<%
//进入页面,设置一个UUID,将UUID添加到session中
 String token=UUID.randomUUID().toString();
 session.setAttribute("token", token); 
 %>

<form action="userlogin" method="POST"  >
    <!-- 定义一个隐藏域,将设置的Session对象UUID提交上去 -->
    <input type="hidden" value="${token}" name="token">
    用户名:<input type="text" name="username" placeholder="请输入用户名" required /><br/><br/>
    密　码:<input type="password" name="password" placeholder="请输入密码" required /><br/><br/>
    <input type="submit" value="登录"/>
</form>

import java.io.IOException;
import java.io.PrintWriter;

import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

/**
 * 表单重复提交验证
 * 
 * @author Decepticon
 *
 */
@WebServlet("/userlogin")
public class SubmitValidate extends HttpServlet {

    private static final long serialVersionUID = 1L;

    @Override
    protected void service(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        // 获取到JSP隐藏表单里的token
        String token = request.getParameter("token");
        // 获取session对象
        HttpSession session = request.getSession();
        // 获取面页session中的token的值
        String sessionToken = (String) session.getAttribute("token");// 将面页传过来的隐藏表单中的token值和session中设置的token值做比较
            if (token.equals(sessionToken)) {
                // 如果一样,移除面页的session值
                request.getSession().removeAttribute("token");
                PrintWriter writer = response.getWriter();
                writer.write("HelloWorld!");
                writer.close();
            } else {
                PrintWriter writer = response.getWriter();
                writer.write("Please don‘t always click");
                writer.close();
            }
    }
}