java filter 登陆_JavaWeb Filter 实现登录注册过滤

0.环境准备

本文基于下文，使用 IDEA 调试：

1.项目修改

修改 login.jsp，使其能传递注册消息

请先登录

οnblur="if (this.value == '') {this.value = '用户名';}">

οnblur="if (this.value == '') {this.value = 'Password';}">

修改 login servlet, 使其能接收注册消息

先判断注册消息

再验证登录信息

成功登录后通过 session 将登录状态改为 true

验证失败发送提示消息，并跳转回 login.jsp 页面

protected void doPost(HttpServletRequest request, HttpServletResponse response)

throws ServletException, IOException {

// 设置编码格式，可以防止乱码出现

response.setContentType("text/html; charset=utf-8");

response.setCharacterEncoding("utf-8");

request.setCharacterEncoding("utf-8");

// 获取用户提交过来的用户名和密码，是通过表单中input的name属性获取的

String username = request.getParameter("username");

String password = request.getParameter("password");

String isSignUp = request.getParameter("isSignUp");

PrintWriter out = response.getWriter();

System.out.println(username + ": " + password + " isSignUp: " + isSignUp);

// 获取输出流，用户显示信息，也可以用转发或者重定向

PrintWriter pw = response.getWriter();

//注册验证

if ("注册".equals(isSignUp)) {

try {

JdbcOp jdbc = new JdbcOp();

jdbc.open("usersdb");

ResultSet rs = jdbc.executeQuery("select * from users");

while (rs.next()) {

String nm = rs.getString("name");

String pd = rs.getString("password");

System.out.println("username: " + nm + " password: " + pd);

if (nm.equals(username)) {

out.print("");

out.flush();

out.close();

}

}

//进行注册操作

int i = jdbc.executeUpdate("insert into users values('" + username + "','" + password + "')");

System.out.println(i);

if (i == 0) {

out.print("");

out.flush();

out.close();

} else {

out.print("");

out.flush();

out.close();

}

jdbc.close();

} catch (Exception e) {

e.printStackTrace();

}

} else {

//登录验证

try {

JdbcOp jdbc = new JdbcOp();

jdbc.open("usersdb");

ResultSet rs = jdbc.executeQuery("select * from users");

while (rs.next()) {

String nm = rs.getString("name");

String pd = rs.getString("password");

System.out.println("username: " + nm + " password: " + pd);

if (nm.equals(username) && pd.equals(password)) {

HttpSession session = request.getSession();

//将数据存储到session中

session.setAttribute("isLogin", "true");

session.setAttribute("username", username);

out.print("");

out.flush();

out.close();

}

}

jdbc.close();

} catch (Exception e) {

e.printStackTrace();

}

pw.write("login fail");

out.print("");

out.flush();

out.close();

}

}

3.创建 login filter 文件

过滤前先判断是否是需要放行的页面

然后判断登录状态，true 放行，false 强制跳转到 login.jsp

package login;

import javax.servlet.*;

import javax.servlet.annotation.WebFilter;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import javax.servlet.http.HttpSession;

import java.io.IOException;

import java.io.PrintWriter;

import java.net.URLEncoder;

@WebFilter(filterName = "LoginFilter", urlPatterns = "/*")

public class LoginFilter implements Filter {

/**

* 需要排除的页面

*/

private String excludedPages;

private String[] excludedPageArray = {"/index.jsp", "/login.jsp", "/login"};

public void destroy() {

}

public void doFilter(ServletRequest req, ServletResponse resp, FilterChain chain) throws ServletException, IOException {

HttpServletRequest request = (HttpServletRequest) req;

HttpServletResponse response = (HttpServletResponse) resp;

response.setCharacterEncoding("UTF-8");

response.setContentType("text/html;charset=UTF-8");

//使用request对象的getSession()获取session，如果session不存在则创建一个

HttpSession session = request.getSession();

//获取session的Id

String sessionId = session.getId();

//判断session是不是新创建的

if (session.isNew()) {

//将数据存储到session中

session.setAttribute("isLogin", "false");

response.getWriter().print("session generate successfully, the ID of session: " + sessionId);

} else {

response.getWriter().print("sever has existed the session, the ID of session: " + sessionId);

}

Object loginFlag = session.getAttribute("isLogin"); //("isLogin");

response.getWriter().print(" session.isLogin: " + loginFlag);

boolean isExcludedPage = false;

response.getWriter().print(" current.url=" + request.getServletPath()+" current.user="+session.getAttribute("username"));

for (

String page : excludedPageArray) {// 判断是否在过滤 url 之外

if (request.getServletPath().equals(page)) {

isExcludedPage = true;

break;

}

}

if (isExcludedPage) {// 在过滤 url 之外

chain.doFilter(request, response);

} else {

if (loginFlag == "false") {

//没有登录

PrintWriter out = response.getWriter();

out.print("");

out.flush();

out.close();

}

chain.doFilter(request, response);

}

}

public void init(FilterConfig config) throws ServletException {

}

}

4.调试

开启 filter 后，访问其他页面会被阻止并返回登录：

成功登录：

登录验证失败：

注册判断用户名是否被占用：

成功注册：

5.附

完整项目及其他相关资源下载：