v和vj 2012-02-03 16:46 發(fā)表評(píng)論
]]>serisboy 2011-12-15 12:27 發(fā)表評(píng)論
]]>楊先生 2011-10-24 10:52 發(fā)表評(píng)論
]]>/* 檢驗(yàn)管理員是否已經(jīng)登錄及是否擁有權(quán)限的過濾器*/
import java.util.List;
import java.util.Map;
import java.util.Iterator;
import java.util.Set;
import java.util.Date;
import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;
import com.gpPlatform.IConstants;
import com.gpPlatform.services.ResourceDao;
import com.gpPlatform.forms.AdminForm;
import org.springframework.context.ApplicationContext;
import org.springframework.context.support.FileSystemXmlApplicationContext;
public class SecurityCheckFilter implements Filter{
private List<String> notFilterURL;
private ResourceDao resourcedao= null;
private Map<String,String> permits;
private String getPermitId(String action_url){ //根據(jù)Map獲取動(dòng)作資源id
this.permits= resourcedao.getResourceList();
String rid_visited="NO_MATCH";
Set<String> key = permits.keySet(); //獲取權(quán)限集map鍵集合
for(Iterator<String> it=key.iterator();it.hasNext();){
String k= it.next();
if(k.equals(action_url)){
rid_visited=permits.get(k);
break;
}
}
return rid_visited;
}
private boolean isPIdExist(AdminForm aform,String rid,boolean init){
boolean flag=!init;
if(!flag){
String[] pArray= aform.getPermitList();
for(String pid:pArray){
System.out.println(pid);
if(pid.equals(rid))
return true;
}
}
return flag;
}
public void init(FilterConfig filterconfig) throws ServletException{ //獲取系統(tǒng)context以傳遞屬性
String configpath= "F:/tomcat 5.5.2/Tomcat 5.5/webapps/gpplatform/WEB-INF/appContext.xml";
ApplicationContext context= new FileSystemXmlApplicationContext(configpath);
IConstants iconstant=(IConstants)context.getBean("constants");
resourcedao= (ResourceDao)context.getBean("resourcedao"); //不可setter直接注入，filter servlet容器先于spring生成
notFilterURL = iconstant.getNotFilterURL();
System.out.println("There are "+notFilterURL.size()+" urls free of filtering");
}
public void doFilter(ServletRequest req, ServletResponse res, //改寫doFilter方法檢驗(yàn)
FilterChain chain)throws IOException, ServletException{
HttpServletRequest request= (HttpServletRequest) req;
HttpSession session= request.getSession();
AdminForm aform= (AdminForm)session.getAttribute(IConstants.CURR_ADMIN_KEY);
boolean flag1= true;
boolean flag2= true;
String str= request.getServletPath();
if(str.indexOf(".jsp")!=-1||str.indexOf(".do")!=-1){
for(String url:notFilterURL){
if(str.equals(url)){
flag1= false;
break;
}
}
}
else
flag1= false;
if(str.indexOf(".do")!=-1&&request.getParameter("method")!=null&&!request.getParameter("method").equals("readInfo"))
str += "?method="+request.getParameter("method"); //獲取一般的動(dòng)作參數(shù)
else
flag2= false;
System.out.println("action str is "+str+" "+flag1+" "+flag2);
if(flag1){
if(aform==null){ //對(duì)不在免除過濾路徑集合中的url進(jìn)行過濾
System.out.println("<=======You haven't Logged in yet!=======>"+(new Date()).toString());
request.setAttribute(IConstants.LOGIN_ERROR_KEY, "抱歉，您還沒有登陸本系統(tǒng)%>_<%");
request.getRequestDispatcher("/adminLog.jsp").forward(req, res);
}
else{
if(!this.isPIdExist(aform, this.getPermitId(str), flag2)){
System.out.println("<======You don't hava such permit!======>"+(new Date()).toString());
request.setAttribute(IConstants.PERMIT_ERROR_KEY,"抱歉，您不具備當(dāng)前功能的權(quán)限⊙﹏⊙ ");
request.getRequestDispatcher("/errorPage.jsp").forward(req, res);
}
else{
chain.doFilter(req, res);
return;
}
}
}
else{
chain.doFilter(req, res);
return;
}
}
public void destroy(){}
}
liangwu 2011-06-02 17:25 發(fā)表評(píng)論
]]>7u76tu 2011-05-13 17:38 發(fā)表評(píng)論
]]>7u76tu 2011-05-13 17:37 發(fā)表評(píng)論
]]>以上是自己一個(gè)web工程的filter。通過設(shè)置一個(gè)不被過濾的url集合notFilterURL，實(shí)現(xiàn)在struts1中沒有的interceptor所完成的功能。
liangwu 2011-05-05 16:16 發(fā)表評(píng)論
]]>import java.util.List;
import java.util.ArrayList;
import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
public class LoginCheckFilter implements Filter{
private static List<String> notFilterURL;
@SuppressWarnings("static-access")
public void init(FilterConfig filterconfig) throws ServletException{
this.notFilterURL= new ArrayList<String>();
notFilterURL.add("/gpplatform/adminLog.jsp");
notFilterURL.add("/gpplatform/errorPage.jsp");
notFilterURL.add("/gpplatform/testJDBC.jsp");
notFilterURL.add("/gpplatform/yzm.jsp");
notFilterURL.add("/gpplatform/script/trim.js");
}
public void doFilter(ServletRequest req, ServletResponse res,
FilterChain chain)throws IOException, ServletException{
HttpServletRequest request= (HttpServletRequest) req;
HttpServletResponse response= (HttpServletResponse) res;
HttpSession session= request.getSession();
boolean flag= true;
String str= "/gpplatform"+request.getServletPath();
for(String url:notFilterURL){
if(str.equals(url)){
flag= false;
break;
}
}
System.out.println(str+" "+flag);
if(flag&&session.getAttribute("curr_admin")==null){
//對(duì)不在notFilterURL集合路徑中的url進(jìn)行過濾
System.out.println("<=====You haven't logged in!=====>");
response.sendRedirect("/gpplatform/adminLog.jsp");
}
else{
chain.doFilter(req, res);
return;
}
}
public void destroy(){}
}
liangwu 2011-05-05 16:08 發(fā)表評(píng)論
]]>liangwu 2011-05-05 14:59 發(fā)表評(píng)論
]]>這個(gè)是否沒用
t 2010-07-31 22:14 發(fā)表評(píng)論
]]>yang 2010-06-06 22:33 發(fā)表評(píng)論
]]>sdfsf 2009-12-16 11:03 發(fā)表評(píng)論
]]>三少 2009-11-03 10:49 發(fā)表評(píng)論
]]>西鐵城 2009-10-26 10:35 發(fā)表評(píng)論
]]>yx 2009-10-17 12:06 發(fā)表評(píng)論
]]>G 2009-10-14 11:16 發(fā)表評(píng)論
]]>萬其 2009-09-15 15:52 發(fā)表評(píng)論
]]>過客 2009-08-13 14:29 發(fā)表評(píng)論
]]>而且response.serContentType("text/html;charset=utf-8");是設(shè)置返回?cái)?shù)據(jù)的編碼類型的，和取得數(shù)據(jù)沒關(guān)系，應(yīng)該用request.setCharacterEncoding("UTF-8");方法，也就不用轉(zhuǎn)碼了。
lveyo 2009-07-05 09:56 發(fā)表評(píng)論
]]>回車 更改密碼成功！
小毅 2009-07-04 02:08 發(fā)表評(píng)論
]]>亂碼問題老問題了。。哎。。。
小毅 2009-07-04 01:49 發(fā)表評(píng)論
]]>小魚 2009-06-24 16:39 發(fā)表評(píng)論
]]>zdk 2009-06-03 09:30 發(fā)表評(píng)論
]]>racher 2009-06-01 07:53 發(fā)表評(píng)論
]]>lpz@21cn.com 2009-05-31 22:59 發(fā)表評(píng)論
]]>就 2009-05-31 17:51 發(fā)表評(píng)論
]]>zhanngle 2009-05-31 00:06 發(fā)表評(píng)論
]]>zhong 2009-05-29 13:34 發(fā)表評(píng)論
]]>dy 2009-05-28 23:09 發(fā)表評(píng)論
]]>劉杰 2009-05-27 23:16 發(fā)表評(píng)論
]]>