smartupload.java

仿校内网站

package com.smartupload;

import java.io.FileInputStream;
import java.io.FileOutputStream;
import java.io.IOException;
import java.io.InputStream;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.util.Vector;
import javax.servlet.ServletConfig;
import javax.servlet.ServletContext;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import javax.servlet.jsp.JspWriter;
import javax.servlet.jsp.PageContext;

public class SmartUpload {
	protected byte m_binArray[];

	protected HttpServletRequest m_request;

	protected HttpServletResponse m_response;

	protected ServletContext m_application;

	private int m_totalBytes;

	private int m_currentIndex;

	private int m_startData;

	private int m_endData;

	private String m_boundary;

	private long m_totalMaxFileSize;

	private long m_maxFileSize;

	private Vector m_deniedFilesList;

	private Vector m_allowedFilesList;

	private boolean m_denyPhysicalPath;

	//private boolean m_forcePhysicalPath;
	private String m_contentDisposition;

	public static final int SAVE_AUTO = 0;

	public static final int SAVE_VIRTUAL = 1;

	public static final int SAVE_PHYSICAL = 2;

	private SmartFiles m_files;

	private SmartRequest m_formRequest;

	public SmartUpload() {
		m_totalBytes = 0;
		m_currentIndex = 0;
		m_startData = 0;
		m_endData = 0;
		m_boundary = ""; //new String();
		m_totalMaxFileSize = 0L;
		m_maxFileSize = 0L;
		m_deniedFilesList = new Vector();
		m_allowedFilesList = new Vector();
		m_denyPhysicalPath = false;
		//m_forcePhysicalPath = false;
		m_contentDisposition = ""; //new String();
		m_files = new SmartFiles();
		m_formRequest = new SmartRequest();
	}

	/**
	 * @deprecated Method init is deprecated
	 */
	public final void init(ServletConfig servletconfig) throws ServletException {
		m_application = servletconfig.getServletContext();
	}

	/**
	 * @deprecated Method service is deprecated
	 */
	public void service(HttpServletRequest httpservletrequest,
			HttpServletResponse httpservletresponse) throws ServletException,
			IOException {
		m_request = httpservletrequest;
		m_response = httpservletresponse;
	}

	public final void initialize(ServletConfig servletconfig,
			HttpServletRequest httpservletrequest,
			HttpServletResponse httpservletresponse) throws ServletException {
		m_application = servletconfig.getServletContext();
		m_request = httpservletrequest;
		m_response = httpservletresponse;
	}

	public final void initialize(PageContext pagecontext)
			throws ServletException {
		m_application = pagecontext.getServletContext();
		m_request = (HttpServletRequest) pagecontext.getRequest();
		m_response = (HttpServletResponse) pagecontext.getResponse();
	}

	/**
	 * @deprecated Method initialize is deprecated
	 */
	public final void initialize(ServletContext servletcontext,
			HttpSession httpsession, HttpServletRequest httpservletrequest,
			HttpServletResponse httpservletresponse, JspWriter jspwriter)
			throws ServletException {
		m_application = servletcontext;
		m_request = httpservletrequest;
		m_response = httpservletresponse;
	}

	public void upload() throws ServletException, IOException,
			SmartUploadException {
		int i = 0;
		//boolean flag = false;
		boolean flag1 = false;
		//boolean flag2 = false;
		long l = 0L;
		//String s = "";//new String();
		//String s2 = "";//new String();
		String s4 = ""; //new String();
		String s5 = ""; //new String();
		String s6 = ""; //new String();
		String s7 = ""; //new String();
		String s8 = ""; //new String();
		String s9 = ""; //new String();
		String s10 = ""; //new String();
		m_totalBytes = m_request.getContentLength();
		m_binArray = new byte[m_totalBytes];
		int j;
		for (; i < m_totalBytes; i += j) {
			try {
				m_request.getInputStream();
				j = m_request.getInputStream().read(m_binArray, i,
						m_totalBytes - i);
			} catch (Exception exception) {
				throw new SmartUploadException("Unable to upload.");
			}
		}

		for (; !flag1 && m_currentIndex < m_totalBytes; m_currentIndex++) {
			if (m_binArray[m_currentIndex] == 13) {
				flag1 = true;
			} else {
				m_boundary = m_boundary + (char) m_binArray[m_currentIndex];

			}
		}
		if (m_currentIndex == 1) {
			return;
		}
		for (m_currentIndex++; m_currentIndex < m_totalBytes; m_currentIndex = m_currentIndex + 2) {
			String s1 = getDataHeader();
			m_currentIndex = m_currentIndex + 2;
			boolean flag3 = s1.indexOf("filename") > 0;
			String s3 = getDataFieldValue(s1, "name");
			if (flag3) {
				s6 = getDataFieldValue(s1, "filename");
				s4 = getFileName(s6);
				s5 = getFileExt(s4);
				s7 = getContentType(s1);
				s8 = getContentDisp(s1);
				s9 = getTypeMIME(s7);
				s10 = getSubTypeMIME(s7);
			}
			getDataSection();
			if (flag3 && s4.length() > 0) {
				if (m_deniedFilesList.contains(s5)) {
					throw new SecurityException(
							"The extension of the file is denied to be uploaded (1015).");
				}
				if (!m_allowedFilesList.isEmpty()
						&& !m_allowedFilesList.contains(s5)) {
					throw new SecurityException(
							"The extension of the file is not allowed to be uploaded (1010).");
				}
				if (m_maxFileSize > 0L
						&& (long) ((m_endData - m_startData) + 1) > m_maxFileSize) {
					throw new SecurityException(
							"Size exceeded for this file : " + s4 + " (1105).");
				}
				l += (m_endData - m_startData) + 1;
				if (m_totalMaxFileSize > 0L && l > m_totalMaxFileSize) {
					throw new SecurityException(
							"Total File Size exceeded (1110).");
				}
			}
			if (flag3) {
				SmartFile file = new SmartFile();
				file.setParent(this);
				file.setFieldName(s3);
				file.setFileName(s4);
				file.setFileExt(s5);
				file.setFilePathName(s6);
				file.setIsMissing(s6.length() == 0);
				file.setContentType(s7);
				file.setContentDisp(s8);
				file.setTypeMIME(s9);
				file.setSubTypeMIME(s10);
				if (s7.indexOf("application/x-macbinary") > 0) {
					m_startData = m_startData + 128;
				}
				file.setSize((m_endData - m_startData) + 1);
				file.setStartData(m_startData);
				file.setEndData(m_endData);
				m_files.addFile(file);
			} else {
				String s11 = new String(m_binArray, m_startData,
						(m_endData - m_startData) + 1);
				m_formRequest.putParameter(s3, s11);
			}
			if ((char) m_binArray[m_currentIndex + 1] == '-') {
				break;
			}
		}
	}

	public int save(String s) throws ServletException, IOException,
			SmartUploadException {
		return save(s, 0);
	}

	public int save(String s, int i) throws ServletException, IOException,
			SmartUploadException {
		int j = 0;
		if (s == null) {
			s = m_application.getRealPath("/");
			//System.out.println("s == null,m_application.getRealPath:" + s);
		}
		if (s.indexOf("/") != -1) {
			if (s.charAt(s.length() - 1) != '/') {
				s = s + "/";
				//System.out.println("m_application.getRealPath::" + s);
			}
		} else {
			if (s.charAt(s.length() - 1) != '\\') {
				s = s + "\\";
				//System.out.println("m_application.getRealPath" + s);
			}
		}
		//System.out.println("m_application.getRealPath:::" + s);
		FileNames = new String[m_files.getCount()];
		for (int k = 0; k < m_files.getCount(); k++) {
			if (!m_files.getFile(k).isMissing()) {
				//System.out.println("s + m_files.getFile(k).getFileName():" + s + m_files.getFile(k).getFileName());
				m_files.getFile(k).saveAs(s + m_files.getFile(k).getFileName(),
						i);
				FileNames[j] = s + m_files.getFile(k).getFileName();
				j++;
			}
		}

		return j;
	}

	//Add
	private String[] FileNames;

	public String[] getFileNames() {
		//Method may expose internal representation by returning array
		//Returning an array value stored in one of the object's fields exposes the internal representation of the object.? For classes shared by other untrusted classes, this could potentially be a security issue.? Returning a new copy of the array is better approach in many situations.
		String[] vFileNames = new String[FileNames.length];
		System.arraycopy(FileNames, 0, vFileNames, 0, FileNames.length);
		return vFileNames;
	}

	public int getSize() {
		return m_totalBytes;
	}

	public byte getBinaryData(int i) {
		byte byte0;
		try {
			byte0 = m_binArray[i];
		} catch (Exception exception) {
			throw new ArrayIndexOutOfBoundsException(
					"Index out of range (1005).");
		}
		return byte0;
	}

	public SmartFiles getFiles() {
		return m_files;
	}

	public SmartRequest getRequest() {
		return m_formRequest;
	}

	public void downloadFile(String s) throws ServletException, IOException,
			SmartUploadException {
		downloadFile(s, null, null);
	}

	public void downloadFile(String s, String s1) throws ServletException,
			IOException, SmartUploadException, SmartUploadException {
		downloadFile(s, s1, null);
	}

	public void downloadFile(String s, String s1, String s2)
			throws ServletException, IOException, SmartUploadException {
		downloadFile(s, s1, s2, 65000);
	}

	public void downloadFile(String s, String s1, String s2, int i)
			throws ServletException, IOException, SmartUploadException {
		if (s == null) {
			throw new IllegalArgumentException("File '" + s
					+ "' not found (1040).");
		}
		if (s.equals("")) {
			throw new IllegalArgumentException("File '" + s
					+ "' not found (1040).");
		}
		if (!isVirtual(s) && m_denyPhysicalPath) {
			throw new SecurityException("Physical path is denied (1035).");
		}
		if (isVirtual(s)) {
			s = m_application.getRealPath(s);
		}
		java.io.File file = new java.io.File(s);
		FileInputStream fileinputstream = new FileInputStream(file);
		long l = file.length();
		// boolean flag = false;
		int k = 0;
		byte abyte0[] = new byte[i];
		if (s1 == null) {
			m_response.setContentType("application/x-msdownload");
		} else {
			if (s1.length() == 0) {
				m_response.setContentType("application/x-msdownload");
			} else {
				m_response.setContentType(s1);
			}
		}
		m_response.setContentLength((int) l);
		m_contentDisposition = m_contentDisposition != null ? m_contentDisposition
				: "attachment;";
		if (s2 == null) {
			m_response.setHeader("Content-Disposition", m_contentDisposition
					+ " filename=" + toUtf8String(getFileName(s)));
		} else {
			if (s2.length() == 0) {
				m_response.setHeader("Content-Disposition",
						m_contentDisposition);
			} else {
				m_response.setHeader("Content-Disposition",
						m_contentDisposition + " filename=" + s2);
			}
		}
		while ((long) k < l) {
			int j = fileinputstream.read(abyte0, 0, i);
			k += j;
			m_response.getOutputStream().write(abyte0, 0, j);
		}
		fileinputstream.close();
	}

	/**
	 * 将文件名中的汉字转为UTF8编码的串,以便下载时能正确显示另存的文件名. 纵横软件制作中心雨亦奇2003.08.01
	 * 
	 * @param s
	 *            原文件名
	 * @return 重新编码后的文件名
	 */
	public static String toUtf8String(String s) {
		StringBuffer sb = new StringBuffer();
		for (int i = 0; i < s.length(); i++) {
			char c = s.charAt(i);
			if (c >= 0 && c <= 255) {
				sb.append(c);
			} else {
				byte[] b;
				try {
					b = Character.toString(c).getBytes("utf-8");
				} catch (Exception ex) {
					System.out.println(ex);
					b = new byte[0];
				}
				for (int j = 0; j < b.length; j++) {
					int k = b[j];
					if (k < 0)
						k += 256;
					sb.append("%" + Integer.toHexString(k).toUpperCase());
				}
			}
		}
		return sb.toString();
	}

	public void downloadField(ResultSet resultset, String s, String s1,
			String s2) throws ServletException, IOException, SQLException {
		if (resultset == null) {
			throw new IllegalArgumentException(
					"The RecordSet cannot be null (1045).");
		}
		if (s == null) {