使用struts的token防止页面重复提交

最新推荐文章于 2021-02-26 03:01:16 发布

最新推荐文章于 2021-02-26 03:01:16 发布 · 235 阅读

文章标签：

#Struts #Myeclipse #Apache #JSP #Servlet

Struts 专栏收录该内容

3 篇文章

订阅专栏

本文介绍了一个基于Struts框架的InsertAction类实现，该类通过DispatchAction处理用户添加请求，实现了表单验证及CSRF防护功能。文章详细展示了如何使用ActionForm进行表单验证，并通过自定义的方法实现用户的添加操作。

/*
 * Generated by MyEclipse Struts
 * Template path: templates/java/JavaClass.vtl
 */
package com.sunsoft.struts.action;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.apache.struts.action.ActionForm;
import org.apache.struts.action.ActionForward;
import org.apache.struts.action.ActionMapping;
import org.apache.struts.action.ActionMessage;
import org.apache.struts.action.ActionMessages;
import org.apache.struts.actions.DispatchAction;

/** 
 * MyEclipse Struts
 * Creation date: 12-15-2007
 * 
 * XDoclet definition:
 * @struts.action path="/insert" name="userForm" input="/adduser.jsp" scope="request" validate="true"
 * @struts.action-forward name="prepare" path="/adduser.jsp"
 * @struts.action-forward name="success" path="success.jsp"
 */
public class InsertAction extends DispatchAction {
	/*
	 * Generated Methods
	 */

	/** 
	 * Method execute
	 * @param mapping
	 * @param form
	 * @param request
	 * @param response
	 * @return ActionForward
	 */
	public ActionForward prepare(ActionMapping mapping, ActionForm form,
			HttpServletRequest request, HttpServletResponse response) {
		
		this.saveToken(request);
		return mapping.findForward("prepare");
	}
	
	public ActionForward adduser(ActionMapping mapping, ActionForm form,
			HttpServletRequest request, HttpServletResponse response) {
		
		if(!this.isTokenValid(request)){
			ActionMessages messages = new ActionMessages();
			messages.add("token", new ActionMessage("error.token"));
			this.saveErrors(request, messages);
			return mapping.getInputForward();
		}else{
			this.resetToken(request);
			return mapping.findForward("success");
		}
	}
}