本文用到的数据库操作功能模块源代码请参考我的文章。
http://www.csdn.net/Develop/read_article.asp?id=23713
package skydev.modules.accounts.data;
import java.sql.*;
import java.util.*;
import skydev.modules.data.*;
import javax.crypto.*;
public class User
extends DbObject {
public User() {
// super(new SqlServerConnectionFactory("localhost", 1433, "TheSchool", "sa",""));
super();
}
/**
* 添加一个用户，如果emailAddress已经有人注册过，则注册失败，不修改数据库，返回－1
* 否则返回新添加的UserID
* @param emailAddress
* @param password
* @param fullName
* @param address1
* @param address2
* @param city
* @param province
* @param zipCode
* @param homePhone
* @param country
* @return 添加成功返回新的UserID，否则返回-1
*/
public int create(String emailAddress,
byte[] password,
String fullName,
String address1,
String address2,
String city,
String province,
String zipCode,
String homePhone,
String country) {
Connection con = this.getConnection();
CallableStatement cs = null;
int userID = -1;
//检测当前emailAddress是否已经注册过，如果注册过则不能够再次注册
if (this.testEmailAddress(emailAddress) == false) {
return userID;
}
try {
cs = con.prepareCall(
"{call sp_Accounts_CreateUser(?,?,?,?,?,?,?,?,?,?,?)}");
cs.setString(1, emailAddress);
cs.setBytes(2, password);
cs.setString(3, fullName);
cs.setString(4, address1);
cs.setString(5, address2);
cs.setString(6, city);
cs.setString(7, province);
cs.setString(8, zipCode);
cs.setString(9, homePhone);
cs.setString(10, country);
cs.registerOutParameter(11, Types.INTEGER); //@UserID
cs.execute();
userID = cs.getInt(11);
}
catch (SQLException ex) {
}
finally {
return userID;
}
}
/**
* 更形已经存在的用户信息，如果指定UserID不存在，则不作任何修改
* @param userID
* @param emailAddress
* @param password
* @param fullName
* @param address1
* @param address2
* @param city
* @param province
* @param zipCode
* @param homePhone
* @param country
* @return
*/
public boolean update(int userID, String emailAddress, byte[] password,
String fullName, String address1, String address2,
String city, String province, String zipCode,
String homePhone, String country) {
Connection con = this.getConnection();
CallableStatement cs = null;
boolean ret = false;
try {
cs = con.prepareCall(
"{call sp_Accounts_UpdateUser(?,?,?,?,?,?,?,?,?,?,?)}");
cs.setString(1, emailAddress);
cs.setBytes(2, password);
cs.setString(3, fullName);
cs.setString(4, address1);
cs.setString(5, address2);
cs.setString(6, city);
cs.setString(7, province);
cs.setString(8, zipCode);
cs.setString(9, homePhone);
cs.setString(10, country);
cs.setInt(11, userID);
cs.execute();
ret = true;
}
catch (SQLException ex) {
ret = false;
}
finally {
return ret;
}
}
/**
* 删除指定用户ID的用户信息。如果删除异常将返回False,否则都能够删除
* @param userID
* @return
*/
public boolean delete(int userID) {
Connection con = this.getConnection();
CallableStatement cs = null;
boolean ret = false;
try {
cs = con.prepareCall("{call sp_Accounts_DeleteUser(?)}");
cs.setInt(1, userID);
cs.executeUpdate();
ret = true;
}
catch (SQLException ex) {
ret = false;
}
finally {
return ret;
}
}
/**
* 检验登录用户名称和口令
* @param emailAddress
* @param password
* @return 返回登陆的userID,如果登陆失败，返回－1；
*/
public int validateLogin(String emailAddress, byte[] password) {
Connection con = this.getConnection();
CallableStatement cs = null;
int userID = -1;
try {
cs = con.prepareCall("{?=call sp_Accounts_ValidateLogin(?,?)}");
cs.setString(2, emailAddress);
cs.setBytes(3, password);
cs.registerOutParameter(1, Types.INTEGER); //@UserID
cs.execute();
userID = cs.getInt(1);
}
catch (SQLException ex) {}
finally {
return userID;
}
}
public boolean testPassword(int userID, byte[] encPassword) {
Connection con = this.getConnection();
CallableStatement cs = null;
try {
cs = con.prepareCall("{?=call sp_Accounts_TestPassword(?,?)}");
cs.setInt(2, userID);
cs.setBytes(3, encPassword);
cs.registerOutParameter(1, Types.INTEGER); //@UserID
cs.execute();
if (cs.getInt(1) == 1) { //密码合格
return true;
}
else {
return false;
}
}
catch (SQLException ex) {
return false;
}
catch (Exception e) {
return false;
}
}
public boolean testEmailAddress(String emailAddress) {
Connection con = this.getConnection();
CallableStatement cs = null;
try {
cs = con.prepareCall("{?=call sp_Accounts_TestEmailAddress(?)}");
cs.setString(2, emailAddress);
cs.registerOutParameter(1, Types.INTEGER); //@UserID
cs.execute();
if (cs.getInt(1) == 1) { //该emailAddress可以注册
return true;
}
else {
return false;
}
}
catch (SQLException ex) {
return false;
}
catch (Exception e) {
return false;
}
}
public HashMap getUserRoles(int userID) throws SQLException {
Connection con = this.getConnection();
CallableStatement cs = null;
ResultSet rs = null;
HashMap hm = new HashMap();
try {
cs = con.prepareCall("{call sp_Accounts_GetUserRoles(?)}");
cs.setInt(1, userID);
rs = cs.executeQuery();
while (rs.next()) {
hm.put(new Integer(cs.getInt("RoleID")), cs.getString("Description"));
}
}
catch (SQLException ex) {
System.out.println("Error:HashMap getUserRoles(int userID)");
System.out.println(ex);
}
finally {
return hm;
}
}
//返回一个ArrayList来说明用户基于其角色成员关系赋予的所有许可列表
//用于管理需要
public ArrayList getEffectivePermissionList(int userID) throws SQLException {
//sp_Accounts_GetEffectivePermissionList
ArrayList al = new ArrayList();
Connection con = this.getConnection();
CallableStatement cs = null;
ResultSet rs = null;
try {
cs = con.prepareCall("{call sp_Accounts_GetEffectivePermissionList(?)}");
cs.setInt(1, userID);
rs = cs.executeQuery();
while (rs.next()) {
al.add(new Integer(rs.getInt("PermissionID")));
}
}
catch (SQLException ex) {}
finally {
return al;
}
}
public ArrayList getUserList() {
Connection con = this.getConnection();
CallableStatement cs = null;
ResultSet rs = null;
ArrayList al = new ArrayList();
try {
cs = con.prepareCall("{call sp_Accounts_GetUserList()}");
rs = cs.executeQuery();
while (rs.next()) {
al.add(new Integer(rs.getInt("UserID")));
}
}
catch (SQLException ex) {}
finally {
return al;
}
}
//基本思想：将剑所到的数据行用集合的形式保存，字段名作为Key,字段值作为KeyValue
public HashMap retrive(int userID) throws SQLException { //检索指定用户的详细信息sp_Accounts_GetUserDetails
HashMap hm = new HashMap();
Connection con = this.getConnection();
CallableStatement cs = null;
ResultSet rs = null;
try {
cs = con.prepareCall("{call sp_Accounts_GetUserDetails(?)}");
cs.setInt(1, userID);
rs = cs.executeQuery();
while (rs.next()) {
hm.put("UserID", new Integer(rs.getInt("UserID")));
hm.put("EmailAddress", rs.getString("EmailAddress"));
hm.put("FullName", rs.getString("FullName"));
hm.put("Address1", rs.getString("Address1"));
hm.put("Address2", rs.getString("Address2"));
hm.put("City", rs.getString("City"));
hm.put("Province", rs.getString("Province"));
hm.put("ZipCode", rs.getString("ZipCode"));
hm.put("HomePhone", rs.getString("homePhone"));
hm.put("Country", rs.getString("Country"));
}
}
catch (SQLException ex) {
System.out.println(ex);
}
finally {
return hm;
}
}
public HashMap retrive(String emailAddress) {
HashMap hm = new HashMap();
Connection con = this.getConnection();
CallableStatement cs = null;
ResultSet rs = null;
try {
cs = con.prepareCall("{call sp_Accounts_GetUserDetailsByEmail(?)}");
cs.setString(1, emailAddress);
rs = cs.executeQuery();
while (rs.next()) {
hm.put("UserID", new Integer(rs.getInt("UserID")));
hm.put("EmailAddress", rs.getString("EmailAddress"));
hm.put("FullName", rs.getString("FullName"));
hm.put("Address1", rs.getString("Address1"));
hm.put("Address2", rs.getString("Address2"));
hm.put("City", rs.getString("City"));
hm.put("Province", rs.getString("Province"));
hm.put("ZipCode", rs.getString("ZipCode"));
hm.put("HomePhone", rs.getString("homePhone"));
hm.put("Country", rs.getString("Country"));
}
}
catch (SQLException ex) {
System.out.println(ex);
}
finally {
return hm;
}
}
}
上面仅实现User模块
