通过session.getAttribute("rand")，获得生成的验证码，然后跟用户输入的进行比较，再根据比较结果做相应的处理。

通过servlet生成验证码：

package com.util.servlet;

import java.awt.Color;

import java.awt.Font;

import java.awt.Graphics;

import java.awt.image.BufferedImage;

import java.io.IOException;

import java.util.Random;

import javax.imageio.ImageIO;

import javax.servlet.ServletException;

import javax.servlet.http.HttpServlet;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import javax.servlet.http.HttpSession;

public class AuthImageServlet extends HttpServlet {

private static final String CONTENT_TYPE = "text/html; charset=gb2312";

//设置字母的大小,大小