个人中心
gpt4 book ai didi

java - 使用 JSP 和 Servlet 进行密码验证

转载 作者：行者123 更新时间：2023-12-02 10:40:22 26 4
gpt4 key购买 nike

我有一个用户登录 Html 表单，我可以在其中获取用户的电子邮件和密码，并根据数据库检查它们。到目前为止，我有以下代码，但是当我提交表单时，它不会转到指定的 JSP 页面。我可以做些什么来改进我的代码以及当用户按下提交但仍停留在同一页面时如何生成错误消息？

提前谢谢您。

//SERVLET doPost方法

    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
String userinp = request.getParameter("userinp"); //hidden type in html sign up form
        HttpSession s = request.getSession();
        User u = new User();
        if(userinp.equals("signup")) {
            u.setName(request.getParameter("name"));
            u.setLname(request.getParameter("lname"));
            u.setEmail(request.getParameter("email"));
            u.setPassword(request.getParameter("password"));
            s.setAttribute("User", u);
            //Save to DB
            u = (User)s.getAttribute("User");
            s.invalidate();
            UserM ud = new UserM(); //class which contains CRUD methods
            ud.createTable();
            ud.insert(u);
            ServletContext ctx = request.getSession().getServletContext();
            forwardTo(ctx, request, response, "/Somepage.jsp");

        } else if(userinp.equals("login")) {
            String pass1 = request.getParameter("pass");
            String email = request.getParameter("useremail");
            Connection conn = null;
            PreparedStatement stm = null;
            try {
                conn = ConnectionConfiguration.getConnection();
                stm = conn.prepareStatement("SELECT password FROM users WHERE email = ?");
                stm.setString(4, email);
                ResultSet resultSet = stm.executeQuery();
                while(resultSet.next()) {
                    String pass2 = resultSet.getString("password");
                    if(pass1.equals(pass2)) {
                        ServletContext ctx = request.getSession().getServletContext();
                        forwardTo(ctx, request, response, "/Somepage.jsp");
                        } else {
                            //code to generate "Wrong Password" message
                        }
                    }
                } catch(Exception e) {
                    e.printStackTrace();
                } finally {
                    if(stm != null) {
                        try {
                            stm.close();
                        } catch (SQLException e) {
                            // TODO Auto-generated catch block
                            e.printStackTrace();
                        }
                    }
                    if(conn != null) {
                        try {
                            conn.close();
                        } catch (SQLException e) {
                            // TODO Auto-generated catch block
                            e.printStackTrace();
                        }
                    }
                }

        }
    }

//ForwardTo方法

public static void forwardTo(ServletContext ctx, HttpServletRequest req, HttpServletResponse resp, String dest)  throws ServletException
{
    RequestDispatcher rd = ctx.getRequestDispatcher(dest);
    try
    {
        rd.forward(req, resp);
    }
    catch(Throwable t)
    {
        t.printStackTrace();
        throw new ServletException(t);
    }
}

//HTML 表单

<html>
<head>
<meta charset="ISO-8859-1">
</head>
<body>
<form action = "UserServ" method="POST">
<h3>Enter the details below to Sign In</h3><br>
Email: <input type="text" name="useremail" required><br>
Password: <input type="password" name="pass" required><br>
<input type="submit" value="Sign In">
</form>
</body>
</html>

最佳答案

您的数据库准备语句中有错误:

  stm.setString(4, email);

这里的 4 应该是什么？ setString 的第一个参数对应于“?”在你准备好的声明中。 

   stm = conn.prepareStatement("SELECT password FROM users WHERE email = ?");

您只有 1 个问号，因此应该是:

   stm.setString(1, email);

What can I do to improve my code

将数据库逻辑与 servlet 分开。使用MVC pattern ，它会让您的生活更轻松。

and how can I just generate an error

您可以在 JSP 中使用 JSTL/EL 轻松实现此目的。在 servlet 中设置一个属性并将其转发到 jsp 页面。 JSTL will check如果该属性存在并显示相应的消息。

如果详细信息错误，您也可以将用户转发到特定页面，就像我在下面的示例中所示的那样。

更高级的方法是 implement AJAX ，这基本上是使用 javascript 对您的 servlet 进行异步调用，这样您就不必刷新页面。您可以使用它来检查详细信息是否正确。

message when the user presses submit but still stay on the same page?

你的意思是如果他们没有输入任何详细信息？您可以使用 javascript/jquery 来执行此操作。当文本字段为空时，可能会禁止提交 btn/form 提交。

下面是你的servlet代码，我压缩了你的数据库逻辑。这种方式更容易管理:

protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {

    String userinp = request.getParameter("userinp"); //hidden type in html sign up form
    HttpSession s = request.getSession();
    User u = new User();
    ServletContext ctx = s.getServletContext();
    //check for null first, because if userinp is empty, then you will get a NPE
    if(userinp != null && userinp.equals("signup")) {
        u.setName(request.getParameter("name"));
        u.setLname(request.getParameter("lname"));
        u.setEmail(request.getParameter("email"));
        u.setPassword(request.getParameter("password"));
        s.setAttribute("User", u);
        //Save to DB
        u = (User)s.getAttribute("User");
        s.invalidate();
        UserM ud = new UserM(); //class which contains CRUD methods
        ud.createTable(); //why are you creating a table for each user? (you need to create a table called 'users' and just insert the new user there.
        ud.insert(u);

        forwardTo(ctx, request, response, "/Somepage.jsp");

    } else if( userinp != null && userinp.equals("login")) { //you should separate the register and login logic (easier to maintain in two different servlets
        String pass1 = request.getParameter("pass");
        String email = request.getParameter("useremail");


        //so instead of getting the password from the database, you can check to see if the details exist instead and return a boolean. 
        if(validate(email,pass1)){

        forwardTo(ctx, request, response, "/Welcome.jsp"); //user is logged in

        }else{

        forwardTo(ctx, request, response, "/Error.jsp"); //user is not logged in, details do not match

        }

    }

}

验证方法:

//this should be in a different class. So it's easier to maintain and can be used elsewhere. It's bad practice to have database logic in your servlet. Because what if you want to use this in a different servlet or another part of your application? (you don't want to copy and pasta it everywhere do you?)

public static boolean validate(String email, String password){          
     boolean status = false;  
    PreparedStatement pst = null;  
    ResultSet rs = null;  
     //if you put your getConnection method as a try condition, it will automagically close the connection for you. 
    try(Connection conn= ConnectionConfiguration.getConnection()){

        pst = conn.prepareStatement("select * from users where email=? and password=?;");  
        pst.setString(1, email);   //1 here corresponds to the first '?' in preparedStatement
        pst.setString(2, password);  //2 corresponds to the second '?'
        rs = pst.executeQuery();  

        status = rs.next();  //if there are any results, then status is true. 
    } catch (SQLException e) {
        e.printStackTrace();
    }
    return status;  
}

如果您在任何地方遇到问题或其他问题，请告诉我，很乐意为您提供帮助。

关于java - 使用 JSP 和 Servlet 进行密码验证，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/52953903/

26 4 0
文章推荐： java - 初始化后向 Jtable 添加 header
文章推荐： vba - ClipboardFormat 值 44 和 50 的含义
文章推荐： vba - 是否有像 INDIRECT 这样的 Excel 公式可以从另一个工作簿中获取依赖下拉列表？
文章推荐： java - 使用 Java 8 Date/Time 类编写和测试便捷方法
行者123
个人简介

我是一名优秀的程序员,十分优秀！

滴滴打车优惠券免费领取
滴滴打车优惠券
全站热门文章
Copyright 2021 - 2024 cfsdn All Rights Reserved 蜀ICP备2022000587号
广告合作:1813099741@qq.com 6ren.com