Servlet过滤器介绍之实用过滤器

JAVA天地

浏览: 673414 次
性别:
来自: 太原

最近访客更多访客>>

yxjajl

jacket233

daimashun

anliguo131

博主相关

博客

微博

相册

留言

关于我

文章分类

全部博客 (715)

社区版块

存档分类

Servlet Java Access Web .net

Servlet过滤器介绍之实用过滤器

这里介绍几个实用的过滤器设计代码。整理自Marty Halls写的《Servlet与JSP权威指南》。我已做过测试，均通过可用。

author: ZJ 2007-3-5

Blog: http://zhangjunhd.blog.51cto.com/

6．禁止站点过滤器

如果你希望在你的过滤器检测到不正常的异常而中途中断后面的过滤过程时，可这样做：

public void doFilter(ServletRequest request, ServletResponse response,

FilterChain chain) throws ServletException, IOException {

HttpServletRequest req = (HttpServletRequest) request;

HttpServletResponse res = (HttpServletResponse) response;

if (isUnusualCondition(req)) {

res.sendRedirect("http://www.somesite.com");

} else {

chain.doFilter(req, res);

}

下例是一个禁止站点过滤器，如果不希望某些站点访问你的网站，你可以在web.xml的param-value中列出它的站点，然后应用上面的原理跳出常规过滤，给出禁止访问的页面。

BannedAccessFilter.java

package com.zj.sample;

import java.io.IOException;

import java.io.PrintWriter;

import java.net.MalformedURLException;

import java.net.URL;

import java.util.HashSet;

import java.util.StringTokenizer;

import javax.servlet.Filter;

import javax.servlet.FilterChain;

import javax.servlet.FilterConfig;

import javax.servlet.ServletException;

import javax.servlet.ServletRequest;

import javax.servlet.ServletResponse;

import javax.servlet.http.HttpServletRequest;

public class BannedAccessFilter implements Filter {

private HashSet<String> bannedSiteTable;

/**

* Deny access if the request comes from a banned site or is referred here

* by a banned site.

public void doFilter(ServletRequest request, ServletResponse response,

FilterChain chain) throws ServletException, IOException {

System.out.println("Within BannedAccessFilter:Filtering the Request...");

HttpServletRequest req = (HttpServletRequest) request;

String requestingHost = req.getRemoteHost();

String referringHost = getReferringHost(req.getHeader("Referer"));

String bannedSite = null;

boolean isBanned = false;

if (bannedSiteTable.contains(requestingHost)) {

bannedSite = requestingHost;

isBanned = true;

} else if (bannedSiteTable.contains(referringHost)) {

bannedSite = referringHost;

isBanned = true;

}

if (isBanned) {

showWarning(response, bannedSite);

} else {

chain.doFilter(request, response);

}

System.out.println("Within BannedAccessFilter:Filtering the Response...");

}

/**

* Create a table of banned sites based on initialization parameters.

* Remember that version 2.3 of the servlet API mandates the use of the

* Java 2 Platform. Thus, it is safe to use HashSet (which determines

* whether a given key exists) rather than the clumsier Hashtable

* (which has a value for each key).

public void init(FilterConfig config) throws ServletException {

bannedSiteTable = new HashSet<String>();

String bannedSites = config.getInitParameter("bannedSites");

// Default token set: white space.

StringTokenizer tok = new StringTokenizer(bannedSites);

while (tok.hasMoreTokens()) {

String bannedSite = tok.nextToken();

bannedSiteTable.add(bannedSite);

System.out.println("Banned " + bannedSite);

}

public void destroy() {}

private String getReferringHost(String refererringURLString) {

try {

URL referringURL = new URL(refererringURLString);

return (referringURL.getHost());

} catch (MalformedURLException mue) { // Malformed or null

return (null);

}

// Replacement response that is returned to users

// who are from or referred here by a banned site.

private void showWarning(ServletResponse response, String bannedSite)

throws ServletException, IOException {

response.setContentType("text/html");

PrintWriter out = response.getWriter();

String docType = "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 "

+ "Transitional//EN\">\n";

out.println(docType + "<HTML>\n"

+ "<HEAD><TITLE>Access Prohibited</TITLE></HEAD>\n"

+ "<BODY BGCOLOR=\"WHITE\">\n" + "<H1>Access Prohibited</H1>\n"

+ "Sorry, access from or via " + bannedSite + "\n"

+ "is not allowed.\n" + "</BODY></HTML>");

}

web.xml

<filter-name>BannedAccessFilter</filter-name>

<filter-class>com.zj.sample.BannedAccessFilter</filter-class>

<init-param>

<param-name>bannedSites</param-name>

<param-value>

分享到：

JAVA中字符串转与日期型的互转实例 | Servlet过滤器介绍之原理分析

2009-04-10 12:28
浏览 667
评论(0)
查看更多

发表评论

您还没有登录,请您登录后再发表评论

最近访客更多访客>>

博主相关

文章分类

社区版块

存档分类

最新评论