1.로그인 페이지
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 | <%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%> <!DOCTYPE > <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <title>Insert title here</title> <script src="http://code.jquery.com/jquery-3.1.0.js"> </script> <script> $(document).ready(function() { alert("오잉"); $("#btnLogin").click(function() { var userid = $("#userid").val(); var passwd = $("#passwd").val(); if (userid == "") { alert("아이디를 입력해주세요"); $("#userid").focus(); return; } //$반복 var exp = /[a-z0-9]$/; //영문자와 숫자 //정규표현식. test(입력값) 규칙에 맞으면 true if(!exp.test(userid)){ alert("영문자와 숫자만 입력가능합니다."); $("#userid").focus(); return; } if (passwd == "") { alert("비밀번호를 입력해주세요"); $("#passwd").focus(); return; } //비동기 ajax 방식으로 데이터 주고 받기 방버버 var data = "userid=" + userid + "&passwd=" + passwd; alert(userid+passwd); $.ajax({ type : "post", data : data, url : "/web02/member_servlet/login.do", success : function(value) { $("#result").html(value); } }); /* document.form1.action="" document.from1.submit(); */ }); }); </script> </head> <body> <table border="1"> <tr> <td>아이디</td> <td><input type="text" id="userid"></td> </tr> <tr> <td>비밀번호</td> <td><input type="password" id="passwd"></td> </tr> <tr> <td colspan="2" align="center"><input type="button" value="로그인" id="btnLogin"></td> </tr> </table> <div id="result">로그인 결과 출력 영역</div> </body> </html> | cs |
2.컨트롤러
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 | package member; import java.io.IOException; import javax.servlet.RequestDispatcher; import javax.servlet.ServletException; import javax.servlet.annotation.WebServlet; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; @WebServlet("/member_servlet/*") public class MemberController extends HttpServlet { private static final long serialVersionUID = 1L; protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { System.out.println("멤버서블릿 호출"); String path = request.getContextPath(); String url = request.getRequestURI().toString(); MemberDAO dao = new MemberDAO(); // url 분석 // 로그인 이면 if (url.indexOf("login.do") != -1) { String userid = request.getParameter("userid"); String passwd = request.getParameter("passwd"); String name = dao.loginCheck(userid, passwd); String message = ""; if (name == null) { // 로그인 실패 message = "아이디 또는 비밀번호가 일치하지 않습니다."; } else { // 로그인 성공 message = name + "님 환영합니다."; } // 데이터 저장 request.setAttribute("message", message); // 포워딩 String page = "/member/login_result.jsp"; RequestDispatcher rd = request.getRequestDispatcher(page); rd.forward(request, response); } } protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { doGet(request, response); } } | cs |
3.다오
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 | package member; import java.sql.Connection; import java.sql.PreparedStatement; import java.sql.ResultSet; import config.DB; public class MemberDAO { public String loginCheck(String userid, String passwd) { String name = null; Connection conn = null; // db접속 PreparedStatement pstmt = null; // sql 실행 ResultSet rs = null; // select 결과 처리 try { conn = DB.dbConn(); // db접속 성공 String sql = "select name from member where userid=? and passwd=password(?)"; pstmt = conn.prepareStatement(sql); pstmt.setString(1, userid); pstmt.setString(2, passwd); rs = pstmt.executeQuery(); // rs에 실행결과 리턴 if (rs.next()) { // 레코드가 존재하면 name = rs.getString("name"); // 이름 저장 } } catch (Exception e) { e.printStackTrace(); } finally { try { if (pstmt != null) { pstmt.close(); } } catch (Exception e2) { e2.printStackTrace(); } try { if (conn != null) { conn.close(); } } catch (Exception e2) { e2.printStackTrace(); } } return name; } } | cs |
4.결과 페이지 AJAX
1 2 3 4 5 6 7 8 9 10 11 12 13 14 | <%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%> <!DOCTYPE > <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <title>Insert title here</title> </head> <body> ${message} </body> </html> | cs |
5.DTO
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 | package member; public class MemberDTO { private String userid; private String passwd; private String name; private String email; private String hp; private String zipcode; private String address1; private String address2; private String join_date; public MemberDTO() { // TODO Auto-generated constructor stub } public MemberDTO(String userid, String passwd, String name, String email, String hp, String zipcode, String address1, String address2) { super(); this.userid = userid; this.passwd = passwd; this.name = name; this.email = email; this.hp = hp; this.zipcode = zipcode; this.address1 = address1; this.address2 = address2; } public String getUserid() { return userid; } public void setUserid(String userid) { this.userid = userid; } public String getPasswd() { return passwd; } public void setPasswd(String passwd) { this.passwd = passwd; } public String getName() { return name; } public void setName(String name) { this.name = name; } public String getEmail() { return email; } public void setEmail(String email) { this.email = email; } public String getHp() { return hp; } public void setHp(String hp) { this.hp = hp; } public String getZipcode() { return zipcode; } public void setZipcode(String zipcode) { this.zipcode = zipcode; } public String getAddress1() { return address1; } public void setAddress1(String address1) { this.address1 = address1; } public String getAddress2() { return address2; } public void setAddress2(String address2) { this.address2 = address2; } public String getJoin_date() { return join_date; } public void setJoin_date(String join_date) { this.join_date = join_date; } @Override public String toString() { return "MemberDTO [userid=" + userid + ", passwd=" + passwd + ", name=" + name + ", email=" + email + ", hp=" + hp + ", zipcode=" + zipcode + ", address1=" + address1 + ", address2=" + address2 + ", join_date=" + join_date + "]"; } } | cs |
6테이블 생성 및 삽입
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 | -- 회원가입과 로그인 create table member( userid varchar(20) not null primary key, passwd varchar(100) not null, name varchar(50) not null, email varchar(50), hp varchar(50), zipcode varchar(20), address1 varchar(200), address2 varchar(200), join_date datetime default now() ); -- 회원추가 쿼리 insert into member (userid,passwd,name) values('kim1',password('1234'),'강영균'); -- 암호화 -- password('값') 암호화 되어 저장됨 --복호화 -- sql injection attack userid 에 ' or 1=1#을 입력 -- 선택 select * from member; -- 삭제 delete from member; --로그인 select * from member where userid='kim' and passwd=password('1234'); | cs |
