Session-based online user statistical analysis in JSP

As a rising star, JSP plays a certain role in the Server programming environment and is closely related to its good support of a series of industry standards. Session is one of the infrastructure it provides. As a programmer, you can easily implement simple session-based user management without worrying about how the client is implemented. There are several different processing methods for online users.

One is that page refresh is controlled by the user, and the server controls a timeout time, for example, 30 minutes. After the time, the user is kicked out without any action. The advantage of this method is that if the user forgets to quit, it can prevent malicious operations by others. The disadvantage is that if you are doing a very time-consuming task that exceeds this time limit, you may have to log on again when submit. If the original leaves are forced to expire, your work may be lost. From the implementation perspective, this is the simplest, and the default implementation on the Server side is this mode.

Another way is that the site uses a Frame structure, and a Frame or hidden iframe is constantly refreshing, so that you will never be kicked out, but the server is trying to determine whether you are online, you need to set a daze time. If you have not refreshed any other leaves except the automatically refreshed ones, you will think that you are no longer online. The typical method is xici.net. Its advantage is that it can use constant refreshing to implement some functions similar to server-push, such as sending messages between netizens.

No matter which mode, some additional work is required to browse all online users. The servlet API does not obtain the Session List API.

The Listener. Servlet 2.2 and 2.3 specifications are slightly different here. HttpSessionBindingListener in 2.2 can notify you of classes when the Attribute in an HTTPSession changes. HttpSessionAttributeListener is also introduced in 2.3. since the environments I use are Visual age for java 4 and JRun server 3.1, they do not directly support Servlet 2.3 programming. Here I use HttpSessionBindingListener.

What needs to be done includes creating a new class to implement the HttpSessionBindingListener interface. This interface has two methods:

 
 

  
  
public void valueBound(HttpSessionBindingEvent event)  
  
  
public void valueUnbound(HttpSessionBindingEvent event) 
 
 

When you execute Session. when addattriund (String, Object) is used, if you have added a class that implements the HttpSessionBindingListener interface as Attribute, the Session will notify you of the class and call your valueBound method. On the contrary, the Session. removeAttribute method corresponds to the valueUndound method.

 
 

  
  
public class HttpSessionBinding implements javax.servlet.
http.HttpSessionBindingListener     
  
  
{  　  
  
  
ServletContext application = null;   　  
  
  
public HttpSessionBinding(ServletContext application)  　  
  
  
{    
  
  
super();    
  
  
if (application ==null)  　  
  
  
throw new IllegalArgumentException("Null application is not accept.");    
  
  
this.application = application;  　  
  
  
}   　  
  
  
public void valueBound(javax.servlet.http.HttpSessionBindingEvent e)    
  
  
{     
  
  
Vector activeSessions = (Vector) application.getAttribute
("activeSessions");    
  
  
if (activeSessions == null)    
  
  
{  　  
  
  
activeSessions = new Vector();    
  
  
}     
  
  
JDBCUser sessionUser = (JDBCUser)e.getSession().getAttribute("user");   
  
  
if (sessionUser != null)    
  
  
{  　  
  
  
activeSessions.add(e.getSession());    
  
  
}    
  
  
application.setAttribute("activeSessions",activeSessions);  　  
  
  
}   　  
  
  
public void valueUnbound(javax.servlet.http.HttpSessionBindingEvent e)   　  
  
  
{    
  
  
JDBCUser sessionUser = (JDBCUser)e.getSession().getAttribute("user");   
  
  
if (sessionUser == null)    
  
  
{  　  
  
  
Vector activeSessions = (Vector) application.getAttribute
("activeSessions");  　  
  
  
if (activeSessions != null)  　  
  
  
{    
  
  
activeSessions.remove(e.getSession().getId());    
  
  
application.setAttribute("activeSessions",activeSessions);  　  
  
  
}    
  
  
}  　  
  
  
}    
  
  
}  
 
 

Assume that the JDBCUser class is an arbitrary User class. During User logon, add both the User class and HttpSessionBinding class to the Session.

In this way, each time a user logs on, a record will be added to the vector attribute "activeSessions" in the application. Whenever the session times out, valueUnbound is triggered. In this vector, delete the session to be timed out.

 
 

  
  
public void login()    
  
  
throws ACLException,SQLException,IOException    
  
  
{  　  
  
  
/* get JDBC User Class */  　  
  
  
if (user != null)  　  
  
  
{    
  
  
logout();  　  
  
  
}  　  
  
  
{    
  
  
// if session time out, or user didn't login, 
save the target url temporary.     
  
  
JDBCUserFactory uf = new JDBCUserFactory();     
  
  
if ( (this.request.getParameter("userID")==null)     
  
  
|| (this.request.getParameter("password")==null) )    
  
  
{  　  
  
  
throw new ACLException("Please input a valid 
userName andpassword."); }     
  
  
JDBCUser user = (JDBCUser) uf.UserLogin(  　
  
  
this.request.getParameter("userID"),  　
  
  
this.request.getParameter("password") );  　  
  
  
user.touchLoginTime();  　  
  
  
this.session.setAttribute("user",user);  　
  
  
this.session.setAttribute("BindingNotify",new 
HttpSessionBinding(application));    
  
  
}  　  
  
  
}  
 
 

When using Login, add the User and the BindingNotofy class to the session. When logout is used, the session is automatically deleted from the activeSessions vector.

 
 

  
  
public void logout()    
  
  
throws SQLException,ACLException    
  
  
{  　  
  
  
if (this.user == null && this.session.getAttribute("user")==null)  　  
  
  
{    
  
  
return;  　  
  
  
}   　  
  
  
Vector activeSessions = (Vector)this.application.
getAttribute("activeSessions");  　  
  
  
if (activeSessions != null)  　  
  
  
{  
  
  
activeSessions.remove(this.session);  
  
  
application.setAttribute("activeSessions",activeSessions);  　  
  
  
}   　  
  
  
java.util.Enumeration e = this.session.getAttributeNames();   　  
  
  
while (e.hasMoreElements())  　  
  
  
{    
  
  
String s = (String)e.nextElement();  
  
  
this.session.removeAttribute(s);  　  
  
  
}  　  
  
  
this.user.touchLogoutTime();  　  
  
  
this.user = null;    
  
  
}  
 
 

1. Aside from JSP, start with JSF.
2. JSF and JSP are new partners
3. Analysis of Application in JSP program
4. Implement JSP page and code separation using JavaBean
5. Integrate FCKEditor in JSF/JSP