loginCookie.jsp

<%@ page language="java" pageEncoding="UTF-8" isErrorPage="false" %>
    <%!	// 密钥	private static final String KEY = ":cookie@helloweenvsfei.com";	// MD5 加密算法	public final static String calcMD5(String ss) {	  	   String s = ss==null ? "" : ss;	  	   char hexDigits[] = { '0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'a', 'b', 'c', 'd', 'e', 'f' };	   try {	    byte[] strTemp = s.getBytes();	    MessageDigest mdTemp = MessageDigest.getInstance("MD5");	    mdTemp.update(strTemp);	    byte[] md = mdTemp.digest();	    int j = md.length;	    char str[] = new char[j * 2];	    int k = 0;	    for (int i = 0; i < j; i++) {	     byte byte0 = md[i];	     str[k++] = hexDigits[byte0 >>> 4 & 0xf];	     str[k++] = hexDigits[byte0 & 0xf];	    }	    return new String(str);	   } catch (Exception e) {	    return null;	   }	}%><%	request.setCharacterEncoding("UTF-8");	response.setCharacterEncoding("UTF-8");		String action = request.getParameter("action");		if("login".equals(action)){				String account = request.getParameter("account");		String password = request.getParameter("password");		int timeout = new Integer(request.getParameter("timeout"));				// 把帐号连同密钥使用MD5后加密后保存		String ssid = calcMD5(account + KEY);						// 把帐号保存到Cookie中 并控制有效期		Cookie accountCookie = new Cookie("account", account);		accountCookie.setMaxAge(timeout);				// 把加密结果保存到Cookie中 并控制有效期		Cookie ssidCookie = new Cookie("ssid", ssid);		ssidCookie.setMaxAge(timeout);				response.addCookie(accountCookie);		response.addCookie(ssidCookie);				// 重新请求本页面		response.sendRedirect(request.getRequestURI() + "?" + System.currentTimeMillis());		return;	}	else if("logout".equals(action)){		// 删除Cookie中的帐号		Cookie accountCookie = new Cookie("account", "");		accountCookie.setMaxAge(0);				// 删除Cookie中的加密结果		Cookie ssidCookie = new Cookie("ssid", "");		ssidCookie.setMaxAge(0);		response.addCookie(accountCookie);		response.addCookie(ssidCookie);		// 重新请求本页面		response.sendRedirect(request.getRequestURI() + "?" + System.currentTimeMillis());		return;	}		boolean loggin = false;		String account = null;	String ssid = null;		// 获取Cookie中的account与ssid	if(request.getCookies() != null){		for(Cookie cookie : request.getCookies()){			if(cookie.getName().equals("account"))				account = cookie.getValue();			if(cookie.getName().equals("ssid"))				ssid = cookie.getValue();		}	}		if(account != null && ssid != null){		// 如果加密规则正确, 则视为已经登录		loggin = ssid.equals(calcMD5(account + KEY));	}	%>
    
    
	
     
		
      
当前有效的 Cookie
		
      	
     
	
     
		
      
<%= loggin ? "欢迎您回来" : "请先登录" %>
		<% if(loggin){ %>			欢迎您, ${ cookie.account.value }.    			
      注销		<% } else { %>		
      
			
       
				        
         
           
 帐号： 
           
  
          
				         
           
 密码： 
           
  
          
				         
           
 有效期： 
           
  关闭浏览器即失效 
  30天内有效 
  永久有效 
 
          
				         
           
 
           
  
          
			        
       
		
      
		<% } %>