我們都知道，幾乎所有的資料庫都有儲存過程，但在實際開發中，它有什麼用途了？下面使用Oracle的儲存過程，採用Oracle自帶的dbms_obfuscation_toolkit.desencrypt對資料進行加密，需要注意的是密碼的長度必須為8的倍數，然後使用Java來呼叫這個儲存過程。

具體的實現例項：

一、建立一個加密和解密的儲存過程

第一步 建立表admin

create table admin(

ADMIN_ID number(10) primary key,

ADMIN_NAME varchar2(40) unique,

ADMIN_PWD varchar2(16) unique,

ADMIN_REALNAME varchar2(60),

ADMIN_EMAIL varchar2(60)

);

create sequence admin_seq;

第二步 插入資料

insert into admin values(admin_seq.nextval,'afeng','afeng1232323we23','陳徵峰','[email protected]');

select * from admin;

第三步 建立一個儲存過程對ADMIN_PWD進行加密

CREATE OR REPLACE PROCEDURE Encrypt_admin(adminNAME varchar2)

  is

  keyString VARCHAR2(8) := 'czfafeng';

  encryptedString VARCHAR2(2048);

  pwdString VARCHAR2(2048);

  BEGIN

  select ADMIN_PWD into pwdString

  from admin

  where ADMIN_NAME = adminNAME;

  dbms_obfuscation_toolkit.desencrypt(

  input_string => pwdString,

  key_string => keyString,

  encrypted_string => encryptedString);

  update admin set ADMIN_PWD = encryptedString

  where ADMIN_NAME = adminNAME;

  commit;

  END;

第四步 呼叫加密過程

begin

  Encrypt_admin('afeng');

end;

第五步 建立一個儲存過程對ADMIN_PWD進行解密後寫入資料庫

  CREATE OR REPLACE PROCEDURE decrypt_admin(adminNAME varchar2)

  is

  keyString VARCHAR2(8) := 'czfafeng';

  decryptedString VARCHAR2(2048);

  pwdString VARCHAR2(2048);

  BEGIN

  select ADMIN_PWD into pwdString

  from admin

  where ADMIN_NAME = adminNAME;

  dbms_obfuscation_toolkit.DESDecrypt(

  input_string => pwdString,

  key_string => keyString,

  decrypted_string => decryptedString);

  update admin set ADMIN_PWD = decryptedString

  where ADMIN_NAME = adminNAME;

  commit;

  END;

  第六步 呼叫解密過程

  begin

decrypt_admin('afeng');

end;

第七步 建立一個儲存過程對ADMIN_PWD進行解密，並輸出

CREATE OR REPLACE PROCEDURE decrypt_admin(adminNAME varchar2,decrypt_pwd out varchar2)

  is

  keyString VARCHAR2(8) := 'czfafeng';

  decryptedString VARCHAR2(2048);

  pwdString VARCHAR2(2048);

  BEGIN

  select ADMIN_PWD into pwdString

  from admin

  where ADMIN_NAME = adminNAME;

  dbms_obfuscation_toolkit.DESDecrypt(

  input_string => pwdString,

  key_string => keyString,

  decrypted_string => decryptedString);

  decrypt_pwd:=decryptedString;

 EXCEPTION

  WHEN Others

  -- NO_DATA_FOUND

  THEN

  decrypt_pwd:=trunc(DBMS_RANDOM.VALUE(1,200000)) ;

  END;

 第八步 呼叫解密過程

 declare

  pwd varchar2(40);

  begin

decrypt_admin('afeng1',pwd);

dbms_output.put_line(pwd);

end;

二、Java呼叫儲存過程

import java.sql.Connection;

import java.sql.DriverManager;

import java.sql.PreparedStatement;

import java.sql.SQLException;

import java.util.Scanner;

import oracle.jdbc.OracleCallableStatement;

public class Produres_DES {

      public static Connection conn;

      public String sql;

      static{

            try {

                  Class.forName("oracle.jdbc.driver.OracleDriver");

                   conn=DriverManager.getConnection("jdbc:oracle:thin:@localhost:1521:orcl","system","orcl");

            } catch (ClassNotFoundException e) {

                  // TODO Auto-generated catchblock

                  e.printStackTrace();

            } catch (SQLException e) {

                  // TODO Auto-generated catchblock

                  e.printStackTrace();

            }

      }

      public void desDecrypt(){

            @SuppressWarnings("resource")

            Scanner input=new Scanner(System.in);

            System.out.println("請輸入後臺管理員的使用者名稱：");

            String username=input.next();

            System.out.println("請輸入後臺管理員的密碼：");

            String userpwd=input.next();

            String sql2="{call decrypt_admin(?,?)}";

            //生成一個執行過程的語句物件

            OracleCallableStatement ocs;

            try {

                  ocs = (OracleCallableStatement)conn.prepareCall(sql2);

                  ocs.setString(1, username);

                  ocs.registerOutParameter(2,java.sql.Types.VARCHAR);

                  ocs.execute();

                  String pwd=ocs.getString(2);

                  if(pwd.equals(userpwd)){

                        System.out.println("登入成功！");

                  }else{

                        System.out.println("登入失敗");

                  }

                  ocs.close();

            } catch (SQLException e) {

                  // TODO Auto-generated catchblock

                  e.printStackTrace();

            }

      }

      public void desEncrypt(){

            String sql="insert into admin values(admin_seq.nextval,?,?,?,?)";

            @SuppressWarnings("resource")

            Scanner input=new Scanner(System.in);

            System.out.println("請輸入後臺管理員使用者名稱：");

            String username=input.next();

            System.out.println("請輸入後臺管理員密碼(長度為8的倍數)：");

            String pwd=input.next();

            System.out.println("請輸入後臺管理員的真實姓名：");

            String name=input.next();

            System.out.println("請輸入後臺管理員的郵箱：");

            String email=input.next();

            try {

                  PreparedStatement pstmt=conn.prepareStatement(sql);

                  pstmt.setString(1, username);

                  pstmt.setString(2, pwd);

                  pstmt.setString(3, name);

                  pstmt.setString(4, email);

                  pstmt.executeUpdate();

                  String sql2="{call Encrypt_admin(?)}";

                  //生成一個執行過程的語句物件

                  OracleCallableStatement ocs=(OracleCallableStatement)conn.prepareCall(sql2);

                  ocs.setString(1, username);

                  ocs.execute();

                  ocs.close();

                  System.out.println("插入資料和加密成功！");

            } catch (SQLException e) {

                  // TODO Auto-generated catchblock

                  e.printStackTrace();

            }

      }

  public static void main(String[] args) {

        Produres_DES des=new Produres_DES();

        //des.desEncrypt();

        des.desDecrypt();

}

}