List<User> user = User.dao.find("select * from emp where empname='"+username+"' and emppassword = '"+userpassword+"'");
user为空
User.dao.find("select * from emp where empname = ？ and emppassword = ?", username, userpassword);