String login = request.getParameter("user");
String passwd = request.getParameter("passwd");
// make sure user exist.
// check if we have all required data filled in
if ((login == null) || (passwd == null) || (login.length() < 2) || (passwd.length() < 2)) {
Please enter both user ID and password
return;
}
XMLRepo repo = XMLRepo.instance(pageContext);
User user = (User)repo.get(new User(login), false);
/*
File user = new File(pageContext.getServletContext().getRealPath("/users/"+login+"/User.xml"));
*/
if (user != null) {
// User ux = new User(User.loadXMLBlock(new FileInputStream(user)));
if (new HTPasswordNative(pageContext.getServletContext().getRealPath("/WEB-INF/passwd")).checkPassword(login, passwd)) {
session.setAttribute("user", user);
out.print("success");
return;
}
}
Invalid credentials. Try again.