOCookie should do this in some way, when i remember that correctly.
I can see that the obSSOCokkies are created for both urls but the content is "loggedoutcontinue". Thats the difference to the http communication.
Is there anything else to configure when using SSL with a form based login. Have i missed some basics?
In the documentation it looks really simple - just trning it on - looking for access - and everything works :-)
KR

Extra Info On Login Form

Hi,
I have the requirement to prepare a Login Form such that it will include a dropdownList, besides userid and password. Based on the selection from dropdown List I will implement some business logic, probably on prepareSession method. As far as I am concerned Login forms should be jsp documents. Is it possible to have necessary bindings with the jsp document? Can I use adf faces core components on jsp documents? Any help is appreciated.
Best Regards,
Salim

Frank,
I am not using Container managed security. I am using DBLoginModule.jar with a pl/sql stored procedure, this is based on blog entry http://technology.amis.nl/blog/?p=1462, and one of your articles on OTN. I guess I am using Jazn Framework of Oracle with the capability of authentication from some DB tables. One thing I don't understand is why do we have to create Login page as JSP pages? Why can't we show error mesages ("Invalid username / password","Account Locked") on that jsp page? I appreciate your helps.
Salim

Need some help in the login form ???!?!?!?!!

can any one help me with correcting the code or can any one give me another code for using it in the login form.
this is my problem:-
i had make a login form using in oracle 9i form builder >>>in this form i have three text boxes one for intering user name and the second one for entering the password and the third text box is not visible and it is used for counting the tries.
In addition i have a three buttons , one is for login and the two others are not visible and they are a show main menu button and a exit button. For login button i had put a WHEN-BUTTON-PRESSED trigger in the login button and it must check if the user name and the password match what it is on the login table so it allow the user to see the show main menu button otherwise if the user name or the password are wrong and has been putted wrong for 3 times of trying then it will show the exit button.
and this is a picture of the login form in the design view.
http://www.al7loh.com/uploader/uploads/login.JPG
and this is the code for theWHEN-BUTTON-PRESSED trigger on the login button
declare
     alertNum number;
dummy1 tbl_login.USER_NAME%type;
     dummy2 tbl_login.PASS%type;
begin
     select tbl_login.USER_NAME, tbl_login.PASS into dummy1, dummy2 from tbl_login where tbl_login.USER_NAME = :LOGIN.USER_NAME and
     tbl_login.PASS = :LOGIN.PASS;
     if :LOGIN.TRIES<3 then
     if sql%found
          then
          set_item_property('LOGIN.SHOW_MENU', visible, property_true);
                                                                           set_item_property('LOGIN.SHOW_MENU', enabled, property_true);
                                                                           else
                                                                           message ('Invalid password....try again');
                                                                           :LOGIN.TRIES := :LOGIN.TRIES+1;
                                                                           :LOGIN.USER_NAME := null;
                                                                           :LOGIN.PASS := null;
                                                                                end if;
     else
     message ('Exceeded Number of tries..press exit button');
          set_item_property('LOGIN.EXIT', visible, property_true);
               set_item_property('LOGIN.EXIT', enabled, property_true);
     end if;
     end;
can any one help me correcting the code of the WHEN-BUTTON-PRESSED trigger on the login form or can any one give me another code for using it in the login form.
i hope to get some help from the experts>>> ??!?!?!?!?!

Something like this
declare
alertNum number;
dummy1 tbl_login.USER_NAME%type;
dummy2 tbl_login.PASS%type;
begin
Begin
    select tbl_login.USER_NAME, tbl_login.PASS
    into   dummy1, dummy2
    from   tbl_login
    where tbl_login.USER_NAME = :LOGIN.USER_NAME
    and    tbl_login.PASS = :LOGIN.PASS;
    set_item_property('LOGIN.SHOW_MENU', visible, property_true);
    set_item_property('LOGIN.SHOW_MENU', enabled, property_true);
Exception
    When no_data_found Then
      if :LOGIN.TRIES<3 then
        message ('Invalid password....try again');
        :LOGIN.TRIES := :LOGIN.TRIES+1;
        :LOGIN.USER_NAME := null;
        :LOGIN.PASS := null;
        Go_Item( 'LOGIN.USER_NAME' ) ;
      else
        message ('Exceeded Number of tries..press exit button');
        set_item_property('LOGIN.EXIT', visible, property_true);
        set_item_property('LOGIN.EXIT', enabled, property_true);
      end if;
end;
end;Francois

Customize expired password login form

Hi,
On the expired login form I don't want to display the resource accounts table so the user can change only Lighthouse password if the password is expired.
since expired login form uses User Form Library, I copied the default one and renamed it and modified the customized User Form Library accordingly. I managed to removed the resource accounts table so that it displays only 2 text boxes Confirm Password and Confirm New Password. After entering the password and when I click on the Change Password button it displays error "Must Select Atleast one resource account".
The Change Password button is doing some validation, and I am not sure in which form library this button is defined. I checked in Change Password Form it contains buttons but I don't see any validation on these buttons.
Where exactly the Change Password button is defined?
Is there any other way to customize the expire login form?
Any ideas please..
Thanks
Edited by: idmus on May 19, 2010 1:24 PM

What you describe should work, you just need to simulate the user selecting one or more resources.
So somewhere on the form put code like:
    <Field name='resourceAccounts.currentResourceAccounts[RESOURCE].selected'>
        <Expansion>
            <s>true</s>
        </Expansion>
    </Field>This acts as if the user has selected a resource. Kind of a weird way to do it, but there you go.
Edited by: etech on May 24, 2010 4:38 PM
Edited by: etech on May 24, 2010 4:39 PM

Help with Login Form (JSP DB Java Beans Session Tracking)

Hi, I need some help with my login form.
The design of my authetication system is as follows.
1. Login.jsp sends login details to validation.jsp.
2. Validation.jsp queries a DB against the parameters received.
3. If the query result is good, I retrieve some information (login id, name, etc.) from the DB and store it into a Java Bean.
4. The bean itself is referenced with the current session.
5. Once all that's done, validation.jsp forwards to main.jsp.
6. As a means to maintain state, I prefer to use url encoding instead of cookies for obvious reasons.I need some help from step 3 onwards please! Some code snippets will do as well!
If you think this approach is not a good practice, pls let me know and advice on better practices!
Thanks a lot!

Alright,here is an example for you.
Assume a case where you don't want to give access to any JSP View/HTML Page/Servlet/Backing Bean unless user logging system and let assume you are creating a View Object with the name.
checkout an example (Assuming the filter is being applied to a pattern * which means when a resource is been accessed by webapplication using APP_URL the filter would be called)
public doFilter(ServletRequest req,ServletResponse res,FilterChain chain){
     if(req instanceof HttpServletRequest){
            HttpServletRequest request = (HttpServletRequest) req;
            HttpSession session = request.getSession();
            String username = request.getParameter("username");
            String password = request.getParameter("password");
            String method = request.getMethod();
            String auth_type = request.getAuthType();
            if(session.getAttribute("useInfoBean") != null)
                request.getRequestDispatcher("/dashBoard").forward(req,res);
            else{
                    if(username != null && password != null && method.equaIsgnoreCase("POST") && (auth_type.equalsIgnoreCase("FORM_AUTH") || auth_type.equalsIgnoreCase("CLIENT_CERT_AUTH")) )
                         chain.doFilter(req,res);
                    else
                      request.getRequestDispatcher("/Login.jsp").forward(req,res);
}If carefully look at the code the autherization is given only if either user is already logged in or making an attempt to login in secured way.
to know more insights about where these can used and how these can be used and how ?? the below links might help you.
http://javaboutique.internet.com/tutorials/Servlet_Filters/
http://e-docs.bea.com/wls/docs92/dvspisec/servlet.html
http://livedocs.adobe.com/jrun/4/Programmers_Guide/filters3.htm
http://www.javaworld.com/javaworld/jw-06-2001/jw-0622-filters.html
http://www.servlets.com/soapbox/filters.html
http://www.onjava.com/pub/a/onjava/2001/05/10/servlet_filters.html
and coming back to DAO Pattern hope the below link might help you.
http://java.sun.com/blueprints/corej2eepatterns/Patterns/DataAccessObject.html
http://java.sun.com/blueprints/patterns/DAO.html
http://www.javapractices.com/Topic66.cjp
http://www.ibm.com/developerworks/java/library/j-dao/
http://www.javaworld.com/javaworld/jw-03-2002/jw-0301-dao.html
On the whole(:D) it is always a good practice to get back to Core Java/J2EE Patterns.and know answers to the question Why are they used & How do i implement them and where do i use it ??
http://www.fluffycat.com/java-design-patterns/
http://java.sun.com/blueprints/corej2eepatterns/Patterns/index.html
http://www.cmcrossroads.com/bradapp/javapats.html
Hope that might help :)
REGARDS,
RaHuL

Jsp login form code

hi all
i am a student and new to jsp
imy problem is that i want to create a login form and have a page that validates the username and password ... i have tried this but i am gettin errors with my sql line . can any1 help me out
i have pasted the sql line below
ResultSet rs = stmt.executeQuery("SELECT username,password FROM myusers WHERE username='"+request.getParameter("username_signin") + "' AND password=PASSWORD('"+request.getParameter("password_signin")+"')");
thanks

hi i also have similar problem to avoid the ' or1=1 that simple hacking code.
i try to use ur method but i nt too sure abt the prepare statement , pls help thanks.
<%@page contentType="text/html"%>
<%@page import="java.sql.*"%>
<html>
<head>
<title>Check Login</title>
</head>
<body>
<%
//String varName=request.getParameter("userName");
//String varPass=request.getParameter("userPass");
String DRIVER = "sun.jdbc.odbc.JdbcOdbcDriver";
Connection con = null;
String nextPage = null;
try {
     // set up the DSNless connection to the EJewel.mdb database
     String source = "jdbc:odbc:Driver={Microsoft Access Driver (*.mdb)}; DBQ=C:\\Program Files\\Apache Software Foundation\\Tomcat 5.5\\webapps\\ROOT\\assess20\\assess.mdb";
     // Open a Database connection with the Driver
     Class.forName(DRIVER);
     con = DriverManager.getConnection(source);
// Create sql string to check whether userName is found in database
     //String sql = "Select * from Customers where userName='" + varName + "' and userPass='" + varPass + "'";
     PreparedStatement stmt = con.prepareStatement("SELECT * from Customers WHERE username= 1 AND password='2");
stmt.setString(1, request.getParameter("userName"));
stmt.setString(2, request.getParameter("userPass"));
     // Create statement to connect to Connection
     Statement stmt=con.createStatement();
     // Execute result set on sql string
     ResultSet rs=stmt.executeQuery(PreparedStatement);
     String userPass = "foobar";
MessageDigest mdAlgorithm = MessageDigest.getInstance("MD5");
mdAlgorithm.update(userPass.getBytes());
byte[] digest = mdAlgorithm.digest();
StringBuffer hexString = new StringBuffer();
for (int i = 0; i < digest.length; i++) {
userPass = Integer.toHexString(0xFF & digest);
if (userPass.length() < 2) {
userPass = "0" + userPass;
hexString.append(userPass);
// We now have a unique MD5 Hash of original input
out.print(hexString.toString());
          if (rs.next())
          out.print("Exist");
          session.setAttribute("loginStatus", "login");
          session.setAttribute("userName", varName);
session.setAttribute("userPass", varPass);
nextPage="ShowMain.jsp";
          else
          //out.print("Does not exist");
          nextPage="Showlogin.htm";
     // close the resultset and statement
rs.close();
rs = null;
stmt.close();
stmt = null;
     } // end try
     // catch for 3 exceptions
     catch (ClassNotFoundException cnfe) {
out.println ("Could not create driver " + cnfe.getMessage ()) ;
     catch (SQLException sqle) {
out.println ("Could not connect to database " + sqle.getMessage ()) ;
     catch (Exception excpt) {
out.println ("Could not connect to database, general error " + excpt.getMessage ()) ;
} // end all catch
     // finally to close connection
finally {
if (con != null) {
con.close();
} // end finally
%>
<jsp:forward page="<%=nextPage%>"/>
</body>
</html>

Login form using Access(JSP)....

Similar Messages

Maybe you are looking for