1、我们来看看后台操作的业务流程
每一层都按照上面的步骤来进行实现：
这里我们要使用commUtils.toBean把表单提交的参数封装成User对象，必须保证User对象中的字段和表单提交的字段的名称是一模一样的
<tr>
<td align="right">新密码:</td>
<td><input class="input" type="password" name="newpass" id="newpass" value=""/></td>
<td><label id="newpassError" class="error"></label></td>
</tr>
这里对应的是newpass，那么User对象的字段也必须是newpass
package com.weiyuan.goods.user.domian;
public class User {
private String uid; //主键
private String loginname;// 登陆名称
private String loginpass;// 登陆密码
private String email;//注册的邮箱
private String verifyCode; //验证码
private int status;//是否激活
private String activationCode;//激活码
//增加下面的几个字段
private String reloginpass; //确认密码
private String newpass;//修改密码对应的新密码
public int getStatus() {
return status;
}
public void setStatus(int status) {
this.status = status;
}
public String getReloginpass() {
return reloginpass;
}
public void setReloginpass(String reloginpass) {
this.reloginpass = reloginpass;
}
public String getNewpass() {
return newpass;
}
public void setNewpass(String newpass) {
this.newpass = newpass;
}
public String getUid() {
return uid;
}
public void setUid(String uid) {
this.uid = uid;
}
public String getLoginname() {
return loginname;
}
public void setLoginname(String loginname) {
this.loginname = loginname;
}
public String getLoginpass() {
return loginpass;
}
public void setLoginpass(String loginpass) {
this.loginpass = loginpass;
}
public String getEmail() {
return email;
}
public void setEmail(String email) {
this.email = email;
}
public String getVerifyCode() {
return verifyCode;
}
public void setVerifyCode(String verifyCode) {
this.verifyCode = verifyCode;
}
public String getActivationCode() {
return activationCode;
}
public void setActivationCode(String activationCode) {
this.activationCode = activationCode;
}
@Override
public String toString() {
return "User [uid=" + uid + ", loginname=" + loginname + ", loginpass="
+ loginpass + ", email=" + email + ", verifyCode=" + verifyCode
+ ", status=" + status + ", activationCode=" + activationCode
+ "]";
}
}
我们来看看dao层的代码：
package com.weiyuan.goods.user.dao; import java.sql.SQLException; import org.apache.commons.dbutils.handlers.BeanHandler; import org.apache.commons.dbutils.handlers.ScalarHandler; import com.weiyuan.goods.user.domian.User; import cn.itcast.jdbc.TxQueryRunner; public class UserDao { //操作数据库 private TxQueryRunner qr = new TxQueryRunner(); /*** * 查询用户名是否存在 * @throws SQLException */ public boolean ajaxValidateLoginName(String loginName) throws SQLException{ //获得满足记录的数目是对象，返回一个整数，整数是单行单列使用ScalarHandler String sql ="select count(*) from t_user where loginname=?"; Number num = (Number) qr.query(sql, new ScalarHandler(),loginName); int count = num.intValue(); if(count>0){ return true; } return false; } /*** * 查询邮箱是否存在 * @throws SQLException */ public boolean ajaxValidateEmail(String email) throws SQLException{ //获得满足记录的数目是对象，返回一个整数，整数是单行单列使用ScalarHandler String sql ="select count(*) from t_user where email=?"; Number num = (Number) qr.query(sql, new ScalarHandler(),email); int count = num.intValue(); System.out.println("count="+count); if(count>0){ return true; } return false; } /*** * 添加注册的用户 * @throws SQLException */ public void addUser(User user) throws SQLException{ //获得满足记录的数目是对象，返回一个整数，整数是单行单列使用ScalarHandler String sql ="insert into t_user values(?,?,?,?,?,?)"; System.out.println("user="+user.toString()); Object[] params = {user.getUid(),user.getLoginname(),user.getLoginpass(), user.getEmail(),user.getStatus(),user.getActivationCode()}; qr.update(sql, params); } /* * 通过激活码获得用户 * */ public User findUserByActivationCode(String activationCode) throws SQLException{ String sql = "select * from t_user where activationCode = ?"; return qr.query(sql, new BeanHandler<User>(User.class),activationCode); } /* * 设置用户的激活状态 * */ public void setUserActivationCode(String uuid,int status) throws SQLException{ String sql = "update t_user set status = ? where uid = ? "; qr.update(sql,status,uuid); } /* * 通过用户名和密码查找得到对应的用户 * */ public User findUserByLoginnameAndPass(String loginName,String pass) throws SQLException{ String sql = "select * from t_user where loginname = ? and loginpass = ?"; return qr.query(sql, new BeanHandler<User>(User.class),loginName,pass); } /* * 通过uid和登陆密码查找对应的用户 * **/ public Boolean findUserByUidAndLoginPass(String uid,String loginPass) throws SQLException{ String sql = "select count(*) from t_user where uid = ? and loginpass = ?"; Number num = (Number) qr.query(sql, new ScalarHandler(),uid,loginPass); if(num.intValue() > 0){ return true; }else{ return false; } } /*修改用户的密码*/ public void updateUserPassword(String uid,String newPass) throws SQLException{ String sql = "update t_user set loginpass = ? where uid = ?"; qr.update(sql,newPass,uid); } }
我们来看看业务层的代码：
package com.weiyuan.goods.user.service; import java.io.IOException; import java.sql.SQLException; import java.text.MessageFormat; import java.util.Properties; import javax.mail.MessagingException; import javax.mail.Session; import javax.management.RuntimeErrorException; import cn.itcast.commons.CommonUtils; import cn.itcast.mail.Mail; import cn.itcast.mail.MailUtils; import com.weiyuan.goods.user.dao.UserDao; import com.weiyuan.goods.user.domian.User; public class UserService { private UserDao dao = new UserDao(); public boolean ajaxValidateLoginName(String loginName) { try { return dao.ajaxValidateLoginName(loginName); } catch (SQLException e) { // TODO Auto-generated catch block throw new RuntimeException(e.getMessage()); } } public boolean ajaxValidateEmail(String email) { try { return dao.ajaxValidateEmail(email); } catch (SQLException e) { // TODO Auto-generated catch block throw new RuntimeException(e.getMessage()); } } //添加注册的用户 public void addUser(User user){ //添加用户的uuid user.setUid(CommonUtils.uuid()); //添加用户的激活码 String activationCode = CommonUtils.uuid()+CommonUtils.uuid(); user.setActivationCode(activationCode); //当前处于未激活的状态 user.setStatus(0);//0表示未激活 try { dao.addUser(user); } catch (SQLException e) { // TODO Auto-generated catch block throw new RuntimeException(e.getMessage()); } //向注册的用户发送邮件 //1读取配置文件 Properties properties = new Properties(); try { properties.load(this.getClass().getClassLoader().getResourceAsStream("email_template.properties")); } catch (IOException e1) { throw new RuntimeException(e1.getMessage()); } String host = properties.getProperty("host"); //qq邮箱发送邮件的地址，端口465或者587 //qq接受邮件服务器的地址是pop.qq.com，端口995 String username=properties.getProperty("username"); //登陆服务器的账号 String password=properties.getProperty("password");//这里不是客户端登陆的密码，而是授权密码一定要注意 Session session = MailUtils.createSession(host, username, password); //发送邮件 String from = properties.getProperty("from");//发件人 String to = user.getEmail();//收件人 String title = properties.getProperty("subject"); String content = properties.getProperty("content"); Object [] array = new Object[]{user.getActivationCode()}; //替换占位符 String formatContent = MessageFormat.format(content, user.getActivationCode());//替换占位符 System.out.println("email content is:"+content); Mail mail = new Mail(from,to,title,formatContent); try { MailUtils.send(session, mail); } catch (Exception e) { throw new RuntimeException(e.getMessage()); } } /*设置用户的激活状态*/ public void activation(String activationCode) throws Exception{ //1 、通过激活码查找对应的用户信息 try { User user = dao.findUserByActivationCode(activationCode); if(user == null){ throw new Exception("无效的激活码");//业务异常，业务失败 } if(user.getStatus()== 1){ throw new Exception("用户已经既激活，不要二次激活");//业务异常，业务失败 } dao.setUserActivationCode(user.getUid(), 1); //1表示激活 } catch (SQLException e) { // TODO Auto-generated catch block throw new RuntimeException(e.getMessage()); // 不是业务的异常吗，而是电脑环境系统数据库的异常，直接退出线程，无法进行业务的操作了 } } /* * 用户登录的业务操作,这里传递的参数是一个User对象 * */ public User login(User user){ try { return dao.findUserByLoginnameAndPass(user.getLoginname(),user.getLoginpass()); } catch (SQLException e) { throw new RuntimeException(e.getMessage()); } } /*修改用户的密码*/ public void updateUserPassword(String uid ,String oldPass,String newPass) throws Exception{ // 1、查找用户是否存在 try { Boolean flag = dao.findUserByUidAndLoginPass(uid, oldPass); if(!flag){ throw new Exception("输入的原始密码有误，请重新输入"); } // 2、修改用户的密码 dao.updateUserPassword(uid, newPass); } catch (SQLException e) { throw new RuntimeException(e.getMessage()); } } }
我们来看看用户控制层Servlet的代码
当用户点击
package com.weiyuan.goods.user.web.servlet; import java.io.IOException; import java.net.URLEncoder; import java.util.Map; import javax.servlet.ServletException; import javax.servlet.annotation.WebServlet; import javax.servlet.http.Cookie; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import org.apache.commons.collections.map.HashedMap; import com.weiyuan.goods.user.domian.User; import com.weiyuan.goods.user.service.UserService; import cn.itcast.commons.CommonUtils; import cn.itcast.servlet.BaseServlet; /** * Servlet implementation class UserServlet */ @WebServlet("/UserServlet") public class UserServlet extends BaseServlet{ private static final long serialVersionUID = 1L; private UserService service = new UserService(); /* * 用户注册页面使用ajax校验/* * 用户注册页面使用ajax校验用户名会调用该方法 * *会调用该方法 * */ public String validateLoginname(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { // TODO Auto-generated method stub //首先获得用户上传的用户名 String loginName = request.getParameter("loginname"); boolean flag = service.ajaxValidateLoginName(loginName); response.getWriter().print(flag); return null; } /* * 用户注册页面使用ajax校验邮箱会调用该方法 * */ public String validateEmail(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { // TODO Auto-generated method stub //获得用户上传的emai String email = request.getParameter("email"); System.out.println("validateEmail is called"+email); boolean flag = service.ajaxValidateEmail(email); response.getWriter().print(flag); return null; } /* * 用户修改密码页面使用ajax校验原始的密码是否正确 * */ public String validateLoginpass(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { // TODO Auto-generated method stub //获得用户上传的emai String loginpass = request.getParameter("loginpass"); boolean flag = service.ajaxValidateLoginPass(loginpass); response.getWriter().print(flag); return null; } /* * 用户注册页面使用ajax校验验证码会调用该方法 * */ public String validateVerifyCode(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { // TODO Auto-generated method stub //获得用户上传的verfycode String verifyCode = request.getParameter("verifyCode"); //获得session中保存的验证码 String sessionCode = (String) request.getSession().getAttribute("vCode"); //二者进行比较看是否相等 System.out.println("validateVerifyCode is called"+verifyCode+":"+sessionCode); boolean flag = sessionCode.equalsIgnoreCase(verifyCode); response.getWriter().print(flag); return null; } /* * 当用户从邮箱点击的激活的时候会调用该方法，并且把激活码传递过来 * * */ public String activation(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { // TODO Auto-generated method stub String activationCode = request.getParameter("activationCode"); System.out.println("email activationCode is :"+activationCode); try { service.activation(activationCode); //激活成功 request.setAttribute("code", "success"); //msg.jsp已经code的值来显示错误信息还是正确的信息 request.setAttribute("msg", "激活成功"); return "f:/jsps/msg.jsp"; } catch (Exception e) { //将业务操作的异常信息在msg.jsp中显示出来 String msg = e.getMessage(); request.setAttribute("code", "error"); //msg.jsp已经code的值来显示错误信息还是正确的信息 request.setAttribute("msg", msg); return "f:/jsps/msg.jsp"; } } /* * 当用户注册的时候会调用该方法 * * */ public String regist(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { // TODO Auto-generated method stub System.out.println("activation is called"); //1、将请求的参数封装成User对象 User user = CommonUtils.toBean(request.getParameterMap(), User.class); //2 、对传递过来的参数进行校验，把错误的信息封装到一个hashMap中 Map errors = validateParams(user, request); if(errors.size() > 0){//说明参数错误，跳转到注册界面提示用户输入的参数有误 request.setAttribute("errors", errors); request.setAttribute("user", user); return "f:/jsps/user/regist.jsp"; } service.addUser(user); request.setAttribute("code", "success"); request.setAttribute("msg", "用户注册成功，请马上到邮箱进行激活"); return "f:/jsps/msg.jsp"; } /* * 当用户登录的时候会调用该方法 * * */ public String login(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { // TODO Auto-generated method stub System.out.println("activation is called"); /*1、第一步将用户提交的参数封装成javabean对象 * *2、对提交的参数的进行合法性的校验 * *3、通过用户名和密码去查找得到user对象 *如果user对象为null，说明用户名和密码不正确，重定向到login.jsp提示用户名和密码错误 *如果user对象不为null，查看当前用户的激活状态，如果当前用户没有被激活，提示当前用户没有被激活，重定向到login.jsp提示 *如果user对象不为null，并且当前用户处于激活状态，把当前用户保存到session中，显示当前用户是谁 *为了实现页面自定功能，需要把用户名保存到cookie中，主要cookie不支持中文，需要对 *中文进行有效性的处理。 * * * * */ User formUser = CommonUtils.toBean(request.getParameterMap(), User.class); //对参数进行合法性的校验 //2 、对传递过来的参数进行校验，把错误的信息封装到一个hashMap中 Map errors = validateLoginParams(formUser, request); if(errors.size() > 0){//说明参数错误，跳转到注册界面提示用户输入的参数有误 request.setAttribute("errors", errors); request.setAttribute("user", formUser); return "f:/jsps/user/login.jsp"; } User user =service.login(formUser); //判断用户是否为null if(user == null){ request.setAttribute("msg", "输入的用户名和密码不正确"); request.setAttribute("user", formUser); return "f:/jsps/user/login.jsp"; }else{ if(0 == user.getStatus()){ //没有激活 request.setAttribute("msg", "当前用户没有激活，请先激活该用户"); request.setAttribute("user", formUser); return "f:/jsps/user/login.jsp"; } //说明用户登录成功 request.getSession().setAttribute("sessionUser", user); //将用户名保存到cookie中,因为cookie不支持中文使用URL进行编码 Cookie cookie = new Cookie("cookieLoginName", URLEncoder.encode(user.getLoginname(), "utf-8")); cookie.setMaxAge(60*60*24);//cookie的有效期是一天 //添加cookie对象,把cookier对象返回给浏览器 response.addCookie(cookie); //登录成功之后客户端使用redict重新登录到index.jsp主页面 return "r:/index.jsp"; } } public Map validateParams(User user,HttpServletRequest request){ Map<String, String> map = new HashedMap(); //校验用户名 String loginName = user.getLoginname(); if(loginName == null || loginName.isEmpty()){ map.put("loginname", "用户名不能为空"); } if(loginName.length() < 3 || loginName.length() > 20){ map.put("loginname", "用户名长度应该在3到20之间"); } //校验用户名是否注册 if(service.ajaxValidateLoginName(loginName)){ map.put("loginname", "用户名已经被注册"); } //检查登陆密码 String loginpass = user.getLoginpass(); if(loginpass == null || loginpass.isEmpty()){ map.put("loginpass", "登陆密码不能为空"); } if(loginpass.length() < 3 || loginpass.length() > 20){ map.put("loginname", "登陆密码的长度应该在3到20之间"); } //检查确认密码的信息 //检查登陆密码 String reloginpass = user.getReloginpass(); if(reloginpass == null || reloginpass.isEmpty()){ map.put("reloginpass", "登陆密码不能为空"); } if(reloginpass.length() < 3 || reloginpass.length() > 20){ map.put("reloginpass", "登陆密码的长度应该在3到20之间"); } if(!reloginpass.equalsIgnoreCase(loginpass)){ map.put("reloginpass", "两次输入的密码不一样"); } //检查邮箱 String email = user.getEmail(); if(email == null || email.isEmpty()){ map.put("email", "登陆邮箱不能为空"); } //检查邮箱的格式是否正确 if(!email.matches("^([a-zA-Z0-9_-])+@([a-zA-Z0-9_-])+((\.[a-zA-Z0-9_-]{2,3}){1,2})$")){ map.put("email", "邮箱格式不正确"); } //检查验证码是否相等 String verifyCode = user.getVerifyCode(); //获得session中保存的验证码 String sessionCode =(String) request.getSession().getAttribute("vCode"); if(!verifyCode.equalsIgnoreCase(sessionCode)){ map.put("verifyCode", "验证码不正确"); } return map; } public Map validateLoginParams(User user,HttpServletRequest request){ Map<String, String> map = new HashedMap(); //校验用户名 String loginName = user.getLoginname(); if(loginName == null || loginName.isEmpty()){ map.put("loginname", "用户名不能为空"); } if(loginName.length() < 3 || loginName.length() > 20){ map.put("loginname", "用户名长度应该在3到20之间"); } //检查验证码是否相等 String verifyCode = user.getVerifyCode(); //获得session中保存的验证码 String sessionCode =(String) request.getSession().getAttribute("vCode"); if(!verifyCode.equalsIgnoreCase(sessionCode)){ map.put("verifyCode", "验证码不正确"); } return map; } /* * 当用户修改密码的时候会调用该方法 * */ public String updatePassword(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { /*业务操作的流程 * 1、将请求的参数封装成javaBean对象 * 2、获得当前登录用户的uuid * 3、利用uuid和原始的密码去查找用户是否存在 * 3、利用uuid去修改新的密码 * * */ System.out.println("updatePassword is called"); User formUser = CommonUtils.toBean(request.getParameterMap(), User.class); //如果用户登录成功了，会在session中保存该用户 User loginUser = (User) request.getSession().getAttribute("sessionUser"); if(loginUser == null){//说明当前用户没有登录，到pwd.jsp显示异常信息 request.setAttribute("msg", "用户没有登录，请先登录在修改用户密码"); return "f:/jsps/user/login.jsp"; } try { service.updateUserPassword(loginUser.getUid(), loginUser.getLoginpass(), formUser.getNewpass()); //说明修改密码成功 request.setAttribute("code", "success"); request.setAttribute("msg", "用户修改密码成功，请重新登录"); return "f:/jsps/msg.jsp"; } catch (Exception e) { //修改密码失败 request.setAttribute("msg",e.getMessage()); return "f:/jsps/user/pwd.jsp"; } } }
因为登陆是到UserServlet的updatePassword中进行操作，所以需要在pwd.jsp页面配置
pwd.jsp的代码：
<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%> <%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <title>pwd.jsp</title> <meta http-equiv="pragma" content="no-cache"> <meta http-equiv="cache-control" content="no-cache"> <meta http-equiv="expires" content="0"> <meta http-equiv="keywords" content="keyword1,keyword2,keyword3"> <meta http-equiv="description" content="This is my page"> <!-- <link rel="stylesheet" type="text/css" href="styles.css"> --> <link rel="stylesheet" type="text/css" href="<c:url value='/css/css.css'/>"> <link rel="stylesheet" type="text/css" href="<c:url value='/jsps/css/user/pwd.css'/>"> <script type="text/javascript" src="<c:url value='/jquery/jquery-1.5.1.js'/>"></script> <%--引入pwd.js文件 --%> <script type="text/javascript" src="<c:url value='/jsps/js/user/pwd.js'/>"></script> <script src="<c:url value='/js/common.js'/>"></script> </head> <body> <div class="div0"> <span>修改密码</span> </div> <div class="div1"> <form action="<c:url value='/UserServlet'/>" method="post" target="_top"> <input type="hidden" name="method" value="updatePassword"/> <table> <tr> <td><label class="error">${msg }</label></td> <td colspan="2"> </td> </tr> <tr> <td align="right">原密码:</td> <td><input class="input" type="password" name="loginpass" id="loginpass" value=""/></td> <td><label id="loginpassError" class="error"></label></td> </tr> <tr> <td align="right">新密码:</td> <td><input class="input" type="password" name="newpass" id="newpass" value=""/></td> <td><label id="newpassError" class="error"></label></td> </tr> <tr> <td align="right">确认密码:</td> <td><input class="input" type="password" name="reloginpass" id="reloginpass" value=""/></td> <td><label id="reloginpassError" class="error"></label></td> </tr> <tr> <td align="right"></td> <td> <img id="vCode" src="/VerifyCodeServlet" border="1"/> <a href="javascript:changeVerifyCode();">看不清，换一张</a> </td> </tr> <tr> <td align="right">验证码:</td> <td> <input class="input" type="text" name="verifyCode" id="verifyCode" value=""/> </td> <td><label id="verifyCodeError" class="error"></label></td> </tr> <tr> <td align="right"></td> <td><input id="submit" type="submit" value="修改密码"/></td> </tr> </table> </form> </div> </body> </html>