普通用户的注册和管理员的权限操作

普通用户可以注册，登录但没有管理员的权限。管理员只有一位，指定了的，可以对所有用户进行操作。

loginAction.java

package com.examine3.action;
import java.util.ArrayList;
import java.util.List;
import com.examine3.bean.user;
import com.examine3.dao.operationDao;
import com.examine3.dao.userLogin;
import com.opensymphony.xwork2.ActionContext;
import com.opensymphony.xwork2.ActionSupport;
public class loginAction extends ActionSupport {
private static final long serialVersionUID = 1L;
private String username;
private String password;
private int permission;
private user ur;

public String getUsername() {
return username;
}


public void setUsername(String username) {
this.username = username;
}


public String getPassword() {
return password;
}


public void setPassword(String password) {
this.password = password;
}


public int getPermission() {
return permission;
}


public void setPermission(int permission) {
this.permission = permission;
}


public user getUr() {
return ur;
}


public void setUr(user ur) {
this.ur = ur;
}


@Override
public String execute() throws Exception {
System.out.println("111");
userLogin ul = new userLogin();

ur = ul.Login(username, password);
if (ur == null) {

ActionContext.getContext().put("tips", "该用户不存在！");
return ERROR;
} else {
if (ur.getPermission() == 0) {
//ActionContext.getContext().getSession().put("userName", username);
//searchAction searchAction = new searchAction();
List<user> list = new ArrayList<user>();
list = operationDao.getAll();
ActionContext.getContext().getSession().put("list", list);
//ActionContext.getContext().getSession().put("ur", ur);
return "supper";
}else {
return SUCCESS;
}

}

}

public String getall(){
List<user> list = new ArrayList<user>();
list = operationDao.getAll();
ActionContext.getContext().getSession().put("list", list);
return SUCCESS;
}

}

operationAction.java

package com.examine3.action;


import java.util.ArrayList;
import java.util.List;


import org.apache.struts2.ServletActionContext;


import com.examine3.bean.user;
import com.examine3.dao.operationDao;
import com.opensymphony.xwork2.ActionContext;
import com.opensymphony.xwork2.ActionSupport;


public class operationAction extends ActionSupport {


private static final long serialVersionUID = 1L;


private String userName; // 修改后的name
private String name1; // 原来数据库中的name
private String password;
private int permission;


public String getName1() {
return name1;
}


public void setName1(String name1) {
this.name1 = name1;
}


public String getUserName() {
return userName;
}


public void setUserName(String userName) {
this.userName = userName;
}


public String getPassword() {
return password;
}


public void setPassword(String password) {
this.password = password;
}


public int getPermission() {
return permission;
}


public void setPermission(int permission) {
this.permission = permission;
}


public String update() throws Exception {
if (operationDao.update(userName, password, permission, this.name1)) {
ActionContext.getContext().put("name", userName);
ActionContext.getContext().put("pwd", password);
List<user> list = new ArrayList<user>();
list = operationDao.getAll();
ActionContext.getContext().getSession().put("list", list);
return SUCCESS;
} else {
return ERROR;
}
}


public String delete() {
String userName = ServletActionContext.getRequest().getParameter(
"username");
if (operationDao.delete(userName)) {
return SUCCESS;
} else {
return ERROR;
}
}
}

registerAction.jsp

package com.examine3.action;


import com.examine3.bean.user;
import com.examine3.dao.operationDao;
import com.examine3.dao.userLogin;
import com.opensymphony.xwork2.ActionContext;
import com.opensymphony.xwork2.ActionSupport;


public class registerAction extends ActionSupport {
private static final long serialVersionUID = 1L;
private String userName;
private String password;
private user ur;


public String getUserName() {
return userName;
}


public void setUserName(String userName) {
this.userName = userName;
}


public String getPassword() {
return password;
}


public void setPassword(String password) {
this.password = password;
}


public user getUr() {
return ur;
}


public void setUr(user ur) {
this.ur = ur;
}


@Override
public String execute() throws Exception {
if (operationDao.getName(userName) == null) {
if (operationDao.register(userName, password)) {


return SUCCESS;
}
return SUCCESS;
} else {
// 添加表单校验错误信息
addFieldError(userName, "用户名已存在!");
return ERROR;
}


}
}

校验器

<!DOCTYPE validators PUBLIC
        "-//Apache Struts//XWork Validator 1.0.2//EN"
        "http://struts.apache.org/dtds/xwork-validator-1.0.2.dtd">


<validators>
<!-- 必填字符串校验器 -->
<field name="userName">
<field-validator type="requiredstring">
<param name="trim">true</param>
<message>登录名不能为空</message>
</field-validator>
</field>
<!-- 必填校验器使用 -->
<field name="password">
<field-validator type="required">
<message>密码不能为空</message>
</field-validator>
</field>


</validators>

operationDao.java

package com.examine3.dao;


import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.util.ArrayList;
import java.util.List;


import com.examine3.bean.user;
import com.examine3.util.DBHelper;


public class operationDao {


// 注册 1为普通用户，0位管理员
public static boolean register(String userName, String password) {
Connection conn = null;
PreparedStatement ps = null;
ResultSet rs = null;
int row = 0;
boolean flag = false;
String sql = "INSERT INTO user(userName,password,permission) VALUES('"
+ userName + "','" + password + "','1')";


conn = DBHelper.getConn();
try {
ps = conn.prepareStatement(sql);
row = ps.executeUpdate();
return flag = true;
} catch (SQLException e) {
// TODO Auto-generated catch block
e.printStackTrace();
} finally {
DBHelper.closeDBHelper(conn, ps, rs);
}


return flag;


}


// 删除
public static boolean delete(String userName) {
Connection conn = null;
PreparedStatement ps = null;
ResultSet rs = null;
int row = 0;
boolean flag = false;
String sql = "DELETE FROM `user` WHERE username = '" + userName + "'";
System.out.println(sql);


conn = DBHelper.getConn();
try {
ps = conn.prepareStatement(sql);
row = ps.executeUpdate();
flag = true;
return flag;
} catch (SQLException e) {
System.out.println("Error:" + e.getMessage());
e.printStackTrace();
} finally {
DBHelper.closeDBHelper(conn, ps, rs);
}
return flag;
}


// 修改
public static boolean update(String userName, String password,
int permission, String name1) {
Connection conn = null;
PreparedStatement ps = null;
ResultSet rs = null;
int row = 0;
boolean flag = false;


String sql = "UPDATE `user` SET username = '" + userName
+ "' , password = '" + password + "',permission = '"
+ permission + "'  WHERE username = '" + name1 + "'";
System.out.println(sql);


conn = DBHelper.getConn();
try {
ps = conn.prepareStatement(sql);
row = ps.executeUpdate();
flag = true;
return flag;
} catch (SQLException e) {
System.out.println("Error:" + e.getMessage());
e.printStackTrace();
} finally {
DBHelper.closeDBHelper(conn, ps, rs);
}
return flag;
}


// 查詢
public static List<user> getAll() {
List<user> list = new ArrayList<user>();
user users = null;
Connection conn = null;
PreparedStatement ps = null;
ResultSet rs = null;
String sql = "SELECT * from `user` ";
System.out.println("****************************");
System.out.println(sql);


try {
conn = DBHelper.getConn();
ps = conn.prepareStatement(sql);
rs = ps.executeQuery();
while (rs.next()) {
users = new user();
users.setUsername(rs.getString(1));
users.setPassword(rs.getString(2));
users.setPermission(rs.getInt(3));
list.add(users);
}
} catch (SQLException e) {
// TODO Auto-generated catch block
e.printStackTrace();
} finally {
DBHelper.closeDBHelper(conn, ps, rs);
}
System.out.println(list);
return list;
}


// 取得姓名，若无，注册
public static String getName(String userName) {
String name = null;
Connection conn = null;
PreparedStatement ps = null;
ResultSet rs = null;
String sql = "SELECT * FROM user WHERE username ='" + userName + "'";
System.out.println(sql);


try {
conn = DBHelper.getConn();
ps = conn.prepareStatement(sql);
rs = ps.executeQuery();
while (rs.next()) {
name = rs.getString(1);
}
} catch (SQLException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}
return name;
}
}

userLogin.java

package com.examine3.dao;


import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;


import com.examine3.bean.user;
import com.examine3.util.DBHelper;


public class userLogin {
public user Login(String username,String password){
Connection conn = null;
PreparedStatement ps = null;
ResultSet rs = null;

user nuser = null;
String sql = "SELECT * FROM user WHERE username = '"+username+"' and password = '"+password+"'";
System.out.println(sql);

conn = DBHelper.getConn();
try {
ps = conn.prepareStatement(sql);
rs = ps.executeQuery();
while (rs.next()) {
System.out.println(rs);
nuser = new user();
nuser.setPassword(rs.getString(2));
nuser.setUsername(rs.getString(1));
nuser.setPermission(rs.getInt(3));

}
} catch (SQLException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}finally{
DBHelper.closeDBHelper(conn, ps, rs);
}

return nuser;
} 
}

登录拦截器

package com.examine3.interceptor;


import com.opensymphony.xwork2.Action;
import com.opensymphony.xwork2.ActionContext;
import com.opensymphony.xwork2.ActionInvocation;
import com.opensymphony.xwork2.ActionSupport;
import com.opensymphony.xwork2.interceptor.AbstractInterceptor;




public class loginInterceptor extends AbstractInterceptor {


@Override
public String intercept(ActionInvocation arg0) throws Exception {
// 取得保存在session中的userName
Object object = ActionContext.getContext().getSession().get("ur");

if(object!=null){
return arg0.invoke();
}
else{
//未登录的情况下，写入Action Error信息
((ActionSupport)arg0.getAction()).addActionError("请登录!");
return Action.LOGIN;
}
}
}

DBHelper.java

package com.examine3.util;


import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.ResultSet;
import java.sql.SQLException;


import java.sql.PreparedStatement;


public class DBHelper {
/*
* 加载数据库驱动并返回连接对象，用connection链接
*/
public static Connection getConn() {
Connection conn = null;
try {
Class.forName("com.mysql.jdbc.Driver");


conn = DriverManager.getConnection(
"jdbc:mysql://localhost:3306/user3", "root", "admin");
} catch (SQLException e) {
// TODO Auto-generated catch block
e.printStackTrace();


} catch (ClassNotFoundException e) {
System.out.println("找不到驱动程序类，加载驱动失败!");
e.printStackTrace();
}
return conn;
}


/*
* 关闭数据库方法
*/
public static void closeDBHelper(Connection conn, PreparedStatement ps,
ResultSet rs) {


try {
if (rs != null) {
rs.close();
}
if (ps != null) {
ps.close();
}
if (conn != null) {
conn.close();
}
} catch (SQLException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}

}
}

用户列表页面

<%@ page language="java" contentType="text/html; charset=UTF-8"
pageEncoding="UTF-8"%>
<%@taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>用户列表页面</title>
<script type="text/javascript">
function deleteuser(username) {
var result = window.confirm("确定要删除吗？");
if (result == true) {
//执行
window.location.href = "deleteAction?method=delete&username="
+ username;
}


}
</script>
</head>
<body>
<table align="center">
<tr>
<td>用户名</td>
<td>密码</td>
<td>权限</td>
<td colspan="2">操作</td>
</tr>
<c:forEach items="${list }" var="list">
<tr>
<td>${list.username }</td>
<td>${list.password }</td>
<td><a
href="update.jsp?name=${list.username}&pass=${list.password}">修改</a></td>
<td><a href="javascript:deleteuser('${list.username }')">
删除</a></td>
</tr>
</c:forEach>

</table>
</body>
</html>

修改页面

<%@page import="com.opensymphony.xwork2.ActionContext"%>
<%@ page language="java" contentType="text/html; charset=UTF-8"
pageEncoding="UTF-8"%>
<%@taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%>
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>修改页面</title>
<script language="javascript">
function back() {

window.location.href = "userlist.jsp";
}
</script>
</head>
<body>
<form action="updateAction">
<table>
<tr>
<td>用户名</td>
<td>密码</td>
</tr>

<% String name1 = request.getParameter("name");
String pass = request.getParameter("pass");
  %>

<tr>
<td><input name="userName" type="text" class="input1"
value="<%out.print(name1); %>" /></td>
<td><input name="password" type="text" class="input2"
value="<%out.print(pass); %>" /></td>
</tr>
<tr>
<td>
<input type="submit" name="Submit1" value="确定" /> 
<input type="button" name="Submit3" value="取消" onclick="back()" />
</td>
</tr>
<tr>
<td><input type="hidden" name = "name1" value="<%out.print(name1); %>"></td>
</tr>
</table>
</form>
</body>
</html>

配置struts

<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE struts PUBLIC
"-//Apache Software Foundation//DTD Struts Configuration 2.3//EN"
"http://struts.apache.org/dtds/struts-2.3.dtd">
<struts>
<package name="default" namespace="/" extends="struts-default">
<interceptors>
<interceptor name="loginInterceptor"
class="com.examine3.interceptor.loginInterceptor" />
</interceptors>

<global-results>
<result name="login">/login.jsp</result>
</global-results>


<action name="registerAction" class="com.examine3.action.registerAction">
<!-- <result name = "input">register.jsp</result> -->
<result name = "success">/login.jsp</result>
<result name = "error">/register.jsp</result>

</action>

<action name="loginAction" class="com.examine3.action.loginAction">
<!-- <result name = "input">login.jsp</result>  -->
<result name = "supper">/userlist.jsp</result>
<result name = "success">/Success.jsp</result>
<result name = "error">/Error.jsp</result>
<!-- <interceptor-ref name="loginInterceptor"></interceptor-ref> -->
</action>

<action name="updateAction" class="com.examine3.action.operationAction" method="update">
<result name = "success">/userlist.jsp</result>
<result name = "error">/update.jsp</result>
</action>

<action name="getallAction" class="com.examine3.action.loginAction" method="getall">
<result name = "success">/userlist.jsp</result>
<result name = "error">/update.jsp</result>
</action>

<action name="deleteAction" class="com.examine3.action.operationAction" method="delete">
<result name = "success"  type="redirect" >getallAction</result>
<result name = "error">error.jsp</result>
</action>
</package>

</struts>