<%@page import="java.sql.*"%>
<%
boolean status = false;
try{
 String username = request.getParameter("USER_ID");
 String password = request.getParameter("USER_PWD");
 
 
 String sql;

 sql = "select * from mis_user_mast where USER_ID='"+username+"' and USER_PWD = '"+password+"'";
 
 
	 Connection conn=DriverManager.getConnection("jdbc:oracle:thin:@localhost:1521:xe","admin1","admin1");
	 Statement stmt = conn.createStatement();
	 ResultSet rs = stmt.executeQuery(sql);
	 //out.println(sql);
	 
	 status = rs.next();
	 
	 if(status){
		 //status = true;
		 //session.setAttribute("user_id", rs.getString("id"));
		 session.setAttribute("zone", rs.getString("zone"));
		 session.setAttribute("level",rs.getString("user_level"));
		//out.println("level: "+session.getAttribute("user_level"));
	 }
	 
	 
	 
}catch(SQLException e){
	out.println(e);
}
%>
{"status": <%= status %>, "level": <%= session.getAttribute("level") %>}
<%
response.setContentType("application/json");
 
%>