JSP+SQL登录注册页面一些问题

我的login.jsp就是简单的现实登录页面，我的LoginGo.jsp的部分代码如下：
<%@ page contentType="text/html; Charset=GB2312" language="java" import="java.sql.*,java.util.*,myPk.*"  %>
<%  Connection con;
    Statement sql;
    ResultSet rs;
    String ID,Pwd,Figure;//登录账号，密码，登录身份级别
    ID=request.getParameter("loginid");//loginid是login.jsp中账号的文本框名字
    Pwd=request.getParameter("password");//password是login.jsp中密码的密码框名字
try{
  Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
}
catch(ClassNotFoundException e){
            out.print(e);
}
try
{
      con=DriverManager.getConnection("jdbc:odbc:TestScore","","");
      sql=con.createStatement();
  rs=sql.executeQuery("select * from users where ID='"+ID+"' and Pwd='"+Pwd+"'");
if(rs.next()){
  Figure=rs.getString("Figure");
  session.setAttribute("Figure",Figure);
                    if(Figure.equals("学生")){