DavyJones2010
- 浏览: 148971 次
- 性别:
- 来自: 杭州
-
文章分类
- 全部博客 (146)
- Android (1)
- SpringFramework (11)
- Maven (4)
- Flex (14)
- DesignPattern (10)
- JavaSE (29)
- Hibernate (0)
- JDBC (4)
- MySQL (16)
- JavaWeb (4)
- JavaScript (5)
- Lucene (7)
- Linux (14)
- Java-Logging (6)
- Miscellanies (5)
- Spring MVC (2)
- Vim (1)
- Java POI (4)
- Eclipse (3)
- Financial Terminology (1)
- Guava (5)
- Data Structure & Algorithm (1)
- Python (0)
最新评论
-
DavyJones2010：
knightdf 写道freezingsky 写道这年头代码和 ...
Java SE: How to Decompress File (.zip) -
knightdf：
freezingsky 写道这年头代码和内容都是copy来co ...
Java SE: How to Decompress File (.zip) -
freezingsky：
这年头代码和内容都是copy来copy去的，至少讲一讲过程分析 ...
Java SE: How to Decompress File (.zip)
曾经用Android开发过学校教务系统的登录功能(jsp/tomcat)，能够成功模拟出Http请求. 但是WordPress的登录功能实现起来要绕一个弯子. 不能直接用HttpClient来得到cookie.
这位兄弟遇到的问题跟我是一样的 http://hi.baidu.com/xtitman/item/eeaef4c7d4a0e2bc0c0a7b69最后也是成功用socket方法把功能实现了. 其中为如何用socket模拟http的post/get请求消息头以及消息体纠结了几个小时。
My codes are as follows. Please ignore the animation part and focus on the method run() in class MyThread. It's just a demo and I didn't make any post-procession with the result. And if you have any question about this demo, please send an e-mail to davyjones2010@gmail.com which I would appreciate much.
package login.activities;
import home.activities.R;
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.OutputStream;
import java.net.Socket;
import java.net.URLEncoder;
import java.net.UnknownHostException;
import org.apache.http.HttpEntity;
import org.apache.http.HttpResponse;
import org.apache.http.client.methods.HttpGet;
import org.apache.http.impl.client.DefaultHttpClient;
import org.apache.http.util.EntityUtils;
import system.standards.Standards;
import android.os.Bundle;
import android.util.DisplayMetrics;
import android.util.Log;
import android.view.View;
import android.view.animation.AlphaAnimation;
import android.view.animation.Animation;
import android.view.animation.Animation.AnimationListener;
import android.view.animation.TranslateAnimation;
import android.widget.Button;
import android.widget.EditText;
import android.widget.LinearLayout;
import android.widget.RelativeLayout;
import android.widget.Toast;
public class LoginActivity extends Standards
{
private Button leftBall = null;
private Button rightBall = null;
private Button submit = null;
private EditText username = null;
private String usernameText = null;
private EditText password = null;
private String passwordText = null;
private DisplayMetrics metrics = null;
private static final String serverIpAddress = "***.***.***.***";
private static final String encodedUsername = "wordpress_af8ad83c4c8ce7c7f7efddce117a5a74=admin%";
private static final String encodedPassword = "wordpress_logged_in_af8ad83c4c8ce7c7f7efddce117a5a74=admin%";
// private static final String LOGIN_URL =
// "http://atom.student.utwente.nl/wp-login.php";
private static String encodedUsernameText = "";
private static String encodedPasswordText = "";
private boolean isAnimated = false;
@Override
protected void onCreate(Bundle savedInstanceState)
{
// TODO Auto-generated method stub
super.onCreate(savedInstanceState);
setContentView(R.layout.login);
getAllWidgets();
submit.setOnClickListener(new Button.OnClickListener()
{
public void onClick(View arg0)
{
// TODO Auto-generated method stub
usernameText = username.getText().toString();
passwordText = password.getText().toString();
Log.d("DEBUG", "USERNAME: " + usernameText);
Log.d("DEBUG", "PASSWORD: " + passwordText);
doLogin(usernameText, passwordText);
}
});
}
private void doLogin(String usernameText, String passwordText)
{
MyLoginThread myLoginThread = new MyLoginThread(usernameText,
passwordText);
myLoginThread.start();
}
private class MyLoginThread extends Thread
{
private String logUsername = null;
private String logPassword = null;
public MyLoginThread(String logUsername, String logPassword)
{
this.logUsername = logUsername;
this.logPassword = logPassword;
}
@Override
public void run()
{
// TODO Auto-generated method stub
// 首先采用socket方式模拟浏览器发出第一个Post请求访问第一个网页(携带的参数是username和 password, 消息头以及消息体必须遵守post/get的严格格式)
// 之后得到第一个网页的HttpResponse, 从中提取出由服务器加密之后的username和password
// 第一个网页由于返回状态码302因而需要进行重定向到真正的DashBoard即登录成功页面
// 重定向是需要重新发送一个请求, 通过FireBug可以得知需要得到的是GET请求
// 并且携带的cookie是包含上次请求返回的加密之后username和password
// 所以这次模拟的重定向可以直接使用HttpGet, 然后调用httpGet.addHeader("Cookie", 加密之后的用户名 + 加密之后的密码 + 其他信息(是静态的信息, 可以由FireBug探测得知));
// 從而得到真正的DashBoard页面
// 为什么第一次请求需要用底层的socket呢？而不直接使用HttpPost/HttpClient呢？可以通过使用相应方法(getHeaders()?getCookie()?)得到cookies, 而不需要自己来拼串
// 原因是发现第一次的请求返回的cookies, 是 httpOnly的, 采用HttpClient方式遍历headers可以发现是打印不出来的！也就是说不能用上层的这些方法了
// 所以之后采用socket方法模拟POST请求了, 得到的是未经过加工处理的response, 采用String的相应方法拼串可以提取出cookies
try
{
Socket socket = new Socket(serverIpAddress, 80);
BufferedReader br = new BufferedReader(new InputStreamReader(
socket.getInputStream(), "UTF-8"));
OutputStream os = socket.getOutputStream();
StringBuffer sb = new StringBuffer(
"POST /wp-login.php HTTP/1.1\r\n");
sb.append("Host: atom.student.utwente.nl\r\n");
sb.append("Connection: keep-alive\r\n");
sb.append("Content-Length: 114\r\n");
sb.append("Cache-Control: max-age=0\r\n");
sb.append("Origin: http://atom.student.utwente.nl\r\n");
sb.append("User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.89 Safari/537.1\r\n");
sb.append("Content-Type: application/x-www-form-urlencoded\r\n");
sb.append("Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\n");
sb.append("Referer: http://atom.student.utwente.nl/wp-login.php\r\n");
sb.append("Accept-Encoding: gzip,deflate,sdch");
sb.append("Accept-Language: en,en-US;q=0.8,zh;q=0.6,zh-CN;q=0.4,nl;q=0.2\r\n");
sb.append("Accept-Charset: UTF-8,*;q=0.5\r\n");
sb.append("Cookie: wordpress_polylang=en; wp-settings-1=imgsize%3Dfull%26editor%3Dhtml%26hidetb%3D1%26libraryContent%3Dbrowse; wp-settings-time-1=1357880535; wordpress_test_cookie=WP+Cookie+check\r\n");
sb.append("\r\n");
sb.append(URLEncoder.encode("log", "UTF-8"));
sb.append("=");
sb.append(URLEncoder.encode(logUsername, "UTF-8"));
sb.append("&");
sb.append(URLEncoder.encode("pwd", "UTF-8"));
sb.append("=");
sb.append(URLEncoder.encode(logPassword, "UTF-8"));
sb.append("&");
sb.append(URLEncoder.encode("wp-submit", "UTF-8"));
sb.append("=");
sb.append(URLEncoder.encode("Log In", "UTF-8"));
sb.append("&");
sb.append(URLEncoder.encode("redirect_to", "UTF-8"));
sb.append("=");
sb.append(URLEncoder.encode(
"http://atom.student.utwente.nl/wp-admin/", "UTF-8"));
sb.append("&");
sb.append(URLEncoder.encode("testcookie", "UTF-8"));
sb.append("=");
sb.append(URLEncoder.encode("1", "UTF-8"));
os.write(sb.toString().getBytes());
String tmp = "";
StringBuffer resultBuffer = new StringBuffer();
while ((tmp = br.readLine()) != null)
{
System.out.println(tmp);
resultBuffer.append(tmp);
}
int usernameStartPosition = resultBuffer
.indexOf(encodedUsername) + encodedUsername.length();
int passwordStartPosition = resultBuffer
.indexOf(encodedPassword) + encodedPassword.length();
encodedUsernameText = resultBuffer.substring(
usernameStartPosition, usernameStartPosition + 47);
encodedPasswordText = resultBuffer.substring(
passwordStartPosition, passwordStartPosition + 47);
System.out.println("encodedUsernameText: "
+ encodedUsernameText);
System.out.println("encodedPasswordText: "
+ encodedPasswordText);
os.close();
br.close();
DefaultHttpClient httpClient = new DefaultHttpClient();
HttpGet httpGet = new HttpGet(
"http://atom.student.utwente.nl/wp-admin/");
httpGet.addHeader(
"Cookie",
encodedUsername
+ encodedUsernameText
+ "; wordpress_polylang=en; wp-settings-1=imgsize%3Dfull%26editor%3Dhtml%26hidetb%3D1%26libraryContent%3Dbrowse; wp-settings-time-1=1357880535; wordpress_test_cookie=WP+Cookie+check; "
+ encodedPassword + encodedPasswordText);
HttpResponse httpResponse = null;
httpResponse = httpClient.execute(httpGet);
HttpEntity httpEntity = null;
String resultText = null;
if (httpResponse.getStatusLine().getStatusCode() == 200)
{
System.out.println("LOGIN SUCCEED!");
Toast.makeText(LoginActivity.this,
"LOGIN SUCCEED!", Toast.LENGTH_SHORT)
.show();
httpEntity = httpResponse.getEntity();
resultText = EntityUtils.toString(httpEntity, "UTF-8");
System.out.println(resultText);
} else
{
Toast.makeText(LoginActivity.this,
"Invalid Username or Password!", Toast.LENGTH_SHORT)
.show();
}
} catch (UnknownHostException e)
{
// TODO Auto-generated catch block
e.printStackTrace();
} catch (IOException e)
{
// TODO Auto-generated catch block
e.printStackTrace();
}
super.run();
}
}
private class MyAnimationMoveListener implements AnimationListener
{
@Override
public void onAnimationEnd(Animation animation)
{
// TODO Auto-generated method stub
// clear all animations
leftBall.clearAnimation();
rightBall.clearAnimation();
findViewById(R.id.loginlay3).clearAnimation();
findViewById(R.id.loginlay4).clearAnimation();
findViewById(R.id.loginlay5).clearAnimation();
// widgets translations & invisiable
RelativeLayout.LayoutParams params = new RelativeLayout.LayoutParams(
leftBall.getWidth(), leftBall.getHeight());
// params.leftMargin = (screenWidth / 2 - leftBall.getWidth() -
// screenWidth / 3);
params.addRule(RelativeLayout.LEFT_OF, R.id.loginlay3);
leftBall.setLayoutParams(params);
RelativeLayout.LayoutParams params2 = new RelativeLayout.LayoutParams(
rightBall.getWidth(), rightBall.getHeight());
params2.addRule(RelativeLayout.RIGHT_OF, R.id.loginlay3);
rightBall.setLayoutParams(params2);
System.out.println("rightSpace: " + rightBall.getRight());
// rightBall.setLayoutParams(params2);
findViewById(R.id.loginlay3).setVisibility(View.VISIBLE);
findViewById(R.id.loginlay4).setVisibility(View.VISIBLE);
findViewById(R.id.loginlay5).setVisibility(View.VISIBLE);
}
@Override
public void onAnimationRepeat(Animation animation)
{
// TODO Auto-generated method stub
}
@Override
public void onAnimationStart(Animation animation)
{
// TODO Auto-generated method stub
}
}
private class MyAnimationReturnListener implements AnimationListener
{
@Override
public void onAnimationEnd(Animation animation)
{
// TODO Auto-generated method stub
// clear all animations
leftBall.clearAnimation();
rightBall.clearAnimation();
findViewById(R.id.loginlay3).clearAnimation();
findViewById(R.id.loginlay4).clearAnimation();
findViewById(R.id.loginlay5).clearAnimation();
// widgets translations & invisiable
RelativeLayout.LayoutParams params = new RelativeLayout.LayoutParams(
leftBall.getWidth(), leftBall.getHeight());
params.addRule(RelativeLayout.LEFT_OF, R.id.nothing);
leftBall.setLayoutParams(params);
RelativeLayout.LayoutParams params2 = new RelativeLayout.LayoutParams(
rightBall.getWidth(), rightBall.getHeight());
params2.addRule(RelativeLayout.RIGHT_OF, R.id.left_ball);
rightBall.setLayoutParams(params2);
findViewById(R.id.loginlay3).setVisibility(View.INVISIBLE);
findViewById(R.id.loginlay4).setVisibility(View.INVISIBLE);
findViewById(R.id.loginlay5).setVisibility(View.INVISIBLE);
}
@Override
public void onAnimationRepeat(Animation animation)
{
// TODO Auto-generated method stub
}
@Override
public void onAnimationStart(Animation animation)
{
// TODO Auto-generated method stub
}
}
private void startAllWidgetAnimation(boolean hasAnimated)
{
int leftBallTranslation = 0;
int rightBallTranslation = 0;
MyAnimationReturnListener returnListener = new MyAnimationReturnListener();
MyAnimationMoveListener moveListener = new MyAnimationMoveListener();
AlphaAnimation anim3 = null;
Animation anim2 = null;
Animation anim1 = null;
if (false == hasAnimated)
{
leftBallTranslation = -findViewById(R.id.loginlay3).getWidth() / 2;
System.out.println("R.id.loginlay3 width: "
+ findViewById(R.id.loginlay3).getWidth());
rightBallTranslation = -leftBallTranslation;
anim3 = new AlphaAnimation(0.0f, 1.0f);
anim3.setAnimationListener(moveListener);
} else
{
leftBallTranslation = findViewById(R.id.loginlay3).getWidth() / 2;
rightBallTranslation = -leftBallTranslation;
anim3 = new AlphaAnimation(1.0f, 0.0f);
anim3.setAnimationListener(returnListener);
}
anim1 = new TranslateAnimation(0, leftBallTranslation, 0, 0);
anim1.setDuration(2000);
anim1.setFillAfter(true);
anim2 = new TranslateAnimation(0, rightBallTranslation, 0, 0);
anim2.setDuration(2000);
anim2.setFillAfter(true);
// if (false == hasAnimated)
// {
// anim1.setAnimationListener(moveListener);
// anim2.setAnimationListener(moveListener);
// } else
// {
// anim1.setAnimationListener(returnListener);
// anim2.setAnimationListener(returnListener);
// }
leftBall.startAnimation(anim1);
rightBall.startAnimation(anim2);
// edit text animation
anim3.setStartOffset(1000);
anim3.setDuration(1000);
anim3.setFillAfter(true);
// usernameTag & usernameText layer animation
((LinearLayout) findViewById(R.id.loginlay3)).startAnimation(anim3);
// passwordTag & passwordText layer animation
((LinearLayout) findViewById(R.id.loginlay4)).startAnimation(anim3);
// submit button animation
((LinearLayout) findViewById(R.id.loginlay5)).startAnimation(anim3);
}
public void myClickHandler(final View view)
{
int id = view.getId();
if ((id == R.id.left_ball || id == R.id.right_ball)
&& false == isAnimated)
{
// leftBall moves left, rightBall moves right, loginField turns
// visible
startAllWidgetAnimation(false);
isAnimated = true;
} else if (true == isAnimated)
{
// leftBall moves right, rightBall moves left, loginField turns
// invisible, return to initial state
startAllWidgetAnimation(true);
isAnimated = false;
}
}
private void getAllWidgets()
{
metrics = new DisplayMetrics();
getWindowManager().getDefaultDisplay().getMetrics(metrics);
// screenWidth = metrics.widthPixels;
leftBall = (Button) findViewById(R.id.left_ball);
rightBall = (Button) findViewById(R.id.right_ball);
submit = (Button) findViewById(R.id.login_submit);
username = (EditText) findViewById(R.id.username);
password = (EditText) findViewById(R.id.password);
}
}
0
顶
顶
0
踩
踩
分享到：
发表评论
相关推荐
该文档整合了cookie的httponly和secure的简介，已经设置该属性时会遇到的问题，以及设置属性的方式
一、属性说明： 1 secure属性 ...也就是说两个属性，并不能解决cookie在本机出现的信息泄漏的问题(FireFox的插件FireBug能直接看到cookie的相关信息)。 二、实例 项目架构环境：jsp+servlet+applet
完整获取webBrowser1的Cookie HttpOnly的Cookie
Express 中间件用于保护cookie通过HttpOnly并添加标记检查是否存在
java后台和php后台如何设置HttpOnly到前台浏览器的cookie中.cookie中设置了HttpOnly属性，那么通过js脚本将无法读取到cookie信息，这样能有效的防止XSS攻击.zip
In order to help mitigate the risk of cross-site scripting, a new feature has been introduced in Microsoft Internet Explorer 6 SP1.... A cookie with this attribute is called an HTTP-only cookie.
Set-Cookie: JSESSIONID=8AB51DC4244907FD9EBB063C7FD73CBA; Path=/; HttpOnly 解决此类cookie暴露项目路径问题
第九节 cookie的httponly设置-01
下面小编就为大家带来一篇httpwebreqeust读取httponly的cookie方法。小编觉得挺不错的，现在就分享给大家，也给大家做个参考。一起跟随小编过来看看吧
在mvc中验证如何存取cookie,并通过cookie的httponly属性防止cookie被jquery脚本窃取。
下面小编就为大家带来一篇PHP设置Cookie的HTTPONLY属性方法。小编觉得挺不错的，现在就分享给大家，也给大家做个参考。一起跟随小编过来看看吧
.net 获取浏览器Cookie(包括HttpOnly)实例分享.docx
Extjs 关于cookie 实现实时存储 数据存储的操作, 将数据存放cookie中，防止断电
此存储库包含示例体系结构，这些体系结构用于在使用HttpOnly cookie时在Next.js中检测用户的身份验证状态客户端。 开发它是为了支持两个博客文章： 。 本示例使用getInitialProps并提供两种版本： 。
Android客户端发送请求时，一般不会带上所有的cookie，需要明确指定哪些cookie会带上。如果希望用sticky做负载均衡，请对Android开发说加上cookie。 （d）cookie名称不要和业务使用的cookie重名。Sticky默认的...
介绍了.net 获取浏览器Cookie(包括HttpOnly)实例，有需要的朋友可以参考一下
本文档描述了关于cookie的http-only和secure的简介，和如何设置该属性，以及设置该属性会遇到的问题解决方法
主要介绍了Springboot中登录后关于cookie和session拦截案例,本文通过实例图文相结合给大家介绍的非常详细，对大家的学习或工作具有一定的参考借鉴价值，需要的朋友可以参考下
来源：