关于防止非法访问action的措施

创建一个BaseAction 继承DispatchAction 然后重写execute（）方法

验证用户是不是有权限

然后所有需要验证权限的action都继承BaseAction 就行了

 

BaseAction代码 public class BaseAction extends DispatchAction { @Override public ActionForward execute(ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response) throws Exception { // 验证用户是否登录 User user = (User)request.getSession().getAttribute("login"); if(user == null){//假如验证失败，则返回登录 System.out.println("有人没按照规定做事！"); return mapping.findForward("login"); } //继续往下进行 return super.execute(mapping, form, request, response); } }