上传文件并目录打散

缺乏、安全感 2022-08-06 00:13 225阅读 0赞

上传表单

servlet代码

package web.servlet;
    
    import java.io.File;
    import java.io.IOException;
    import java.util.List;
    import java.util.UUID;
    
    import javax.servlet.ServletException;
    import javax.servlet.http.HttpServlet;
    import javax.servlet.http.HttpServletRequest;
    import javax.servlet.http.HttpServletResponse;
    
    import org.apache.commons.fileupload.FileItem;
    import org.apache.commons.fileupload.FileUploadException;
    import org.apache.commons.fileupload.disk.DiskFileItemFactory;
    import org.apache.commons.fileupload.servlet.ServletFileUpload;
    
    /**
     * 目录打散练习
     * @author zhaozhihang
     *
     */
    public class Upload3 extends HttpServlet {
    	private static final long serialVersionUID = 1L;
           
    	public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
    		// 三部曲
    		DiskFileItemFactory diskFileItemFactory = new DiskFileItemFactory();
    		ServletFileUpload sfu = new ServletFileUpload(diskFileItemFactory);
    		try {
    			List<FileItem> list = sfu.parseRequest(request);
    			FileItem f = list.get(1);
    //			String s = request.getSession().getServletContext().getRealPath("/WEB-INF/files");
    			//得到文件的保存路径
    			String root = this.getServletContext().getRealPath("/WEB-INF/files");
    			/*
    			 * 1 得到文件名称
    			 * 2 装换成hashCode
    			 */
    			String filename = f.getName();
    			//判断是否有斜杠
    			int index = filename.lastIndexOf("\\");
    			if(index!=-1) {
    				filename = filename.substring(index+1);
    			}
    			
    			String savename = UUID.randomUUID().toString().replace("-", "")+filename;
    			
    			//得到hashCode
    			int hCode = filename.hashCode();
    			String hex = Integer.toHexString(hCode);
    			File file = new File(root, hex.charAt(0)+"/"+hex.charAt(1)); 
    			
    			//创建目录链
    			file.mkdirs();
    			
    			//创建目标文件
    			File destFile = new File(file, savename);
    			
    			f.write(destFile);
    		} catch (FileUploadException e) {
    			e.printStackTrace();
    		} catch (Exception e) {
    			e.printStackTrace();
    		}
    	}
    
    }