Java反序列化测试

前言：有没有想过，如何将对象进行“加密”后写入磁盘？序列化帮你实现！

1.概念

序列化 (Serialization)将对象的状态信息转换为可以存储或传输的形式的过程。在序列化期间，对象将其当前状态写入到临时或持久性存储区。以后，可以通过从存储区中读取或反序列化对象的状态，重新创建该对象.

2.反序列化Java实验

--测试的实体类--

 package exercise;

 import java.io.Serializable;

 public class Person implements Serializable{
     private String name;
     private int age;

     public Person() {
     }

     public String getName() {
         return name;
     }

     public void setName(String name) {
         this.name = name;
     }

     public int getAge() {
         return age;
     }

     public void setAge(int age) {
         this.age = age;
     }

     public Person(String name, int age) {
         super();
         this.name = name;
         this.age = age;
     }

 }

1)单对象序列化

 package exercise;

 import java.io.FileInputStream;
 import java.io.FileOutputStream;
 import java.io.IOException;
 import java.io.ObjectInputStream;
 import java.io.ObjectOutputStream;
 import java.util.ArrayList;
 import java.util.List;

 public class ObjectStreamDemo1 {
     /**
      * @param args
      * @throws IOException
      * @throws ClassNotFoundException
      */

     public final static String PATH = "obj.object1";

     public static void main(String[] args) throws IOException,
             ClassNotFoundException {
         //writeObj();
         readObj();
         System.out.println("--End--");
     }

     public static void readObj() throws IOException, ClassNotFoundException {
         ObjectInputStream ois = new ObjectInputStream(new FileInputStream(
                 PATH));

         Person p  = (Person)ois.readObject();
         System.out.println(p.getName() + "|" + p.getAge());

     }

     public static void writeObj() throws IOException {
         ObjectOutputStream oos = new ObjectOutputStream(new FileOutputStream(
                 PATH));

         oos.writeObject(new Person("张三", 30));
         oos.close();
     }
 }

结果显示

2)多对象序列化

 package exercise;

 import java.io.FileInputStream;
 import java.io.FileOutputStream;
 import java.io.IOException;
 import java.io.ObjectInputStream;
 import java.io.ObjectOutputStream;
 import java.util.ArrayList;
 import java.util.List;

 public class ObjectStreamDemo2 {
     /**
      * @param args
      * @throws IOException
      * @throws ClassNotFoundException
      */
     public final static String PATH = "obj.object";
     public static void main(String[] args) throws IOException,
             ClassNotFoundException {

         //writeObj();
         readObj();
         System.out.println("---end!---");
     }

     public static void readObj() throws IOException, ClassNotFoundException {
         ObjectInputStream ois = new ObjectInputStream(new FileInputStream(
                 PATH));

         List<Person> persons  = (List<Person>)ois.readObject();
         for(Person p:persons){
             System.out.println(p.getName() + "|" + p.getAge());
         }
     }

     public static void writeObj() throws IOException {
         ObjectOutputStream oos = new ObjectOutputStream(new FileOutputStream(
                 PATH));

         List<Person> persons = new ArrayList<Person>();
         Person p1 = new Person("张三",18);
         Person p2 = new Person("李四",19);
         persons.add(p1);
         persons.add(p2);
         oos.writeObject(persons);
         oos.close();
     }
 }

结果显示

注意：

·实体类必须实现序列化接口“java.io.Serializable”

·生成的obj.object 因为是二进制文件，故无法正常打开，若notepad打开也是乱码！

总结：序列化技术在web端技术的应用相当重要，希望学习Java的朋友都能理解该技术并进行应用。