Java多用户登录系统问题：员工账号无法登录求助

Hey there! Let's break down why your admin accounts work but employee ones don't—since you're using an IF statement tied to that "Yes" permission field in the database, here are the most likely issues and straightforward fixes:

Common Issues & Fixes #

1. Your IF Statement Only Handles Admins (No Employee Flow) #

It sounds like your code might be checking only for the "Yes" permission and ignoring employee accounts entirely. For example, if you have something like this:

if (permission.equals("Yes")) {
    // Admin login success logic
}
// No code for when permission isn't "Yes"

Employees will never trigger a successful login flow. Instead, first verify the username/password are valid, then use the permission field to route the user:

// First, check if the user's credentials match any record
if (resultSet.next()) { // Found a matching user in the database
    String permission = resultSet.getString("your_permission_column_name");
    // Safe string comparison to avoid NullPointerExceptions
    if ("Yes".equals(permission)) {
        JOptionPane.showMessageDialog(null, "Admin Login Successful!");
        // Redirect to admin dashboard
    } else {
        JOptionPane.showMessageDialog(null, "Employee Login Successful!");
        // Redirect to employee dashboard
    }
} else {
    JOptionPane.showMessageDialog(null, "Invalid Username or Password!");
}

2. Your SQL Query Filters Out Employees #

If your SQL query includes a condition like AND permission='Yes', you'll only ever pull admin accounts from the database—employees won't even show up in the result set. Fix the query to validate credentials first, then check permissions separately:

// Bad query (filters out employees before checking credentials)
// String sql = "SELECT * FROM users WHERE username=? AND password=? AND permission='Yes'";

// Good query (checks username/password first, permission is checked later)
String sql = "SELECT * FROM users WHERE username=? AND password=?";
PreparedStatement pstmt = con.prepareStatement(sql);
pstmt.setString(1, usernameField.getText());
pstmt.setString(2, passwordField.getText());
ResultSet resultSet = pstmt.executeQuery();

3. Using == Instead of equals() for String Comparison #

A super common mistake for Java newbies: == compares object references, not the actual text content of strings. Always use equals() to compare the permission field value:

// Wrong
if (permission == "Yes") { ... }

// Correct
if (permission.equals("Yes")) { ... }

Bonus: New Developer Best Practices #

• Use try-with-resources to automatically close database connections, statements, and result sets (prevents resource leaks):

  try (Connection con = DriverManager.getConnection(DB_URL, DB_USER, DB_PASS);
       PreparedStatement pstmt = con.prepareStatement(sql);
       ResultSet resultSet = pstmt.executeQuery()) {
      // Your login logic here
  } catch (ClassNotFoundException | SQLException ex) {
      ex.printStackTrace();
      JOptionPane.showMessageDialog(null, "Database Error: " + ex.getMessage());
  }
  

• Never store plain-text passwords in the database—hash passwords with a library like BCrypt before saving, then hash the input password to compare during login.
• Add clear error messages so users know if their credentials are wrong vs. a database issue.

内容的提问来源于stack exchange，提问作者style237