%@ page contentType="text/html; charset=gb2312" language="java" import="java.sql.*" errorPage="" %> <% String username=chStr.chStr(request.getParameter("username")); ResultSet rs=conn.executeQuery("select * from tb_member where username='"+username+"'"); %>