沉浸式求职学习
这章真的是干货!!!!!!!!
Filter(重点)
Filter:过滤器 ,用来过滤网站的数据;
- 处理中文乱码
- 登录验证….
Filter开发步骤:
-
导包
-
编写过滤器
1.中文乱码的过滤
<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
<parent>
<artifactId>JavaWeb-02-Servlet</artifactId>
<groupId>com.github</groupId>
<version>1.0-SNAPSHOT</version>
</parent>
<modelVersion>4.0.0</modelVersion>
<artifactId>Filer</artifactId>
<dependencies>
<!-- Servlet 依赖 -->
<dependency>
<groupId>javax.servlet</groupId>
<artifactId>servlet-api</artifactId>
<version>2.5</version>
</dependency>
<!-- JSP 依赖 -->
<dependency>
<groupId>javax.servlet.jsp</groupId>
<artifactId>javax.servlet.jsp-api</artifactId>
<version>2.3.3</version>
</dependency>
<!-- JSTL表达式的依赖-->
<dependency>
<groupId>javax.servlet.jsp.jstl</groupId>
<artifactId>jstl-api</artifactId>
<version>1.2</version>
</dependency>
<!-- standard标签库-->
<dependency>
<groupId>taglibs</groupId>
<artifactId>standard</artifactId>
<version>1.1.2</version>
</dependency>
<!-- 连接数据库-->
<dependency>
<groupId>mysql</groupId>
<artifactId>mysql-connector-java</artifactId>
<version>5.1.47</version>
</dependency>
</dependencies>
</project>
实现Filter接口,重写对应的方法即可;
package com.github.filter;
import javax.servlet.*;
import java.io.IOException;
public class CharacterEncodingFilter implements Filter {
/**
* 初始化:web服务器启动,就以及初始化了,随时等待过滤对象出现!
*/
public void init(FilterConfig filterConfig) {
System.out.println("CharacterEncodingFilter初始化");
}
/**
* Chain : 链
*
* 1. 过滤中的所有代码,在过滤特定请求的时候都会执行
* 2. 必须要让过滤器继续同行
* chain.doFilter(request,response);
*/
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
request.setCharacterEncoding("utf-8");
response.setCharacterEncoding("utf-8");
response.setContentType("text/html;charset=UTF-8");
System.out.println("CharacterEncodingFilter执行前....");
// 让我们的请求继续走,如果不写,程序到这里就被拦截停止!
chain.doFilter(request,response);
System.out.println("CharacterEncodingFilter执行后....");
}
/**
* 销毁:web服务器关闭的时候,过滤会销毁
*/
public void destroy() {
System.out.println("CharacterEncodingFilter销毁");
}
}
在web.xml中配置 Filter;
<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_4_0.xsd"
version="4.0">
<filter>
<filter-name>CharacterEncodingFilter</filter-name>
<filter-class>com.github.filter.CharacterEncodingFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>CharacterEncodingFilter</filter-name>
<!--只要是 /servlet的任何请求,会经过这个过滤器-->
<url-pattern>/servlet/*</url-pattern>
<!--<url-pattern>/*</url-pattern>-->
</filter-mapping>
</web-app>
所以最终结果是,如果你进去servlet/*下,就不会产生乱码,反之如果你进的是别的url(如show),就会产生乱码,这两个映射都是到同一个类中的~
2.用户登录
简化一下问题:
用户登录之后才能进入主页!用户注销后就不能进入主页了!(在这里用了过滤)
- 用户登录之后,向Sesson中放入用户的数据
- 进入主页的时候要判断用户是否已经登录;要求:在过滤器中实现!
- 因为:个人tomcat配置的为 /Filer 如下图:
LoginServlet.java:
package com.github.servlet;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
public class LoginServlet extends HttpServlet {
@Override
protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws IOException, ServletException {
super.doGet(req,resp);
}
@Override
protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
// 获取前端请求的参数
String username = req.getParameter("username");
// 登陆成功
if("admin".equals(username)){
req.getSession().setAttribute("USER_SESSION",req.getSession().getId());
resp.sendRedirect("/Filer/sys/success.jsp");
} else { // 登陆失败
resp.sendRedirect("/Filer/error.jsp");
}
}
}
LogoutServlet.java:
package com.github.servlet;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
public class LogoutServlet extends HttpServlet {
@Override
protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
Object user_session = req.getSession().getAttribute("USER_SESSION");
if(user_session!=null){
req.getSession().removeAttribute("USER_SESSION");
resp.sendRedirect("/Filer/Login.jsp");
} else {
resp.sendRedirect("/Filer/Login.jsp");
}
}
@Override
protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
super.doPost(req,resp);
}
}
Login.jsp:
<%@ page contentType="text/html;charset=UTF-8" %>
<html>
<head>
<title>Login</title>
</head>
<body>
<h1>登陆界面</h1>
<form action="/Filer/servlet/login" method="post">
<input type="text" name="username">
<input type="submit">
</form>
</body>
</html>
success.jsp
<%@ page contentType="text/html;charset=UTF-8" %>
<html>
<head>
<title>成功</title>
</head>
<body>
<%--<%--%>
<%-- Object userSession = request.getSession().getAttribute("USER_SESSION");--%>
<%-- if(userSession==null){--%>
<%-- response.sendRedirect("Filer/Login.jsp");--%>
<%-- }--%>
<%--%>--%>
<h1>主页</h1>
<p><a href="/Filer/servlet/logout">注销</a> </p>
</body>
</html>
error.jsp:
<%@ page contentType="text/html;charset=UTF-8" %>
<html>
<head>
<title>error</title>
</head>
<body>
<h1>错误</h1>
<h3>没有权限,用户名错误</h3>
<p> <a href="/Filer/Login.jsp">返回登录主页</a></p>
</body>
</html>
SysFilter.java:
package com.github.listener;
import com.github.Util.Constant;
import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
public class SysFilter implements Filter {
public void init(FilterConfig filterConfig) throws ServletException {
}
public void doFilter(ServletRequest req, ServletResponse resp, FilterChain chain) throws IOException, ServletException {
HttpServletRequest request = (HttpServletRequest) req;
HttpServletResponse response = (HttpServletResponse) resp;
if (request.getSession().getAttribute(Constant.USER_SESSION)==null){
response.sendRedirect("/Filer/error.jsp");
}
chain.doFilter(request,response);
}
public void destroy() {
}
}
web.xml:
<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-app_4_0.xsd"
version="4.0">
<servlet>
<servlet-name>LoginServlet</servlet-name>
<servlet-class>com.github.servlet.LoginServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>LoginServlet</servlet-name>
<url-pattern>/servlet/login</url-pattern>
</servlet-mapping>
<servlet>
<servlet-name>LogoutServlet</servlet-name>
<servlet-class>com.github.servlet.LogoutServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>LogoutServlet</servlet-name>
<url-pattern>/servlet/logout</url-pattern>
</servlet-mapping>
<filter>
<filter-name>SysFilter</filter-name>
<filter-class>com.github.listener.SysFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>SysFilter</filter-name>
<url-pattern>/sys/*</url-pattern>
</filter-mapping>
</web-app>
Constant.java:
package com.github.Util;
public class Constant {
public static String USER_SESSION="USER_SESSION";
}
我来解释一下运行的结构:
1.当你启动Tomcat后,进入第一个登录页面Login.jsp,这里有个表单,那么表单请求的url是servletlogin这个类,同时会提交一个用户名.
2.这个登陆类进去后先获取前端请求的参数,也就是username,然后,判断是否等于“admin”,如果是的话,给请求的session设置一个键值对,键是“USER_SESSION”,值是当前session的ID,而后重定向到success.jsp,如果不是重定向到error.jsp。
3.如果不成功,跳到error后,设置了一个href使得能够返回登录页(也就是Login),
4.如果成功,跳到success后,设置了注销这个herf,会跳到servletlogout,即注销类,这个类首先读取session中存的参数,然后判断读出来的session的属性USER_SESSION是否非空,如果非空或者空,就清除它,并且重定向到登录页面Login;
5.关键在这里,如果按照前四步操作,那么在我登录后注销,我回到登录页面后,在从url地址栏进入到success,会发现还是可以进去的,但是这不符合常理,因为我们已经注销的页面是无法在进入到【登陆成功并提示你是否注销的页面的】,而是应当如果在访问success.jsp,跳到error。
6.所以在xml中配置了一个过滤器,使得一旦注销后,又想直接访问success,就直接重定向到error.jsp