jsp验证登陆

<%@ page contentType="text/html; charset=gb2312" %>

<%@ page language="java" %>

<%@ page import="com.mysql.jdbc.Driver" %>

<%@ page import="java.sql.*" %>

<%
String driverName="com.mysql.jdbc.Driver";
String userName="root";
String userPasswd="123456";
String dbName="hoot";
String tableName="userinfo";
String url="jdbc:mysql://localhost/"+dbName+"?user="+userName+"&password"
                +  "="+userPasswd;

Class.forName("com.mysql.jdbc.Driver").newInstance();
Connection connection=DriverManager.getConnection(url);
Statement statement = connection.createStatement();

        String Username=request.getParameter("Username");
        String Password=request.getParameter("Password");
 
        out.println(Username);
        out.println(Password);
String sql="SELECT * from userinfo where " +
                "username= 'Username' and password = 'Password'";
    &nbs