Servlet过滤器大全
一、字符编码的过滤器
importjavax.servlet.*;
importjava.io.IOException;
/**
*用于设置HTTP请求字符编码的过滤器,通过过滤器参数encoding指明使用何种字符编码,用于处理HtmlForm请求参数的中文问题
*/
publicclassCharacterEncodingFilter
implementsFilter
{
protectedFilterConfigfilterConfig=null;
protectedStringencoding="";
publicvoiddoFilter(ServletRequestservletRequest,ServletResponseservletResponse,FilterChainfilterChain)throwsIOException,ServletException
{
if(encoding!=null)
servletRequest.setCharacterEncoding(encoding);
filterChain.doFilter(servletRequest,servletResponse);
}
publicvoiddestroy()
{
filterConfig=null;
encoding=null;
}
publicvoidinit(FilterConfigfilterConfig)throwsServletException
{
this.filterConfig=filterConfig;
this.encoding=filterConfig.getInitParameter("encoding");
}
}
importjava.io.IOException;
/**
*用于设置HTTP请求字符编码的过滤器,通过过滤器参数encoding指明使用何种字符编码,用于处理HtmlForm请求参数的中文问题
*/
publicclassCharacterEncodingFilter
implementsFilter
{
protectedFilterConfigfilterConfig=null;
protectedStringencoding="";
publicvoiddoFilter(ServletRequestservletRequest,ServletResponseservletResponse,FilterChainfilterChain)throwsIOException,ServletException
{
if(encoding!=null)
servletRequest.setCharacterEncoding(encoding);
filterChain.doFilter(servletRequest,servletResponse);
}
publicvoiddestroy()
{
filterConfig=null;
encoding=null;
}
publicvoidinit(FilterConfigfilterConfig)throwsServletException
{
this.filterConfig=filterConfig;
this.encoding=filterConfig.getInitParameter("encoding");
}
}
二、使浏览器不缓存页面的过滤器
importjavax.servlet.*;
importjavax.servlet.http.HttpServletResponse;
importjava.io.IOException;
/**
*用于的使Browser不缓存页面的过滤器
*/
publicclassForceNoCacheFilterimplementsFilter{
publicvoiddoFilter(ServletRequestrequest,ServletResponseresponse,FilterChainfilterChain)throwsIOException,ServletException
{
((HttpServletResponse)response).setHeader("Cache-Control","no-cache");
((HttpServletResponse)response).setHeader("Pragma","no-cache");
((HttpServletResponse)response).setDateHeader("Expires",-1);
filterChain.doFilter(request,response);
}
publicvoiddestroy(){
}
publicvoidinit(FilterConfigfilterConfig)throwsServletException{
}
}
importjavax.servlet.http.HttpServletResponse;
importjava.io.IOException;
/**
*用于的使Browser不缓存页面的过滤器
*/
publicclassForceNoCacheFilterimplementsFilter{
publicvoiddoFilter(ServletRequestrequest,ServletResponseresponse,FilterChainfilterChain)throwsIOException,ServletException
{
((HttpServletResponse)response).setHeader("Cache-Control","no-cache");
((HttpServletResponse)response).setHeader("Pragma","no-cache");
((HttpServletResponse)response).setDateHeader("Expires",-1);
filterChain.doFilter(request,response);
}
publicvoiddestroy(){
}
publicvoidinit(FilterConfigfilterConfig)throwsServletException{
}
}
三、检测用户是否登陆的过滤器
importjavax.servlet.*;
importjavax.servlet.http.HttpServletRequest;
importjavax.servlet.http.HttpServletResponse;
importjavax.servlet.http.HttpSession;
importjava.util.List;
importjava.util.ArrayList;
importjava.util.StringTokenizer;
importjava.io.IOException;
/**
*用于检测用户是否登陆的过滤器,如果未登录,则重定向到指的登录页面
*配置参数
*checkSessionKey需检查的在Session中保存的关键字
*redirectURL如果用户未登录,则重定向到指定的页面,URL不包括ContextPath
*notCheckURLList不做检查的URL列表,以分号分开,并且URL中不包括ContextPath
*/
publicclassCheckLoginFilter
implementsFilter
{
protectedFilterConfigfilterConfig=null;
privateStringredirectURL=null;
privateListnotCheckURLList=newArrayList();
privateStringsessionKey=null;
publicvoiddoFilter(ServletRequestservletRequest,ServletResponseservletResponse,FilterChainfilterChain)throwsIOException,ServletException
{
HttpServletRequestrequest=(HttpServletRequest)servletRequest;
HttpServletResponseresponse=(HttpServletResponse)servletResponse;
HttpSessionsession=request.getSession();
if(sessionKey==null)
{
filterChain.doFilter(request,response);
return;
}
if((!checkRequestURIIntNotFilterList(request))&&session.getAttribute(sessionKey)==null)
{
response.sendRedirect(request.getContextPath()+redirectURL);
return;
}
filterChain.doFilter(servletRequest,servletResponse);
}
publicvoiddestroy()
{
notCheckURLList.clear();
}
privatebooleancheckRequestURIIntNotFilterList(HttpServletRequestrequest)
{
Stringuri=request.getServletPath()+(request.getPathInfo()==null?"":request.getPathInfo());
returnnotCheckURLList.contains(uri);
}
publicvoidinit(FilterConfigfilterConfig)throwsServletException
{
this.filterConfig=filterConfig;
redirectURL=filterConfig.getInitParameter("redirectURL");
sessionKey=filterConfig.getInitParameter("checkSessionKey");
StringnotCheckURLListStr=filterConfig.getInitParameter("notCheckURLList");
if(notCheckURLListStr!=null)
{
StringTokenizerst=newStringTokenizer(notCheckURLListStr,";");
notCheckURLList.clear();
while(st.hasMoreTokens())
{
notCheckURLList.add(st.nextToken());
}
}
}
}
importjavax.servlet.http.HttpServletRequest;
importjavax.servlet.http.HttpServletResponse;
importjavax.servlet.http.HttpSession;
importjava.util.List;
importjava.util.ArrayList;
importjava.util.StringTokenizer;
importjava.io.IOException;
/**
*用于检测用户是否登陆的过滤器,如果未登录,则重定向到指的登录页面
*配置参数
*checkSessionKey需检查的在Session中保存的关键字
*redirectURL如果用户未登录,则重定向到指定的页面,URL不包括ContextPath
*notCheckURLList不做检查的URL列表,以分号分开,并且URL中不包括ContextPath
*/
publicclassCheckLoginFilter
implementsFilter
{
protectedFilterConfigfilterConfig=null;
privateStringredirectURL=null;
privateListnotCheckURLList=newArrayList();
privateStringsessionKey=null;
publicvoiddoFilter(ServletRequestservletRequest,ServletResponseservletResponse,FilterChainfilterChain)throwsIOException,ServletException
{
HttpServletRequestrequest=(HttpServletRequest)servletRequest;
HttpServletResponseresponse=(HttpServletResponse)servletResponse;
HttpSessionsession=request.getSession();
if(sessionKey==null)
{
filterChain.doFilter(request,response);
return;
}
if((!checkRequestURIIntNotFilterList(request))&&session.getAttribute(sessionKey)==null)
{
response.sendRedirect(request.getContextPath()+redirectURL);
return;
}
filterChain.doFilter(servletRequest,servletResponse);
}
publicvoiddestroy()
{
notCheckURLList.clear();
}
privatebooleancheckRequestURIIntNotFilterList(HttpServletRequestrequest)
{
Stringuri=request.getServletPath()+(request.getPathInfo()==null?"":request.getPathInfo());
returnnotCheckURLList.contains(uri);
}
publicvoidinit(FilterConfigfilterConfig)throwsServletException
{
this.filterConfig=filterConfig;
redirectURL=filterConfig.getInitParameter("redirectURL");
sessionKey=filterConfig.getInitParameter("checkSessionKey");
StringnotCheckURLListStr=filterConfig.getInitParameter("notCheckURLList");
if(notCheckURLListStr!=null)
{
StringTokenizerst=newStringTokenizer(notCheckURLListStr,";");
notCheckURLList.clear();
while(st.hasMoreTokens())
{
notCheckURLList.add(st.nextToken());
}
}
}
}
四、资源保护过滤器
packagecatalog.view.util;
importjavax.servlet.Filter;
importjavax.servlet.FilterConfig;
importjavax.servlet.ServletRequest;
importjavax.servlet.ServletResponse;
importjavax.servlet.FilterChain;
importjavax.servlet.ServletException;
importjavax.servlet.http.HttpServletRequest;
importjava.io.IOException;
importjava.util.Iterator;
importjava.util.Set;
importjava.util.HashSet;
//
importorg.apache.commons.logging.Log;
importorg.apache.commons.logging.LogFactory;
/**
*ThisFilterclasshandlethesecurityoftheapplication.
*
*Itshouldbeconfiguredinsidetheweb.xml.
*
*@authorDerekY.Shen
*/
publicclassSecurityFilterimplementsFilter{
//theloginpageuri
privatestaticfinalStringLOGIN_PAGE_URI="login.jsf";
//theloggerobject
privateLoglogger=LogFactory.getLog(this.getClass());
//asetofrestrictedresources
privateSetrestrictedResources;
/**
*InitializestheFilter.
*/
publicvoidinit(FilterConfigfilterConfig)throwsServletException{
this.restrictedResources=newHashSet();
this.restrictedResources.add("/createProduct.jsf");
this.restrictedResources.add("/editProduct.jsf");
this.restrictedResources.add("/productList.jsf");
}
/**
*StandarddoFilterobject.
*/
publicvoiddoFilter(ServletRequestreq,ServletResponseres,FilterChainchain)
throwsIOException,ServletException{
this.logger.debug("doFilter");
StringcontextPath=((HttpServletRequest)req).getContextPath();
StringrequestUri=((HttpServletRequest)req).getRequestURI();
this.logger.debug("contextPath="+contextPath);
this.logger.debug("requestUri="+requestUri);
if(this.contains(requestUri,contextPath)&&!this.authorize((HttpServletRequest)req)){
this.logger.debug("authorizationfailed");
((HttpServletRequest)req).getRequestDispatcher(LOGIN_PAGE_URI).forward(req,res);
}
else{
this.logger.debug("authorizationsucceeded");
chain.doFilter(req,res);
}
}
publicvoiddestroy(){}
privatebooleancontains(Stringvalue,StringcontextPath){
Iteratorite=this.restrictedResources.iterator();
while(ite.hasNext()){
StringrestrictedResource=(String)ite.next();
if((contextPath+restrictedResource).equalsIgnoreCase(value)){
returntrue;
}
}
returnfalse;
}
privatebooleanauthorize(HttpServletRequestreq){
//处理用户登录
/*UserBeanuser=(UserBean)req.getSession().getAttribute(BeanNames.USER_BEAN);
if(user!=null&&user.getLoggedIn()){
//userloggedin
returntrue;
}
else{
returnfalse;
}*/
}
}
importjavax.servlet.Filter;
importjavax.servlet.FilterConfig;
importjavax.servlet.ServletRequest;
importjavax.servlet.ServletResponse;
importjavax.servlet.FilterChain;
importjavax.servlet.ServletException;
importjavax.servlet.http.HttpServletRequest;
importjava.io.IOException;
importjava.util.Iterator;
importjava.util.Set;
importjava.util.HashSet;
//
importorg.apache.commons.logging.Log;
importorg.apache.commons.logging.LogFactory;
/**
*ThisFilterclasshandlethesecurityoftheapplication.
*
*Itshouldbeconfiguredinsidetheweb.xml.
*
*@authorDerekY.Shen
*/
publicclassSecurityFilterimplementsFilter{
//theloginpageuri
privatestaticfinalStringLOGIN_PAGE_URI="login.jsf";
//theloggerobject
privateLoglogger=LogFactory.getLog(this.getClass());
//asetofrestrictedresources
privateSetrestrictedResources;
/**
*InitializestheFilter.
*/
publicvoidinit(FilterConfigfilterConfig)throwsServletException{
this.restrictedResources=newHashSet();
this.restrictedResources.add("/createProduct.jsf");
this.restrictedResources.add("/editProduct.jsf");
this.restrictedResources.add("/productList.jsf");
}
/**
*StandarddoFilterobject.
*/
publicvoiddoFilter(ServletRequestreq,ServletResponseres,FilterChainchain)
throwsIOException,ServletException{
this.logger.debug("doFilter");
StringcontextPath=((HttpServletRequest)req).getContextPath();
StringrequestUri=((HttpServletRequest)req).getRequestURI();
this.logger.debug("contextPath="+contextPath);
this.logger.debug("requestUri="+requestUri);
if(this.contains(requestUri,contextPath)&&!this.authorize((HttpServletRequest)req)){
this.logger.debug("authorizationfailed");
((HttpServletRequest)req).getRequestDispatcher(LOGIN_PAGE_URI).forward(req,res);
}
else{
this.logger.debug("authorizationsucceeded");
chain.doFilter(req,res);
}
}
publicvoiddestroy(){}
privatebooleancontains(Stringvalue,StringcontextPath){
Iteratorite=this.restrictedResources.iterator();
while(ite.hasNext()){
StringrestrictedResource=(String)ite.next();
if((contextPath+restrictedResource).equalsIgnoreCase(value)){
returntrue;
}
}
returnfalse;
}
privatebooleanauthorize(HttpServletRequestreq){
//处理用户登录
/*UserBeanuser=(UserBean)req.getSession().getAttribute(BeanNames.USER_BEAN);
if(user!=null&&user.getLoggedIn()){
//userloggedin
returntrue;
}
else{
returnfalse;
}*/
}
}
五 利用Filter限制用户浏览权限
在一个系统中通常有多个权限的用户。不同权限用户的可以浏览不同的页面。使用Filter进行判断不仅省下了代码量,而且如果要更改的话只需要在Filter文件里动下就可以。
以下是Filter文件代码:
importjava.io.IOException;
importjavax.servlet.Filter;
importjavax.servlet.FilterChain;
importjavax.servlet.FilterConfig;
importjavax.servlet.ServletException;
importjavax.servlet.ServletRequest;
importjavax.servlet.ServletResponse;
importjavax.servlet.http.HttpServletRequest;
publicclassRightFilterimplementsFilter{
publicvoiddestroy(){
}
publicvoiddoFilter(ServletRequestsreq,ServletResponsesres,FilterChainarg2)throwsIOException,ServletException{
//获取uri地址
HttpServletRequestrequest=(HttpServletRequest)sreq;
Stringuri=request.getRequestURI();
Stringctx=request.getContextPath();
uri=uri.substring(ctx.length());
//判断admin级别网页的浏览权限
if(uri.startsWith("/admin")){
if(request.getSession().getAttribute("admin")==null){
request.setAttribute("message","您没有这个权限");
request.getRequestDispatcher("/login.jsp").forward(sreq,sres);
return;
}
}
//判断manage级别网页的浏览权限
if(uri.startsWith("/manage")){
//这里省去
}
}
//下面还可以添加其他的用户权限,省去。
}
publicvoidinit(FilterConfigarg0)throwsServletException{
}
}
<!--判断页面的访问权限-->
<filter>
<filter-name>RightFilter</filter-name>
<filter-class>cn.itkui.filter.RightFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>RightFilter</filter-name>
<url-pattern>/admin/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>RightFilter</filter-name>
<url-pattern>/manage/*</url-pattern>
</filter-mapping>
在web.xml中加入Filter的配置,如下:
<filter>
<filter-name>EncodingAndCacheflush</filter-name>
<filter-class>EncodingAndCacheflush</filter-class>
<init-param>
<param-name>encoding</param-name>
<param-value>UTF-8</param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>EncodingAndCacheflush</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
要传递参数的时候最好使用form进行传参,如果使用链接的话当中文字符的时候过滤器转码是不会起作用的,还有就是页面上
form的method也要设置为post,不然过滤器也起不了作用。
importjavax.servlet.Filter;
importjavax.servlet.FilterChain;
importjavax.servlet.FilterConfig;
importjavax.servlet.ServletException;
importjavax.servlet.ServletRequest;
importjavax.servlet.ServletResponse;
importjavax.servlet.http.HttpServletRequest;
publicclassRightFilterimplementsFilter{
publicvoiddestroy(){
}
publicvoiddoFilter(ServletRequestsreq,ServletResponsesres,FilterChainarg2)throwsIOException,ServletException{
//获取uri地址
HttpServletRequestrequest=(HttpServletRequest)sreq;
Stringuri=request.getRequestURI();
Stringctx=request.getContextPath();
uri=uri.substring(ctx.length());
//判断admin级别网页的浏览权限
if(uri.startsWith("/admin")){
if(request.getSession().getAttribute("admin")==null){
request.setAttribute("message","您没有这个权限");
request.getRequestDispatcher("/login.jsp").forward(sreq,sres);
return;
}
}
//判断manage级别网页的浏览权限
if(uri.startsWith("/manage")){
//这里省去
}
}
//下面还可以添加其他的用户权限,省去。
}
publicvoidinit(FilterConfigarg0)throwsServletException{
}
}
<!--判断页面的访问权限-->
<filter>
<filter-name>RightFilter</filter-name>
<filter-class>cn.itkui.filter.RightFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>RightFilter</filter-name>
<url-pattern>/admin/*</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>RightFilter</filter-name>
<url-pattern>/manage/*</url-pattern>
</filter-mapping>
在web.xml中加入Filter的配置,如下:
<filter>
<filter-name>EncodingAndCacheflush</filter-name>
<filter-class>EncodingAndCacheflush</filter-class>
<init-param>
<param-name>encoding</param-name>
<param-value>UTF-8</param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>EncodingAndCacheflush</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
要传递参数的时候最好使用form进行传参,如果使用链接的话当中文字符的时候过滤器转码是不会起作用的,还有就是页面上
form的method也要设置为post,不然过滤器也起不了作用。
相关推荐
Servlet过滤器的简单使用,实现一个登陆界面。代码和博文几乎一致。
servlet 过滤器做的简单登陆demo 初学者的简单例子。
比较好也比较常见的方法是用专门的servlet过滤器进行过滤。java中有个Filter类专门从事这类工作,下面以一个简单的实例进行演示: 实例说明:假设有一个web应用软件,如果是正常途径登录,我们会在其session中放入...
servlet过滤器实例经典过滤器,手把手交你配置过滤器,五大常用过滤器源码,走过路过的同事们注意了!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
简单的实现了一个Servlet过滤器,并配有文档按步骤教你怎么做
这是Servlet过滤器的初始化方法,Servlet容器创建Servlet过滤器实例后将调用这个方法。在这个方法中可以读取web.xml文件中Servlet过滤器的初始化参数。 b、doFilter(ServletRequest,ServletResponse,FilterChain)...
servlet过滤器配置及运行过程,servlet实例用法。
servlet过滤器和监听器,servlet过滤器和监听器课件,servlet过滤器和监听器PPT
过滤器提供一种面向对象的模块化机制,用以将公共任务封装到可插入的组件中。...由于是纯Java实现,所以Servlet过滤器是跨平台的模块化和可重用性,使得它们很容易地被部署到任何相容的J2EE环境中。
servlet过滤器详解
一个超帅的jsp过滤器 ,对登录进行验证
servlet 过滤器例子 filterservlet 过滤器例子 filterservlet 过滤器例子 filter 如果是action 则需要改动url patten
用过滤器来验证用户是否登录
Servlet过滤器大全
蔡世友 Servlet 过滤器
第13章使用Servlet过滤器和监听器,基础知识
Servlet过滤器与监听器
tomcat容器中servlet过滤器用法举例
最简单的写法 只要JSP页面的 编码格式和 web.xml 编码格式一样就行