package com.wasteinformationserver.website.datarequests; import com.wasteinformationserver.basicutils.Log; import com.wasteinformationserver.db.JDCB; import com.wasteinformationserver.website.HttpTools; import com.wasteinformationserver.website.basicrequest.PostRequest; import java.sql.ResultSet; import java.sql.SQLException; import java.util.HashMap; public class LoginRequest extends PostRequest { @Override public String request(HashMap params) { String password = params.get("password"); String username = params.get("username"); ResultSet s = new JDCB("users", "kOpaIJUjkgb9ur6S", "wasteinformation").executeQuery("select * from user where username ='" + username + "'"); String response = "{\"accept\": false}"; try { s.last(); if (s.getRow() == 1) { //success if (HttpTools.StringToMD5(password).equals(s.getString("password"))) { Log.debug("login success"); LoginState.getObject().logIn(); LoginState.getObject().setAccountData(username,"","",""); response = "{\"accept\": true}"; } else { Log.debug("wrong password"); } } else if (s.getRow() == 0) { //user not found Log.debug("user not found"); } else { //internal error two users with same name...? } Log.debug("rowcount: " + s.getRow()); } catch (SQLException e) { e.printStackTrace(); } return response; } }