＜!-- Login Manager --＞
＜JAVA TYPE="class"＞

public static boolean checkUserPermission(HttpSession mySession, }
HttpServletRequest request, HttpServletResponse response)
{
if (mySession.getValue("hasPermission") == null || !((Boolean) mySession.getValue
("hasPermission" )).booleanValue())
{
String requestedUrl = HttpUtils.getRequestURL(request).toString();
String queryString = request.getQueryString();
if (queryString != null)
{
requestedUrl = requestedUrl + "?" + queryString;
}
requestedUrl = response.encodeUrl(requestedUrl);
mySession.putValue("requestedUrl", requestedUrl);
return false;
}
else
{
return true;
}
}

＜/JAVA＞

＜%
// JavaScript/" target="_blank">JSP文件
String goodUser = "bill";
String goodPass = "bobo";
HttpSession mySession = request.getSession(true);
String errorMessage = "Please Login To Access The Page You Requested";
boolean loginAttempt = false;
String myMethod = request.getMethod();
if (request.getParameterValues("click") != null && request.getParameterValues
("click")[0].trim().equals("Log In"))
{
loginAttempt = true;
}

if (loginAttempt)
{
String username = request.getParameterValues("user")[0].trim();
String password = request.getParameterValues("pass")[0].trim();
//out.println("username = |" + username + "| & password = |" + password + "|＜BR＞");
if (goodUser.equals(username) && goodPass.equals(password))
{
response.sendRedirect((String)mySession.getValue("requestedUrl"));
mySession.putValue("hasPermission", new Boolean(true));
errorMessage = "Unable to redirect: " + (String) mySession.getValue("requestedUrl");
}
else
{
errorMessage = "You did not get the Username or Password right";
}
}
else
{
errorMessage = "Haven't tried logging in yet.";
if (mySession.getValue("requestedUrl") == null)
{
mySession.putValue("requestedUrl", "/index.jsp");
}
//out.println("set userReferrer to " + mySession.getValue("redirectTo") + "＜BR＞");
}
%＞

＜CENTER＞
＜font color=red＞＜%=errorMessage%＞＜/font＞
＜TABLE align=center＞
＜FORM action="adminLogin2.jsp" method=post name="login"＞
＜TR＞
＜TD＞Username:＜/TD＞
＜TD＞＜input type=text name=user value=""＞＜/TD＞
＜/TR＞
＜TR＞
＜TD＞Password:＜/TD＞
＜TD＞＜input type=password name=pass value=""＞＜/TD＞
＜/TR＞
＜TR＞
＜TD colspan=2 align=center＞＜input type=submit name=click value="Log In"＞ ＜/TD＞
＜/TR＞
＜/FORM＞
＜/TABLE＞
＜/CENTER＞
Original URL: ＜%= (String)mySession.getValue("requestedUrl") %＞
＜script language="Javascript"＞
// ＜!--
if (document.forms.login != null)
document.forms.login.user.focus();
// --＞
＜/script＞