servlet实现简单的权限管理和敏感词过滤功能

    
 
 
 LayuiMini后台登录
 
 
 
 
 保持登录忘记密码？
 立即登录
 ©版权所有 2014-2018 叁贰柒工作室|粤ICP备16006642号-2

   
 用户名： 密码：

 package com.dreamchaser.loginTest.servlet; import com.dreamchaser.loginTest.mapper.UserMapper; import javax.servlet.ServletException; import javax.servlet.ServletOutputStream; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import java.io.IOException; public class LoginServlet extends HttpServlet { static UserMapper userMapper=UserMapper.getUserMapper(); @Override protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { doGet(request,response); } @Override protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { String uname=req.getParameter("uname"); String pwd=req.getParameter("pwd"); ServletOutputStream outputStream = resp.getOutputStream(); String result; if (pwd.equals(userMapper.getPwdByName(uname))){ req.getSession().setAttribute("user",uname); resp.sendRedirect("/index.html"); }else { //响应 result="登录失败"; outputStream.write(result.getBytes()); } } }

 package com.dreamchaser.loginTest.filter; import javax.servlet.*; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import java.io.IOException; import java.util.Arrays; import java.util.List; public class UserFilter implements Filter { private List excludedUrls; @Override public void doFilter(ServletRequest req, ServletResponse resp, FilterChain chain) throws IOException, ServletException { // 将req resp 转为子接口的类型 HttpServletRequest request = (HttpServletRequest)req; HttpServletResponse response = (HttpServletResponse)resp; String path = request.getServletPath(); if(!excludedUrls.contains(path)&&!(path.length()>8&&"/static/".equals(path.substring(0,8)))) { if (request.getSession().getAttribute("user")==null){ response.sendRedirect("/pages/login.html"); } } chain.doFilter(req, resp); } @Override public void init(FilterConfig filterConfig) throws ServletException { String excludePattern = filterConfig.getInitParameter("excludedUrls"); excludedUrls = Arrays.asList(excludePattern.split(",")); } @Override public void destroy() { } }

  LoginServletcom.dreamchaser.loginTest.servlet.LoginServlet LoginServlet/login UserFiltercom.dreamchaser.loginTest.filter.UserFilter excludedUrls/pages/login.html,/register.html,/login UserFilter/*

    
 请输入你要说的垃圾话：
 提交

 package com.dreamchaser.loginTest.servlet; import javax.servlet.ServletException; import javax.servlet.ServletOutputStream; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import java.io.IOException; /** * 需要敏感词过滤的接口 */ public class WordServlet extends HttpServlet { @Override protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { doGet(request,response); } @Override protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { //因为servlet并没有setParameter方法（这是故意的），所以过滤后word无法通过getparameter来获取 //所以一般有两种方法一种把它放在attribute里，一种重写Request类，不过这会很麻烦 String word= String.valueOf(req.getAttribute("word")); ServletOutputStream outputStream = resp.getOutputStream(); String result="词汇已净化，请放心食用："+word; outputStream.write(result.getBytes()); } } 

 package com.dreamchaser.loginTest.filter; import javax.servlet.*; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import java.io.IOException; /** * 敏感词过滤拦截器 */ public class WordFilter implements Filter { static final String[] sensitiveWords={"敏感词1","脏话","骂人"}; static final String harmoniousWord="***"; @Override public void doFilter(ServletRequest req, ServletResponse resp, FilterChain chain) throws IOException, ServletException { req.setCharacterEncoding("utf-8"); // 将req resp 转为子接口的类型 HttpServletRequest request = (HttpServletRequest)req; HttpServletResponse response = (HttpServletResponse)resp; String word=req.getParameter("word"); for (String s:sensitiveWords){ word=word.replaceAll(s,harmoniousWord); } request.setAttribute("word",word); chain.doFilter(req, resp); } } 

  WordServletcom.dreamchaser.loginTest.servlet.WordServlet WordServlet/word WordFiltercom.dreamchaser.loginTest.filter.WordFilter WordFilter/word