Java实现的验证码（Verification Code）

最新推荐文章于 2024-04-27 10:33:44 发布

weixin_33974433

最新推荐文章于 2024-04-27 10:33:44 发布

阅读量1k

点赞数

文章标签： java python web.xml

原文链接：https://my.oschina.net/huangqiao/blog/160172

版权

2019独角兽企业重金招聘Python工程师标准>>>

<p>目前，不少网站为了防止用户利用机器人自动注册、登录、灌水，都采用了验证码技术。Java中可由以下代码生成验证码：</p> <p>编写一个Servlet，用于生成验证码图片： </p> <div style="padding-bottom: 0px; margin: 0px; padding-left: 0px; padding-right: 0px; display: inline; float: none; padding-top: 0px" id="scid:9D7513F9-C04C-4721-824A-2B34F0212519:084fea2b-ea79-4959-9a7c-42e2f8836033" class="wlWriterEditableSmartContent"><pre class="brush: java; gutter: true; first-line: 1; tab-size: 4; toolbar: true; width: 894px; height: 575px;" style=" width: 894px; height: 575px;overflow: auto;">package flybug.hq.vcode;

import java.awt.Color; import java.awt.Font; import java.awt.Graphics; import java.awt.image.BufferedImage; import java.io.IOException; import java.util.Random;

import javax.imageio.ImageIO; import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession;

public class GenImageServlet extends HttpServlet {

private static final long serialVersionUID = 1L;


public void doGet(HttpServletRequest request, HttpServletResponse response)
		throws ServletException, IOException {

	this.doPost(request, response);
}

 
public void doPost(HttpServletRequest request, HttpServletResponse response)
		throws ServletException, IOException {

	request.setCharacterEncoding(&quot;UTF-8&quot;);
	response.setContentType(&quot;image/jpeg&quot;);
	
	//创建图像
	int width = 80;
	int height = 40;
	
	BufferedImage image = new BufferedImage(width, height, BufferedImage.TYPE_INT_RGB);
	
	//创建图层，获得画笔
	Graphics g = image.getGraphics();
	//设置颜色
	g.setColor(Color.BLACK);
	//画出矩形
	g.fillRect(0, 0, width, height);
	//画出边框
	g.setColor(Color.WHITE);
	g.fillRect(1, 1, width-2, height-2);
	
	//填充字符
	String data = &quot;ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz1234567890&quot;;
	//设置字体
	g.setFont(new Font(&quot;宋体&quot;, Font.BOLD, 30));
	Random random = new Random();
	StringBuffer buff = new StringBuffer();
	//随机生成4个字符
	for (int i = 0; i &lt; 4; i++) {
		int index = random.nextInt(62);
		String str = data.substring(index, index + 1);
		g.setColor(new Color(random.nextInt(255), random.nextInt(255), random.nextInt(255)));
		g.drawString(str, 20 * i, 30);
		buff.append(str);
	}
	
	//将得到的字符串保存到session中
	HttpSession session = request.getSession();
	session.setAttribute(&quot;vCode&quot;, buff.toString());
	
	//画出10条干扰线
	for (int i = 0; i &lt; 10; i++) {
		g.setColor(new Color(random.nextInt(255), random.nextInt(255), random.nextInt(255)));
		g.drawLine(random.nextInt(width), random.nextInt(height), random.nextInt(width), random.nextInt(height));
	}
	
	g.dispose();
	
	ImageIO.write(image, &quot;jpg&quot;, response.getOutputStream());
	
	
	
	 
}

} </pre></div>

<p>编写一个jsp页面，用于显示该验证码： </p>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <base href="<%=basePath%>">

&lt;title&gt;My JSP 'index.jsp' starting page&lt;/title&gt;

 &lt;script type=&quot;text/javascript&quot;&gt;
	function _changeImage() {
		var url = document.getElementById(&quot;img&quot;);
		url.src = &quot;&lt;c:url value='/GenImageServlet' /&gt;&quot;;
	}
	
&lt;/script&gt;

</head>

<body> <form action="<c:url value='ValidateServlet' />" method="post"> <input type="text" name="vCode" /><img src="<c:url value='/GenImageServlet' />"> <a href="javascript:_changeImage();">看不清</a><br /> <input type="submit" value="提交" /> </form> </body>

</html> </pre></div>

<p>显示结果样例：</p>

<p>如上图，点击看不清，更换验证码。在上述jsp代码中的js脚本，图片请求的URL没有变，浏览器默认缓存的情况下，点击看不清，验证码刷新不了；为此可以添加一个过滤器，用于设置浏览器不缓存该图片，代码如下： </p>

import java.io.IOException;

import javax.servlet.Filter; import javax.servlet.FilterChain; import javax.servlet.FilterConfig; import javax.servlet.ServletException; import javax.servlet.ServletRequest; import javax.servlet.ServletResponse; import javax.servlet.http.HttpServletResponse;

public class CacheCtrlFilter implements Filter {

public void destroy() {

}

public void doFilter(ServletRequest req, ServletResponse resp,
		FilterChain chain) throws IOException, ServletException {
	//强转
	HttpServletResponse response = (HttpServletResponse)resp;
	//设置不缓存的响应头
	response.setHeader(&quot;expires&quot;, &quot;-1&quot;);
	response.setHeader(&quot;pragma&quot;, &quot;no-cache&quot;);
	response.setHeader(&quot;cache-control&quot;, &quot;no-cache, no-store,must-revalidate&quot;);

	//放行
	chain.doFilter(req, resp);

}

public void init(FilterConfig config) throws ServletException {

}

} </pre></div>

<p>在web.xml文件中配置：</p>

<filter> <filter-name>CacheCtrlFilter</filter-name> <filter-class>flybug.hq.vcode.CacheCtrlFilter</filter-class> </filter>

<filter-mapping> <filter-name>CacheCtrlFilter</filter-name> <url-pattern>/GenImageServlet</url-pattern> </filter-mapping> <servlet> <description> </description> <display-name> </display-name> <servlet-name>GenImageServlet</servlet-name> <servlet-class>flybug.hq.vcode.GenImageServlet</servlet-class> </servlet> <servlet> <description> </description> <display-name> </display-name> <servlet-name>ValidateServlet</servlet-name> <servlet-class>flybug.hq.vcode.ValidateServlet</servlet-class> </servlet>

<servlet-mapping> <servlet-name>GenImageServlet</servlet-name> <url-pattern>/GenImageServlet</url-pattern> </servlet-mapping> <servlet-mapping> <servlet-name>ValidateServlet</servlet-name> <url-pattern>/ValidateServlet</url-pattern> </servlet-mapping>

<welcome-file-list> <welcome-file>index.jsp</welcome-file> </welcome-file-list> </web-app> </pre></div>

<ul> <li>web.xml中还配置了用来验证输入的验证码是否正确的ValidateServlet，且每个验证码只能用一次，返回就应该失效： </li> </ul>

import java.io.IOException; import java.io.PrintWriter;

import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession;

public class ValidateServlet extends HttpServlet {

private static final long serialVersionUID = 1L;

public void doGet(HttpServletRequest request, HttpServletResponse response)
		throws ServletException, IOException {
	this.doPost(request, response);
	
}

public void doPost(HttpServletRequest request, HttpServletResponse response)
		throws ServletException, IOException {
	request.setCharacterEncoding(&quot;UTF-8&quot;);
	response.setContentType(&quot;text/html; charset=utf-8&quot;);
	PrintWriter out = response.getWriter();
	//获得用户填写的验证码
	String userVCode = request.getParameter(&quot;vCode&quot;);
	//获得session中验证码
	HttpSession session = request.getSession();
	String genVCode = (String)session.getAttribute(&quot;vCode&quot;);
	//判断是否相同
	if(genVCode != null) {
		if(genVCode.equalsIgnoreCase(userVCode)) {
			out.println(&quot;验证通过！&quot;);
		} else {
			out.println(&quot;验证码错误！&quot;);
		}
		//验证码只允许用一次
		session.removeAttribute(&quot;vCode&quot;);
		
	} else {
		out.println(&quot;验证码失效！&quot;);
	}

}

} </pre></div>

<blockquote> <p>注：该过滤器中设置的头信息在Firefox中有些问题，在网上查了很久也没有找到有效设置Firefox不缓存的头信息。若要达到更换验证码的效果，可以将js脚本改为：</p>

<div style="padding-bottom: 0px; margin: 0px; padding-left: 0px; padding-right: 0px; display: inline; float: none; padding-top: 0px" id="scid:9D7513F9-C04C-4721-824A-2B34F0212519:80641dd0-423b-4def-a994-3546477ef682" class="wlWriterEditableSmartContent"><pre class="brush: xml; gutter: true; first-line: 1; tab-size: 4; toolbar: true; width: 936px; height: 128px;" style=" width: 936px; height: 128px;overflow: auto;"> <script type="text/javascript"> function _changeImage() { var url = document.getElementById("img"); url.src = "<c:url value='/GenImageServlet' />?" + new Date().getMilliseconds(); } </script></pre></div>

<p>但这样做的话，可能会使浏览器缓存膨胀。菜鸟一枚，bug众多，努力，学习中……若有好的解决方法，欢迎指点！</p></blockquote>

转载于:https://my.oschina.net/huangqiao/blog/160172