用过滤器验证登陆,看session是否有效

package com.imps.common.filter;

/*****************************************************
 *
 * @author wuzhenzhong
 *
 * @since May 14, 2009
 *
 *****************************************************/
import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import org.apache.log4j.Logger;

/*
 * 用过滤器验证登陆,看session是否有效
 */
public class SessionFilter implements Filter {
 private static final Logger log = Logger.getLogger(SessionFilter.class);
 FilterConfig fc;

 public void destroy() {
  //消毁方法
 }
 /*
  * (non-Javadoc)
  * @see javax.servlet.Filter#doFilter(javax.servlet.ServletRequest, javax.servlet.ServletResponse, javax.servlet.FilterChain)
  * 验证Session
  */
 public void doFilter(ServletRequest request, ServletResponse response,
   FilterChain chain) throws IOException, ServletException {
  String urlwrong ="/wronglogin.jsp";
  HttpServletRequest hreq = (HttpServletRequest) request;
  HttpServletResponse hres = (HttpServletResponse) response;
  HttpSession session = hreq.getSession();
  if (session != null && session.getAttribute("USERINFO") != null)
  {
   log.info("session is have");
   chain.doFilter(request, response);
  }
  else
  {
   log.info("session havan't");
   hres.sendRedirect(urlwrong);
  }
 }
 /*
  * (non-Javadoc)
  * @see javax.servlet.Filter#init(javax.servlet.FilterConfig)
  * 初使化过滤器
  */
 public void init(FilterConfig fc) throws ServletException {
  this.fc = fc;
 }

}

 

 

[web.xml 配置]

 

 

<filter>  
     <filter-name>SessionFilter</filter-name>  
     <filter-class>com.imps.common.filter.SessionFilter</filter-class>  
 </filter>  
 <filter-mapping>  
     <filter-name>SessionFilter</filter-name>  
     <url-pattern>*.do</url-pattern>  
 </filter-mapping>