Novice asking qn, pls give a helping hand

Question

i am trying to develop a distributed system that needs password checking in order to access.
Hence i need to check user password in my database that resides in my server.
so when ReMoTe user click "enter" after typing password.. how do i connect to my server database to verify?? is my solution given below the norm?
suggested solution: pass the userID and password to the server using HttpServletRequest, from there, the server listen for request and process connecting to local DB if a request is detected..
am i correct... pls give a helping hand...

Answer 1

import java.io.*;
import java.sql.*;
import javax.servlet.*;
import javax.servlet.http.*;
public class LoginServlet extends HttpServlet{
     private Connection con;
     private PreparedStatement pstmt;
     private Statement stmt;
     private ResultSet rs;
     private String pass = "";
     private String login="",password="",done="";
     private HttpSession session;
     public void doPost(HttpServletRequest request,HttpServletResponse response)
     throws ServletException, IOException{
          login = ""+request.getParameter("login");
          password = ""+request.getParameter("password");
          done = ""+request.getParameter("done");
          session = request.getSession(true);
          PrintWriter out = response.getWriter();
          out.println(login);
                    out.println(password);
          try{
               Class.forName("org.gjt.mm.mysql.Driver");
          }catch(Exception e){
               out.println(e.getMessage());
          try{
               con = DriverManager.getConnection("jdbc:mysql:///senji");
               if(!(password.equals("")&&login.equals(""))){
                    pstmt = con.prepareStatement("select password from logon where login = ?");
                    pstmt.setString(1,login);
                    rs = pstmt.executeQuery();
                    pass = "";
                    while(rs.next()){
                         pass = rs.getString(1);
                    if(pass.equals(password)){
                         session.setAttribute("login",login);
                         if(done.equals("null")){
                              done = "";
                              pass = "";
                              response.sendRedirect("/ksenji/quiz2/shoponline.jsp");
                         }else{
                              response.sendRedirect(done.substring(5));
                    else{
                         response.sendRedirect("/ksenji/quiz2/login.jsp?"+done);
               else{
                    response.sendRedirect("/ksenji/quiz2/login.jsp?"+done);
          }catch(SQLException ex){
               out.println(ex.getMessage());
}