基于javaweb+mysql的jsp+servlet宿舍管理系统(超级管理员、宿舍管理员、学生)

httpservletrequest.getsession().setattribute("session_user", user);
chain.dofilter(httpservletrequest, response);
}else if(requesturi.startswith(path+"/student.action") && !roleid.equals(2)) {
//当用户发送的请求是学生模块的请求时，只有当前用户角色不是学生就放行
httpservletrequest.getsession().setattribute("session_user", user);
chain.dofilter(httpservletrequest, response);
}else if(requesturi.startswith(path+"/record.action") ||
requesturi.startswith(path+"/password.action")||
requesturi.startswith(path+"/loginout.action")||
requesturi.startswith(path+"/index.action")) {
//当用户发送的请求是考勤、修改密码、退出模块的请求时，不管用户的角色是什么，都放行
httpservletrequest.getsession().setattribute("session_user", user);
chain.dofilter(httpservletrequest, response);
}else {
httpservletrequest.getrequestdispatcher("/index.jsp").forward(httpservletrequest, response);
}
}
/**
* @see filter#init(filterconfig)
*/
public void init(filterconfig fconfig) throws servletexception {
// todo auto-generated method stub
}
}
/**
* servlet implementation class loginservlet
*/
@webservlet("/login")
public class loginservlet extends httpservlet {
private static final long serialversionuid = 1l;

string keyword = request.getparameter("keyword");
//当前要查询的页面
string pageindex = request.getparameter("pageindex");
system.out.println("dormbuildid:"+dormbuildid+"  searchtype:"+searchtype+"  keyword:"+keyword);
//默认查询第一页，需两个参数，当前页码pageindex，每页展示的条数  
pagemodel pagemodel = new pagemodel();
if(pageindex != null && !pageindex.equals("")) {
pagemodel.setpageindex(integer.parseint(pageindex));
}
list<user> students = userservice.findstudent(dormbuildid,searchtype,keyword,user,pagemodel);
//获取查询处理的总数量
integer  totalnum = userservice.findtotalnum(dormbuildid,searchtype,keyword,user);
system.out.println("totalnum:"+totalnum);
system.out.println("students:"+students);
request.setattribute("totalnum", totalnum);
request.setattribute("pageindex", pagemodel.getpageindex());
request.setattribute("dormbuildid", dormbuildid);
request.setattribute("searchtype", searchtype);
request.setattribute("keyword", keyword);
request.setattribute("students", students);
request.setattribute("mainright", "/web-inf/jsp/studentlist.jsp");
request.getrequestdispatcher("/web-inf/jsp/main.jsp").forward(request, response);
}else if(action != null & action.equals("preadd")) {
//根据用户角色查询宿舍楼进行添加学生，
//如当前用户 为宿舍管理员，他只能添加学生到其管理的宿舍楼
//跳转到学生的添加页面
request.setattribute("mainright", "/web-inf/jsp/studentaddorupdate.jsp");
request.getrequestdispatcher("/web-inf/jsp/main.jsp").forward(request, response);
}else if(action != null & action.equals("save")) {
//保存学生
string stucode = request.getparameter("stucode");
string name = request.getparameter("name");
string sex = request.getparameter("sex");
string tel = request.getparameter("tel");
string password = request.getparameter("password");
string  dormbuildid= request.getparameter("dormbuildid");
string dormcode = request.getparameter("dormcode");
system.out.println("stucode:"+stucode+"  name:"+name+"   sex:"+sex+
"  tel:"+tel+" password:"+password+" dormbuildid:"+dormbuildid+
"  dormcode:"+dormcode);

}
}else {
//保存
if(dormbuild != null) {
//当前用户输入的宿舍楼名已存在
//表示跳转到宿舍楼添加页面
request.setattribute("error", "当前宿舍楼名已存在，请重新输入！");
request.setattribute("mainright", "/web-inf/jsp/dormbuildaddorupdate.jsp");
request.getrequestdispatcher("/web-inf/jsp/main.jsp").forward(request, response);
}else {
//当前用户输入的宿舍楼名不存在，则保存用户输入的信息到数据库
dormbuild build = new dormbuild();
build.setname(name);
build.setremark(remark);
build.setdisabled(0);
dormbuildservice.save(build);
//保存完成，跑到宿舍楼管理列表页，查询所有宿舍楼
list<dormbuild>  builds  = dormbuildservice.find();
//查询所有的宿舍楼，在select中遍历
list<dormbuild>  buildselects = dormbuildservice.find();
request.setattribute("buildselects", buildselects);
request.setattribute("builds", builds);
request.setattribute("mainright", "/web-inf/jsp/dormbuildlist.jsp");
request.getrequestdispatcher("/web-inf/jsp/main.jsp").forward(request, response);
}
}
}else if(action != null & action.equals("preupdate")) {
//根据宿舍楼id，查询宿舍楼
dormbuild build = dormbuildservice.findbyid(integer.parseint(id));
//保存宿舍楼信息，到前端页面展示
request.setattribute("build", build);
//跳转到宿舍楼修改页面
request.setattribute("mainright", "/web-inf/jsp/dormbuildaddorupdate.jsp");
request.getrequestdispatcher("/web-inf/jsp/main.jsp").forward(request, response);
}else if(action != null & action.equals("deleteoracive")) {
//删除或激活
string disabled = request.getparameter("disabled");
dormbuild  dormbuild = dormbuildservice.findbyid(integer.parseint(id));
system.out.println("更新前dormbuild："+dormbuild);
dormbuild.setdisabled(integer.parseint(disabled));
system.out.println("更新后dormbuild："+dormbuild);

//如当前用户 为宿舍管理员，他只能添加学生到其管理的宿舍楼
//跳转到学生的添加页面
request.setattribute("mainright", "/web-inf/jsp/studentaddorupdate.jsp");
request.getrequestdispatcher("/web-inf/jsp/main.jsp").forward(request, response);
}else if(action != null & action.equals("save")) {
//保存学生
string stucode = request.getparameter("stucode");
string name = request.getparameter("name");
string sex = request.getparameter("sex");
string tel = request.getparameter("tel");
string password = request.getparameter("password");
string  dormbuildid= request.getparameter("dormbuildid");
string dormcode = request.getparameter("dormcode");
system.out.println("stucode:"+stucode+"  name:"+name+"   sex:"+sex+
"  tel:"+tel+" password:"+password+" dormbuildid:"+dormbuildid+
"  dormcode:"+dormcode);
//未存在，则保存
user student = userservice.findbystucode(stucode);
if(id != null && !id.equals("")) {
//更新之前，查询数据库是否已经存在当前学号的学生，如已存在，则跳转到添加页面
if(student != null  && !student.getid().equals(integer.parseint(id))) {
system.out.println("根据学生学号查询student:"+student);
//当前学号的学生已存在，请重新修改，跳转到该学生的修改页面
request.getrequestdispatcher("/student.action?action=preupdate&id="+id).forward(request, response);;
}else {
//更新
user studentupdate = userservice.findbyid(integer.parseint(id));
studentupdate.setstucode(stucode);
studentupdate.setsex(sex);
studentupdate.settel(tel);
studentupdate.setname(name);
studentupdate.setpassword(password);
studentupdate.setdormbuildid(integer.parseint(dormbuildid));
studentupdate.setdormcode(dormcode);
userservice.updatestudent(studentupdate);
response.sendredirect(getservletcontext().getcontextpath()+"/student.action?action=list");
}
}else {
//保存
if(student != null) {
//在保存之前，查询数据库是否已经存在当前学号的学生，如已存在，则跳转到添加页面
response.sendredirect(getservletcontext().getcontextpath()+"/student.action?action=preadd");
}else {
user user2 = new user();
user2.setstucode(stucode);
user2.setsex(sex);
user2.settel(tel);

}
}
/**
* servlet implementation class recordservlet
*/
@webservlet("/record.action")
public class recordservlet extends httpservlet {
private static final long serialversionuid = 1l;
/**
* @see httpservlet#httpservlet()
*/
public recordservlet() {
super();
// todo auto-generated constructor stub
}
/**
* @see httpservlet#service(httpservletrequest request, httpservletresponse response)
*/
protected void service(httpservletrequest request, httpservletresponse response) throws servletexception, ioexception {
system.out.println("====record.action========");
//在tomcat8.0中，如果是post请求，传递过来的中文可能会出现乱码问题 
request.setcharacterencoding("utf-8");

userservice userservice = new userserviceimpl();
recordservice recordservice = new recordserviceimpl();
dormbuildservice buildservice = new dormbuildserviceimpl();
if(action != null & action.equals("list")) {
//查询缺勤记录并展示
integer roleid = usercurr.getroleid();
list<dormbuild>  builds = new arraylist<dormbuild>();
if(roleid.equals(0)) {
//如当前用户是超级管理员，他能将学生添加到所有的宿舍楼,查询所有宿舍楼
builds = buildservice.findall();
}else if(roleid.equals(1)) {
//如当前用户 为宿舍管理员，他只能添加学生到其管理的宿舍楼
builds =  buildservice.findbyuserid(usercurr.getid());
}
system.out.println("builds:"+builds);
request.setattribute("builds", builds);
string startdate = request.getparameter("startdate");
string enddate = request.getparameter("enddate");
string dormbuildid = request.getparameter("dormbuildid");
string searchtype = request.getparameter("searchtype");
string keyword = request.getparameter("keyword");
string pageindex = request.getparameter("pageindex");
system.out.println("startdate:"+startdate+" enddate:"+enddate+" dormbuildid:"+dormbuildid+
" searchtype:"+searchtype+" keyword:"+keyword+"  pageindex:"+pageindex);
//默认查询第一页，需两个参数，当前页码pageindex，每页展示的条数  
pagemodel pagemodel = new pagemodel();
if(pageindex != null && !pageindex.equals("")) {
pagemodel.setpageindex(integer.parseint(pageindex));
}
//分页查询考勤记录
list<record> records = recordservice.findrecords(startdate,enddate,dormbuildid,
searchtype,keyword,usercurr,pagemodel);
system.out.println("records:"+records);
//获取查询结果总数
integer totalnum = recordservice.gettotalnum(startdate,enddate,dormbuildid,
searchtype,keyword,usercurr);
system.out.println("totalnum:"+totalnum);
request.setattribute("totalnum", totalnum);
request.setattribute("startdate", startdate);
request.setattribute("enddate", enddate);
request.setattribute("dormbuildid", dormbuildid);
request.setattribute("searchtype", searchtype);
request.setattribute("keyword", keyword);
request.setattribute("pageindex", pagemodel.getpageindex());
request.setattribute("records", records);

dormbuild  dormbuild = dormbuildservice.findbyname(name);
system.out.println("dormbuild:"+dormbuild);
if(id != null && !id.equals("")) {
//更新
if(dormbuild != null && !dormbuild.getid().equals(integer.parseint(id))) {
//表示跳转到宿舍楼添加页面
request.setattribute("error", "当前宿舍楼名已存在，请重新输入！");
//根据宿舍楼id，查询宿舍楼
dormbuild build = dormbuildservice.findbyid(integer.parseint(id));
//保存宿舍楼信息，到前端页面展示
request.setattribute("build", build);
request.setattribute("mainright", "/web-inf/jsp/dormbuildaddorupdate.jsp");
request.getrequestdispatcher("/web-inf/jsp/main.jsp").forward(request, response);
}else {
dormbuild = dormbuildservice.findbyid(integer.parseint(id));
dormbuild.setname(name);
dormbuild.setremark(remark);
//执行更新
dormbuildservice.update(dormbuild);
//更新完成，跑到宿舍楼管理列表页，查询所有宿舍楼
list<dormbuild>  builds  = dormbuildservice.find();
//查询所有的宿舍楼，在select中遍历
list<dormbuild>  buildselects = dormbuildservice.find();
request.setattribute("buildselects", buildselects);
request.setattribute("builds", builds);
request.setattribute("mainright", "/web-inf/jsp/dormbuildlist.jsp");
request.getrequestdispatcher("/web-inf/jsp/main.jsp").forward(request, response);
}
}else {
//保存
if(dormbuild != null) {
//当前用户输入的宿舍楼名已存在
//表示跳转到宿舍楼添加页面
request.setattribute("error", "当前宿舍楼名已存在，请重新输入！");
request.setattribute("mainright", "/web-inf/jsp/dormbuildaddorupdate.jsp");
request.getrequestdispatcher("/web-inf/jsp/main.jsp").forward(request, response);

string oldpassword = request.getparameter("oldpassword");
//当前登录的用户原始密码
string password = usercur.getpassword();
if(!password.equals(oldpassword)) {
response.setcharacterencoding("utf-8");
printwriter writer = response.getwriter();
writer.print("您输入的原始密码错误，请重新输入！");
}
}else if(action != null && action.equals("change")) {
//修改密码
string newpassword = request.getparameter("newpassword");
usercur.setpassword(newpassword);
userservice.updatepassword(usercur);
system.out.println("修改密码usercur:"+usercur);
request.getrequestdispatcher("/index.jsp").forward(request, response);
}
}
}
/**
* servlet implementation class loginoutservlet
*/
@webservlet("/loginout.action")
public class loginoutservlet extends httpservlet {
private static final long serialversionuid = 1l;
/**
* @see httpservlet#httpservlet()
*/
public loginoutservlet() {
super();
// todo auto-generated constructor stub
}

request.setattribute("searchtype", searchtype);
request.setattribute("keyword", keyword);
request.setattribute("users", users);
request.setattribute("mainright", "dormmanagerlist.jsp");
request.getrequestdispatcher("/web-inf/jsp/main.jsp").forward(request, response);
}else if(action != null & action.equals("preadd")) {
//跳转到宿舍管理员添加页面
request.setattribute("mainright", "dormmanageraddorupdate.jsp");
request.getrequestdispatcher("/web-inf/jsp/main.jsp").forward(request, response);
}else if(action != null & action.equals("save")) {
system.out.println("======保存宿舍管理员=========");
string name = request.getparameter("name");
string password = request.getparameter("password");
string sex = request.getparameter("sex");
string tel = request.getparameter("tel");
//获取复选框中用户选中的宿舍楼
string[] dormbuildids = request.getparametervalues("dormbuildid");
system.out.println("name:"+name+"  pass:"+password+"  sex:"+sex+"  tel:"+tel+"  dormbuildids:"+arrays.tostring(dormbuildids));
if(id == null || id.equals("")) {
//保存
user user = new user(name, password, sex, tel, null, 1);
user.setdisabled(0);
//当前登录的用户
user user2 = (user) request.getsession().getattribute("session_user");
user.setcreateuserid(user2.getid());
userservice.savemanager(user,dormbuildids);
system.out.println("getservletcontext().getcontextpath():"+getservletcontext().getcontextpath());
}else {
//修改
//通过宿舍管理员id获取宿舍管理员
user user = userservice.findbyid(integer.parseint(id));
user.setname(name);
user.setpassword(password);
user.setsex(sex);
user.settel(tel);
userservice.updatemanager(user);
//修改还需修改宿舍管理员与宿舍楼的中间表
//① 删除当前宿舍管理员管理的所有宿舍楼
buildservice.deletebyuserid(user.getid());
//② 新增当前宿舍管理员管理的所有宿舍楼  
buildservice.savemanagerandbuild(user.getid(),dormbuildids);
}

user user = userservice.findbyid(integer.parseint(id));
//根据宿舍管理员id获取宿舍管理员管理的楼栋
list<dormbuild> userbuilds = buildservice.findbyuserid(user.getid());
user.setdormbuilds(userbuilds);
system.out.println("user:"+user);
list<integer>  userbuildids = new arraylist<>();
//遍历当前宿舍管理员管理的所有宿舍，获取当时当前宿舍管理员管理的所有宿舍id
for (dormbuild userbuild : userbuilds) {
userbuildids.add(userbuild.getid());
}
request.setattribute("userbuildids", userbuildids);
request.setattribute("user", user);
request.setattribute("mainright", "dormmanageraddorupdate.jsp");
request.getrequestdispatcher("/web-inf/jsp/main.jsp").forward(request, response);
}else if(action != null & action.equals("deleteoracive")) {
//删除或激活
string  disabled =request.getparameter("disabled");
//通过宿舍管理员id获取宿舍管理员
user user = userservice.findbyid(integer.parseint(id));
user.setdisabled(integer.parseint(disabled));
userservice.updatemanager(user);
//跳转到宿舍管理员列表页，查看所有的宿舍管理员
//重定向，请求链断开，不能在下一个servlet或jsp中获取保存在request中的参数
response.sendredirect(getservletcontext().getcontextpath()+"/dormmanager.action?action=list");
}
}
}
/**

/**
* servlet implementation class recordservlet
*/
@webservlet("/record.action")
public class recordservlet extends httpservlet {
private static final long serialversionuid = 1l;
/**
* @see httpservlet#httpservlet()
*/
public recordservlet() {
super();
// todo auto-generated constructor stub
}

/**
* 该过滤器拦截所有以.action的请求
*/
@webfilter("*.action")
public class loginfilter implements filter {
/**
* default constructor. 
*/
public loginfilter() {
// todo auto-generated constructor stub
}
/**
* @see filter#destroy()
*/
public void destroy() {
// todo auto-generated method stub
}
/**
* @see filter#dofilter(servletrequest, servletresponse, filterchain)
*/
public void dofilter(servletrequest request, servletresponse response, filterchain chain) throws ioexception, servletexception {
system.out.println("------------登录拦截器------------");
httpservletrequest  httpservletrequest = (httpservletrequest) request;
httpsession  session = httpservletrequest.getsession();
//①获取登录后保存在session中的用户信息
user user  = (user) session.getattribute("session_user");
system.out.println("session user:"+user);

public class loginoutservlet extends httpservlet {
private static final long serialversionuid = 1l;
/**
* @see httpservlet#httpservlet()
*/
public loginoutservlet() {
super();
// todo auto-generated constructor stub
}
/**
* @see httpservlet#service(httpservletrequest request, httpservletresponse response)
*/
protected void service(httpservletrequest request, httpservletresponse response) throws servletexception, ioexception {
system.out.println("========退出==========");
//清除保存在session中的用户信息
request.getsession().removeattribute("session_user");
//清除保存在cookie中的用户信息
//根据名字查找保存当前项目的学号和密码
cookie  cookie = cookieutil.getcookiebyname(request,"cookie_name_pass");
if(cookie != null) {
//设计cookie有效时间0 ，马上失效
cookie.setmaxage(0);
//设置cookie作用范围
cookie.setpath(request.getcontextpath());
system.out.println("request.getcontextpath():"+request.getcontextpath());
//将cookie响应出去
response.addcookie(cookie);
}
response.sendredirect("index.jsp");
}
}
public class cookieutil {
public static void addcookie(string cookiename, int time, 
httpservletrequest request,httpservletresponse response, 
string stucode, string password) {
//根据保存学号和密码的cookie的名字获取cookie
cookie cookie = getcookiebyname(request,cookiename);
//如有该项目保存学号和密码的cookie，则更改cookie的值，如未有则新建cookie
if(cookie != null) {
cookie.setvalue(stucode+"#"+password);

response.sendredirect(getservletcontext().getcontextpath()+"/record.action?action=list");
}else {
request.setattribute("record", record);
request.setattribute("mainright", "/web-inf/jsp/recordaddorupdate.jsp");
request.getrequestdispatcher("/web-inf/jsp/main.jsp").forward(request, response);
}
}else if(action != null && action.equals("deleteoracive")) {
system.out.println("======删除或者激活=========");
//删除或者激活
string disabled = request.getparameter("disabled");
record record = recordservice.findbyid(integer.parseint(id));
record.setdisabled(integer.parseint(disabled));
//查看用户是否有修改考勤记录的权限
user user = userservice.findstucodeandmanager(record.getuser().getstucode(),usercurr);
system.out.println("修改权限user ："+user);
if(user == null) {
//无删除激活权限
response.sendredirect(getservletcontext().getcontextpath()+"/record.action?action=list");
}else {
//有删除激活权限
recordservice.update(record);
//跳转到缺勤记录列表页
response.sendredirect(getservletcontext().getcontextpath()+"/record.action?action=list");
}
}
}
}
/**
* servlet implementation class dormbuildservlet
*/

//将cookie响应出去
response.addcookie(cookie);
}
response.sendredirect("index.jsp");
}
}
public class cookieutil {
public static void addcookie(string cookiename, int time, 
httpservletrequest request,httpservletresponse response, 
string stucode, string password) {
//根据保存学号和密码的cookie的名字获取cookie
cookie cookie = getcookiebyname(request,cookiename);
//如有该项目保存学号和密码的cookie，则更改cookie的值，如未有则新建cookie
if(cookie != null) {
cookie.setvalue(stucode+"#"+password);
}else {
cookie = new cookie(cookiename, stucode+"#"+password);
}
//设置cookie的有效时间
cookie.setmaxage(time);
//设置cookie的作用范围 只在当前项目范围中有效
cookie.setpath(request.getcontextpath());
system.out.println("request.getcontextpath():"+request.getcontextpath());
response.addcookie(cookie);
}
public static cookie getcookiebyname(httpservletrequest request, string cookiename) {
//从request中获取当前项目的作用cookie
cookie[] cookies = request.getcookies();
//遍历所有cookie
if(cookies != null && cookies.length >0) {
for (cookie cookie : cookies) {
//根据cookie的名字获取cookie，并返回
if(cookie.getname().equals(cookiename)) {
return cookie;

/**
* servlet implementation class recordservlet
*/
@webservlet("/record.action")
public class recordservlet extends httpservlet {
private static final long serialversionuid = 1l;
/**
* @see httpservlet#httpservlet()
*/
public recordservlet() {
super();
// todo auto-generated constructor stub
}
/**
* @see httpservlet#service(httpservletrequest request, httpservletresponse response)
*/
protected void service(httpservletrequest request, httpservletresponse response) throws servletexception, ioexception {
system.out.println("====record.action========");
//在tomcat8.0中，如果是post请求，传递过来的中文可能会出现乱码问题 
request.setcharacterencoding("utf-8");
string action = request.getparameter("action");
string id = request.getparameter("id");

request.setattribute("pageindex", pagemodel.getpageindex());
request.setattribute("records", records);
request.setattribute("mainright", "/web-inf/jsp/recordlist.jsp");
request.getrequestdispatcher("/web-inf/jsp/main.jsp").forward(request, response);
}else if(action != null && action.equals("preadd")) {
//跳转到添加页面
request.setattribute("mainright", "/web-inf/jsp/recordaddorupdate.jsp");
request.getrequestdispatcher("/web-inf/jsp/main.jsp").forward(request, response);
}else if(action != null && action.equals("save")) {
//保存
string stucode = request.getparameter("stucode");
string date = request.getparameter("date");
string remark = request.getparameter("remark");
system.out.println("remark:"+remark+"  date:"+date+"  stucode:"+stucode);
//做保存前，判断用户是否有添加该学号学生缺勤记录的权限
user user = userservice.findstucodeandmanager(stucode,usercurr);
system.out.println("查询添加缺勤权限user:"+user);
if(id != null && !id.equals("")) {
//更新
if(user != null) {
//有修改权限
record record = recordservice.findbyid(integer.parseint(id));
try {
record.setdate(new simpledateformat("yyyy-mm-dd").parse(date));
record.setremark(remark);
record.setstudentid(user.getid());
recordservice.update(record);
} catch (parseexception e) {
e.printstacktrace();
}
response.sendredirect(getservletcontext().getcontextpath()+"/record.action?action=list");
}else {
//无修改权限
response.sendredirect(getservletcontext().getcontextpath()+"/record.action?action=list");
}