package com
.inc
.sbu
.util;
import com
.opensymphony
.xwork2
.ActionInvocation;
import com
.opensymphony
.xwork2
.interceptor
.Interceptor;
import org
.apache
.commons
.file
upload.FileItem;
import org
.apache
.commons
.file
upload.disk
.DiskFileItemFactory;
import org
.apache
.commons
.file
upload.servlet
.ServletFile
Upload;
import
javax
.servlet
.http
.HttpServlet
Request;
import
java.io
.File;
import
java.util
.List;
import
javax
.servlet
.http
.Part;
import
java.util
.Collection;
public class File
UploadInterceptor implements Interceptor {
private static final long serialVersionUID = 1L;
@Override
public void init
() {
// 初始化逻辑
}
@Override
public void destroy
() {
// 销毁逻辑
}
@Override
public String intercept
(ActionInvocation invocation
) throws Exception {
HttpServlet
Request request =
(HttpServlet
Request) invocation
.getInvocationContext
().get
(org
.apache
.struts2
.StrutsStatics
.HTTP_
REQUEST);
System
.out
.println
("do newInterceptor
..............."
);
if
(ServletFile
Upload.isMultipartContent
(request)) {
System
.out
.println
("111do newInterceptor
..............."
);
DiskFileItemFactory factory = new DiskFileItemFactory
();
ServletFile
Upload upload = new ServletFile
Upload(factory
);
upload.setSizeMax
(1024 * 1024 * 10
); // 设置最大上传大小为5MB
String contentType =
request.getContentType
();
if
(contentType ==
null || !contentType
.startsWith
("multipart/form-data"
)) {
// 请求类型不匹配，非 multipart/form-data
System
.out
.println
("
requestType error
..............."
);
}
List<FileItem> items_test =
upload.parseRequest(request);
if
(items_test ==
null || items_test
.isEmpty
()) {
// 上传数据为空，可能请求已被封装或流被提前读取
System
.out
.println
("dateEmpty error
..............."
);
//方法一:使用原生 Servlet API 解析上传请求
Collection<Part> parts =
request.getParts
();
if
(parts ==
null || parts
.isEmpty
()) {
// 上传数据为空
System
.out
.println
("dateEmpty
..............."
);
} else {
System
.out
.println
("dateNotEmpty
..............."
);
for
(Part part : parts
) {
String name = part
.getName
();
String fileName = part
.getSubmittedFileName
();
if
(fileName !=
null && !fileName
.isEmpty
()) {
// 文件上传字段
//InputStream fileContent = part
.getInputStream
();
// 处理文件内容
} else {
// 普通表单字段
//BufferedReader reader = new BufferedReader
(new InputStreamReader
(part
.getInputStream
(), StandardCharsets
.UTF_8
));
//String value = reader
.lines
().collect
(Collectors
.joining
("\n"
));
// 处理普通字段值
}
}
}
}else{
//方法二
List<FileItem> items =
upload.parseRequest(request);
System
.out
.println
("222do newInterceptor
..............."+items
.size
());
for
(FileItem item : items
) {
System
.out
.println
("333do newInterceptor
..............."
);
if
(!item
.isFormField
()) {
String fileName = new File
(item
.getName
()).getName
();
System
.out
.println
("
upload FileName
..............."+fileName
);
String
uploadPath = "/path/to/
upload/directory";
File
uploadDir = new File
(uploadPath
);
if
(!
uploadDir
.exists
()) {
uploadDir
.mkdir
();
}
File
uploadedFile = new File
(uploadDir + File
.separator + fileName
);
item
.write
(uploadedFile
);
}
}
}
}
return invocation
.invoke
();
}
}
在struts2架构下，已通过自定义拦截器接替了有高危漏洞的file
upload原生拦截器，但在代码处理过程中，List<FileItem> items_test =
upload.parseRequest(request);长度为空，尝试用part方法替代，但框架不支持，请问有什么替代方法
扫一扫
621
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
