jsp登录页面随机验证码的生成

 <script type="text/javascript">
      
      function login(){
      
     
        
         var req=new XMLHttpRequest();
         req.open("post", "LoginServlet", true);
          req.setRequestHeader("Content-Type","application/x-www-form-urlencoded;charset=utf-8");
           
         //获取三个元素
         var user=document.getElementsByName("name")[0];
         var pwd=document.getElementsByName("password")[0];
         var code=document.getElementsByName("code")[0];
       /*   console.log(code.value);
         console.log("username="+user.value+"&pwd="+pwd.value+"&code="+code.value); */
         //发送
         req.send("username="+user.value+"&pwd="+pwd.value+"&code="+code.value);
         
         req.onreadystatechange=function(){
           //监听状态
           if(req.readyState==4&&req.status==200){
               alert( "11"+req.responseText);
              
            
                var obj=eval(req.responseText);
                 if(obj[0].code=="1000"){
                      //跳转页面
                       window.location.href="succeed.jsp";
                 }else{
                       alert(obj[0].msg);
                 } 
                 
           }
         
         }
      }
    </script>

这是我的js代码

LoginServlet.java

	public void doPost(HttpServletRequest req, HttpServletResponse resp)
			throws ServletException, IOException {
           req.setCharacterEncoding("utf-8");
          
	    //1.接收客户端发送过来的数据
		   String username=req.getParameter("username");
		   String pwd=req.getParameter("pwd");
		   String code=req.getParameter("code");
		   System.out.println("code"+code);
 
		//2.处理数据
		    HttpSession se=req.getSession(true);
		   //验证code是否正确
		    HashMap<String, String> map=new HashMap<String, String>();
		    ArrayList<HashMap<String, String>>rs=new ArrayList<HashMap<String,String>>();
		   
		    rs.add(map); 
		    
		    String codes=(String)se.getAttribute("code");
		    if(!codes.equalsIgnoreC