fiter过滤器控制统一编码和防止非法url进入

1. package com.tongtech.bjvsp.sysmng.filter; 2. 3. import java.io.IOException; 4. import java.io.PrintWriter; 5. 6. import javax.servlet.Filter; 7. import javax.servlet.FilterChain; 8. import javax.servlet.FilterConfig; 9. import javax.servlet.ServletException; 10. import javax.servlet.ServletRequest; 11. import javax.servlet.ServletResponse; 12. import javax.servlet.http.HttpServlet; 13. import javax.servlet.http.HttpServletRequest; 14. import javax.servlet.http.HttpServletResponse; 15. 16. import com.tongtech.bjvsp.sysmng.constant.ConstantServlet; 17. 18. public class EncodingFilter extends HttpServlet implements Filter { 19. private FilterConfig filterConfig; 20. 21. // Handle the passed-in FilterConfig 22. public void init(FilterConfig filterConfig) throws ServletException { 23. this.filterConfig = filterConfig; 24. } 25. 26. // Process the request/response pair 27. public void doFilter(ServletRequest request, ServletResponse response, 28. FilterChain filterChain) { 29. try { 30. 31. HttpServletRequest httpRequest = (HttpServletRequest) request; 32. HttpServletResponse httpResponse = (HttpServletResponse) response; 33. boolean isValid = true; 34. String uriStr = httpRequest.getRequestURI(); 35. if (uriStr.indexOf(".jsp") == -1 && uriStr.indexOf(".do") == -1) { 36. isValid = true; 37. } else if (uriStr.indexOf("login.jsp") == -1 && uriStr.indexOf("login.do") == -1 38. && httpRequest.getSession().getAttribute("UserWraper") == null) { 39. isValid = false; 40. } 41. 42. if (isValid) { 43. request.setCharacterEncoding("GBK"); 44. filterChain.doFilter(request, response); 45. } 46. 47. else { 48. request.setCharacterEncoding("GBK"); 49. PrintWriter out = httpResponse.getWriter(); 50. if( uriStr.indexOf("index.jsp") == -1 ) { 51. out.write("<mce:script type="text/javascript"><!--window.parent.parent.location.href='../../login.jsp'// --></mce:script>"); 52. } else { 53. out.write("<mce:script type="text/javascript"><!--window.parent.parent.location.href='../login.jsp'// --></mce:script>"); 54. } 55. 56. } 57. 58. } catch (ServletException sx) { 59. filterConfig.getServletContext().log(sx.getMessage()); 60. } catch (IOException iox) { 61. filterConfig.getServletContext().log(iox.getMessage()); 62. } 63. } 64. 65. // Clean up resources 66. public void destroy() { 67. } 68. }