基于Java的公司考勤系统

public void doPost(HttpServletRequest request, HttpServletResponse response)
      throws ServletException, IOException {
        response.setContentType("text/html");
    PrintWriter out = response.getWriter();
    HttpSession session = request.getSession();
    HashMap user = new HashMap(); 
    user = (HashMap)session.getAttribute("admin");
    HashMap member = (HashMap)session.getAttribute("member");
    String ac = request.getParameter("ac");
    if(ac==null)ac="";
    CommDAO dao = new CommDAO();
    String date = Info.getDateStr();
    String today = date.substring(0,10);
    String tomonth = date.substring(0,7);
    //登录
    if(ac.equals("login"))
    {
      String username = request.getParameter("username");
      String password = request.getParameter("pass");
      String utype = request.getParameter("utype");
      String pagerandom = request.getParameter("pagerandom")==null?"":request.getParameter("pagerandom");
      String random = (String)session.getAttribute("random");
      if(!pagerandom.equals(random)&&request.getParameter("a")!=null)
      {
        request.setAttribute("random", "");
        go("/admin/login.jsp", request, response);
      }
      else{
        String sql1 = "select * from sysuser where uname='"+username+"' and upass='"+password+"' and utype='"+utype+"'";
        System.out.println(sql1);
      List<HashMap> userlist1 = dao.select(sql1);
      if(userlist1.size()==1)
      {
        request.getSession(). setAttribute("admin", userlist1.get(0));  
        gor("/attence/admin/index.jsp", request, response);
      }else{
        request.setAttribute("error", "");
        go("/admin/login.jsp", request, response);
      }
      }
    }