用户登陆时不论用户名还是密码错误统一返回"用户名或密码错误"

whyclj

2020-06-17 28579a194243cfb3cfc4cbc2012d0ca547eceaf6

用户登陆时不论用户名还是密码错误统一返回"用户名或密码错误"

 zijing/src/com/fgkj/Filters/Encroding.java

@@ -8,6 +8,7 @@
import javax.servlet.ServletException;

import javax.servlet.ServletRequest;

import javax.servlet.ServletResponse;

import javax.servlet.http.HttpServletRequest;



public class Encroding implements Filter{



@@ -18,6 +19,13 @@
        response.setCharacterEncoding("UTF-8");

        response.setContentType("text/html;charset=utf-8");

        //System.out.println("编码修改成功");

        HttpServletRequest req = (HttpServletRequest)request;

        //解决安全性问题：跨站点请求伪造

        String referer = req.getHeader("Referer");   //REFRESH  
        String serverName = req.getServerName();

        if(null != referer&&referer.indexOf(serverName) < 0){            
            req.getRequestDispatcher(req.getRequestURI()).forward(req, response);  
        }

        chain.doFilter(request, response);

    }




 zijing/src/global_zh_CN.properties

@@ -8,6 +8,7 @@
Enter=\u767b\u5f55
Username_error=\u7528\u6237\u540d\u9519\u8bef
Password_error=\u5bc6\u7801\u9519\u8bef 
UsernameOrPassword_error = \u7528\u6237\u540d\u6216\u5bc6\u7801\u9519\u8bef
You\ are\ not\ logged\ in,\ please\ log\ in=\u60a8\u8fd8\u672a\u767b\u9646\uff0c\u8bf7\u767b\u9646
The\ landing\ on\ the\ account\ in\ another\ host,\ please\ log\ in\ again=\u8be5\u8d26\u53f7\u5728\u53e6\u4e00\u53f0\u4e3b\u673a\u4e0a\u767b\u9646\uff0c\u8bf7\u91cd\u65b0\u767b\u9646