验证码

为了防止某些用户使用软件进行登录和发布信息,很多网站在用户登录或者发布信息时,都要求用户输入验证码,验证码通常是以一幅图片的形式显示的,用户按照图片中显示的数字或字母依次输入,服务器端将对用户的输入和验证码进行比较,以判断用户是否经过校验.由于验证码是随机产生的,自动发布信息的软件无法知道每次产生的验证码,也就无法自动发布信息了.

1.引入以下类
package util;

import java.awt.Color;
import java.awt.Font;
import java.awt.Graphics2D;
import java.awt.image.BufferedImage;
import java.io.IOException;
import java.io.OutputStream;
import java.util.Random;
import javax.imageio.ImageIO;

public class RandomUtils {
private static Random random;
private static char[] c;//存放a-z,A-Z,0-9,62个字符,在随机生成key时使用
private static final int Length=62;//c[]的长度是62

static {
init();
}
private static void init() {
random=new Random(System.currentTimeMillis());

c=new char[Length];

int i=0;
for(char b='a';b<='z';b++) {
c[i++]=b;
}
for(char b='A';b<='Z';b++) {
c[i++]=b;
}
for(char b='0';b<='9';b++) {
c[i++]=b;
}
}
public static int nextInt() {
return random.nextInt();
}
public static int nextInt(int n) {
return random.nextInt(n);
}
/**
* 生成keyLength位随机字符串,字符串只包含a-z,A-Z,0-9
* @return
*/
public static String generateKey(int keyLength) {
StringBuffer buffer=new StringBuffer();
int index;
for(int i=0;i<keyLength;i++) {
index=random.nextInt(Length);
buffer.append(c[index]);
}
return buffer.toString();
}
/**
* 生成32位随机字符串,字符串只包含a-z,A-Z,0-9
* @return
*/
public static String generateKey() {
return generateKey(32);
}
/**
* 输出验证码图片
* @param os 输出流
* @param code 图片上的验证码
* @param width 图片宽度
* @param height 图片高度
* @throws IOException
*/
public static void generateVerifyCode(OutputStream os,String code,int width,int height) throws IOException {
BufferedImage buffImg=new BufferedImage(width,height,BufferedImage.TYPE_INT_BGR);
Graphics2D g=buffImg.createGraphics();

g.setColor(Color.WHITE);
g.fillRect(0,0,width,height);
Font f Font("Times New Roman",Font.PLAIN,18);
g.setFont(font);

g.setColor(Color.BLACK);
g.drawRect(0,0,width-1,height-1);

g.setColor(new Color(192,192,192));
int x,y,x1,y1;
for(int i=0;i<(width+height);i++) {
x=random.nextInt(width);
y=random.nextInt(height);
x1=random.nextInt(12);
y1=random.nextInt(12);
g.drawLine(x,y,x+x1,y+y1);
}

int red=0,green=0,blue=0;
for(int i=0,n=code.length();i<n;i++) {
red=random.nextInt(110);
green=random.nextInt(110);
blue=random.nextInt(110);

g.setColor(new Color(red,green,blue));
g.drawString(code.charAt(i)+"",13*i+6,16);
}

ImageIO.write(buffImg,"jpeg",os);
os.flush();
}
}


2.创建一Servlet,样例代码如下
package servlet;

import java.io.IOException;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import util.RandomUtils;

public class RandomCodeServlet extends HttpServlet {

public void doGet(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {

response.setHeader("Pragma","no-cache");
response.setHeader("Cache-Control","no-cache");
response.setDateHeader("Expries",0);
response.setContentType("image/jpeg");
String code=RandomUtils.generateKey(4); //生成4个随机字符
RandomUtils.generateVerifyCode(response.getOutputStream(),code,60,20); //生成验证码图片
//request.getSession().setAttribute("verifyCode",code);
response.getOutputStream().flush();
response.getOutputStream().close();
}
public void doPost(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
doGet(request,response);
}
}


该Servlet可以根据自己的业务需求变化而变化,例如将code设置到session中,待客户端提交时,到session中取出code,与客户端提交过来的验证码比较,如果相同,则继续其它业务逻辑,否则退出.

3.在web.xml里配制该Servlet
<servlet>
<servlet-name>RandomCodeServlet</servlet-name>
<servlet-class>servlet.RandomCodeServlet</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>RandomCodeServlet</servlet-name>
<url-pattern>/randomCode</url-pattern>
</servlet-mapping>


4.新建一HTML文件,在body标签中引入如下代码
<img src="randomCode" id="randomImage"/><a href="javascript:" οnclick='return switchImage();'>看不清,换一张!</a>
<script language='javascript'>
var imgCount=1;
function switchImage() {
var image=document.getElementById('randomImage');
image.src="randomCode?imgCount="+imgCount++;
return false;
}
</script>


这里的randomCode和web.xml的url-pattern设置是一样的,imgCount一定要加上,它不起什么业务逻辑作用,只是用于改变src属性的值,并告诉浏览器,该图片的src属性值变了,要浏览器去重新加载该图片,如果<img>的src属性没有变,浏览器是不会去重新加载该图片的.

5.启动服务器,浏览刚创建的HTML文件,OK了吧!