JDBC Problem in my servlet.....

[Keith Ball]

Here is my code for my servlet which goes to a database and checks to see if the password has been entered correctly.     String query = "SELECT * FROM USERS WHERE USER_USERNAME = '" + username + "'"; ResultSet rs = stmt.executeQuery(query);   while (rs.next()) {      correctpass = rs.getString("USER_PASS"); }   if(correctpass.equals(password)) {   iscorrect = true; } else {   iscorrect = false; }   return iscorrect;   Correctpass results in a NULL.  This code works fine when I run it as a application.  Is there some sort of security issue, I dont know about ?  I thought that servlets worked on the same security system as applications.   Thnx for the help in advance.   Keith --------------------------------------------------------------------------- Keith Ball - Praktikant AF12 Operationelle  Analysen  Luftwaffe IABG MbH                 Einsteinstr. 20              85521 Ottobrunn Phone : 0049-89-6088-2556 Email : [EMAIL PROTECTED]                         WWW site : www.iabg.de ----------------------------------------------------------------------------