小型留言板

来源：互联网发布：python中try和except 编辑：程序博客网时间：2024/04/27 19:49

*********************************model***************************************
*****************************************************************************

package com.wuuw.www.model;

public class Admin {
private int id;
private String userName;
private String pwd ;
public int getId() {
  return id;
}
public void setId(int id) {
  this.id = id;
}
public String getUserName() {
  return userName;
}
public void setUserName(String userName) {
  this.userName = userName;
}
public String getPwd() {
  return pwd;
}
public void setPwd(String pwd) {
  this.pwd = pwd;
}

}
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
package com.wuuw.www.model;

public class News {
private int id;
private String title;
private String author;
private String content ;
public int getId() {
  return id;
}
public void setId(int id) {
  this.id = id;
}
public String getTitle() {
  return title;
}
public void setTitle(String title) {
  this.title = title;
}
public String getContent() {
  return content;
}
public void setContent(String content) {
  this.content = content;
}
public String getAuthor() {
  return author;
}
public void setAuthor(String author) {
  this.author = author;
}

}
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
package com.wuuw.www.model;

public class Review {
private int id;
private int newsId;
private String title;
private String netName;
private String content ;
public int getId() {
  return id;
}
public void setId(int id) {
  this.id = id;
}
public String getTitle() {
  return title;
}
public void setTitle(String title) {
  this.title = title;
}
public String getContent() {
  return content;
}
public void setContent(String content) {
  this.content = content;
}
public int getNewsId() {
  return newsId;
}
public void setNewsId(int newsId) {
  this.newsId = newsId;
}
public String getNetName() {
  return netName;
}
public void setNetName(String netName) {
  this.netName = netName;
}
}

***********************************db*****************************************
******************************************************************************

package com.wuuw.www.db;

import java.sql.Connection;

public interface IDbConn {
Connection getConnection();

}
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
package com.wuuw.www.db;

import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.SQLException;

public class DbConnSql implements IDbConn {
private Connection conn;
public DbConnSql(){
init();
}

private void init() {
  try {
   try {
    Class.forName("com.microsoft.jdbc.sqlserver.SQLServerDriver");
   } catch (RuntimeException e1) {
    System.out.println("驱动加载失败");
    e1.printStackTrace();
   }
   String url="jdbc:microsoft:sqlserver://localhost:1433;DatabaseName=news";
   String user = "sa";
   String pwd = "";
   try {
    this.conn = DriverManager.getConnection(url, user, pwd);
   } catch (SQLException e) {
    System.out.println("可能是数据库没有升级");
    e.printStackTrace();
   }
  } catch (ClassNotFoundException e) {
   System.out.println("数据库连接失败");
   e.printStackTrace();
  }


}

public Connection getConnection() {
// TODO Auto-generated method stub
return this.conn;
}

}
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
package com.wuuw.www.db;

import java.sql.ResultSet;
import java.sql.Statement;

public class DbHandle {
IDbConn dbConn = new DbConnSql();
private Statement stmt;
public DbHandle(){
  try{
   this.stmt = dbConn.getConnection().createStatement();
  }catch(Exception e){
   System.out.println("创建语句失败！");
  }
}
public ResultSet executQuery(String sql){
   try{
     return stmt.executeQuery(sql);
   }catch(Exception e){
    System.out.println("在db包执行查询语句有误");
    return null;
   }
}
public int executUpdate(String sql){
   try{
    return stmt.executeUpdate(sql);
   }catch(Exception e){
    System.out.println("在db包执行更新语句有误");
    return -1;
   }
}

}

**********************************dao*****************************************
******************************************************************************

package com.wuuw.www.dao;

import com.wuuw.www.db.DbHandle;
import com.wuuw.www.model.Admin;

public interface IAdminDao {
DbHandle dbHandle = new DbHandle();
Admin selectOneAdmin(Admin admin);
}
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
package com.wuuw.www.dao;

import java.sql.ResultSet;

import com.wuuw.www.model.Admin;

public class AdminDaoImp implements IAdminDao {

public Admin selectOneAdmin(Admin admin) {
  String sql = "select * from tbAdmin where userName = '"+admin.getUserName()+"' and pwd = '"+admin.getPwd()+"'";
  try{
   ResultSet rs = dbHandle.executQuery(sql);
   if(rs.next()){
    admin.setUserName(rs.getString("userName"));
    admin.setPwd(rs.getString("pwd"));
    return admin;
   }else{
    System.out.println("数据中没有此管理员的信息");
    return null;
   }

  }catch(Exception e){
   System.out.println("在dao中查询管理员失败"+sql);
   return null;
  }

}

}
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
package com.wuuw.www.dao;

import java.util.List;

import com.wuuw.www.db.DbHandle;
import com.wuuw.www.model.News;

public interface INewsDao {
DbHandle dbHandle = new DbHandle();
int insertNews(News news) ;
int deleteNews(String id) ;
int updateNews(News news) ;
News selectOneNews(String id) ;
List selectAllNews() ;

}
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
package com.wuuw.www.dao;

import java.sql.ResultSet;
import java.util.ArrayList;
import java.util.List;

import com.wuuw.www.model.News;

public class NewsDaoImp implements INewsDao {

public int deleteNews(String id) {
  String sql = "delete from tbNews where id="+id;
  try{
   return dbHandle.executUpdate(sql);
  }catch(Exception e){
   System.out.println("在dao中删除一条新闻异常"+sql);
   return -1;
  }

}

public int insertNews(News news) {
String sql = "insert into tbNews(title,author,content)values('"+news.getTitle()+"','"+news.getAuthor()+"','"+news.getContent

()+"') ";
  try{
   return dbHandle.executUpdate(sql);
  }catch(Exception e){
   System.out.println("在dao中插入一条新闻异常"+sql);
   return -1;
  }

}

public List selectAllNews() {
  String sql = "select * from tbNews ";
  try{
   ResultSet rs = dbHandle.executQuery(sql);
   List list = new ArrayList();
   while(rs.next()){
    News news = new News();
    news.setId(rs.getInt("id"));
    news.setTitle(rs.getString("title"));
    news.setAuthor(rs.getString("author"));
    news.setContent(rs.getString("content"));
    list.add(news);
   }
   return list;
  }catch(Exception e){
   System.out.println("在bao中查询所有新闻列表异常"+sql);
  return null;
  }
}

public News selectOneNews(String id) {
  String sql = "select * from tbNews where id = "+id;
  try{
            ResultSet rs = dbHandle.executQuery(sql);
            if(rs.next()){
    News news = new News();
    news.setId(rs.getInt("id"));
    news.setTitle(rs.getString("title"));
    news.setAuthor(rs.getString("author"));
    news.setContent(rs.getString("content"));
    return news;
            }else{
            System.out.println("该新闻不存在");
            return null;
            }
  }catch(Exception e){
   System.out.println("在dao中查询一条新闻异常"+sql);
   return null;
  }

}

public int updateNews(News news) {
String sql = "update tbNews set title = '"+news.getTitle()+"',author = '"+news.getAuthor()+"',content = '"+news.getContent()

+"'where id = "+news.getId();
  try{
   return dbHandle.executUpdate(sql);
  }catch(Exception e){
   System.out.println("在dao中更新新闻异常"+sql);
   return -1;
  }
}

}
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
package com.wuuw.www.dao;

import java.util.List;

import com.wuuw.www.db.DbHandle;
import com.wuuw.www.model.Review;

public interface IReviewDao {
DbHandle dbHandle = new DbHandle();
int insertOneReview(Review review) ;
List selectNewsReview(String newsId) ;
int delNewsReview(String newsId) ;
}
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
package com.wuuw.www.dao;

import java.sql.ResultSet;
import java.util.ArrayList;
import java.util.List;

import com.wuuw.www.model.Review;

public class ReviewDaoImp implements IReviewDao {

public int delNewsReview(String newsId) {
  String sql = "delete from tbReview where newsId="+newsId;
  try{
   return dbHandle.executUpdate(sql);
  }catch(Exception e){
   System.out.println("在dao中删除回复异常");
   return -1;
  }
}

public int insertOneReview(Review review) {
//两点注意:id不要赋值，review.getNewsId()的属性是int，所以不要单引号
String sql = "insert into tbReview(newsId,title,netName,content)value ("+review.getNewsId()+",'"+review.getTitle()

+"','"+review.getNetName()+"','"+review.getContent()+"')";
  try{
   return dbHandle.executUpdate(sql);
  }catch(Exception e){
   System.out.println("在dao中插入一条回复异常"+sql);
   return -1;
  }

}

public List selectNewsReview(String newsId) {
  String sql = "select * from tbReview where newsId = "+newsId;

  try{
   ResultSet rs = dbHandle.executQuery(sql);
   List list = new ArrayList();
   while(rs.next()){
    Review review = new Review();
    review.setId(rs.getInt("id"));
    review.setNewsId(rs.getInt("newsId"));
    review.setTitle(rs.getString("title"));
    review.setNetName(rs.getString("netName"));
    review.setContent(rs.getString("content"));
    list.add(review);
   }
   return list;
  }catch(Exception e){
   System.out.println("在dao中查询回复异常" +sql);
   return null;
  }

}

}

**********************************service*************************************
******************************************************************************

package com.wuuw.www.service;

import com.wuuw.www.dao.AdminDaoImp;
import com.wuuw.www.dao.IAdminDao;
import com.wuuw.www.model.Admin;

public interface IAdminService {
IAdminDao adminDao = new AdminDaoImp();
Admin queryOneAdmin(Admin admin) ;

}
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
package com.wuuw.www.service;

import com.wuuw.www.model.Admin;

public class AdminServiceImp implements IAdminService {

public Admin queryOneAdmin(Admin admin) {
//service是调用dao中的方法
return adminDao.selectOneAdmin(admin);
}

}
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
package com.wuuw.www.service;

import java.util.List;

import com.wuuw.www.dao.INewsDao;
import com.wuuw.www.dao.IReviewDao;
import com.wuuw.www.dao.NewsDaoImp;
import com.wuuw.www.dao.ReviewDaoImp;
import com.wuuw.www.model.News;

public interface INewsService {
INewsDao newsDao = new NewsDaoImp();
IReviewDao reviewDao = new ReviewDaoImp();
int addOneNews(News news);
int delOneNews(String id) ;
int amendOneNews(News news);
News queryOneNews(String id) ;
List queryAllNews() ;
}
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
package com.wukun.www.service;

import java.util.List;

import com.wukun.www.model.News;

public class NewsServiceImp implements INewsService {

public int addOneNews(News news) {
  if(newsDao.selectOneNews(news.getId()+"")!=null){
  return 0;
  }else{
   try{
    return newsDao.insertNews(news);
   }catch(Exception e){
   System.out.println("在service层中插入新闻异常");
   return -1;
   }
  }
}

public int amendOneNews(News news) {
return newsDao.updateNews(news);
}

public int delOneNews(String id) {
  /*
   * reviewDao.delNewsReview(id)表示没有删除新闻的回复
   * -2表示删除新闻异常
   * -1表示删除评论异常
   * 0 表示新闻不存在
   */
  if(newsDao.selectOneNews(id)!=null){
   try{
    if(reviewDao.delNewsReview(id)!=-1){
      //这里用id是因为news的id与review的newsId是主外键关系
     return newsDao.deleteNews(id);
    }else{
     return -2;
    }
   }catch(Exception e){
    return -1;
   }
  }else{
   return 0;
  }
}

public List queryAllNews() {
return newsDao.selectAllNews();
}

public News queryOneNews(String id) {
return newsDao.selectOneNews(id);
}

}

&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
package com.wuuw.www.service;

import java.util.List;

import com.wuuw.www.dao.INewsDao;
import com.wuuw.www.dao.IReviewDao;
import com.wuuw.www.dao.NewsDaoImp;
import com.wuuw.www.dao.ReviewDaoImp;
import com.wuuw.www.model.Review;

public interface IReviewService {
IReviewDao reviewDao = new ReviewDaoImp();
INewsDao newsDao = new NewsDaoImp();
int addOneReview(Review review) ;
List queryNewsReview(String newsId);

}
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
package com.wuuw.www.service;

import java.util.List;

import com.wuuw.www.model.Review;

public class ReviewServiceImp implements IReviewService {

public int addOneReview(Review review) {
  /*
   * 首先要确定是否有该新闻
   * 再增加
   */
  if(newsDao.selectOneNews(review.getNewsId()+"")!= null){
   return reviewDao.insertOneReview(review);
  }else{
   System.out.println("没有新闻，无法为它增加评论");
   return -1;
  }

}

public List queryNewsReview(String newsId) {

return reviewDao.selectNewsReview(newsId);
}

}

*********************************servlet**************************************
********************************处理的是管理员登陆的页面*********************************************

package com.wukun.www.servelet;

import java.io.IOException;
import java.io.PrintWriter;

import javax.servlet.ServletException;
import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import com.wukun.www.model.Admin;
import com.wukun.www.service.AdminServiceImp;
import com.wukun.www.service.IAdminService;

public class AdminServlet extends HttpServlet {

public void doGet(HttpServletRequest request, HttpServletResponse response)
   throws ServletException, IOException {
    //request and response 是两个重要的参数，一个是接收前台传过来的参数，一个是发送个前台的信息
  response.setCharacterEncoding("GBK");
  Admin admin = new Admin();
  //将请求的页面中的userName表单名的内容作为admin的userName
  //将请求的页面的pwd的表单名的内容作为admin的pwd
  admin.setUserName(request.getParameter("userName"));
  admin.setPwd(request.getParameter("pwd"));
  //String userName=request.getParameter("userName")
  //System.out.println(userName);
  IAdminService asi = new AdminServiceImp();
  //将admin作为参数查询数据库
  if(asi.queryOneAdmin(admin)!=null){
   //不能每次都查询，当验证通过后，将用户信息添加到Cookie中去，或采用session机制
   Cookie cookie = new Cookie("user",admin.getUserName());
   //运行此代码的前提是用户通过了验证，才将数据库中的admin的userName信息保存
   HttpSession session = request.getSession();//不断保持会话状态
    session.setAttribute("userName",admin.getUserName());
    //将admin.getUserName()的值放到session中的userName中
    response.addCookie(cookie);
    //发送到客户端时总是最先检查cookie的内容
   response.sendRedirect("newsManage.jsp");
  }else{
   response.sendRedirect("adminLogin.jsp");
  }

}

&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
package com.wukun.www.servelet;

import java.io.IOException;
import java.io.PrintWriter;

import javax.mail.Session;
import javax.servlet.ServletException;
import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import com.wukun.www.model.Admin;
import com.wukun.www.model.News;
import com.wukun.www.model.Review;
import com.wukun.www.service.AdminServiceImp;
import com.wukun.www.service.IAdminService;
import com.wukun.www.service.INewsService;
import com.wukun.www.service.IReviewService;
import com.wukun.www.service.NewsServiceImp;
import com.wukun.www.service.ReviewServiceImp;

public class NewManageServlet extends HttpServlet {

protected void doPost(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
        request.setCharacterEncoding("GBK");
        String o = request.getParameter("o");//接收前台的表单名为o的信息
        if(o.equals("addReview")){
        // 若表单的请求信息是addReview
        //System.out.println(request.getParameter("newsId"));
        //接收表单o中newId的表单项的值,测试是否传过来了
        Review review = new Review();
        String newsId = request.getParameter("newsId");
        review.setNewsId(Integer.parseInt(newsId));//一定要记得将id转为字符串
        review.setTitle(request.getParameter("title"));
        review.setNetName(request.getParameter("netName"));
        review.setContent(request.getParameter("content"));
        //newsId,title,netName,content是表单O中的表单项，将它们的内容作为对应的review的属性
        //调用ReviewServiceImp()的add方法加入到news的id号为newsId的回复中去
        IReviewService rsi = new ReviewServiceImp();
        rsi.addOneReview(review);
        //System.out.println(rsi.addOneReview(review));
        //用于测试增加的内容
        response.sendRedirect("newsShow.jsp?id ="+newsId);
        //转到显示新闻号为newsId的新闻及回复，因为review的newsId与news的id为主外键关系
        }else{
        //否则为增加新闻或修改新闻的内容
        News news = new News();
        news.setTitle(request.getParameter("title"));
        news.setAuthor(request.getParameter("author"));
        news.setContent(request.getParameter("content"));
        INewsService ins = new NewsServiceImp();
        if(o.equals("amend")){
          //若表单请求的是修改
          news.setId(Integer.parseInt(request.getParameter("id")));
          ins.amendOneNews(news);//一定要将id加上去，因为id的约束是非空，而它写在这个if里面
           //是因为当请求是add时就这个id没用了
        } if(o.equals("add")){
          // 若表单请求的是增加
          ins.addOneNews(news);//id会自增，所以不要增加到news中去。
        }
        response.sendRedirect("newsShow.jsp");
        }
}

public void doGet(HttpServletRequest request, HttpServletResponse response)
   throws ServletException, IOException {
   request.setCharacterEncoding("GBK");
   INewsService newsService = new NewsServiceImp();
   String o = request.getParameter("o");//接收前台的表单名为o的信息
   if(o.equals("del")){
     //如果请求新闻删除
    newsService.delOneNews(request.getParameter("id"));
   }
  response.sendRedirect("newsShow.jsp");
}

}

//////////////////////////////////////表现层//////////////////////////////////////////////////////////
.........................................新闻管理页面newsManage.jsp............................................................
<%@ page language="java" import="java.util.*" pageEncoding="GBK"%>
<%@ page import="com.wujiao.www.service.*" %>
<%@ page import="com.wujiao.www.model.*"%>
<%
List list = (new NewsServiceImp()).queryAllNews();
String userName = (String)session.getAttribute("userName");
if(userName==null){
%>
<script type="text/javascript">
  window.location.href="adminlogin.jsp";
</script>
<% }else{

}
%>
<html>
<head>
    <title>My JSP 'newsManage.jsp' starting page</title>
    <script type="text/javascript">
    function del(id,title){
      if(confirm("你确定要删除"+title+"这条新闻吗？")) {
       document.form1.id.value = id;
       document.form1.o.value = "del";
       document.form1.submit();
      }else{
       return;
      }
    }
    </script>
</head>

<body>
    新闻发布系统后台管理<br>
<form name="form1" action="newsManage">
  <input type="hidden" value="" name="id">
  <input type="hidden" value="" name="o">
<table border="1" width="600">
  <tr>
   <TH width=50> </TH>
   <th width=250>标题</th>
   <th width=150>作者</th>
   <th width=150>操作</th>
  </tr>
  <%
   for(int i=0;i<list.size();i++){
    News news = (News)list.get(i);
    String id = news.getId()+"";
    String title = news.getTitle();
  %>
  <tr>
      <td><img src="image/index_31.jpg"></td>
      <td><a href="newsShow.jsp?id=<%=news.getId() %>"><%=news.getTitle() %></a></td>
      <td><%=news.getAuthor() %></td>
      <td>
      <a href="newsAmend.jsp?id=<%=news.getId()%>">修改</a>
      <input type="button" value="删除" onClick="del('<%=id%>','<%=title%>')">
      </td>
  </tr>
  <% } %>
</table>
</form>

    <form action="newsManage" method="post">
    <input type="hidden" name="o" value="add">
    新闻标题：<input type="text" name="title" value="" size="" maxlength="50">
    作者：<input type="text" name="author" value="" size="" maxlength="20">
    <input type="submit" value="添加新闻"><br><br>
    正文:<textarea rows="6" cols="60" name="content">请在这里添加新闻正文</textarea>
    <br>
    <br>

    </form>

</body>
</html>
...........................................newsShow.jsp.......................................................
<%@ page language="java" import="java.util.*" pageEncoding="GBK"%>
<%@ page import="com.wujiao.www.service.*" %>
<%@ page import="com.wujiao.www.model.*"%>
<%
String newsId = request.getParameter("id");

News news = (new NewsServiceImp()).queryOneNews(newsId);
List list = (new ReviewServiceImp()).queryNewsReview(newsId);
%>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>

    <title><%=news.getTitle()%></title>
</head>

<body>
    <h1><%=news.getTitle() %></h1><br>
    <h4>作者：<%=news.getAuthor() %></h4><br>
    <%=news.getContent() %><br>
    ----------------------------------------------
    <%for(int i=0;i<list.size();i++){
    Review review = (Review)list.get(i);
     %>
     <br>
    网友名称：<%=review.getNetName() %>     
    评论主题：<%=review.getTitle() %><br><br>
    评论内容：<%=review.getContent() %><br>
       ========================================================
    <%} %>
    <form action="newsManage" method="post">

    <input type="hidden" value="addReview" name="o">
    <input type="hidden" value=<%=news.getId()%> name="newsId">

    评论标题：<input type="text" value="" name="title" maxlength="50">  
    网名：<input type="text" value="" name="netName" size="6" maxlength="20">  
    <input type="submit" value="发表评论"><br><br>
  内容:<br>
    <textarea rows="6" cols="60" name="content"></textarea>
    </form>
</body>
</html>
-------------------------------------newsAmend.jsp------------------------------------------------------
<%@ page language="java" import="java.util.*" pageEncoding="GBK"%>
<%@ page import="com.wujiao.www.service.*" %>
<%@ page import="com.wujiao.www.model.*"%>
<%
News news = (new NewsServiceImp()).queryOneNews(request.getParameter("id"));
%>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>

<title>My JSP 'newsAmend.jsp' starting page</title>

</head>

<body>
        <form action="newsManage" method="post">
        <input type="hidden" name="o" value="amend">
        <input type="hidden" name="id" value=<%=news.getId() %>>
        <input type="hidden" name="title" value=<%=news.getTitle() %>>
        <input type="hidden" name="author" value=<%=news.getAuthor()%>>

    新闻标题：<%=news.getTitle() %>
    作者：<%=news.getAuthor() %>
    <input type="submit" value="修改新闻"><br><br>
    正文:<textarea rows="6" cols="60" name="content"><%=news.getContent() %></textarea>
    <br>
    <br>

    </form>
</body>
</html>
==========================================adminLogin.jsp=(要自己加入防注入式代码)========================================================
<%@ page language="java" import="java.util.*" pageEncoding="GBK"%>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>

    <title>My JSP 'adminlogin.jsp' starting page</title>
    <script type="text/javascript">
    function input(){
      if(document.all["userName"].value==""){
       alert("用户名不能为空!请输入用户！");
       document.all["userName"].focus();
       return;
      }
      if(document.all["pwd"].value==""){
       alert("密码不能为空!请输入密码！");
       document.all["pwd"].focus();
       return;
      }
      document.form1.submit();
    }
    </script>

</head>

<body>
    <center>
    <h1>管理员登录</h1>
    <br><br>
    <form name="form1" action="login" method="post">
      用户名：<input type="text" value="" name="userName"><br>
      密码：<input type="password" value="" name="pwd"><br>
      <input type="button" value="登录" onClick="input()">
    </form>
    </center>
</body>
</html>