JavaWeb项目 Filter 登录页面过滤器，防止信息泄露

Filter过滤器，登录注册

**对登录注册进行过滤，不能通过url直接访问相关页面，必须进行登录成功后才可以访问
**
大家请看图：注意地址栏
代码：Filter.java

package com.chaz.servlet;
 
import java.io.IOException;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

public class Filter implements javax.servlet.Filter {
	public void destroy() {}
	public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
		HttpServletRequest request = (HttpServletRequest) servletRequest;
		HttpServletResponse response = (HttpServletResponse) servletResponse;
		String currentURL = request.getRequestURI();
		String targetURL = currentURL.substring(currentURL.indexOf("/", 1),currentURL.length());
		HttpSession session = request.getSession(false);
		if (!"/login.jsp".equals(targetURL)) {
			if (session == null || session.getAttribute("user") == null) {
				System.out.println("request.getContextPath()="
						+ request.getContextPath());
				response.sendRedirect(request.getContextPath() + "/login.jsp");
				return;
			}
		}
		filterChain.doFilter(request, response);
	}
	public void init(FilterConfig filterConfig) throws ServletException {}
}

配置文件：web.xml:

  <filter>
	<filter-name>Filter</filter-name>
	<filter-class>com.chaz.servlet.Filter</filter-class>
</filter>
<filter-mapping>
	<filter-name>Filter</filter-name>
	<url-pattern>*.jsp</url-pattern>
</filter-mapping>