Javascript页面没有'；不显示数据库值
我想以树格式显示每个数据库的所有数据库和表。因此，我在代码中编写了一个代码Jsp页面，获取数据库名和表名，并将其传递给javascript页面。但在我的代码中，Javascript页面只显示一个数据库名称。有人能帮我找出原因吗？我的代码： LeftFrameset.jspJavascript页面没有'；不显示数据库值,javascript,jsp,Javascript,Jsp,我想以树格式显示每个数据库的所有数据库和表。因此，我在代码中编写了一个代码Jsp页面，获取数据库名和表名，并将其传递给javascript页面。但在我的代码中，Javascript页面只显示一个数据库名称。有人能帮我找出原因吗？我的代码： LeftFrameset.jsp <%-- Document : LeftFrameset Created on : Nov 13, 2014, 1:10:22 PM Author : user --%> <%@page
<%--
Document : LeftFrameset
Created on : Nov 13, 2014, 1:10:22 PM
Author : user
--%>
<%@page import="querywork.DBConnection"%>
<%@page import="java.sql.ResultSet"%>
<%@page import="java.sql.DatabaseMetaData"%>
<%@page import="java.sql.DriverManager"%>
<%@page import="java.sql.Connection"%>
<%@page contentType="text/html" pageEncoding="UTF-8"%>
<!DOCTYPE html>
<HTML>
<!--------------------------------------------------------------->
<!-- Copyright (c) 2006 by Conor O'Mahony. -->
<!-- For enquiries, please email GubuSoft@GubuSoft.com. -->
<!-- Please keep all copyright notices below. -->
<!-- Original author of TreeView script is Marcelino Martins. -->
<!--------------------------------------------------------------->
<!-- This document includes the TreeView script. The TreeView -->
<!-- script can be found at http://www.TreeView.net. The -->
<!-- script is Copyright (c) 2006 by Conor O'Mahony. -->
<!--------------------------------------------------------------->
<!-- Instructions: -->
<!-- - Through the <STYLE> tag you can change the colors and -->
<!-- types of fonts to the particular needs of your site. -->
<!-- - A predefined block with black background has been -->
<!-- made for stylish people :-) -->
<!--------------------------------------------------------------->
<HEAD>
<!-- This is the <STYLE> block for the default styles. If -->
<!-- you want the black background, remove this <STYLE> -->
<!-- block. -->
<STYLE>
BODY {
background-color: white;}
TD {
font-size: 10pt;
font-family: verdana,helvetica;
text-decoration: none;
white-space:nowrap;}
A {
text-decoration: none;
color: black;}
.specialClass {
font-family:garamond;
font-size:12pt;
color:green;
font-weight:bold;
text-decoration:underline}
</STYLE>
<!-- If you want the black background, replace the contents -->
<!-- of the <STYLE> tag above with the following...
BODY {
background-color: black;}
TD {
font-size: 10pt;
font-family: verdana,helvetica;
text-decoration: none;
white-space:nowrap;}
A {
text-decoration: none;
color: white;}
<!-- This is the end of the <STYLE> contents. -->
<!-- Code for browser detection. DO NOT REMOVE. -->
<SCRIPT src="ua.js"></SCRIPT>
<!-- Infrastructure code for the TreeView. DO NOT REMOVE. -->
<SCRIPT src="ftiens4.js"></SCRIPT>
<!-- Scripts that define the tree. DO NOT REMOVE.
<SCRIPT src="demoFramesetNodes.js"></SCRIPT> -->
</HEAD>
<BODY topmargin="16" marginheight="16">
<!------------------------------------------------------------->
<!-- IMPORTANT NOTICE: -->
<!-- Removing the following link will prevent this script -->
<!-- from working. Unless you purchase the registered -->
<!-- version of TreeView, you must include this link. -->
<!-- If you make any unauthorized changes to the following -->
<!-- code, you will violate the user agreement. If you want -->
<!-- to remove the link, see the online FAQ for instructions -->
<!-- on how to obtain a version without the link. -->
<!------------------------------------------------------------->
<DIV style="position:absolute; top:0; left:0;"><TABLE border=0><TR><TD><FONT size=-2><A style="font-size:7pt;text-decoration:none;color:silver" href="http://www.treemenu.net/" target=_blank>Javascript Tree Menu</A></FONT></TD></TR> </TABLE></DIV>
<%
try {
String responseText = "";
Class.forName("com.mysql.jdbc.Driver").newInstance();
Connection conn = DriverManager.getConnection("jdbc:mysql://localhost/", "root", "");
DatabaseMetaData dbmd = conn.getMetaData();
ResultSet ctlgs = dbmd.getCatalogs();
while (ctlgs.next()) {
String text = "";
String db = ctlgs.getString(1);
DBConnection dbc = new DBConnection(db);
ResultSet rs = dbc.SelectTable();
while (rs.next()) {
String tableName = rs.getString("TABLE_NAME");
text += tableName + ",";
}
%>
<!--Scripts that define the tree. DO NOT REMOVE. -->
<input type="hidden" name="value1" id="hiddenvalue1" value=>
<input type="hidden" name="value" id="hiddenvalue" value=<%=ctlgs.getString(1)%>>
<SCRIPT src="demoFramesetNodes.js"></SCRIPT>
<%
}
} catch (Exception e) {
out.println(e);
}%>
<!-- Build the browser's objects and display default view -->
<!-- of the tree. -->
<SCRIPT>initializeDocument()</SCRIPT>
<NOSCRIPT>
A tree for site navigation will open here if you enable JavaScript in your browser.
</NOSCRIPT>
</BODY>
</HTML>
好的，在你的评论之后，我开始认为我理解你的问题 让我们把与数据库的对话从图片中去掉，因为这不是问题所在。最终，JSP生成的HTML与此类似：
<input type="hidden" name="value1" id="hiddenvalue1" value=>
<input type="hidden" name="value" id="hiddenvalue" value=information_schema>
<SCRIPT src="demoFramesetNodes.js"></SCRIPT>
<input type="hidden" name="value1" id="hiddenvalue1" value=>
<input type="hidden" name="value" id="hiddenvalue" value=mysql>
<SCRIPT src="demoFramesetNodes.js"></SCRIPT>
<input type="hidden" name="value1" id="hiddenvalue1" value=>
<input type="hidden" name="value" id="hiddenvalue" value=user>
<SCRIPT src="demoFramesetNodes.js"></SCRIPT>
<input type="hidden" name="value1" id="hiddenvalue1" value=>
<input type="hidden" name="value" id="hiddenvalue" value=test>
<SCRIPT src="demoFramesetNodes.js"></SCRIPT>
hiddenvaluedocument.getElementByIdnull信息\u schemastrstr1demoFramesetNodes.js<SCRIPT type="text/javascript">
var str = "<%= ctlgs.getString(1) %>";
var str1 = "<%= text %>";
</SCRIPT>
var str = "x";document.location='http://www.evil.com/';//";
www.evil.com显然，这是不可取的，并且是一种称为跨站点脚本（XSS）的安全漏洞攻击。这个安全问题可以通过以下方法避免。我认为错误可能在
DBConnectionwhile（ctlgs.next（））while（ctlgs.next（））var str = document.getElementById("hiddenvalue").value
<SCRIPT type="text/javascript">
var str = "<%= ctlgs.getString(1) %>";
var str1 = "<%= text %>";
</SCRIPT>
var str = "x";document.location='http://www.evil.com/';//";