用servlet校验密码2

package com.Swpu.email;

import java.io.IOException;
import java.sql.*;
import java.io.PrintWriter;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

/**
 * Servlet implementation class ServletRequest
 */
public class ServletRequest extends HttpServlet {
    private static final long serialVersionUID = 1L;
    private String User;
    private String Password;   
    /**
     * @see HttpServlet#HttpServlet()
     */
    public ServletRequest() {
        super();
        // TODO Auto-generated constructor stub
    }

    /**
     * @see HttpServlet#doGet(HttpServletRequest request, HttpServletResponse response)
     */
    protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
        // TODO Auto-generated method stub
        Connection con=null;
        PreparedStatement ps = null;
        ResultSet rs = null;
        response.getWriter().append("Served at: ").append(request.getContextPath());
        response.setContentType("text/html;charset=utf-8");
        response.setCharacterEncoding("utf-8");
        PrintWriter out=response.getWriter();
        //获取参数
        User=request.getParameter("user");
        Password=request.getParameter("password");
        try{
            Class.forName("com.microsoft.sqlserver.jdbc.SQLServerDriver")
            con=DriverManager.getConnection("jdbc:sqlserver://127.0.0.1;databaseName=SWPU","sa","yangsishuai");
            ps=con.prepareStatement("select * from UserLogin where [User] = ‘"+user+"‘and password =‘"+password+";");
            rs=ps.executeQuery();
            if(rs.next()){
            out.print("<hl>登陆成功</hl>");
            out.print("欢迎 : " + User+",您的密码是:"+Password);
        }else if(User==""||Password==""){
            out.print("<h1>用户名或密码不能为空</h1>");
        }else {
            out.print("<h1>用户名或密码错误</h1>");
        }
            out.close();
            con.close();
    }
}
    /**
     * @see HttpServlet#doPost(HttpServletRequest request, HttpServletResponse response)
     */
    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
        // TODO Auto-generated method stub
        doGet(request,response);        
    }