Hands-On Java web passando por Servlets, JSP, JSTL, JDBC, Hibernate, DAO, MVC, etc

MVC/DAO

JSP/JSTL/EL

JDBC/ORM

14

20

13

20

12

20

11

20

10

20

09

20

08

20

07

20

06

20

05

20

04

20

03

20

02

20

Agenda
• Java Servlet

• Java Server Pages - JSP

• JavaServer Pages Standard Tag Library - JSTL

• Expression Language - EL

• Java Database Connectivity - JDBC

• Data Access Object - DAO

• Model View Controller - MVC

• Hibernate

i
g
lo

p
js
.
n

versão 1.0

<!DOCTYPE html>
<html>
<head>
<title>Login</title>
</head>
<body>
<form method="post" action=“home.jsp">
Login: <input name="login" type="text"> <br>
Senha: <input name="senha" type="password"><br>
<input type="submit">
</form>
</body>
</html>

p
js
.
e

versão 1.0

m
o
h

<!DOCTYPE html>
<html>
<head>
<title>HOME</title>
</head>
<body>
Bem vindo, <%=request.getParameter("login")%>
</body>
</html>

Autenticador.java

versão 2.0

package br.com.mariojp;

!
import
import
import
import

!

java.io.*;
javax.servlet.*;
javax.servlet.annotation.*;
javax.servlet.http.*;

Regra:  
Se o login igual a senha
esta ok!

@WebServlet("/Autenticador")
public class Autenticador extends HttpServlet {

!

}

protected void doPost(HttpServletRequest request,
HttpServletResponse response) throws ServletException,
IOException {
String login = request.getParameter("login");
String senha
= request.getParameter("senha");
if(login!=null && senha!=null &&
login.equalsIgnoreCase(senha)){
response.sendRedirect("home.jsp?user="+login);
}else{
String erro = "Usuario ou Senha Invalidos!";
response.sendRedirect("login.jsp?erro="+erro);

}
}

i
g
lo

p
js
.
n

versão 2.0

<!DOCTYPE html>
<html>
<head>
</head>
<body>
<form method="post" action=“Autenticador">
</form>

<%

String erro = request.getParameter("erro");

if(erro!=null && !erro.trim().equals("")){

out.print(erro);

}

%>
</body>
</html>

Aciona o servlet

Apresenta o
erro de login

p
js
.
e

versão 2.0

m
o
h

<!DOCTYPE html>
<html>
<head>
<title>HOME</title>
</head>
<body>
Bem vindo, <%=request.getParameter("user")%>
</body>
</html>

U

.j
io
r
a
u
s

a
v
a


!

versão 3.0

public class Usuario {
private Integer id;
private String login;
private String senha;

public Integer getId() {
return id;
}
public void setId(Integer id) {
this.id = id;
}
public String getLogin() {
return login;
}
public void setNome(String login) {
this.login = login;
}
public String getSenha() {
return senha;
}
public void setSenha(String senha) {
this.senha = senha;
}
}

Autenticador.java

versão 3.0


!

HttpServletResponse response) throws ServletException, IOException {
Usuario user = new Usuario();
String senha = request.getParameter("senha");
user.setLogin(login);
user.setSenha(senha);
if(autenticar(user)){
request.getSession().setAttribute("user", user);
response.sendRedirect("home.jsp");
}else{
request.setAttribute("erro", "Usuario ou Senha Invalidos!");
RequestDispatcher d= request.getRequestDispatcher("login.jsp");
d.forward(request,response);
}
}

private boolean autenticar(Usuario user) {...}

!
}

Autenticador.java

versão 3.0

!

private boolean autenticar(Usuario user) {
boolean autenticado = false;
if(user.getLogin()!=null && user.getSenha()!=null
&& user.getLogin().equals(user.getSenha())){
autenticado = true;
}
return autenticado;
}

i
g
lo

p
js
.
n

versão 3.0

<!DOCTYPE html>
<html>
<head>
</head>
<body>
</form>

<%

String erro = (String) request.getAttribute(“erro”);

if(erro!=null && !erro.trim().equals("")){

out.print(erro);

}

%>
</body>
</html>

m
o
h

p
js
.
e

versão 3.0

<!DOCTYPE html>
<%@page import="br.com.mariojp.Usuario"%>
<html>
<head>
<title>HOME</title>
</head>
<body>
<% Usuario user = (Usuario) session.getAttribute("user");%>
Bem vindo, <%=user.getLogin() %>
</body>
</html>

Revisão Rapida
• Java Servlet

• Java Server Pages - JSP

• Model View Controller - MVC

E agora?
• JavaServer Pages Standard Tag Library - JSTL

• Expression Language - EL

WEB-INFlib
• javax-1.servlet.jsp.jstl-1.2.1.jar

• javax-1.servlet.jsp.jstl-api-1.2.1.jar

i
g
lo

p
js
.
n

versão 3.1

<!DOCTYPE html>
<%@ taglib uri="http://java.sun.com/jsp/jstl/core" prefix="c" %>
<html>
<head>
</head>
<body>
</form>
<c:out value="${erro}"/>
</body>
</html>

m
o
h

p
js
.
e

versão 3.1

<!DOCTYPE html>
<html>
<head>
<title>HOME</title>
<jsp:useBean id="user" class="br.com.mariojp.Usuario" scope=“session” />
</head>
<body>
Bem vindo, <c:out value=“${user.login}" />
</body>
</html>

HSQLDB
java -cp hsqldb.jar org.hsqldb.server.Server -database.0 ﬁle:mydb --dbname.0 banco

HSQL Database Manager
!

Type: HSQL Database Engine Server

Driver: org.hsqldb.jdbcDriver

URL: jdbc:hsqldb:hsql://localhost/banco

User: SA

HSQLDB
CREATE TABLE USUARIOS ( USUARIO_ID INTEGER
IDENTITY, LOGIN varchar(100) NOT NULL , SENHA
varchar(100) NOT NULL ) ;

!

INSERT INTO USUARIOS ( "LOGIN", "SENHA" ) VALUES
('user', ‘1234’);

!

SELECT * FROM USUARIOS;

BancoUtil.java

versão 4.0
!
import java.sql.Connection;
import java.sql.DriverManager;
!
public class BancoUtil {

private static Connection connection;

static {

try {

Class.forName("org.hsqldb.jdbc.JDBCDriver" );

connection = DriverManager.getConnection(
"jdbc:hsqldb:hsql://localhost/banco", "SA", "");

} catch (Exception e) {
e.printStackTrace();

}
}

public static Connection getConnection() {

return connection;
}
}

Autenticador.java

versão 4.0

Connection con = BancoUtil.getConnection();
try {
Statement stmt = con.createStatement();
ResultSet resultSet = stmt.executeQuery(
"select * from usuarios where "+
"login='"+user.getLogin().trim()+"' and "+
"senha='"+user.getSenha().trim()+"';" );
if(resultSet.next()){
autenticado = true;
}
resultSet.close();
stmt.close();
} catch (SQLException e) {
}
return autenticado;
}

Segurança
• Voce consegue acessar o home.jsp?

• Pela url

• Sql Injection

m
o
h

p
js
.
e

versão 4.1

<!DOCTYPE html>
<html>
<head>
<title>HOME</title>
<jsp:useBean id="user" class="br.com.mariojp.Usuario" scope=“session” />
</head>
<body>
<c:if test="${user.login == null}">
<c:redirect url=“login.jsp" />
</c:if>
Bem vindo, <c:out value=“${user.login}" />
</body>
</html>

Teste?
• Use Login = 123 e Senha = ' or '1' = ‘1

• Use Login = ' OR 1=1 --

Autenticador.java

versão 4.1
try {
String sql = "select * from usuarios where "
+ "login=? and senha=?;";
PreparedStatement pstmt = con.prepareStatement(sql);
pstmt.setString(1, user.getLogin());
pstmt.setString(2, user.getSenha());
ResultSet resultSet = pstmt.executeQuery();
autenticado = true;
}
resultSet.close();
pstmt.close();
}
return autenticado;
}


versão 5.0

!
import
import
import
import

java.sql.Connection;
java.sql.PreparedStatement;
java.sql.ResultSet;
java.sql.SQLException;

!
public class UsuarioDAO {

!

}

public boolean autenticar(Usuario user) {
try {
String sql = "select * from usuarios where login=? and senha=?;";
PreparedStatement pstmt = con.prepareStatement(sql);
pstmt.setString(1, user.getLogin());
pstmt.setString(2, user.getSenha());
ResultSet resultSet = pstmt.executeQuery();
autenticado = true;
}
resultSet.close();
pstmt.close();
}
return autenticado;
}

UsuarioDAO.java

Autenticador.java

versão 3.0

private UsuarioDAO usuarioDAO = new UsuarioDAO();
HttpServletResponse response) throws ServletException, IOException {
Usuario user = new Usuario();
String senha = request.getParameter("senha");
user.setLogin(login);
user.setSenha(senha);
if(usuarioDAO.autenticar(user)){
request.getSession().setAttribute("user", user);
response.sendRedirect("home.jsp");
}else{
request.setAttribute("erro", "Usuario ou Senha Invalidos!");
RequestDispatcher d= request.getRequestDispatcher("login.jsp");
d.forward(request,response);
}
}

}

Hibernate

• Framework de mapeamento objeto
relacional

WEB-INFlib
• hibernate-core-4.3.0.Final.jar

• antlr-2.7.7.jar

• dom4j-1.6.1.jar

• hibernate-commons-annotations-4.0.4.Final.jar

• hibernate-jpa-2.1-api-1.0.0.Final.jar

• jandex-1.1.0.Final.jar

• javassist-3.18.1-GA.jar

• jboss-logging-3.1.3.GA.jar

• jboss-logging-annotations-1.2.0.Beta1.jar

• jboss-transaction-api_1.2_spec-1.0.0.Final.jar


versão 6.0

!
import java.io.Serializable;

Usuario.java

!
import
import
import
import

javax.persistence.Entity;
javax.persistence.GeneratedValue;
javax.persistence.Id;
javax.persistence.Table;

!

@Entity
@Table(name="usuarios")
public class Usuario implements Serializable{
private static final long serialVersionUID = 1L;

!

@Id
@GeneratedValue
private Integer id;

!

}

private String login;
private String senha;

//get’s e set's


versão 6.0

!
import
import
import
import

org.hibernate.SessionFactory;
org.hibernate.boot.registry.StandardServiceRegistryBuilder;
org.hibernate.cfg.Configuration;
org.hibernate.service.ServiceRegistry;

!
public class BancoUtil {

private static SessionFactory factory;

!

static {
Configuration configuration = new Configuration().configure();
StandardServiceRegistryBuilder serviceRegistryBuilder;
serviceRegistryBuilder = new StandardServiceRegistryBuilder();
serviceRegistryBuilder.applySettings(configuration.getProperties());
ServiceRegistry serviceRegistry = serviceRegistryBuilder.build();
factory = configuration.buildSessionFactory(serviceRegistry);

!

}

!

!
}

public static SessionFactory getFactory() {
return factory;
}

BancoUtil.java

versão 6.0
!
import org.hibernate.Session;
!
public class UsuarioDAO {
!
public boolean autenticar(Usuario user) {
!
String query = "select u from Usuario as u where "
+ "u.login=:login and u.senha=:senha";
Session session = BancoUtil.getFactory().openSession();
session.beginTransaction();
Usuario usuario = (Usuario) session
.createQuery(query)
.setString("login", user.getLogin())
.setString("senha", user.getSenha()).uniqueResult();
session.getTransaction().commit();
session.close();
return usuario != null;
!
}
!
}

UsuarioDAO.java

versão 6.0

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE hibernate-configuration PUBLIC
"-//Hibernate/Hibernate Configuration DTD 3.0//EN"
"http://www.hibernate.org/dtd/hibernate-configuration-3.0.dtd">
<hibernate-configuration >
<session-factory>
<property
name="hibernate.connection.driver_class">org.hsqldb.jdbc.JDBCDriver</property>
<property name="hibernate.connection.url">jdbc:hsqldb:hsql://localhost/
banco</property>
<property name="hibernate.connection.username">SA</property>
<property name="hibernate.connection.password"></property>
<property name="hibernate.connection.pool_size">1</property>
<property name="hibernate.dialect">org.hibernate.dialect.HSQLDialect</
property>
<property name="hibernate.current_session_context_class">thread</property>
<property
name="hibernate.cache.provider_class">org.hibernate.cache.internal.NoCacheProv
ider</property>

<property name="hibernate.show_sql">true</property>

<property name="hibernate.hbm2ddl.auto">create</property>
<mapping class="br.com.mariojp.Usuario"/>
</session-factory>
</hibernate-configuration>

hibernate.cfg.xml

Esta obra está licenciada sob a licença Creative Commons
Atribuição-CompartilhaIgual 3.0 Não Adaptada. Para ver uma cópia
desta licença, visite http://creativecommons.org/licenses/by-sa/3.0/.

Java web
Mario Jorge Pereira
Como me encontrar?
http://www.mariojp.com.br
twitter.com/@mariojp
mariojp@gmail.com

Hands-On Java web passando por Servlets, JSP, JSTL, JDBC, Hibernate, DAO, MVC, etc

More Related Content

What's hot

More from Mario Jorge Pereira

Hands-On Java web passando por Servlets, JSP, JSTL, JDBC, Hibernate, DAO, MVC, etc