[JavaWeb]9.smbms

项目搭建准备工作

1. 搭建一个maven web项目
2. 配置Tomcat
3. 测试项目是否能跑起来
4. 导入项目中会遇到的jar包

jsp,Servlet,Mysql驱动,jstl,standard…

5. 创建项目包结构

6.编写实体类

ORM映射：表-类映射

7.编写基础公共类

1）数据库配置文件

driver=com.mysql.jdbc.Driver
url=jdbc:mysql://localhost:3306?useUnicode=true&characterEncoding=utf-8
username=root
password=123456

2）编写数据库的公共类

package com.hui.dao;

import java.io.IOException;
import java.io.InputStream;
import java.sql.*;
import java.util.Properties;

//操作数据库的公共类
public class BaseDao {
    private static String driver;
    private static String url;
    private static String username;
    private static String password;

    //静态代码块，类加载的时候就会初始化
    static{
        Properties properties = new Properties();
        //通过类加载器读取相应的资源
        InputStream is = BaseDao.class.getClassLoader().getResourceAsStream("db.properties");

        try {
            properties.load(is);
        } catch (IOException e) {
            e.printStackTrace();
        }

        driver = properties.getProperty("driver");
        url = properties.getProperty("url");
        username = properties.getProperty("username");
        password = properties.getProperty("password");
    }

    //获取数据库的连接
    public static Connection getConnection(){
        Connection connection = null;
        try {
            Class.forName(driver);
            connection = DriverManager.getConnection(url, username, password);
        } catch (Exception e) {
            e.printStackTrace();
        }
        return connection;
    }

    //编写查询公共方法
    public static ResultSet executeQuery(Connection connection,String sql,Object[] params,ResultSet resultSet,PreparedStatement preparedStatement) throws SQLException {
        preparedStatement = connection.prepareStatement(sql);

        for (int i = 0; i < params.length; i++) {
            //setObject,占位符从1开始，但是我们的数组是从零开始的，我们需要加1
            preparedStatement.setObject(i+1,params[i]);
        }

        resultSet = preparedStatement.executeQuery();
        return resultSet;
    }

    //编写增删改查公共方法
    //编写查询公共类
    public static int executeUpdate(Connection connection,String sql,Object[] params,ResultSet resultSet,PreparedStatement preparedStatement) throws SQLException {
        preparedStatement = connection.prepareStatement(sql);

        for (int i = 0; i < params.length; i++) {
            //setObject,占位符从1开始，但是我们的数组是从零开始的，我们需要加1
            preparedStatement.setObject(i+1,params[i]);
        }

        int updateRows = preparedStatement.executeUpdate();
        return updateRows;
    }

    //释放资源
    public static boolean closeResource(Connection connection,PreparedStatement preparedStatement,ResultSet resultSet){
        boolean flag = true;

        if(resultSet!=null){
            try {
                resultSet.close();
                //GC回收
                resultSet = null;
            } catch (SQLException e) {
                e.printStackTrace();
                flag = false;
            }
        }

        if(preparedStatement!=null){
            try {
                preparedStatement.close();
                //GC回收
                preparedStatement = null;
            } catch (SQLException e) {
                e.printStackTrace();
                flag = false;
            }
        }

        if(connection!=null){
            try {
                connection.close();
                //GC回收
                connection = null;
            } catch (SQLException e) {
                e.printStackTrace();
                flag = false;
            }
        }
        return flag;
    }

}

3）编写字符编码过滤器

8.导入静态资源

登录功能实现

1.编写前端页面
2.设置首页

<!--    设置欢迎页面-->
    <welcome-file-list>
        <welcome-file>login.jsp</welcome-file>
    </welcome-file-list>

3.编写dao应用登录用户登录的接口

public interface UserDao {
    //得到登录的用户
    public User getLoginUser(Connection connection, String userCode) throws SQLException;
}

4.编写dao接口的实现类

public class UserDaoImpl implements UserDao{
    @Override
    public User getLoginUser(Connection connection, String userCode) throws SQLException {

        PreparedStatement pstm = null;
        ResultSet rs = null;
        User user = null;

        if(connection!=null){
            String sql = "select * from smbms_user where userCode=?";
            Object[] params = {userCode};

            rs = BaseDao.executeQuery(connection,pstm,rs,sql,params);

            if(rs.next()){
                user = new User();
                user.setId(rs.getInt("id"));
                user.setUserCode(rs.getString("userCode"));
                user.setUserName(rs.getString("userName"));
                user.setUserPassword(rs.getString("userPassword"));
                user.setGender(rs.getInt("gender"));
                user.setBirthday(rs.getDate("birthday"));
                user.setPhone(rs.getString("phone"));
                user.setAddress(rs.getString("address"));
                user.setUserRole(rs.getInt("userRole"));
                user.setCreatedBy(rs.getInt("createdBy"));
                user.setCreationDate(rs.getTimestamp("creationDate"));
                user.setModifyBy(rs.getInt("modifyBy"));
                user.setModifyDate(rs.getTimestamp("modifyDate"));

            }
            BaseDao.closeResource(null,pstm,rs);

        }
        return user;
    }
}

5.业务层接口

public interface UserService {
    //用户登录
    public User login(String userCode,String password);
}

6.业务层实现类

public class UserServiceImpl implements UserService{

    //业务层都会调用dao层
    private UserDao userDao;

    public UserServiceImpl(){
        userDao = new UserDaoImpl();
    }

    @Override
    public User login(String userCode, String password) {
        Connection connection = null;
        User user = null;

        try {
            connection = BaseDao.getConnection();
            user = userDao.getLoginUser(connection, userCode);
        } catch (SQLException e) {
            e.printStackTrace();
        } finally {
            BaseDao.closeResource(connection,null,null);
        }
        return user;

    }
    @Test
    public void test(){
        UserServiceImpl userService = new UserServiceImpl();
        User admin = userService.login("admin","1234567");;
        System.out.println(admin.getUserPassword());
    }
}

7.编写Servlet

public class LoginServlet extends HttpServlet {

    //Servlet:控制层调用业务层代码

    @Override
    protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {

        System.out.println("LoginServlet---start...");

        String userCode = req.getParameter("userCode");
        String userPassword = req.getParameter("userPassword");

        //和数据库中的密码进行对比，调用业务层
        UserService userService = new UserServiceImpl();

        //这里已经把登录的人查出来了
        User user = userService.login(userCode, userPassword);

        if(user!=null){

            //将用户的信息存到Session中
            req.getSession().setAttribute(Constant.USER_SESSION,user);

            //跳转到主页
            resp.sendRedirect("jsp/frame.jsp");
        } else {
            //转发回到登陆页面，并提示用户名密码错误
            req.setAttribute("error","用户名或者密码不正确");
            req.getRequestDispatcher("login.jsp").forward(req,resp);
        }

    }

    @Override
    protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        this.doGet(req, resp);
    }
}

8.注册Servlet

<!--    Servlet-->
    <servlet>
        <servlet-name>LoginServlet</servlet-name>
        <servlet-class>com.hui.servlet.user.LoginServlet</servlet-class>
    </servlet>
    <servlet-mapping>
        <servlet-name>LoginServlet</servlet-name>
        <url-pattern>/login.do</url-pattern>
    </servlet-mapping>

9.测试访问，确保以上功能成功！

登录功能优化

注销功能：
思路：移除Session，返回登陆页面

public class LogoutServlet extends HttpServlet {

    @Override
    protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {

        //移除用户的session
        req.getSession().removeAttribute(Constant.USER_SESSION);

        //返回登录页面
        resp.sendRedirect(req.getContextPath()+"/login.jsp");
    }

    @Override
    protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        this.doGet(req, resp);
    }
}

注册servlet

    <servlet>
        <servlet-name>LogoutServlet</servlet-name>
        <servlet-class>com.hui.servlet.user.LogoutServlet</servlet-class>
    </servlet>
    <servlet-mapping>
        <servlet-name>LogoutServlet</servlet-name>
        <url-pattern>/jsp/logout.do</url-pattern>
    </servlet-mapping>

登录拦截优化
编写一个过滤器，并注册

public class SysFilter implements Filter {
    @Override
    public void init(FilterConfig filterConfig) throws ServletException {

    }

    @Override
    public void doFilter(ServletRequest req, ServletResponse resp, FilterChain filterChain) throws IOException, ServletException {
        HttpServletRequest request = (HttpServletRequest) req;
        HttpServletResponse response = (HttpServletResponse) resp;

        //过滤器，从session中获取用户
        User user = (User) request.getSession().getAttribute(Constant.USER_SESSION);

        if(user==null){
            response.sendRedirect(((HttpServletRequest) req).getContextPath()+"/error.jsp");
        } else {
            filterChain.doFilter(req,resp);
        }

    }

    @Override
    public void destroy() {

    }
}

<!--    用户登录过滤器-->
    <filter>
        <filter-name>SysFilter</filter-name>
        <filter-class>com.hui.filter.SysFilter</filter-class>
    </filter>
    <filter-mapping>
        <filter-name>SysFilter</filter-name>
        <url-pattern>/jsp/*</url-pattern>
    </filter-mapping>

密码修改

1.导入前端素材
2.写项目建议从底层向上写

3.UserDao接口
4.UserDao接口实现类

    //修改当前用户密码
    @Override
    public int updatePwd(Connection connection, int id, String password) throws SQLException {
        PreparedStatement pstm = null;
        int execute = 0;
        if(connection!=null){
            String sql = "update smbms_user set userPassword = ? where id = ?";
            Object params[] = {password,id};
            execute = BaseDao.executeUpdate(connection, pstm, sql, params);
            BaseDao.closeResource(null,null,null);
        }
        return execute;
    }

5.UserService接口

public boolean updatePwd(int id, String pwd);

6.UserService实现类

    @Override
    public boolean updatePwd(int id, String pwd) {
        Connection connection = null;
        boolean flag = false;
        connection = BaseDao.getConnection();

        //修改密码
        try {
            if(userDao.updatePwd(connection,id,pwd)>0){
                flag = true;
            }
        } catch (SQLException e) {
            e.printStackTrace();
        } finally {
            BaseDao.closeResource(connection,null,null);
        }
        return flag;
    }

7.编写servlet（注意要实现servlet复用）

    public void update(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        //从Session里面拿id
        Object obj = req.getSession().getAttribute(Constant.USER_SESSION);
        String newpassword = req.getParameter("newpassword");

        boolean flag = false;

        if(obj!=null && !StringUtils.isNullOrEmpty(newpassword)){
            UserServiceImpl userService = new UserServiceImpl();
            flag = userService.updatePwd(((User)obj).getId(),newpassword);
            if(flag){
                req.setAttribute("message","修改密码成功，请退出使用新密码登录！");
                //移除当前session
                req.getSession().removeAttribute(Constant.USER_SESSION);
            } else{
                req.setAttribute("message","修改密码失败！");
            }
        } else {
            req.setAttribute("message","新密码有问题！");
        }

        req.getRequestDispatcher("pwdmodify.jsp").forward(req,resp);
    }

8.注册servlet

    <servlet>
        <servlet-name>UserServlet</servlet-name>
        <servlet-class>com.hui.servlet.user.UserServlet</servlet-class>
    </servlet>
    <servlet-mapping>
        <servlet-name>UserServlet</servlet-name>
        <url-pattern>/jsp/user.do</url-pattern>
    </servlet-mapping>

优化密码修改使用Ajax：
1.添加阿里巴巴的fastjson包，可以转换为json格式

    <!-- https://mvnrepository.com/artifact/com.alibaba/fastjson -->
    <dependency>
      <groupId>com.alibaba</groupId>
      <artifactId>fastjson</artifactId>
      <version>1.2.78</version>
    </dependency>

2.后台servlet代码实现

    //验证旧密码，session中有用户的密码
    public void pwdModify(HttpServletRequest req, HttpServletResponse resp){
        //从session中拿到id
        Object obj = req.getSession().getAttribute(Constant.USER_SESSION);
        String oldpassword = req.getParameter("oldpassword");

        HashMap<String, String> resultMap = new HashMap<>();


        if(obj==null){//session失效
            resultMap.put("result","sessionerror");
        } else if (StringUtils.isNullOrEmpty(oldpassword)){//输入密码为空
            resultMap.put("resule","error");
        } else {
            String userPassword = ((User)obj).getUserPassword();
            if(oldpassword.equals(userPassword)){
                resultMap.put("result","true");
            } else {
                resultMap.put("result","false");
            }
        }

        resp.setContentType("application/json");
        try {
            PrintWriter writer = resp.getWriter();
            //JSONArray 阿里巴巴JSON工具类。转换格式

            writer.write(JSONArray.toJSONString(resultMap));
            writer.flush();
            writer.close();
        } catch (IOException e) {
            e.printStackTrace();
        }


    }

效果：可以看到当旧密码输入正确时，会出现√符号

用户管理实现

思路：

1.导入分页的工具类
2.用户列表页面导入

1）获取用户数量
<1>UserDao

    //查询用户总数
    public int getUserCount(Connection connection,String userName,int userRole) throws SQLException;

<2>UserDaoImpl

    //查询用户数量（根据用户名或者用户角色）
    @Override
    public int getUserCount(Connection connection, String userName, int userRole) throws SQLException {
        PreparedStatement pstm = null;
        ResultSet rs = null;
        int count = 0;

        ArrayList<Object> list = new ArrayList<>();//存放参数

        if(connection!=null){
            StringBuffer sql = new StringBuffer();
            sql.append("select count(1) as count from smbms_user u,smbms_role r where u.userRole = r.id");

            if(!StringUtils.isNullOrEmpty(userName)){
                sql.append(" and u.userName like ?");
                list.add("'%"+userName+"%'");
            }

            if(userRole>0){
                sql.append(" and u.userRole  = ?");
                list.add(userRole);
            }

            Object[] objects = list.toArray();

            System.out.println("UserDaoImpl-->getUserCount:"+sql.toString());

            rs = BaseDao.executeQuery(connection, pstm, rs, sql.toString(), objects);

            if(rs.next()){
                count = rs.getInt("count"); //从结果集中获取最终数量
            }
            BaseDao.closeResource(null,pstm,rs);
        }
        return count;
    }

<3>UserService

    //查询记录数
    public int getUserCount(String userName,int userRole);

<4>UserServiceImpl

    @Override
    public int getUserCount(String userName, int userRole) {
        Connection connection = null;
        int count = 0;

        try {
            connection = BaseDao.getConnection();
            count = userDao.getUserCount(connection, userName, userRole);
        } catch (SQLException e) {
            e.printStackTrace();
        } finally {
            BaseDao.closeResource(connection,null,null);
        }
        return count;

    }

2)获取用户列表
<1>UserDao

    //通过条件查询userlist
    public List<User> getUserList(Connection connection,String userName,int userRole,int currentPageNo,int pageSize) throws SQLException;

<2>UserDaoImpl

    //通过条件查询userlist
    @Override
    public List<User> getUserList(Connection connection, String userName, int userRole, int currentPageNo, int pageSize) throws SQLException {
        PreparedStatement pstm = null;
        ResultSet rs = null;
        List<User> userList = new ArrayList<>();

        if(connection!=null) {
            StringBuffer sql = new StringBuffer();
            sql.append("select u.*,r.roleName as userRoleName from smbms_user u,smbms_role r where u.userRole = r.id");
            List<Object> list = new ArrayList<>();
            if (!StringUtils.isNullOrEmpty(userName)) {
                sql.append(" and u.userName like ?");
                list.add("'%" + userName + "%'");
            }

            if (userRole > 0) {
                sql.append(" and u.userRole  = ?");
                list.add(userRole);
            }

            sql.append(" order by creationDate DESC limit ?,?");
            currentPageNo = (currentPageNo - 1) * pageSize;
            list.add(currentPageNo);
            list.add(pageSize);

            Object[] params = list.toArray();
            System.out.println("UserDaoImpl-->getUserList:" + sql.toString());

            rs = BaseDao.executeQuery(connection, pstm, rs, sql.toString(), params);

            while (rs.next()) {
                User _user = new User();
                _user.setId(rs.getInt("id"));
                _user.setUserCode(rs.getString("userCode"));
                _user.setUserName(rs.getString("userName"));
                _user.setGender(rs.getInt("gender"));
                _user.setBirthday(rs.getDate("birthday"));
                _user.setPhone(rs.getString("phone"));
                _user.setUserRole(rs.getInt("userRole"));
                _user.setUserRoleName(rs.getString("userRoleName"));
                userList.add(_user);
            }
            BaseDao.closeResource(null, pstm, rs);
        }
        return userList;
    }

<3>UserService

    //根据条件查询用户列表
    public List<User> getUserList(String queryUserName,int queryUserRole,int currentPageNo,int pageSize);

<4>UserServiceImpl

    @Override
    public List<User> getUserList(String queryUserName, int queryUserRole, int currentPageNo, int pageSize) {
        Connection connection = null;
        List<User> userList = null;

        try {
            connection = BaseDao.getConnection();
            userList = userDao.getUserList(connection, queryUserName, queryUserRole, currentPageNo, pageSize);
        } catch (SQLException e) {
            e.printStackTrace();
        } finally {
            BaseDao.closeResource(connection,null,null);
        }
        return userList;

    }

3）获取角色操作

为了方便职责统一，可以把角色的操作单独放在一个包中，和POJO类一一对应

RoleDao

public interface RoleDao {
    //获取角色列表
    public List<Role> getRoleList(Connection connection) throws SQLException;
}

RoleDaoImpl

public class RoleDaoImpl implements RoleDao{

    //获取角色列表
    public List<Role> getRoleList(Connection connection) throws SQLException {

        PreparedStatement pstm = null;
        ResultSet resultSet = null;
        ArrayList<Role> roleList = new ArrayList<>();



        if(connection != null){
            String sql = "select * from smbms_role";

            Object[] params = {};
            resultSet = BaseDao.executeQuery(connection, pstm, resultSet, sql, params);

            while(resultSet.next()){
                Role role = new Role();

                role.setRoleName(resultSet.getString("roleName"));
                role.setId(resultSet.getInt("id"));
                role.setRoleCode(resultSet.getString("roleCode"));

                roleList.add(role);

            }
            BaseDao.closeResource(null,pstm,resultSet);
        }

        return roleList;

    }

}

RoleService

public interface RoleService {
    //获取角色列表
    public List<Role> getRoleList();
}

RoleServiceImpl

public class RoleServiceImpl implements RoleService {

    //引入dao
    private RoleDao roleDao;


    public RoleServiceImpl(){
        roleDao = new RoleDaoImpl();
    }

    //获取角色列表
    @Override
    public List<Role> getRoleList() {
        Connection connection = null;
        List<Role> roleList = null;

        try {

            connection = BaseDao.getConnection();
            roleList = roleDao.getRoleList(connection);

        } catch (SQLException e) {
            e.printStackTrace();
        } finally {
            BaseDao.closeResource(connection,null,null);
        }

        return roleList;
    }
}

4）用户显示的Servlet
1.获取用户前端的数据（查询）

2.判断请求是否需要执行，看参数的值判断

3.为了实现分页，需要计算出当前页面和总页面，页面大小。

4.用户列表展示

    //重点，难点
    public void query(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {

        //查询用户列表

        //从前端获取数据
        String queryUserName = req.getParameter("queryName");
        String queryUserRoleTemp = req.getParameter("queryUserRole");
        String pageIndex = req.getParameter("pageIndex");
        int queryUserRole = 0;
        
        //获取用户列表
        UserServiceImpl userService = new UserServiceImpl();
        List<User> userList = null;

        //获取角色列表
        RoleServiceImpl roleService = new RoleServiceImpl();
        List<Role> roleList = null;


        //第一次走这个请求，一定是第一页。页面大小固定的
        int pageSize = 5; //可以将这个写道配置页面里，方便修改
        int currentPageNo = 1;


        if(queryUserName == null){
            queryUserName = "";
        }

        if(queryUserRoleTemp != null && !queryUserRoleTemp.equals("")){
            queryUserRole = Integer.parseInt(queryUserRoleTemp);
        }
        
        if(pageIndex != null){
            currentPageNo = Integer.parseInt(pageIndex);
        }

        //获取用户总数
        int totalCount = userService.getUserCount(queryUserName, queryUserRole);

        //总页数支持
        PageSupport pageSupport = new PageSupport();
        pageSupport.setCurrentPageNo(currentPageNo);
        pageSupport.setPageSize(pageSize);
        pageSupport.setTotalPageCount(totalCount);

        int totalPageCount = ((int)(totalCount/pageSize)) + 1;

        //控制首页和尾页的范围
        if(currentPageNo<1){
            currentPageNo = 1;
        } else if(currentPageNo>totalPageCount){
            currentPageNo = totalPageCount;
        }

        //获取用户列表展示
        userList = userService.getUserList(queryUserName, queryUserRole, currentPageNo, pageSize);
        req.setAttribute("userList",userList);

        //获取角色列表展示
        roleList = roleService.getRoleList();
        req.setAttribute("roleList",roleList);

        req.setAttribute("totalCount",totalCount);
        req.setAttribute("currentPageNo",currentPageNo);
        req.setAttribute("totalPageCount",totalPageCount);
        req.setAttribute("queryUserName",queryUserName);
        req.setAttribute("queryUserRole",queryUserRole);

        //返回前端
        req.getRequestDispatcher("userlist.jsp").forward(req,resp);

    }