upd

com.sharemao.web.manager/src/main/java/com/sharemao/manager/ctrl/LoginCtrl.java

@@ -36,7 +36,9 @@ public class LoginCtrl
 		//String verifyCode=para.get("verifyCode");
 		String pwd=para.get("password");
 		String lang=para.get("language");
-		LanguageUtil.init(lang);
+        if (!Tools.isEmpty(lang)){
+            LanguageUtil.init(lang);
+        }
 		if(session.isNew())
 			return new TextView("/index.jsp");
 		if(Tools.isEmpty(username) || Tools.isEmpty(pwd)) {

com.sharemao.web.manager/src/main/java/com/sharemao/manager/service/impl/PrivilegeServiceImpl.java

@@ -17,7 +17,7 @@ public class PrivilegeServiceImpl implements PrivilegeService {
 		String sql = "SELECT a.id,a.roleid,a.moduleid,a.crud FROM privilege a, module c "
 				+ " WHERE a.roleid="+roleid+" AND a.moduleid=c.id AND c.path='"+path+"'";
 		List<Map<String, Object>> list= baseDao.getMapList(sql);
-		if(list.size()>0){
+		if(list!=null&&list.size()>0){
 			Map<String, Object> pamp = list.get(0);
 			return new Privilege(Integer.parseInt(String.valueOf(pamp.get("id"))),Integer.parseInt(String.valueOf(pamp.get("roleid"))),
 					Integer.parseInt(String.valueOf(pamp.get("moduleid"))),String.valueOf(pamp.get("crud")));