会话之session技术（转）

http://blog.csdn.net/redarmy_chen/article/details/8157201

什么是Session

使用Cookie和附加URL参数都可以将上一次请求的状态信息传递到下一次请求中，但是如果传递的状态信息较多，将极大降低网络传输效率和增大服务器端程序处理的难度。

Session技术是一种将会话状态保存在服务器端的技术 ，它可以比喻成是医院发放给病人的病历卡和医院为每个病人保留的病历档案的结合方式 。

客户端需要接收、记忆和回送 Session的会话标识号，Session可以且通常是借助Cookie来传递会话标识号。

同一用户的不同页面共享数据（Session）

Session的跟踪机制

1.Servlet API规范中定义了一个HttpSession接口，HttpSession接口定义了各种管理和操作会话状态的方法。

2.HttpSession对象是保持会话状态信息的存储结构，一个客户端在WEB服务器端对应一个各自的HttpSession对象。

3.WEB服务器并不会在客户端开始访问它时就创建HttpSession对象，只有客户端访问某个能与客户端开启会话的Servlet程序时，WEB应用程序才会创建一个与该客户端对应的HttpSession对象。

4.WEB服务器为HttpSession对象分配一个独一无二的会话标识号，然后在响应消息中将这个会话标识号传递给客户端。客户端需要记住会话标识号，并在后续的每次访问请求中都把这个会话标识号传送给WEB服务器，WEB服务器端程序依据回传的会话标识号就知道这次请求是哪个客户端发出的，从而选择与之对应的HttpSession对象

    WEB应用程序创建了与某个客户端对应的HttpSession对象后，只要没有超出一个限定的空闲时间段，HttpSession对象就驻留在WEB服务器内存之中，该客户端此后访问任意的Servlet程序时，它们都使用与客户端对应的那个已存在的HttpSession对象。

    HttpSession接口中专门定义了一个setAttribute方法来将对象存储到HttpSession对象中，还定义了一个getAttribute方法来检索存储在HttpSession对象中的对象，存储进HttpSession对象中的对象可以被属于同一个会话的各个请求的处理程序共享。

Session是实现网上商城的购物车的最佳方案，存储在某个客户Session中的一个集合对象就可充当该客户的一个购物车。

Session的超时管理

WEB服务器无法判断当前的客户端浏览器是否还会继续访问，也无法检测客户端浏览器是否关闭，所以，即使客户已经离开或关闭了浏览器，WEB服务器还要保留与之对应的HttpSession对象。

随着时间的推移而不断增加新的访问客户端，WEB服务器内存中将会因此积累起大量的不再被使用的HttpSession对象，并将最终导致服务器内存耗尽。

WEB服务器采用“超时限制”的办法来判断客户端是否还在继续访问，如果某个客户端在一定的时间之内没有发出后续请求，WEB服务器则认为客户端已经停止了活动，结束与该客户端的会话并将与之对应的HttpSession对象变成垃圾。

如果客户端浏览器超时后再次发出访问请求，WEB服务器则认为这是一个新的会话的开始，将为之创建新的HttpSession对象和分配新的会话标识号。

会话的超时间隔可以在web.xml文件中设置，其默认值由Servlet容器定义。

       <session-config>

              <session-timeout>30</session-timeout>

       </session-config>

session实现原理

 

 

IE禁用Cookie后的session处理

解决方案：URL重写

response. encodeRedirectURL(java.lang.String url)

用于对sendRedirect方法后的url地址进行重写。

response. encodeURL(java.lang.String url)

用于对表单action和超链接的url地址进行重写

Session案例

1.实现简单的购物车（将点击了购买链接的书籍放到购物车页面显示出来即可）

 

IndexServletShopping.java
package com.hbsi.servlet;

import java.io.IOException;
import java.io.PrintWriter;
import java.util.List;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import com.hbsi.dao.BookDao;
import com.hbsi.domain.Book;

public class IndexServletShopping extendsHttpServlet {

public void doGet(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {
response.setContentType("text/html;charset=UTF-8");
PrintWriter out=response.getWriter();

out.print("本网站有如下商品：
");
BookDao db=new BookDao();
List list=db.getAll();
for(Book book:list){
Stringurl=response.encodeRedirectURL("BookHistory/servlet/BuyServlet?id="+book.getId());
out.print(book.getName()+"购买
");
}
}

public void doPost(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {

doGet(request, response);
}

}

CartDisplayServlet.java

package com.hbsi.servlet;

import java.io.IOException;
import java.io.PrintWriter;
import java.util.List;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import com.hbsi.domain.Book;

public class CartDisplayServlet extendsHttpServlet {

public void doGet(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {
response.setContentType("text/html;charset=UTF-8");
PrintWriter out = response.getWriter();

List list = (List)request.getSession().getAttribute("cart");
for(Book book:list){
out.print(book.getName()+"
");
}

}

public void doPost(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {

doGet(request, response);
}

}

BuyServlet.java

package com.hbsi.servlet;

import java.io.IOException;
import java.io.PrintWriter;
import java.util.ArrayList;
import java.util.List;

import javax.servlet.ServletException;
import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import com.hbsi.dao.BookDao;
import com.hbsi.domain.Book;

public class BuyServlet extends HttpServlet {

public void doGet(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {
response.setContentType("text/html;charset=UTF-8");
PrintWriter out=response.getWriter();

Stringbookid=request.getParameter("id");
BookDao bd=new BookDao();
Book book=bd.getBook(bookid);

HttpSession session=request.getSession();

Cookie cookie=newCookie("JSESSIONID",session.getId());
cookie.setMaxAge(30*60);
cookie.setPath("/BookHistory");
response.addCookie(cookie);

List list=(List)session.getAttribute("cart");
if(list==null){
list=new ArrayList();
session.setAttribute("cart", list);
}
list.add(book);
Stringurl=response.encodeRedirectURL("/BookHistory/servlet/CartDisplayServlet");
response.sendRedirect(url);


}

public void doPost(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {

doGet(request, response);
}

}

2.使用Session完成用户登陆 利用Session实现验证码校验

IndexServletShopping.java

package com.hbsi.servlet;

import java.io.IOException;
import java.io.PrintWriter;
import java.util.List;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import com.hbsi.dao.BookDao;
import com.hbsi.domain.Book;
import com.hbsi.domain.User;

public class IndexServletShopping extends HttpServlet{

public void doGet(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {

response.setContentType("text/html;charset=UTF-8");
PrintWriter out = response.getWriter();
HttpSession session= request.getSession();

User user = (User)session.getAttribute("user");

if(user!=null){

out.print("欢迎您："+user.getUsername()+"");
}

out.print("<ahref='/BookHistory/Login.html'>登陆</a>");
out.print("<ahref='/BookHistory/servlet/LogoutServlet'>注销</a><br><br>");



out.print("本网站有如下商品：<br>");

  BookDaodb = new BookDao();
 List<Book> list = db.getAll();
 for(Book book:list){
  Stringurl =response.encodeURL("/BookHistory/servlet/BuyServlet?id="+book.getId());
 out.print(book.getName()+"<a href='"+url+"'>购买</a><br>");
  }



}

public void doPost(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {

doGet(request, response);
}

}

CartDisplayServlet.java

package com.hbsi.servlet;

import java.io.IOException;
import java.io.PrintWriter;
import java.util.List;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import com.hbsi.domain.Book;

public class CartDisplayServlet extendsHttpServlet {

public void doGet(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {
response.setContentType("text/html;charset=UTF-8");
PrintWriter out = response.getWriter();

List<Book> list = (List<Book>)request.getSession().getAttribute("cart");
for(Book book:list){
out.print(book.getName()+"<br>");
}

}

public void doPost(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {

doGet(request, response);
}

}

BuyServlet.java

package com.hbsi.servlet;

import java.io.IOException;
import java.io.PrintWriter;
import java.util.ArrayList;
import java.util.List;

import javax.servlet.ServletException;
import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

import com.hbsi.dao.BookDao;
import com.hbsi.domain.Book;

public class BuyServlet extends HttpServlet {

public void doGet(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {
response.setContentType("text/html;charset=UTF-8");
PrintWriter out = response.getWriter();

String bookid = request.getParameter("id");
BookDao bd = new BookDao();
Book book = bd.getBook(bookid);

HttpSession session = request.getSession();

Cookie cookie = newCookie("JSESSIONID",session.getId());
cookie.setMaxAge(30*60);
cookie.setPath("/BookHistory");
response.addCookie(cookie);

List list = (List)session.getAttribute("cart");
if(list==null){
list = new ArrayList();
session.setAttribute("cart",list);
}
list.add(book);
String url =response.encodeRedirectURL("/BookHistory/servlet/CartDisplayServlet");
response.sendRedirect(url);



}

public void doPost(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {

doGet(request, response);
}

}

LoginServlet.java

package com.hbsi.servlet;

import java.io.IOException;
import java.io.PrintWriter;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import com.hbsi.dao.UserDao;
import com.hbsi.domain.User;

public class LoginServlet extends HttpServlet {

public void doGet(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {

request.setCharacterEncoding("UTF-8");

response.setContentType("text/html;charset=UTF-8");
PrintWriter out = response.getWriter();



String username =request.getParameter("username");
String password =request.getParameter("password");

String checkcode =request.getParameter("checkcode");
System.out.println(checkcode);

String imgcode = (String) request.getSession().getAttribute("imgcode");
System.out.println(imgcode);
if(checkcode!=null && imgcode!=null&& checkcode.equals(imgcode)){
//处理登陆请求

UserDao udao = new UserDao();
User user = udao.find(username, password);

if(user!=null){
request.getSession().setAttribute("user",user);
response.sendRedirect("/BookHistory/servlet/IndexServletShopping");
}
out.print("用户名密码错");
}else{
out.print("验证码错误！！！");
}



}

public void doPost(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {

doGet(request, response);
}

}

LogoutServlet.java

package com.hbsi.servlet;

import java.io.IOException;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

public class LogoutServlet extends HttpServlet{

public void doGet(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {

HttpSession session = request.getSession(false);
       if(session==null){
       response.sendRedirect("/BookHistory/servlet/IndexServletShopping");
       return;
        }
       session.removeAttribute("user");
      //session.invalidate();
       response.sendRedirect("/BookHistory/servlet/IndexServletShopping");
}

public void doPost(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {

doGet(request, response);
}

}

package com.hbsi.servlet;

import java.awt.Color;
import java.awt.Font;
import java.awt.Graphics;
import java.awt.Graphics2D;
import java.awt.image.BufferedImage;
import java.io.IOException;
import java.util.Random;

import javax.imageio.ImageIO;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

public class Response3 extends HttpServlet {
    
private static final int WIDTH=130;
private static final int HEIGHT=30;

public void doGet(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {
//1.创建图片
BufferedImage image = newBufferedImage(WIDTH,HEIGHT,BufferedImage.TYPE_INT_RGB);

//2.得到图片
Graphics g = image.getGraphics();

//3 对图片进行绘制

//a.设置图片的背景色
setBackGround(g);

//b.设置矩形边框
setBorder(g);

//c.添加干扰线
setRandomLine(g);

//g.向图形中写数据
String checkcode = setRandomNum(g);

request.getSession().setAttribute("imgcode",checkcode);

//4.把图片写给浏览器
//response.setHeader("content-type","image/jpeg");
response.setContentType("image/jpeg");

//告诉浏览器不要缓存
response.setHeader("Pragma","no-cache");
response.setHeader("Cache-Control","no-cache");
response.setIntHeader("Expires",-1);

ImageIO.write(image,"JPEG",response.getOutputStream());

}

private String setRandomNum(Graphics g) {
//g.setColor(Color.BLACK);
g.setFont(new Font("宋体",Font.BOLD,20));
Random random = new Random();
String base ="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";

StringBuffer sb = new StringBuffer();

int x=10;
for(int i=0;i<4;i++){
int rand = random.nextInt(base.length()-1);
String str = base.charAt(rand)+"";

sb.append(str);


g.setColor(newColor(random.nextInt(255),random.nextInt(255),random.nextInt(255)));

int degree = random.nextInt()%30;
((Graphics2D)g).rotate(degree*Math.PI/180, x,20); 
g.drawString(str, x, 20);
((Graphics2D)g).rotate(-degree*Math.PI/180, x,20);
x +=30;
}
return sb.toString();

}

private void setRandomNum1(Graphics g) {
//g.setColor(Color.BLACK);
g.setFont(new Font("宋体",Font.BOLD,20));
Random random = new Random();

int x=10;
for(int i=0;i<4;i++){
//产生随机数
String str =String.valueOf(random.nextInt(10));
g.setColor(newColor(random.nextInt(255),random.nextInt(255),random.nextInt(255)));

int degree = random.nextInt()%30;
((Graphics2D)g).rotate(degree*Math.PI/180, x,20); 
g.drawString(str, x, 20);
((Graphics2D)g).rotate(-degree*Math.PI/180, x,20);
x +=30;
}

}

private void setRandomLine(Graphics g) {
g.setColor(Color.green);
Random random = new Random();
for(int i=0;i<5;i++){
int x1 = random.nextInt(WIDTH);
int y1 = random.nextInt(HEIGHT);

int x2 = random.nextInt(WIDTH);
int y2 = random.nextInt(HEIGHT);

g.drawLine(x1, y1, x2, y2);
}

}

private void setBorder(Graphics g) {
g.setColor(Color.BLUE);
g.drawRect(1, 1, WIDTH-2, HEIGHT-2);

}

private void setBackGround(Graphics g) {
g.setColor(Color.WHITE);
g.fillRect(0,0, WIDTH, HEIGHT);

}

public void doPost(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {

doGet(request, response);
}

}

3.利用session防止表单重复提交

RepeateFormServlet.java

package com.hbsi.servlet;

import java.io.IOException;
import java.io.PrintWriter;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

public class RepeateFormServlet extendsHttpServlet {

public void doGet(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {
response.setContentType("text/html;charset=UTF-8");
PrintWriter out = response.getWriter();


String username =request.getParameter("username");

try {
Thread.sleep(5*1000);
} catch (InterruptedException e) {

e.printStackTrace();
}
out.print("已经处理你的信息");
System.out.println("已向数据库注册信息。。。");
}

public void doPost(HttpServletRequest request,HttpServletResponse response)
throws ServletException, IOException {

doGet(request, response);
}

}

RepeateForm.html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML4.01 Transitional//EN">
<html>
 <head>
   <title>RepeateForm.html</title>

   <meta http-equiv="keywords"content="keyword1,keyword2,keyword3">
   <meta http-equiv="description" content="this is mypage">
   <meta http-equiv="content-type" content="text/html;charset=UTF-8">
    
   <!--<link rel="stylesheet" type="text/css"href="./styles.css">-->
    
   <script type="text/javascript">
    
    variscommitted = false;
   function checkPost(){
       if(!iscommitted){
             //document.getElementById("sub").disabled = true;
             iscommitted = true;
           return true;
       }else{
           // alert("不能重复提交表单！");
           return false;
        }
    
    }
    
   </script>

 </head>
  
 <body>
  <formaction="/BookHistory/servlet/RepeateFormServlet"method="post" onsubmit="return checkPost()">
      用户名：<inputtype="text" name="username"/><br/>
     <input type="submit" value="提交"id="sub"/>
  
 </form>
 </body>
</html>