请教大佬们
各位大佬我想问一下这个问题怎么解决啊
<%@ page language="java" import="java.util.*,java.sql.*" pageEncoding="utf-8"%>
<html>
<body>
<%
String username="";
String password="";
username=request.getParameter("username");
password=request.getParameter("password");
String driverName="com.microsoft.sqlserver.jdbc.SQLServerDriver";
String dbURL="jdbc:sqlserver://localhost:1433;DatabaseName=Login";
String userName="root";
String userPwd="sa";
String sql="select Username from users where Username='"+username+"'";
String sql1="select Password from users where Password='"+password+"'";
Connection stmt = DriverManager.getConnection(dbURL,userName,userPwd);
Class.forName(driverName);
Statement stmt1=stmt.createStatement();
Statement stmt2=stmt.createStatement();
ResultSet rs=stmt1.executeQuery(sql);
ResultSet rs1=stmt2.executeQuery(sql1);
if(rs.next()&&rs1.next())
{
request.getRequestDispatcher("suc.jsp").forward(request, response);
}else{
request.getRequestDispatcher("fail.jsp").forward(request, response);
}
%>
</body>
</html>