通过session设置登录权限

新建类继承javax.servlet.Filter;

public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse,

FilterChain filterChain) throws IOException, ServletException {

// TODO Auto-generated method stub

HttpServletRequest request=(HttpServletRequest)servletRequest;

HttpServletResponse response=(HttpServletResponse)servletResponse;

//取得根目录所对应的绝对路径:

String currentURL=request.getRequestURI();

//截取到当前文件名用于比较

String targetURL=currentURL.substring(currentURL.indexOf("/", 1), currentURL.length());

HttpSession session = request.getSession(false);

if(!"/userenter.jsp".endsWith(targetURL)){//判断当前页是否是重定向以后的登录页面页面，如果是就不做session的判断，防止出现死循环

if(session==null||session.getAttribute("enterUser")==null){

response.sendRedirect(request.getContextPath()+"/userenter.jsp");

return;

}

}

filterChain.doFilter(request, response);

}

 

在web.xml中初始化

<filter>

  <filter-name>loginFilter</filter-name>

  <filter-class>com.zfy.service.loginFilter</filter-class>

  </filter>

  <filter-mapping>

  <filter-name>loginFilter</filter-name>

  <url-pattern>*.jsp</url-pattern>

  </filter-mapping>