commonds-fileupload-kirin -JavaEye技术社区

upload.java 

import javax.servlet.*;
import javax.servlet.http.*;
import java.io.*;
import java.util.*;
import java.util.regex.*;
import org.apache.commons.fileupload.*;
import org.apache.commons.io.FilenameUtils;
import org.apache.commons.fileupload.servlet.*;
import org.apache.commons.fileupload.disk.*;
import com.axtrip.util.*;
public class Upload extends HttpServlet {
    private String uploadPath = "C:\\upload\\"; // 用于存放上传文件的目录
    private String tempPath = "C:\\upload\\temp\\"; // 用于存放临时文件的目录
    /**
     * Constructor of the object.
     */
    public Upload() {
        super();
    }
    /**
     * Destruction of the servlet.
     */
    public void destroy() {
        super.destroy();

    }

    public void doGet(HttpServletRequest request, HttpServletResponse response)
    throws ServletException, IOException {
        doPost(request,response);
    }

    public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
        response.setContentType("text/html; charset=GB2312");
        PrintWriter out=response.getWriter();
        try {
            System.out.println("start");
            DiskFileItemFactory factory = new DiskFileItemFactory();
            ServletFileUpload upload = new ServletFileUpload(factory);
            upload.setSizeMax(4 * 1024 * 1024);
            //允许上传的文件大小,4M
            factory.setSizeThreshold(1 * 1024 * 1024);
            //设置最多只允许在内存中存储的数据,单位:字节
            factory.setRepository(new File(tempPath));
            //文件大小超过getSizeThreshold()的值时数据存放在硬盘的目录
            String[] errorType = { "exe", "com", "cgi", "asp" };
            //过滤掉的文件类型
            List uploadlist=upload.parseRequest(request);
            //开始读取上传信息
            Iterator iter=uploadlist.iterator();
            while(iter.hasNext()){
                FileItem  item=(FileItem)iter.next();
                if(!item.isFormField()){//忽略其他不是文件域的所有表单信息
                    String passandfilename = item.getName();
                    //取到客户端完整 路径+文件名 c:/111.jpg
                    String filename=FilenameUtils.getName(passandfilename);
                    //取到 文件名 111.jpg
                    String filetype = getFiletype(filename);//取到文件类型 jpg

                    boolean flag = false;//判断是否有非法的文件类型
                    for(int i =0; i<=errorType.length-1; i++){
                        if (filetype.equals(errorType[i])){
                            flag = true;
                        }
                    }
                    if(flag)break;//如果有非法文件,退出

                    if(!filename.equals("")){
                        filename = getNewFileNameByTime(filename);//文件重命名
                        String savepath=uploadPath+filename;
                        out.println("savepath is "+savepath);
                        File saveFilepath=new File(savepath);
                        item.write(saveFilepath);
                    }else{
                        out.print("没东西");
                    }
                }
            }
        } catch (FileUploadBase.SizeLimitExceededException e) {
            out.println("文件太大了吧");
            e.printStackTrace();
        } catch (Exception e) {
            e.printStackTrace();
        }

    }

    public void init() throws ServletException {

    }

    //取文件名后缀
    public static String getFiletype(String fileName) {
        String type = "";
        if (fileName == null || fileName.equals(""))
            return type;
        int position = fileName.lastIndexOf(".");
        if (position != -1) {
            type = fileName.substring(position + 1 , fileName.length());
        }
        return type;
    }
    //将文件重命名
    synchronized public String getNewFileNameByTime(String fileName){
        Date dt = new Date();
        String fType = getFiletype(fileName);

        String newFileName = new Date().getTime()+ Math.random() + "." + fType;
        return newFileName ;
    }

}