此係列博文基於同一個項目已上傳至github 傳送門javascript
JavaWeb_(Struts2框架)Struts建立Action的三種方式 傳送門css
JavaWeb_(Struts2框架)struts.xml核心配置、動態方法調用、結果集的處理 傳送門html
JavaWeb_(Struts2框架)Log4j的配置以及解決中文亂碼 傳送門java
JavaWeb_(Struts2框架)參數傳遞之接收參數與傳遞參數 傳送門git
JavaWeb_(Struts2框架)Ognl小案例查詢帖子 傳送門github
JavaWeb_(Struts2框架)Action中struts-default下result的各類轉發類型 傳送門web
JavaWeb_(Struts2框架)攔截器interceptor 傳送門apache
1、接收參數安全
第一種方法session
【經常使用】一、繼承implements ModelDriven<User>
public class UserAction extends ActionSupport implements ModelDriven<User>{
二、建立一個對象,不要加get()和set()方法
public User user = new User();
三、實現getModel()方法
@Override public User getModel() { // TODO Auto-generated method stub return user; }
package com.Gary.web; import org.apache.struts2.ServletActionContext; import com.Gary.domain.User; import com.Gary.service.UserService; import com.opensymphony.xwork2.ActionSupport; import com.opensymphony.xwork2.ModelDriven; public class UserAction extends ActionSupport implements ModelDriven<User>{ public User user = new User(); public String login() throws Exception { System.out.println("login()方法"); System.out.println(user.getUsername()); UserService userService = new UserService(); boolean success = userService.findUser(user); if(success) { return "success"; }else{ ServletActionContext.getRequest().setAttribute("error", "用戶名或密碼錯誤!!!"); return "error"; } } //註冊 public String register() throws Exception { System.err.println("register()方法"); return null; } //kill方法 public String kill() throws Exception { System.err.println("kill()方法"); return null; } @Override public User getModel() { // TODO Auto-generated method stub return user; } }
第二種方法
一、添加屬性驅動
//添加屬性驅動 public String username; public String password; public String getUsername() { return username; } public void setUsername(String username) { this.username = username; } public String getPassword() { return password; } public void setPassword(String password) { this.password = password; }
package com.Gary.web; import org.apache.struts2.ServletActionContext; import com.Gary.domain.User; import com.Gary.service.UserService; import com.opensymphony.xwork2.ActionSupport; import com.opensymphony.xwork2.ModelDriven; public class UserAction extends ActionSupport{ //public User user = new User(); //添加屬性驅動 public String username; public String password; public String getUsername() { return username; } public void setUsername(String username) { this.username = username; } public String getPassword() { return password; } public void setPassword(String password) { this.password = password; } public String login() throws Exception { System.out.println("login()方法"); System.out.println(username+":"+ password); User user = new User(); user.setUsername(username); user.setPassword(password); UserService userService = new UserService(); boolean success = userService.findUser(user); if(success) { return "success"; }else{ ServletActionContext.getRequest().setAttribute("error", "用戶名或密碼錯誤!!!"); return "error"; } } //註冊 public String register() throws Exception { System.err.println("register()方法"); return null; } //kill方法 public String kill() throws Exception { System.err.println("kill()方法"); return null; } }
第三種方法
在login.jsp中修改登錄和註冊標籤框
<label for="username" class="username_label"> 用 戶 名 <input maxlength="20" name="user.username" type="text" placeholder="您的用戶名和登陸名" /> </label>
<label for="username" class="other_label"> 設 置 密 碼 <input maxlength="20" type="password" name="user.password" placeholder="建議至少使用兩種字符組合" /> </label>
UserAction.java中直接經過user.getUsername()和user.setUsername()直接獲得前臺獲取到的值
public User user; public User getUser() { return user; } public void setUser(User user) { this.user = user; } public String login() throws Exception { System.out.println("login()方法"); System.out.println(user.getUsername()+":"+ user.getPassword()); UserService userService = new UserService(); boolean success = userService.findUser(user); if(success) { return "success"; }else{ ServletActionContext.getRequest().setAttribute("error", "用戶名或密碼錯誤!!!"); return "error"; } }
<%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%> <!DOCTYPE html> <html> <head> <meta charset="UTF-8"> <link rel="stylesheet" href="css/head.css" /> <link rel="stylesheet" type="text/css" href="css/login.css" /> </head> <body> <div class="dvhead"> <div class="dvlogo"> <a href="index.html">你問我答</a> </div> <div class="dvsearch">10秒鐘註冊帳號,找到你的同窗</div> <div class="dvreg"> 已有帳號,當即 <a href="login.html">登陸</a> </div> </div> <section class="sec"> <form action="${pageContext.request.contextPath }/LoginAction_login" method="post"> <div class="register-box"> <label for="username" class="username_label"> 用 戶 名 <input maxlength="20" name="user.username" type="text" placeholder="您的用戶名和登陸名" /> </label> <div class="tips"></div> </div> <div class="register-box"> <label for="username" class="other_label"> 設 置 密 碼 <input maxlength="20" type="password" name="user.password" placeholder="建議至少使用兩種字符組合" /> </label> <div class="tips"></div> </div> <div class="arguement"> <input type="checkbox" id="xieyi" /> 閱讀並贊成 <a href="javascript:void(0)">《你問我答用戶註冊協議》</a> <a href="register.html">沒有帳號,當即註冊</a> <div class="tips" style="color: red">${error}</div> </div> <div class="submit_btn"> <button type="submit" id="submit_btn">立 即 登陸</button> </div> </form> </section> <script src="js/index.js" type="text/javascript" charset="utf-8"></script> </body>
package com.Gary.web; import org.apache.struts2.ServletActionContext; import com.Gary.domain.User; import com.Gary.service.UserService; import com.opensymphony.xwork2.ActionSupport; import com.opensymphony.xwork2.ModelDriven; public class UserAction extends ActionSupport{ public User user; public User getUser() { return user; } public void setUser(User user) { this.user = user; } public String login() throws Exception { System.out.println("login()方法"); System.out.println(user.getUsername()+":"+ user.getPassword()); UserService userService = new UserService(); boolean success = userService.findUser(user); if(success) { return "success"; }else{ ServletActionContext.getRequest().setAttribute("error", "用戶名或密碼錯誤!!!"); return "error"; } } //註冊 public String register() throws Exception { System.err.println("register()方法"); return null; } //kill方法 public String kill() throws Exception { System.err.println("kill()方法"); return null; } }
2、傳遞參數
在ImplAction.java中經過login()方法添加<key,value>到session域和application域中
public String login() throws Exception { //獲得原生的request域 //ServletActionContext.getRequest().setAttribute("username", "123"); //ServletActionContext.getRequest().setAttribute("password", "123"); ActionContext.getContext().put("username", "123"); ActionContext.getContext().put("password", "123"); //得到session Map<String,Object> session = ActionContext.getContext().getSession(); session.put("mysession", "這是session域"); //得到application Map<String,Object> application = ActionContext.getContext().getApplication(); application.put("myapplication", "這是application域"); //得到原生的request HttpServletRequest request = ServletActionContext.getRequest(); //得到原生的response HttpServletResponse response = ServletActionContext.getResponse(); return "toLogin"; }
struts.xml中動態方法配置了action,將web層ImplAction中的login()轉發到com.Gary.web.UserAction中的login()方法
<action name="LoginAction_*" class="com.Gary.web.UserAction" method="{1}"> <!-- 默認爲轉發 redirect設置爲重定向 --> <result name="success" type="redirect">/index.html</result> <!-- 默認爲轉發 --> <result name="error">/login.jsp</result> </action> <action name="LoginActionImpl_*" class="com.Gary.web.ImplAction" method="{1}"> <!-- 轉發到LoginActionDefault --> <result name="defaultAction" type="chain">LoginActionDefault</result> <!-- 重定向到Action(LoginAction_*) --> <result name="toLogin" type="redirectAction"> <param name="actionName">LoginAction_login</param> <param name="username">${username}</param> <param name="password">${password}</param> </result> </action>
在UserAction.java中輸出放置在session域和application域中的內容
public String login() throws Exception { System.out.println("login()方法"); System.out.println(user.getUsername()+":"+user.getPassword()); System.out.println("session域..."+ActionContext.getContext().getSession().get("mysession")); System.out.println("application域..."+ActionContext.getContext().getApplication().get("myapplication")); UserService userService = new UserService(); boolean success = userService.findUser(user); if(success) { return "success"; }else{ ServletActionContext.getRequest().setAttribute("error", "用戶名或密碼錯誤!!!"); return "error"; } }
package com.Gary.web; import java.util.Map; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import org.apache.struts2.ServletActionContext; import com.opensymphony.xwork2.Action; import com.opensymphony.xwork2.ActionContext; public class ImplAction implements Action{ @Override public String execute() throws Exception { System.out.println("這是實現了Action接口的action"); return "defaultAction"; } public String login() throws Exception { //獲得原生的request域 //ServletActionContext.getRequest().setAttribute("username", "123"); //ServletActionContext.getRequest().setAttribute("password", "123"); ActionContext.getContext().put("username", "123"); ActionContext.getContext().put("password", "123"); //得到session Map<String,Object> session = ActionContext.getContext().getSession(); session.put("mysession", "這是session域"); //得到application Map<String,Object> application = ActionContext.getContext().getApplication(); application.put("myapplication", "這是application域"); //得到原生的request HttpServletRequest request = ServletActionContext.getRequest(); //得到原生的response HttpServletResponse response = ServletActionContext.getResponse(); return "toLogin"; } }
<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE struts PUBLIC "-//Apache Software Foundation//DTD Struts Configuration 2.5//EN" "http://struts.apache.org/dtds/struts-2.5.dtd"> <struts> <constant name="struts.devMode" value="true"></constant> <constant name="struts.enable.DynamicMethodInvocation" value="true"></constant> <!-- name:配置包名 namespace:給action的訪問路徑定義一個命名空間 --> <package name="MyPackage" namespace="/" extends="struts-default"> <!-- 增長動態方法調用的安全性 --> <global-allowed-methods>regex:.*</global-allowed-methods> <!-- action:配置action類 name:決定了action訪問的資源名稱 servlet:url-pattern class:action的完整類名 method:指定調用action中的哪一個方法來去處理請求 --> <action name="LoginAction_*" class="com.Gary.web.UserAction" method="{1}"> <!-- 默認爲轉發 redirect設置爲重定向 --> <result name="success" type="redirect">/index.html</result> <!-- 默認爲轉發 --> <result name="error">/login.jsp</result> </action> <action name="LoginActionDefault" class="com.Gary.web.DefaultAction" method="execute"> </action> <action name="LoginActionImpl_*" class="com.Gary.web.ImplAction" method="{1}"> <!-- 轉發到LoginActionDefault --> <result name="defaultAction" type="chain">LoginActionDefault</result> <!-- 重定向到Action(LoginAction_*) --> <result name="toLogin" type="redirectAction"> <param name="actionName">LoginAction_login</param> <param name="username">${username}</param> <param name="password">${password}</param> </result> </action> </package> </struts>
package com.Gary.web; import org.apache.struts2.ServletActionContext; import com.Gary.domain.User; import com.Gary.service.UserService; import com.opensymphony.xwork2.ActionContext; import com.opensymphony.xwork2.ActionSupport; import com.opensymphony.xwork2.ModelDriven; public class UserAction extends ActionSupport implements ModelDriven<User>{ public User user = new User(); public String login() throws Exception { System.out.println("login()方法"); System.out.println(user.getUsername()+":"+user.getPassword()); System.out.println("session域..."+ActionContext.getContext().getSession().get("mysession")); System.out.println("application域..."+ActionContext.getContext().getApplication().get("myapplication")); UserService userService = new UserService(); boolean success = userService.findUser(user); if(success) { return "success"; }else{ ServletActionContext.getRequest().setAttribute("error", "用戶名或密碼錯誤!!!"); return "error"; } } //註冊 public String register() throws Exception { System.err.println("register()方法"); return null; } //kill方法 public String kill() throws Exception { System.err.println("kill()方法"); return null; } @Override public User getModel() { // TODO Auto-generated method stub return user; } }