downloadfilter.java

cwbbs 云网论坛源码

package com.redmoon.forum;

import java.io.*;
import javax.servlet.*;
import javax.servlet.http.*;
import cn.js.fan.module.pvg.Privilege;
import cn.js.fan.module.pvg.Priv;
import cn.js.fan.web.SkinUtil;


public class DownloadFilter implements Filter {
    FilterConfig config;

    public void doFilter(ServletRequest req, ServletResponse res,
                         FilterChain chain) throws ServletException,
            IOException {
        ServletContext context = config.getServletContext();

        if (req instanceof HttpServletRequest) {
            HttpServletRequest request = (HttpServletRequest) req;
            Privilege privilege = new Privilege();
            
            String url = request.getRequestURL().toString();

            
            

            if (url.indexOf("forum/upfile") != -1) {
                Config cfg = Config.getInstance();
                if (cfg.getBooleanProperty("forum.checkReferer")) {
                    
                    String callingPage = request.getHeader("Referer");
                    
                    
                    if (callingPage == null ||
                        callingPage.indexOf(request.getServerName()) != -1) {
                    } else {
                        
                        url = "http://" + request.getServerName() + ":" +
                              request.getServerPort() + request.getContextPath() +
                              "/images/err_pvg.gif"; 
                        ((HttpServletResponse) res).sendRedirect(url);
                        return;
                    }
                }
            }
            else {
                
                if (!privilege.isUserPrivValid(request, Priv.PRIV_ADMIN)) {
                    RequestDispatcher rd = null;
                    
                    
                    
                    
                    res.setContentType("text/html;charset=utf-8");
                    PrintWriter out = res.getWriter();
                    out.print(SkinUtil.makeErrMsg(request, SkinUtil.LoadString(request, "pvg_invalid")));
                    
                    
                    
                    
                    
                    
                    return;
                }
            }
            chain.doFilter(req, res);
        }
    }

    public void init(FilterConfig config) throws ServletException {
        this.config = config;
    }

    public void destroy() {
        this.config = null;
    }
}