redirection problem

[gaurav chhabra]

sir
i want to redirect my page like i fill username and password in a HTML page and then it will be checked in a SERVLET and then as the username and password it will be get redirected to a JSP page..
below is the code--:::

String url = "jdbc  :-o	  dbc:ram";
Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");//loading the driver
Connection con = DriverManager.getConnection(url,"","");//making the connection
Statement st = con.createStatement();//creating ststement
String query = "select * from login";
ResultSet rs = st.executeQuery(query);//creating the result set and executing the query
     
 //now checking the result set
 int match=0;
 while(rs.next())
   {
     String user = rs.getString("user_name");//getting the user name from database
     String pass = rs.getString("password");//getting the password from the database
        
     if( (user.equals(user_name)) && (pass.equals(password)) ) 
   {
         
                    match = 1;
                    
                }
                 
 
    } 
      
   if(match == 1)
    {
     res.setStatus(res.SC_MOVED_TEMPORARILY);
                 res.setHeader("Location", "http://localhost:8080/f1.jsp"); 
            } 
      else
       {
         res.setStatus(res.SC_MOVED_TEMPORARILY);
                 res.setHeader("Location", "http://localhost:8080/f2.jsp"); 
            } 
        
      }
      catch(Exception e)
       {
       out.println("there is an error");
       }

it is running properly but when it will be redirected to a JSP page it will not showing any output......and not also giving any error..please tell me the mistake i m making....
thank you
gaurav

[EDIT - code tags added by Dave]
[ February 16, 2005: Message edited by: David O'Meara ]

[David O'Meara]

That's not the way to do it in Servlets, have a look at response.sendredirect()

Please try to use code tags when posting code.

thanks,
Dave.

[Ben Souther]

Also, and this is more of a JDBC issue than a servlet one, it is very inefficient to pull all the records from the table and loop through them in the Java code like that.

Instead of "SELECT * FROM LOGIN", use
"SELECT * FROM LOGIN WHERE user_name = '" + user + "' AND password = '"" + pass + "'";
(or better, use a preparedStatement).

This will return either 0 or 1 rows.

This lets the database, which is much more suited to this type of work, handle the searching. It also cuts down on the network traffic between the database and webserver machines.