Untitled Document

<%@ page import="java.util.*" %>
<%@ page import="java.sql.*" %>
<html>
<body>
<%
//
// Get Tracking-Number from HTTP-POST Data:
//
String trackingNo = request.getParameter("trackingNumber");

//
// Make JDBC Connection. Perform Query
//
Class.forName("org.gjt.mm.mysql.Driver").newInstance();
java.sql.Connection conn;
String connurl =
"jdbc:mysql://localhost.localdomain/shipping_events";
String user = "DBUSERNAME";
String pw = "DBPASSWORD";
conn = DriverManager.getConnection(connurl,user,pw);
Statement stmt = conn.createStatement();
ResultSet res;
if(trackingNo != null){
res = stmt.executeQuery("SELECT * FROM event_log " +
"where package_id='" +
trackingNo + "'");
}else{
res = stmt.executeQuery("SELECT * FROM event_log");
}
//ResultSetMetaData md = res.getMetaData();
res.last();
int nrows = res.getRow();
%>
<% if(nrows > 0){ %>
<table border="true">
<tr>
<th>Event ID</th>
<th>Description</th>
<th>Package ID</th>
<th>Date</th>
</tr>
<% for(res.first();!res.isAfterLast();res.next()){ %>
<tr>
<td><%=res.getString("event_id") %></td>
<td><%=res.getString("descr") %></td>
<td><%=res.getString("package_id") %></td>
<td><%=res.getString("time_stamp") %></td>
</tr>
<% }
}else{
%>
<p>I couldn't find any record for tracking number: <%=trackingNo%></p>
<% } %>
</body>
</html>