工具类：
package com.lhy.web.servlet; import java.awt.BasicStroke; import java.awt.Color; import java.awt.Font; import java.awt.Graphics2D; import java.awt.image.BufferedImage; import java.io.FileNotFoundException; import java.io.FileOutputStream; import java.io.IOException; import java.io.OutputStream; import java.util.Random; import javax.imageio.ImageIO; public class VerifyCode { private int w = 70;//图片长 private int h = 35;//图片宽 private Random r = new Random();//Random类 生成随机数 // 列举验证图片中验证码的字体类型 //{"宋体", "华文楷体", "黑体", "华文新魏", "华文隶书", "微软雅黑", "楷体_GB2312"} private String[] fontNames = {"宋体", "华文楷体", "黑体", "微软雅黑", "楷体_GB2312"}; // 验证码可选字符 private String codes="23456789abcdefghjkmnopqrstuvwxyzABCDEFGHJKMNPQRSTUVWXYZ"; // 背景色 private Color bgColor = new Color(255, 255, 255); // 验证码上的文本 private String text ; // 生成随机的颜色 private Color randomColor () { int red = r.nextInt(150); int green = r.nextInt(150); int blue = r.nextInt(150); return new Color(red, green, blue); } // 生成随机的字体 private Font randomFont () { int index = r.nextInt(fontNames.length); String fontName = fontNames[index];//生成随机的字体名称 int style = r.nextInt(4);//生成随机的样式, 0(无样式), 1(粗体), 2(斜体), 3(粗体+斜体) int size = r.nextInt(5) + 24; //生成随机字号, 24 ~ 28 return new Font(fontName, style, size); } // 画干扰线 private void drawLine (BufferedImage image) { int num = 3;//一共画3条 Graphics2D g2 = (Graphics2D)image.getGraphics(); for(int i = 0; i < num; i++) {//生成两个点的坐标，即4个值 int x1 = r.nextInt(w); int y1 = r.nextInt(h); int x2 = r.nextInt(w); int y2 = r.nextInt(h); g2.setStroke(new BasicStroke(1.5F)); g2.setColor(Color.BLUE); //干扰线是蓝色 g2.drawLine(x1, y1, x2, y2);//画线 } } // 随机生成一个字符 private char randomChar () { int index = r.nextInt(codes.length()); return codes.charAt(index); } // 创建BufferedImage private BufferedImage createImage () { //宽，高，图片的类型 BufferedImage image = new BufferedImage(w, h, BufferedImage.TYPE_INT_RGB); Graphics2D g2 = (Graphics2D)image.getGraphics(); g2.setColor(this.bgColor); g2.fillRect(0, 0, w, h); return image; } // 返回验证码图片上的文本 public String getText () { return text; } // 保存图片到指定的输出流 public static void output (BufferedImage image, OutputStream out) throws IOException { ImageIO.write(image, "JPEG", out); } // 调用这个方法得到验证码 public BufferedImage getImage () { BufferedImage image = createImage();//创建图片缓冲区 Graphics2D g2 = (Graphics2D)image.getGraphics();//得到绘制环境 StringBuilder sb = new StringBuilder();//用来装载生成的验证码文本 // 向图片中画4个字符 for(int i = 0; i < 4; i++) {//循环四次，每次生成一个字符 String s = randomChar() + "";//随机生成一个字母 sb.append(s); //把字母添加到sb中 float x = i * 1.0F * w / 4; //设置当前字符的x轴坐标 g2.setFont(randomFont()); //设置随机字体 g2.setColor(randomColor()); //设置随机颜色 g2.drawString(s, x, h-5); //画图 } this.text = sb.toString(); //把生成的字符串赋给了this.text drawLine(image); //添加干扰线 return image; } public static void main(String[] args) throws FileNotFoundException, IOException { VerifyCode vc = new VerifyCode();//创建VerifyCode类的对象 BufferedImage bi = vc.getImage();//调用getImge()方法获得一个BufferedImage对象 VerifyCode.output(bi, new FileOutputStream("C:/验证码3.jpg"));//调用静态方法output()方法将图片保存在文件输出流中 System.out.println(vc.getText());//在控制台上打印验证码的文本值 } }
VerifyCodeServlet：
package com.lhy.web.servlet; import java.awt.image.BufferedImage; import java.io.IOException; import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; public class VerifyCodeServlet extends HttpServlet { public void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { /* * 1. 生成图片 * 2. 保存图片上的文本到session域中 * 3. 把图片响应给客户端 */ VerifyCode vc = new VerifyCode(); BufferedImage image = vc.getImage(); request.getSession().setAttribute("session_vcode", vc.getText());//保存图片上的文本到session域 VerifyCode.output(image, response.getOutputStream()); } }
LoginServlet:
package com.lhy.web.servlet; import java.io.IOException; import javax.servlet.RequestDispatcher; import javax.servlet.ServletException; import javax.servlet.http.Cookie; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; public class LoginServlet extends HttpServlet { public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { /* * 校验验证码 * 1. 从session中获取正确的验证码 * 2. 从表单中获取用户填写的验证码 * 3. 进行比较！ * 4. 如果相同，向下运行，否则保存错误信息到request域，转发到login.jsp */ String sessionCode = (String) request.getSession().getAttribute("session_vcode"); String paramCode = request.getParameter("verifyCode"); if(!paramCode.equalsIgnoreCase(sessionCode)) { request.setAttribute("msg", "验证码错误！"); request.getRequestDispatcher("/login.jsp").forward(request, response); return; } /* * 1. 获取表单数据 */ // 处理中文问题 request.setCharacterEncoding("utf-8"); // 获取 String username = request.getParameter("username"); String password = request.getParameter("password"); /* * 2. 校验用户名和密码是否正确 */ if("itcast".equalsIgnoreCase(username)) {//登录成功 /* * 附加项：把用户名保存到cookie中，发送给客户端浏览器 * 当再次打开login.jsp时，login.jsp中会读取request中的cookie，把它显示到用户名文本框中 */ Cookie cookie = new Cookie("uname", username);//创建Cookie cookie.setMaxAge(60*60*24);//设置cookie命长为1天 response.addCookie(cookie);//保存cookie /* * 3. 如果成功 * > 保存用户信息到session中 * > 重定向到succ1.jsp */ HttpSession session = request.getSession();//获取session session.setAttribute("username", username);//向session域中保存用户名 response.sendRedirect("/Test/succ1.jsp"); } else {//登录失败 /* * 4. 如果失败 * > 保存错误信息到request域中 * > 转发到login.jsp */ request.setAttribute("msg", "用户名或密码错误!"); RequestDispatcher qr = request.getRequestDispatcher("/login.jsp");//得到转发器 qr.forward(request, response);//转发 } } }
login.jsp:
<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%> <% String path = request.getContextPath(); String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+path+"/"; %> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <base href="<%=basePath%>"> <title>My JSP 'login.jsp' starting page</title> <meta http-equiv="pragma" content="no-cache"> <meta http-equiv="cache-control" content="no-cache"> <meta http-equiv="expires" content="0"> <meta http-equiv="keywords" content="keyword1,keyword2,keyword3"> <meta http-equiv="description" content="This is my page"> <!-- <link rel="stylesheet" type="text/css" href="styles.css"> --> <script type="text/javascript"> function _change() { /* 1. 得到img元素 2. 修改其src */ var imgEle = document.getElementById("img"); imgEle.src = "<%=basePath%>servlet/VerifyCodeServlet?a=" + new Date().getTime(); } </script> </head> <body> <%-- 本页面提供登录表单，还要显示错误信息 --%> <h1>登录</h1> <% /* 读取名为uname的Cookie! 如果为空显示："" 如果不为空显示：Cookie的值 */ String uname = ""; Cookie[] cs = request.getCookies();//获取请求中所有的cookie if(cs != null) {// 如果存在cookie for(Cookie c : cs) {//循环遍历所有的cookie if("uname".equals(c.getName())) {//查找名为uname的cookie uname = c.getValue();//获取这个cookie的值，给uname这个变量 } } } %> <% String message = ""; String msg = (String)request.getAttribute("msg");//获取request域中的名为msg的属性 if(msg != null) { message = msg; } %> <font color="red"><b><%=message %> </b></font> <form action="servlet/LoginServlet" method="post"> <%-- 把cookie中的用户名显示到用户名文本框中 --%> 用户名：<input type="text" name="username" value="<%=uname%>"/><br/> 密 码：<input type="password" name="password"/><br/> 验证码：<input type="text" name="verifyCode" size="3"/> <img id="img" src="<%=basePath%>servlet/VerifyCodeServlet"/> <a href="javascript:_change()">换一张</a> <br/> <input type="submit" value="登录"/> </form> </body> </html>
loginsuccess：
<body> <h1>succ1</h1> <% String username = (String)session.getAttribute("username"); if(username == null) { /* 1. 向request域中保存错误信息，转发到login.jsp */ request.setAttribute("msg", "您还没有登录!请先登录!"); request.getRequestDispatcher("/login.jsp").forward(request, response); return; } %> 欢迎欢迎，热烈欢迎，欢迎<%=username %>领导指导工作！ </body> </html>
配置文件：
<servlet> <servlet-name>LoginServlet</servlet-name> <servlet-class>com.lhy.web.servlet.LoginServlet</servlet-class> </servlet> <servlet-mapping> <servlet-name>LoginServlet</servlet-name> <url-pattern>/servlet/LoginServlet</url-pattern> </servlet-mapping> <servlet> <servlet-name>VerifyCodeServlet</servlet-name> <servlet-class>com.lhy.web.servlet.VerifyCodeServlet</servlet-class> </servlet> <servlet-mapping> <servlet-name>VerifyCodeServlet</servlet-name> <url-pattern>/servlet/VerifyCodeServlet</url-pattern> </servlet-mapping>
建议：生成验证码的Servlet最好设置成不缓存，这样就不用再页面请求验证码图片的时候加上时间戳了，加上时间戳就是欺骗浏览器防止浏览器读取缓存里的验证码图片，而点击换一张后没反应。 这样的不是很好的一点就是，每次点击换一张，浏览器都会把新获取的图片缓存到本地，而在Servlet里设置不缓存，就不会缓存到本地了。