1 <%@page import="sun.misc.BASE64Encoder"%>
2 <%@page import="java.util.Base64.Encoder"%>
3 <%@page import="java.security.MessageDigest"%>
4 <%@ page language="java" contentType="text/html; charset=UTF-8"
5 pageEncoding="UTF-8"%>
6 <%!
7 //定义MD5加密的KEY
8 public static final String KEY = "wooyoohoo@163.com";
9 %>
10 <%
11 //设置请求和响应的编码格式
12 request.setCharacterEncoding("utf-8");
13 response.setCharacterEncoding("utf-8");
14
15 //判断用户的行为
16 String action = request.getParameter("action");
17
18 System.out.println(action);
19
20 if("login".equals(action)){
21 //登录
22 String userName = request.getParameter("username");
23 String pwd = request.getParameter("password");
24 //获取有效时长
25 String time = request.getParameter("time");
26
27 if(userName!=null && !userName.isEmpty()){
28 MessageDigest digest = MessageDigest.getInstance("MD5");
29 //将用户名称+KEY进行MD5加密
30 String encodeStr = new BASE64Encoder().encode(digest.digest((userName+KEY).getBytes("utf-8")));
31 //保存用户名称
32 Cookie userNameCookie = new Cookie("username",userName);
33 Cookie encodeCookie = new Cookie("ssid",encodeStr);
34
35 //设置有效期
36 userNameCookie.setMaxAge(Integer.parseInt(time));
37 encodeCookie.setMaxAge(Integer.parseInt(time));
38
39 //设置Cookie
40 response.addCookie(userNameCookie);
41 response.addCookie(encodeCookie);
42
43 //重新访问该页面(添加参数System.currentTimeMillis()禁止浏览器缓存页面内容)------------->此处重新请求该页面是为了在一个页面中处理完毕所有逻辑
44 response.sendRedirect(request.getRequestURI()+"?"+System.currentTimeMillis());
45 return;
46 }
47 }else if("logout".equals(action)){
48 //退出[清除userNameCookie和encodeCookie]
49 Cookie userNameCookie = new Cookie("username","");
50 Cookie encodeCookie = new Cookie("ssid","");
51
52 userNameCookie.setMaxAge(0);
53 encodeCookie.setMaxAge(0);
54
55 response.addCookie(userNameCookie);
56 response.addCookie(encodeCookie);
57
58 //重新访问该页面(添加参数System.currentTimeMillis()禁止浏览器缓存页面内容)------------->此处重新请求该页面是为了在一个页面中处理完毕所有逻辑
59 response.sendRedirect(request.getRequestURI()+"?"+System.currentTimeMillis());
60 return;
61 }
62
63 String account = null;
64 String ssid = null;
65
66 boolean isLogin = false;
67
68 //获取Cookie信息
69 Cookie[] cookies = request.getCookies();
70 if(cookies!=null && cookies.length>0){
71 //判断用户信息
72 for(int i=0;i<cookies.length;i++){
73 if(cookies[i].getName().equals("username")){
74 //获取账号
75 account = cookies[i].getValue();
76 }else if(cookies[i].getName().equals("ssid")){
77 //获取账号和KEY加密后的字符串
78 ssid = cookies[i].getValue();
79 }
80 }
81 }
82
83 if(account!=null && ssid!=null){
84 System.out.println(account);
85 String getSSID = new BASE64Encoder().encode(MessageDigest.getInstance("MD5").digest((account+KEY).getBytes("utf-8")));
86 System.out.println(getSSID);
87 System.out.println(ssid);
88 if(getSSID.equals(ssid)){
89 isLogin = true;
90 }
91 }
92 %>
93 <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
94 <html>
95 <head>
96 <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
97 <title>利用Cookie实现永久登录</title>
98 </head>
99 <body>
100 <%
101 if(isLogin){
102 %>
103 <!-- 显示登陆后的信息 -->
104 <span>欢迎回来<% out.print(account);%></span><button onclick="javascript:{window.location.href='<%=request.getRequestURI()%>?action=logout'}">注销</button>
105 <%
106 }else{
107 %>
108 <!-- 显示登录界面进行登录操作 -->
109 <form action="<%=request.getRequestURI()%>?action=login" method="post">
110 账号: <input type="text" name="username"><br>
111 密码：<input type="password" name="password">
112 <br>
113 <input type="radio" value="<%=30*60 %>" name="time">30分钟有效<br>
114 <input type="radio" value="<%=7*24*60*60 %>" name="time">7天有效<br>
115 <input type="radio" value="<%=30*24*60*60 %>" name="time">30天有效<br>
116 <input type="submit" value="登录">
117 </form>
118 <%
119 }
120 %>
121 </body>
122 </html>
