error in servlet

I have made one html page using javascript.Whenever the control goes to the servlet page it shows database error.

the exception isjava.sql.SQLException: [Microsoft][ODBC Microsoft Access Driver] Too few parameters. Expected 2.
I am using MS-Access for database

Servlet code:

package com.pack;

import java.io.*;
import java.sql.*;
import java.util.*;
import javax.servlet.*;
import javax.servlet.http.*;

public class LOGIN extends HttpServlet{

public void doPost(HttpServletRequest req, HttpServletResponse res) 
		   throws ServletException,IOException
{

res.setContentType("text/html");
PrintWriter out=res.getWriter();
String account=req.getParameter("ac");
String password=req.getParameter("pass");
String username="";
String pwd="";

try
{

String url="Jdbc:Odbc:Namrata";
Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
Connection con=DriverManager.getConnection(url,username, pwd); 
Statement stmt=con.createStatement();
ResultSet rs=stmt.executeQuery("select * from database1 where Account="+account+" and Password="+password);
if(rs.next()==false)
{
res.setContentType("text/html");
res.setStatus(HttpServletResponse.SC_OK);
out.println("<br><br>unknown user");
out.println("<html><head><title>checking the login</title></head>");
out.println("<h2>unknown user.............access denied</h2>");
out.println("<a href='login.html'>back</a></body></html>");

}
else
{
res.sendRedirect("welcome.html");
}
con.close();
}

catch(Exception e)
{
out.println("the exception is"+e);
}
}
}

Namrata Kakkar wrote:
ResultSet rs=stmt.executeQuery("select * from database1 where Account="+account+" and Password="+password);

if you output the SQL created by above line, you should see the problem. If you don't, try pasting this query into Access and see what happens. That is what I do when I can't make a query work.

Also, you should be using parametrized queries.

I assume account and password are text/character type fields

and the field names used are correct as defined in the table.
However using PreparedStatement is always a better approach.

Moved to the JDBC forum