paramchecking.java

本代码是一个权限管理系统源代码

package com.seavision.PermissionManage.common;

/**
 * 
 * @author  xutao.huang 
 * 
 * @version  1.0
 */
import java.util.Map;
import java.util.Hashtable;

public class ParamChecking
{

  /**
   * paramMap 非法字符及其映射图<br>
   * illegalParam 非法字符数组<br>
   * macroParam 映射字符数组<br>
   */
  public static final Map paramMap = new Hashtable();
  private String [] illegalParam = new String [] {"&", "<", ">", "\"", "'"};
  private String [] macroParam = new String [] {"&amp;", "&lt;", "&gt;", "&quot;", ""};

  /**
   * ParamChecking 构造函数,初始化非法字符及其映射图
   */
  public ParamChecking()
  {
	for( int i=0; i<illegalParam.length; i++ )
	{
	  paramMap.put(illegalParam[i], macroParam[i]);
	}
  }

  /**
   * 对参数 param 进行合法性检测
   * @param param 欲检测的字符串
   * @return 若检测到非法字符返回 true; 否则返回 false;
   */
  public boolean legalityCheck(String param)
  {
	for(int i=0; i<illegalParam.length; i++)
	{
	  int flag = param.indexOf(illegalParam[i]);

	  if( flag != -1 )
	  {
		return true;
	  }
	}

	return false;
  }

  /**
   * 转换含有非法字符的字符串
   * @param param 欲转换的字符串
   * @return 转换后的字符串
   */
  public String exchangeParam(String param)
  {
	for(int i=0; i<illegalParam.length; i++)
	{
	  int flag = param.indexOf(illegalParam[i]);

	  if( flag != -1 )
	  {
		String legalString = (String)paramMap.get(illegalParam[i]);
		param = param.replaceAll(illegalParam[i], legalString);
	  }
	}

	return param;
  }

}