struts2文件上传类型的过滤
转自:http://www.2cto.com/kf/201403/282787.html
第一种解决方案:
1.手动实现文件过滤:
判断上传的文件是否在允许的范围内
定义该Action允许上传的文件类型 private String allowTypes;
利用Struts2的输入效验判断用户的输入的文件是否合理
UploadAction.java
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
|
package action;import java.io.File;import java.io.FileInputStream;import java.io.FileOutputStream;import org.apache.struts2.ServletActionContext;import com.opensymphony.xwork2.ActionSupport;public class UploadAction extends ActionSupport { /** * */ private static final long serialVersionUID = 1L; private String title; private File uploadfile; private String uploadfileContentType; private String uploadfileFileName; private String savePath; private String allowType;//定义该Action允许上传的文件类型 public boolean check(String type){ String[] types=allowType.split(","); for(String s:types){ if(s.equals(type)){ return true; } } return false; } public void validate(){ boolean b=check(uploadfileContentType); if(!b){ addFieldError("upload","上传文件错误"); } } public String getAllowType() { return allowType; } public void setAllowType(String allowType) { this.allowType = allowType; } public String upload() throws Exception { FileInputStream fis = new FileInputStream(getUploadfile()); FileOutputStream fos=new FileOutputStream(getSavePath()+"\\"+getUploadfileFileName()); byte[] buffer=new byte[1024]; int len=0; while((len=fis.read(buffer))>0){ fos.write(buffer,0,len); } fos.close(); fis.close(); return SUCCESS; } public String getTitle() { return title; } public void setTitle(String title) { this.title = title; } public File getUploadfile() { return uploadfile; } public void setUploadfile(File uploadfile) { this.uploadfile = uploadfile; } public String getUploadfileContentType() { return uploadfileContentType; } public void setUploadfileContentType(String uploadfileContentType) { this.uploadfileContentType = uploadfileContentType; } public String getUploadfileFileName() { return uploadfileFileName; } public void setUploadfileFileName(String uploadfileFileName) { this.uploadfileFileName = uploadfileFileName; } public String getSavePath() { return ServletActionContext.getServletContext().getRealPath(savePath);//得到绝对路径 } public void setSavePath(String savePath) { this.savePath = savePath; }} |
struts.xml
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
<!--?xml version="1.0" encoding="UTF-8"?--><struts> <package name="hello" namespace="/hello" extends="struts-default"> <!-- 设置允许上传的文件类型 --> <param name="allowType">image/x-png,file/txt,image/jpeg <param name="savePath">/uploadFiles <result name="success"> /success.jsp </result> <result name="input"> /index.jsp </result> </action> </package></struts> |
index.jsp
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
|
<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%><%@taglib prefix="s" uri="/struts-tags"%>><%String path = request.getContextPath();String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+path+"/";%><html> <title>My JSP 'index.jsp' starting page</title> <meta http-equiv="pragma" content="no-cache"> <meta http-equiv="cache-control" content="no-cache"> <meta http-equiv="expires" content="0"> <meta http-equiv="keywords" content="keyword1,keyword2,keyword3"> <meta http-equiv="description" content="This is my page"> <!-- <link rel="stylesheet" type="text/css" href="styles.css"> --> <s:fielderror> <form action="/Upload-1/hello/login" method="post" enctype="multipart/form-data"> 文件名:<input type="text" name="title"> 文件:<input type="file" name="uploadfile"><input type="submit"> </form> </s:fielderror> |
success.jsp
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
|
<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%><%@taglib prefix="s" uri="/struts-tags"%> <%String path = request.getContextPath(); System.out.println(path);String basePath = request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+path+"/";System.out.println(basePath);%> 上传成功!<br> 文件标题:<s:property value="title"><br> 文件为:<img src="" 'uploadfiles="" '+uploadfilefilename"="" style="display: none;"><img alt="加载中..." title="图片加载中..." src="http://www.2cto.com/statics/images/s_nopic.gif">"/><br> </s:property> |
第二种解决方案:
2.拦截器实现文件过滤:
配置fileUpload拦截器两个参数:
allowedTypes:允许上传文件的类型,多个值用,分开
maximumSize:允许上传文件的大小,单位字节。
UploadAction.java
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
|
package action;import java.io.File;import java.io.FileInputStream;import java.io.FileOutputStream;import org.apache.struts2.ServletActionContext;import com.opensymphony.xwork2.ActionSupport;public class UploadAction extends ActionSupport { /** * */ private static final long serialVersionUID = 1L; private String title; private File uploadfile; private String uploadfileContentType; private String uploadfileFileName; private String savePath; private String allowedTypes; public String getAllowedTypes() { return allowedTypes; } public void setAllowedTypes(String allowedTypes) { this.allowedTypes = allowedTypes; } public String upload() throws Exception { FileInputStream fis = new FileInputStream(getUploadfile()); FileOutputStream fos=new FileOutputStream(getSavePath()+"\\"+getUploadfileFileName()); byte[] buffer=new byte[1024]; int len=0; while((len=fis.read(buffer))>0){ fos.write(buffer,0,len); } fos.close(); fis.close(); return SUCCESS; } public String getTitle() { return title; } public void setTitle(String title) { this.title = title; } public File getUploadfile() { return uploadfile; } public void setUploadfile(File uploadfile) { this.uploadfile = uploadfile; } public String getUploadfileContentType() { return uploadfileContentType; } public void setUploadfileContentType(String uploadfileContentType) { this.uploadfileContentType = uploadfileContentType; } public String getUploadfileFileName() { return uploadfileFileName; } public void setUploadfileFileName(String uploadfileFileName) { this.uploadfileFileName = uploadfileFileName; } public String getSavePath() { return ServletActionContext.getServletContext().getRealPath(savePath);//得到绝对路径 } public void setSavePath(String savePath) { this.savePath = savePath; }} |
struts.xml
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
<!--?xml version="1.0" encoding="UTF-8"?--><struts> <package name="hello" namespace="/hello" extends="struts-default"> <interceptor-ref name="fileUpload"> <param name="allowedTypes">image/x-png,image/gif,image/jpeg <param name="maximumSize">20000000 </interceptor-ref> <interceptor-ref name="defaultStack"></interceptor-ref> <param name="savePath">/uploadFiles <result name="success"> /success.jsp </result> <result name="input"> /index.jsp </result> </action> </package></struts>
|

浙公网安备 33010602011771号