JSP的URL过滤器

做Web开发一定都会涉及到过滤器，为了防止未授权用户乱搞（在地址栏直接输入URL修改后台数据等），所以需要对URL进行验证过滤。

在JSP的综合实验中初次写了个过滤器，实现基本的过滤功能。

package com.zeqing.servlet;

import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

public class URLFilter implements Filter {

    // 定义编码类型属性
    protected String encoding = null;
    // 定义接受过滤器参数的对象
    protected FilterConfig filterConfig = null;
	
	@Override
	public void destroy() {
		// TODO Auto-generated method stub

	}

	@Override
	public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse,
			FilterChain chain) throws IOException, ServletException {
		// 若过滤器编码格式不为空则进入设置
        if (this.encoding != null)
        	servletRequest.setCharacterEncoding(this.encoding);
	HttpServletRequest httpServletRequest = (HttpServletRequest) servletRequest;  
        HttpServletResponse httpServletResponse = (HttpServletResponse) servletResponse; 
        
        String userName = (String) httpServletRequest.getSession(true).getAttribute("userName");  
        String method = httpServletRequest.getParameter("method");
        if("updateVote".equals(method) || "deleteVote".equals(method)){
        	if (userName == null || "".equals(userName)) {  
                httpServletResponse.sendRedirect(httpServletRequest.getContextPath() + "/login.jsp");  
                return;
            }else{
            	chain.doFilter(httpServletRequest, httpServletResponse);
                return;
            }
        }
        if (isIncludePages(httpServletRequest.getRequestURI())) {  
            if (userName == null || "".equals(userName)) {  
                httpServletResponse.sendRedirect(httpServletRequest.getContextPath() + "/login.jsp");  
                return;
            }else{
            	chain.doFilter(httpServletRequest, httpServletResponse);
                return;
            }
        }
        chain.doFilter(httpServletRequest, httpServletResponse);
        return;
        
		
	}
	
	private boolean isIncludePages(String url) {
		if(url.indexOf("newVote.jsp") != -1 || url.indexOf("voteEdit.jsp") != -1)
			return true;
		else
			return false;
        
    }

	@Override
	public void init(FilterConfig filterConfig) throws ServletException {
		this.filterConfig = filterConfig;
        this.encoding = filterConfig.getInitParameter("encoding");

	}

}

在web.xml文件中的配置

 <filter>
        <filter-name>IdentityFilter</filter-name>
        <filter-class>com.zeqing.servlet.URLFilter</filter-class>
        <init-param>  
      		<param-name>encoding</param-name>  
      		<param-value>UTF-8</param-value>  
        </init-param> 
    </filter>
    <filter-mapping>
        <filter-name>IdentityFilter</filter-name>
        <url-pattern>/*.jsp</url-pattern>
   </filter-mapping>
   <filter-mapping>
        <filter-name>IdentityFilter</filter-name>
        <url-pattern>/VoteServlet</url-pattern>
   </filter-mapping>

有一点需要特别注意，就是要设置编码方式为UTF-8，如果没有设置编码方式，经过URLFilter后的中文数据会变成乱码。