标准的json格式 {"key":"value"}
客户端登录验证ajax请求
function savelogin(){
var username = $("#username").val();
var pwd = $("#pwd").val();
if(Mg.isEmpty(username)){
swal("提示", "请填写用户名", "warning");
return;
}
if(Mg.isEmpty(pwd)){
swal("提示", "请填写密码", "warning");
return;
}
if(!checkIdcard(username)){
swal('提示','身份证号码格式错误','warning');
return;
}
$.ajax({
url:"main?xwl=123456789097&username=" + username + "&pwd=" + pwd,
dataType: "json",
success:function(r){
if(r.succ){ //返回值的获取
window.location.href = "main?xwl=123456789&XXXXX=" + r.msg;
}
else{
swal("提示", r.msg, "warning");
}
}
});
服务端的验证还有response
var username = request.getParameter('username'); var pwd = request.getParameter('pwd'); var flag = true, msg = ""; if(Wb.isEmpty(username)){ flag = false; msg = "请输入用户名"; } else if(Wb.isEmpty(pwd)){ flag = false; msg = "请输入密码"; } else{ var conn = null, ps = null, rs = null; try{ conn = DbUtil.getConnection("java:comp/env/jdbc/dbname"); var sql = "SELECT TID,TPHONE FROM BBBBBBB WHERE TIDCARD ='" + MyUtil.c(username) + "'"; ps = conn.prepareStatement(sql); rs = ps.executeQuery(); if(rs.next()){ //一个一个找对应的 var tid = rs.getString("TID"); var tPhone = rs.getString("tPhone").trim(); tPhone = tPhone.substring(tPhone.length() - 6); if(tPhone != pwd){ flag = false; msg = "密码错误,请重新输入"; } else{ request.getSession().setAttribute("BJ_TID", tid); msg = tid; } } else{ flag = false; msg = "用户名未找到"; } } finally { DbUtil.closeResultSet(rs); DbUtil.closeStatement(ps); DbUtil.closeConnection(conn); } } WebUtil.response(response, "{\"succ\": " + flag + ", \"msg\":\"" + msg + "\"}"); //最主要的是这个WebUtil.response(response,"标准的json字符串给客户端反回去");
要将应户名相等或者密码相等的判断语句放在服务器这样安全一些。