在java web 工程中实现登录和安全验证

 1 String username = request.getParameter("username");//获取用户名
 2         String password = request.getParameter("password");//获取密码
 3          
 4         //如果用户名user或密码88888相同
 5         if(username.equals("user") && password.equals("88888")) {
 6             HttpSession session = request.getSession(true);//获取会话
 7              
 8             //密码正确则设置一个session
 9             session.setAttribute("user", new User(username,password));
10             putCookie(request,response,username);//将request、response、username放到cookie里
11 //跳转到console/admin.jsp
12  request.getRequestDispatcher("console/admin.jsp").forward(request, response); 
13 
14 }else { 
15 //否则跳转到ERROR_VIEW
16    request.getRequestDispatcher(ERROR_VIEW).forward(request, response); 
17 }

1 //将/console/*", "/admin/*开头的过滤掉
2 @WebFilter(urlPatterns = { "/console/*", "/admin/*" }, initParams = {
3  //INDEX_VIEW的值为/index.jsp
4         @WebInitParam(name = "INDEX_VIEW", value = "/index.jsp") })