有用的过滤器

huhubinbin_

浏览: 70280 次
性别:
来自: 上海

最近访客更多访客>>

zhongguocxy

cntip2010

肖先生

yadgen

博主相关

博客

微博

相册

留言

关于我

文章分类

社区版块

存档分类

博客分类：

过滤器

Servlet JSF JSP 浏览器 Web

名称介绍：

一、使浏览器不缓存页面的过滤器

二、检测用户是否登陆的过滤器

三、字符编码的过滤器

四、资源保护过滤器

五利用Filter限制用户浏览权限

六： Filter解决session过期，跳转到登陆页面

一、使浏览器不缓存页面的过滤器

import javax.servlet.*;       
import javax.servlet.http.HttpServletResponse;       
import java.io.IOException;       
      
/**   
* 用于的使 Browser 不缓存页面的过滤器   
*/      
public class ForceNoCacheFilter implements Filter {       
      
public void doFilter(ServletRequest request, ServletResponse response, FilterChain filterChain) throws IOException, ServletException       
{       
    ((HttpServletResponse) response).setHeader("Cache-Control","no-cache");       
    ((HttpServletResponse) response).setHeader("Pragma","no-cache");       
    ((HttpServletResponse) response).setDateHeader ("Expires", -1);       
    filterChain.doFilter(request, response);       
}       
      
public void destroy()       
{       
}       
      
     public void init(FilterConfig filterConfig) throws ServletException       
{       
}       
}

二、检测用户是否登陆的过滤器

import javax.servlet.*;       
import javax.servlet.http.HttpServletRequest;       
import javax.servlet.http.HttpServletResponse;       
import javax.servlet.http.HttpSession;       
import java.util.List;       
import java.util.ArrayList;       
import java.util.StringTokenizer;       
import java.io.IOException;       
      
/**   
* 用于检测用户是否登陆的过滤器，如果未登录，则重定向到指的登录页面   
 
 
* 配置参数   
 
 
* checkSessionKey 需检查的在 Session 中保存的关键字   
 
* redirectURL 如果用户未登录，则重定向到指定的页面，URL不包括 ContextPath   
 
* notCheckURLList 不做检查的URL列表，以分号分开，并且 URL 中不包括 ContextPath   
 
*/      
public class UsersFilter      implements Filter       
{       
  protected FilterConfig filterConfig = null;       
     private String redirectURL = null;       
     private List notCheckURLList = new ArrayList();       
     private String sessionKey = null;    
      
     
     
   public void init(FilterConfig filterConfig) throws ServletException       
   {             this.filterConfig = filterConfig;   
         redirectURL = filterConfig.getInitParameter("redirectURL");       
         sessionKey = filterConfig.getInitParameter("checkSessionKey");       
      
         String notCheckURLListStr = filterConfig.getInitParameter("notCheckURLList");       
           
        if(notCheckURLListStr != null)       
         {       
          StringTokenizer st = new StringTokenizer(notCheckURLListStr, ";");       
          notCheckURLList.clear();       
         while(st.hasMoreTokens())       
          {       
           notCheckURLList.add(st.nextToken());       
          }       
         }       
     } 
     
     
     private boolean checkRequestURIIntNotFilterList(HttpServletRequest request)       
     {       
         String uri = request.getServletPath() + (request.getPathInfo() == null ? "" : request.getPathInfo());       
        return notCheckURLList.contains(uri);       
     }       
           
public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException       
{       
    HttpServletRequest request = (HttpServletRequest) servletRequest;       
    HttpServletResponse response = (HttpServletResponse) servletResponse;       
      
     HttpSession session = request.getSession();       
   if(sessionKey == null)       
    {       
     filterChain.doFilter(request, response);       
    return;       
    }       
   if((!checkRequestURIIntNotFilterList(request)) && session.getAttribute(sessionKey) == null)       
    {       
     response.sendRedirect(request.getContextPath() + redirectURL);       
    return;       
    }       
    filterChain.doFilter(servletRequest, servletResponse);       
}       
      
public void destroy()       
{       
    notCheckURLList.clear();       
}       
            }

Web.xml

    <filter>
   <filter-name>UsersFilter</filter-name>
   <filter-class>
     com.bssz.web.servlet.UsersFilter
   </filter-class>
  <init-param>    
  <param-name>redirectURL</param-name>
  <param-value>/login.jsp</param-value> 
  </init-param>  
  <init-param>    
  <param-name>checkSessionKey</param-name>
  <param-value>userSession</param-value>
  </init-param>  
  <init-param>    
  <param-name>notCheckURLList</param-name>
  <param-value>/login.jsp;/login.bssz;
  </param-value>
  </init-param>  
  
  </filter>
  <filter-mapping>
   <filter-name>UsersFilter</filter-name>
   <url-pattern>*.jsp</url-pattern>
 <url-pattern>*.bssz</url-pattern>
  </filter-mapping>

三、字符编码的过滤器

   
package catalog.view.util;    
   
import javax.servlet.Filter;    
import javax.servlet.FilterConfig;    
import javax.servlet.ServletRequest;    
import javax.servlet.ServletResponse;    
import javax.servlet.FilterChain;    
import javax.servlet.ServletException;    
import javax.servlet.http.HttpServletRequest;    
import java.io.IOException;    
import java.util.Iterator;    
import java.util.Set;    
import java.util.HashSet;    
//    
import org.apache.commons.logging.Log;    
import org.apache.commons.logging.LogFactory;    
   
/** 
* This Filter class handle the security of the application. 
* 
* It should be configured inside the web.xml. 
* 
* @author Derek Y. Shen 
*/   
public class SecurityFilter implements Filter {    
//the login page uri    
private static final String LOGIN_PAGE_URI = "login.jsf";    
   
//the logger object    
private Log logger = LogFactory.getLog(this.getClass());    
   
//a set of restricted resources    
private Set restrictedResources;    
   
/** 
   * Initializes the Filter. 
   */   
public void init(FilterConfig filterConfig) throws ServletException {    
  this.restrictedResources = new HashSet();    
  this.restrictedResources.add("/createProduct.jsf");    
  this.restrictedResources.add("/editProduct.jsf");    
  this.restrictedResources.add("/productList.jsf");    
}    
   
/** 
   * Standard doFilter object. 
   */   
public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain)    
   throws IOException, ServletException {    
  this.logger.debug("doFilter");    
      
   String contextPath = ((HttpServletRequest)req).getContextPath();    
   String requestUri = ((HttpServletRequest)req).getRequestURI();    
      
  this.logger.debug("contextPath = " + contextPath);    
  this.logger.debug("requestUri = " + requestUri);    
      
  if (this.contains(requestUri, contextPath) && !this.authorize((HttpServletRequest)req)) {    
   this.logger.debug("authorization failed");    
    ((HttpServletRequest)req).getRequestDispatcher(LOGIN_PAGE_URI).forward(req, res);    
   }    
  else {    
   this.logger.debug("authorization succeeded");    
    chain.doFilter(req, res);    
   }    
}    
   
public void destroy() {}    
   
private boolean contains(String value, String contextPath) {    
   Iterator ite = this.restrictedResources.iterator();    
      
  while (ite.hasNext()) {    
    String restrictedResource = (String)ite.next();    
       
   if ((contextPath + restrictedResource).equalsIgnoreCase(value)) {    
    return true;    
    }    
   }    
      
  return false;    
}    
   
private boolean authorize(HttpServletRequest req) {    
   
              //处理用户登录    
       /* UserBean user = (UserBean)req.getSession().getAttribute(BeanNames.USER_BEAN); 
   
   if (user != null && user.getLoggedIn()) { 
    //user logged in 
    return true; 
   } 
   else { 
    return false; 
   }*/   
}    
}

四、资源保护过滤器

 
 
   
import javax.servlet.*;    
import java.io.IOException;    
   
/** 
* 用于设置 HTTP 请求字符编码的过滤器，通过过滤器参数encoding指明使用何种字符编码,用于处理Html Form请求参数的中文问题 
*/   
public class CharacterEncodingFilter    
implements Filter    
{    
protected FilterConfig filterConfig = null;    
protected String encoding = "";    
   
public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException    
{    
         if(encoding != null)    
           servletRequest.setCharacterEncoding(encoding);    
          filterChain.doFilter(servletRequest, servletResponse);    
}    
   
public void destroy()    
{    
    filterConfig = null;    
    encoding = null;    
}    
   
     public void init(FilterConfig filterConfig) throws ServletException    
{    
          this.filterConfig = filterConfig;    
         this.encoding = filterConfig.getInitParameter("encoding");    
   
}    
}

五利用Filter限制用户浏览权限

在一个系统中通常有多个权限的用户。不同权限用户的可以浏览不同的页面。使用Filter进行判断不仅省下了代码量，而且如果要更改的话只需要在Filter文件里动下就可以。 
以下是Filter文件代码： 


import java.io.IOException;    

   
import javax.servlet.Filter;    
import javax.servlet.FilterChain;    
import javax.servlet.FilterConfig;    
import javax.servlet.ServletException;    
import javax.servlet.ServletRequest;    
import javax.servlet.ServletResponse;    
import javax.servlet.http.HttpServletRequest;    
   
public class RightFilter implements Filter {    
   
    public void destroy() {    
            
     }    
   
    public void doFilter(ServletRequest sreq, ServletResponse sres, FilterChain arg2) throws IOException, ServletException {    
        // 获取uri地址    
         HttpServletRequest request=(HttpServletRequest)sreq;    
         String uri = request.getRequestURI();    
         String ctx=request.getContextPath();    
         uri = uri.substring(ctx.length());    
        //判断admin级别网页的浏览权限    
        if(uri.startsWith("/admin")) {    
            if(request.getSession().getAttribute("admin")==null) {    
                 request.setAttribute("message","您没有这个权限");    
                 request.getRequestDispatcher("/login.jsp").forward(sreq,sres);    
                return;    
             }    
         }    
        //判断manage级别网页的浏览权限    
        if(uri.startsWith("/manage")) {    
            //这里省去    
             }    
         }    
        //下面还可以添加其他的用户权限，省去。    
   
     }    
   
    public void init(FilterConfig arg0) throws ServletException {    
            
     }    
   
} 

<!-- 判断页面的访问权限 -->   
  <filter>   
     <filter-name>RightFilter</filter-name>   
      <filter-class>cn.itkui.filter.RightFilter</filter-class>   
  </filter>   
  <filter-mapping>   
      <filter-name>RightFilter</filter-name>   
      <url-pattern>/admin/*</url-pattern>   
  </filter-mapping>   
  <filter-mapping>   
      <filter-name>RightFilter</filter-name>   
      <url-pattern>/manage/*</url-pattern>   
  </filter-mapping>   

在web.xml中加入Filter的配置，如下： 
<filter>   

        <filter-name>EncodingAndCacheflush</filter-name>   
        <filter-class>EncodingAndCacheflush</filter-class>   
        <init-param>   
            <param-name>encoding</param-name>   
            <param-value>UTF-8</param-value>   
        </init-param>   
    </filter>   
    <filter-mapping>   
        <filter-name>EncodingAndCacheflush</filter-name>   
        <url-pattern>/*</url-pattern>   
    </filter-mapping>   
要传递参数的时候最好使用form进行传参，如果使用链接的话当中文字符的时候过滤器转码是不会起作用的，还有就是页面上 

form的method也要设置为post，不然过滤器也起不了作用。

Filter解决session 过期，跳转到登陆页面

环境：DWR+ Struts

配置：

1、过滤.DO请求，在web.xml中加入

 

Xml代码 
<web-app>  
  <filter>  
    <filter-name>session-timeout</filter-name>  
    <filter-class>com.manage.common.SessionFilter</filter-class>  
  </filter>  
  <filter-mapping>  
    <filter-name>session-timeout</filter-name>  
    <url-pattern>*.do</url-pattern>  
  </filter-mapping>  

<web-app>
  <filter>
  	<filter-name>session-timeout</filter-name>
  	<filter-class>com.manage.common.SessionFilter</filter-class>
  </filter>
  <filter-mapping>
  	<filter-name>session-timeout</filter-name>
  	<url-pattern>*.do</url-pattern>
  </filter-mapping>

2、写过滤器Filter类


Java代码 
  

public void doFilter(ServletRequest request, ServletResponse response,
			FilterChain chain) throws IOException, ServletException {
		HttpServletRequest requestHttp = (HttpServletRequest) request;
		String requestURI = requestHttp.getRequestURI().toLowerCase();
		// 判断是否是首次登陆
		boolean isLogin = requestURI.indexOf("login") >= 0;
		Tsysuser tsysuser = (Tsysuser) requestHttp.getSession().getAttribute("tsysuser");
		if (!isLogin && tsysuser == null) {
			request.setAttribute("message", "登陆超时，请重新登陆！");
			RequestDispatcher requestDispatcher = request.getRequestDispatcher("/index.jsp");
			requestDispatcher.forward(request, response);
		}else{
			chain.doFilter(request, response);
		}

	} 

3、在登陆页面index.jsp的<head></head>标签中加入

 

Js代码 
<script language="JavaScript">    
    if (window != top)    
    top.location.href = location.href;    
</script>

分享到：