最近有点小累啊,上课平均一天6小时,再去修一修代码就没什么多的时间了。现在写我最近学习的成果:
想想最近软件工程老师留的题目,我还有一些重要的地方没有想清楚。题目是这样的:生成四则运算的题目,算术题目包括随机生成生成计算数字,随机的运算符,题目可以避免重复,可以定制打印方式、数量,但是要考虑是否带括号。最后一个要求让我有点纠结啊,我的方法是:考虑到随机生成n个数,可以最多有n-1个左括号的情况,再依次考虑右括号的具体位置,但是还有右括号的位置有些问题:若每次左括号都未生成,默认最后一次有左括号,这样的情况排除。其他情况并不好找到括号。所以我考虑分情况讨论:分为随机的参数不大于5和不大于10两种情况。分开讨论,但是这样到了输入输出还是很麻烦,所以写的我有点疲倦了,但是还是要写完应该在明后天。前两天把老师布置的JavaEE的作业搞得差不多了,自己主要使用的Servlet写的,同时把重要的知识点罗列了一下,大致如下: 1.servlet的开发方式有三种:同过servlet接口来开发;继承GenericServlet接口;主要是继承HttpServlet的方式。 2.开发HttpServlet的时候只需要重写doPost()和doGet()方法实现。get和post方法存在一定的区别。其中通常在doPost()中写this.doGet(res,req); 3.最后在web.xml中进行部署。注意一一对应和一些细节的地方。(我会在接下来的代码中去体现)。我按照老师的要求编写一个小的登录系统的实例来加深和巩固学习这个知识。
三个servelet之间的数据传输和数据显示。 Login.java(登录)->Logincl.java(验证登陆)->wel.java(欢迎界面)最后连接mysql数据库进行验证。在开始的时候我选用sendRedirect()提交,但是发现在跳转到另一个界面的时候会在跳转的地址后面加上相应的跳转的信息,用户的信息容易泄漏。后来选用session进行数据的交互。以下:是我学习的笔记。通过sendRedirect(url?uname=..)传递数据
1.url 代表要跳转的servlet的url
2.servelet url名和变量之间有?符号
3.要传两个以上的值要用“&”分开4.传送过程时的中文要改编码方式
而通过使用session来共享数据: 1.得到sessionHttpsession hs=resquest.getSession(true);
2.向session添加属性 hs.setAttibute(String name,Object val); 3.从session得到某一个属性 String name=hs.getAttibute 4.session中删除某个属性 hs.removeAttibute(String name);注意:session中的属性存在时间是30min(是间隔时间)session可以看成一个数据表格 session中的各个属性都要占用服务器内存。Login.java
1 package com.ly; 2 3 import java.io.IOException; 4 import java.io.PrintWriter; 5 6 import javax.servlet.ServletException; 7 import javax.servlet.http.HttpServlet; 8 import javax.servlet.http.HttpServletRequest; 9 import javax.servlet.http.HttpServletResponse; 10 11 public class Login extends HttpServlet { 12 13 /** 14 * 15 */ 16 private static final long serialVersionUID = 1L; 17 18 /** 19 * Constructor of the object. 20 */ 21 public Login() { 22 super(); 23 } 24 25 /** 26 * Destruction of the servlet. 27 */ 28 public void destroy() { 29 super.destroy(); // Just puts "destroy" string in log 30 // Put your code here 31 } 32 33 /** 34 * The doGet method of the servlet. 35 * 36 * This method is called when a form has its tag value method equals to get. 37 * 38 * @param request the request send by the client to the server 39 * @param response the response send by the server to the client 40 * @throws ServletException if an error occurred 41 * @throws IOException if an error occurred 42 */ 43 public void doGet(HttpServletRequest request, HttpServletResponse response) 44 throws ServletException, IOException { 45 46 //业务逻辑 47 try{ 48 49 //中文乱码 50 response.setContentType("text/html;charset=gbk"); 51 52 PrintWriter pw=response.getWriter(); //字符流用来向jsp界面输出字符串 53 54 //返回登录界面 55 pw.println(""); 56 pw.println(""); 57 pw.println(""); 71 pw.println(""); 72 pw.println(""); 73 74 }catch(Exception ex) 75 { 76 ex.printStackTrace(); 77 } 78 } 79 80 /** 81 * The doPost method of the servlet. 82 * 83 * This method is called when a form has its tag value method equals to post. 84 * 85 * @param request the request send by the client to the server 86 * @param response the response send by the server to the client 87 * @throws ServletException if an error occurred 88 * @throws IOException if an error occurred 89 */ 90 public void doPost(HttpServletRequest request, HttpServletResponse response) 91 throws ServletException, IOException { 92 93 this.doGet(request, response); 94 } 95 96 /** 97 * Initialization of the servlet. 98 * 99 * @throws ServletException if an error occurs100 */101 public void init() throws ServletException {102 // Put your code here103 }104 105 }登录界面
"); 58 59 //判断用户名是否为空 60 String info=request.getParameter("info"); 61 if(info!=null) 62 { 63 pw.println("你的用户名为空!
"); 64 } 65 pw.println("
Logincl.java
1 package com.ly; 2 3 import java.io.IOException; 4 5 import javax.servlet.ServletException; 6 import javax.servlet.http.HttpServlet; 7 import javax.servlet.http.HttpServletRequest; 8 import javax.servlet.http.HttpServletResponse; 9 import javax.servlet.http.HttpSession; 10 import java.sql.*; 11 12 public class Logincl extends HttpServlet { 13 14 /** 15 * 16 */ 17 private static final long serialVersionUID = 1L; 18 19 /** 20 * Constructor of the object. 21 */ 22 public Logincl() { 23 super(); 24 } 25 26 /** 27 * Destruction of the servlet. 28 */ 29 public void destroy() { 30 super.destroy(); // Just puts "destroy" string in log 31 // Put your code here 32 } 33 34 /** 35 * The doGet method of the servlet. 36 * 37 * This method is called when a form has its tag value method equals to get. 38 * 39 * @param request the request send by the client to the server 40 * @param response the response send by the server to the client 41 * @throws ServletException if an error occurred 42 * @throws IOException if an error occurred 43 */ 44 public void doGet(HttpServletRequest request, HttpServletResponse response) 45 throws ServletException, IOException { 46 47 response.setContentType("text/html;charset=gbk"); 48 49 //驱动名 50 String driver="com.mysql.jdbc.Driver"; 51 //数据库的URL 52 String url="jdbc:mysql://127.0.0.1:3306/lydb"; 53 //mysql的用户名和密码 54 String user="root"; 55 String password="123"; 56 57 Connection conn=null; 58 Statement statement=null; 59 ResultSet rs=null; 60 //PrintWriter pw=response.getWriter(); //字符流用来向jsp界面输出字符串 61 try{ 62 63 //接受用户名和密码 64 String u=request.getParameter("usrename"); 65 String p=request.getParameter("passwd"); 66 String e=request.getParameter("sex"); 67 68 //加载驱动 69 Class.forName(driver); 70 71 //连接数据库 72 conn=DriverManager.getConnection(url, user, password); 73 74 if(!conn.isClosed()) 75 System.out.println("Successed connection to the Database!"); 76 77 //创建statement 来执行SQL语句 78 statement=conn.createStatement(); 79 //结果集(解决sql漏洞) 80 String sql="select passwd from users where username='"+u+"'"; 81 rs=statement.executeQuery(sql); 82 83 84 85 if(rs.next()) 86 { 87 //用户存在 88 String dbPasswd=rs.getString(1); 89 90 if(dbPasswd.equals(p)) 91 { 92 //合法用户 跳转 93 94 //将用户名和密码的信息写入session 95 //得到session 96 97 HttpSession hs=request.getSession(true); 98 //修改session的存在时间(s为单位) 99 hs.setMaxInactiveInterval(20);100 hs.setAttribute("uname",u);101 hs.setAttribute("uPass", p);102 hs.setAttribute("uSex", e);103 response.sendRedirect("wel"); //serverlet的URL 104 105 }106 }107 else108 {109 //说明用户名不存在110 response.sendRedirect("Login");111 }112 113 }catch(Exception ex)114 {115 116 ex.printStackTrace();117 }finally118 {119 try {120 if(rs!=null)121 rs.close();122 if(statement!=null)123 statement.close();124 if(conn!=null)125 conn.close();126 } catch (Exception e) {127 // TODO Auto-generated catch block128 e.printStackTrace();129 }130 }131 String username=null;132 String passwd=null;133 String mail=null;134 String grade=null;135 String u=request.getParameter("usrename");136 String sql="select * from users where username='"+u+"'";137 try {138 username=rs.getString("username");139 System.out.println(username);140 } catch (SQLException e) {141 // TODO Auto-generated catch block142 e.printStackTrace();143 144 }145 }146 147 /**148 * The doPost method of the servlet. 149 *150 * This method is called when a form has its tag value method equals to post.151 * 152 * @param request the request send by the client to the server153 * @param response the response send by the server to the client154 * @throws ServletException if an error occurred155 * @throws IOException if an error occurred156 */157 public void doPost(HttpServletRequest request, HttpServletResponse response)158 throws ServletException, IOException {159 160 this.doGet(request, response);161 }162 163 /**164 * Initialization of the servlet. 165 *166 * @throws ServletException if an error occurs167 */168 public void init() throws ServletException {169 // Put your code here170 }171 172 }
wel.java
1 package com.ly; 2 3 import java.io.IOException; 4 import java.io.PrintWriter; 5 6 import javax.servlet.ServletException; 7 import javax.servlet.http.HttpServlet; 8 import javax.servlet.http.HttpServletRequest; 9 import javax.servlet.http.HttpServletResponse; 10 import javax.servlet.http.HttpSession; 11 12 public class Wel extends HttpServlet { 13 14 /** 15 * 16 */ 17 private static final long serialVersionUID = 1L; 18 19 /** 20 * Constructor of the object. 21 */ 22 public Wel() { 23 super(); 24 } 25 26 /** 27 * Destruction of the servlet. 28 */ 29 public void destroy() { 30 super.destroy(); // Just puts "destroy" string in log 31 // Put your code here 32 } 33 34 /** 35 * The doGet method of the servlet. 36 * 37 * This method is called when a form has its tag value method equals to get. 38 * 39 * @param request the request send by the client to the server 40 * @param response the response send by the server to the client 41 * @throws ServletException if an error occurred 42 * @throws IOException if an error occurred 43 */ 44 public void doGet(HttpServletRequest request, HttpServletResponse response) 45 throws ServletException, IOException { 46 47 48 //得到session 49 HttpSession hs=request.getSession(true); 50 String u=(String) hs.getAttribute("uname"); 51 String p=(String) hs.getAttribute("uPass"); 52 String e=(String) hs.getAttribute("uSex"); 53 if(u==null) 54 { 55 56 try { 57 //PrintWriter pw=response.getWriter(); 58 //非法登陆 59 //pw.write(""); 60 response.sendRedirect("Login?info=error"); 61 return ; 62 } catch (Exception ex) { 63 // TODO: handle exception 64 ex.printStackTrace(); 65 } 66 67 } 68 //得到logincl传递的用户名 69 //String u=request.getParameter("uname"); 70 71 //得到密码 72 //String p=request.getParameter("uPass"); 73 74 //得到性别 75 //String e=request.getParameter("uSex"); 76 try{ 77 // response.setContentType("text/html;charset=gbk"); 78 PrintWriter out = response.getWriter(); 79 out.println("Hello!!!"+u+" password="+p+"Sex="+e); 80 } 81 catch(Exception ex) 82 { 83 ex.printStackTrace(); 84 } 85 } 86 87 /** 88 * The doPost method of the servlet. 89 * 90 * This method is called when a form has its tag value method equals to post. 91 * 92 * @param request the request send by the client to the server 93 * @param response the response send by the server to the client 94 * @throws ServletException if an error occurred 95 * @throws IOException if an error occurred 96 */ 97 public void doPost(HttpServletRequest request, HttpServletResponse response) 98 throws ServletException, IOException { 99 100 this.doGet(request, response);101 }102 103 /**104 * Initialization of the servlet. 105 *106 * @throws ServletException if an error occurs107 */108 public void init() throws ServletException {109 // Put your code here110 }111 112 }
web.xml
1 27 8 13 14This is the description of my J2EE component 9This is the display name of my J2EE component 10Login 11com.ly.Login 1215 18 19Login 16/Login 1720 25 26This is the description of my J2EE component 21This is the display name of my J2EE component 22Logincl 23com.ly.Logincl 2427 30 31Logincl 28/logincl 2932 37 38This is the description of my J2EE component 33This is the display name of my J2EE component 34Wel 35com.ly.Wel 3639 42 43Wel 40/wel 4144 46index.jsp 45
还有其中设计了数据登录是的注入漏洞的知识(明天补上)