import java.io.*; import java.sql.*; import javax.servlet.*; import javax.servlet.http.*; public class JDBCServlet extends HttpServlet { Connection conn; Statement stmt; ResultSet rs; public void init () throws ServletException { try { DriverManager.registerDriver(new oracle.jdbc.driver.OracleDriver()); String connectStr = "jdbc:oracle:thin:@db00.cse.cuhk.edu.hk:1521:db00"; conn = DriverManager.getConnection(connectStr,"name","password"); // fill in your login name and password } catch (SQLException e) { System.out.println(e.getMessage()); } } public void doGet (HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { PrintWriter out; String title = "Product Table"; response.setContentType("text/html"); out = response.getWriter(); out.println(""+title+""); out.println("

"+title+"

"); out.println("

"); out.println(""); out.println("matches "); out.println(""); out.println("

"); out.println(""); out.close(); } public void doPost (HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { try { String field = request.getParameter("field"); String query = request.getParameter("query"); PrintWriter out = response.getWriter(); String title = "Query Result"; StringBuffer sqlStmt = new StringBuffer(100); sqlStmt.append("SELECT * FROM PRODUCT WHERE "); sqlStmt.append(field + " LIKE '%" + query + "%'"); stmt = conn.createStatement(); rs = stmt.executeQuery(sqlStmt.toString()); response.setContentType("text/html"); out.println(""+title+""); out.println(""); out.println("

" + title + "

"); out.println(""); out.println(""); out.println(""); while (rs.next()) { out.println(""); out.println(""); out.println(""); out.println(""); out.println(""); } out.println("
Product CodeCategoryNamePriceOnhand
" + rs.getString("code") + "" + rs.getString("category") + "" + rs.getString("name") + "" + rs.getString("price") + "" + rs.getString("on_hand") + "
"); } catch (SQLException e) { System.out.println(e.getMessage()); } } }