Java JSP如何在JSP中获取文件的完全限定名_Java_Jsp

Java JSP如何在JSP中获取文件的完全限定名

java jsp

Java JSP如何在JSP中获取文件的完全限定名,java,jsp,Java,Jsp,我正在尝试使用 <form action="EdgeWarUpload" method="post" enctype="multipart/form-data"> <input type="file" name="file" size="50" /> <br /> <input type="submit" value="Upload File" /> 其中EdgeWarUpload

我正在尝试使用

<form action="EdgeWarUpload" method="post"
                    enctype="multipart/form-data">
  <input type="file" name="file" size="50" />
  <br />
      <input type="submit" value="Upload File" />

其中EdgeWarUpload是一个servlet。用户正在浏览并选择要上载的文件。我希望servlet EdgeWarUpload中具有文件名（路径名+文件名）的完全限定路径创建一个BufferedInputStream。但我无法获取它。请检查并回复

<html>  
    <header></header>  
    <body>  
        <form method="POST" action="upload.do">  
            escolha o arquivo para fazer upload:   
            <input type="file" name="ctrupload"><br>  
            <input type="submit" name="submit" value="enviar...">  
        </form>  
    </body>  
</html>

您确实不需要完全限定路径

大多数情况下是不可能的。

浏览器不会发送完整路径，因为它被认为存在安全风险，因为它可能会告诉客户机系统的情况，所以大多数现代浏览器都支持这一点

在服务器端，我想这没有用。只需使用

文件名

就可以在servlet中使用此代码作为文件名：

DataInputStream in = new DataInputStream(request.getInputStream());
        int formDataLength = request.getContentLength();
        byte dataBytes[] = new byte[formDataLength];
        int byteRead = 0;
        int totalBytesRead = 0;

        while (totalBytesRead < formDataLength) {
            byteRead = in.read(dataBytes, totalBytesRead, formDataLength);
            totalBytesRead += byteRead;
        }
        String file = new String(dataBytes);
saveFile = file.substring(file.indexOf("filename=\"") + 10);
            saveFile = saveFile.substring(0, saveFile.indexOf("\n"));
            saveFile = saveFile.substring(saveFile.lastIndexOf("\\") + 1, saveFile.indexOf("\""));
            System.out.println("filename3: "+ saveFile);    // name of the file

int lastIndex = contentType.lastIndexOf("=");
            String boundary = contentType.substring(lastIndex + 1, contentType.length());

            int pos;
            pos = file.indexOf("filename=\"");
            pos = file.indexOf("\n", pos) + 1;
            pos = file.indexOf("\n", pos) + 1;
            pos = file.indexOf("\n", pos) + 1;
            int boundaryLocation = file.indexOf(boundary, pos) - 4;
            int startPos = ((file.substring(0, pos)).getBytes()).length;
            int endPos = ((file.substring(0, boundaryLocation)).getBytes()).length;
            FileOutputStream fileOut = new FileOutputStream(saveFile);
            fileOut.write(dataBytes, startPos, (endPos - startPos));
            fileOut.flush();
            fileOut.close();

            FileInputStream fis = new FileInputStream(saveFile);
            ByteArrayOutputStream bos = new ByteArrayOutputStream();
            byte[] buf = new byte[1024];
            for (int readNum; (readNum = fis.read(buf)) != -1;) {
                bos.write(buf, 0, readNum);
            }
            byte[] bytes = bos.toByteArray();


            bos.close();
fis.close();
in.close();

DataInputStream in=newdatainputstream（request.getInputStream（））；
int formDataLength=request.getContentLength（）；
字节数据字节[]=新字节[formDataLength]；
int byteRead=0；
int totalBytesRead=0；
while（totalBytesRead

首先，我认为服务器端的用户没有使用完全限定的文件名，比如“C:\users\example\example.jpg“其次，我认为这不会被曝光，因为它可能会泄露一些敏感信息作为副作用。我不相信你真的能得到这些信息。。。为什么要它？潜在的文件描述符泄漏！你的

.close（）

应该在

中。最后

blockHi@shryans jogi，我试图上传一个war文件。但是war在上传后被破坏。请检查。

DataInputStream in = new DataInputStream(request.getInputStream());
        int formDataLength = request.getContentLength();
        byte dataBytes[] = new byte[formDataLength];
        int byteRead = 0;
        int totalBytesRead = 0;

        while (totalBytesRead < formDataLength) {
            byteRead = in.read(dataBytes, totalBytesRead, formDataLength);
            totalBytesRead += byteRead;
        }
        String file = new String(dataBytes);
saveFile = file.substring(file.indexOf("filename=\"") + 10);
            saveFile = saveFile.substring(0, saveFile.indexOf("\n"));
            saveFile = saveFile.substring(saveFile.lastIndexOf("\\") + 1, saveFile.indexOf("\""));
            System.out.println("filename3: "+ saveFile);    // name of the file

int lastIndex = contentType.lastIndexOf("=");
            String boundary = contentType.substring(lastIndex + 1, contentType.length());

            int pos;
            pos = file.indexOf("filename=\"");
            pos = file.indexOf("\n", pos) + 1;
            pos = file.indexOf("\n", pos) + 1;
            pos = file.indexOf("\n", pos) + 1;
            int boundaryLocation = file.indexOf(boundary, pos) - 4;
            int startPos = ((file.substring(0, pos)).getBytes()).length;
            int endPos = ((file.substring(0, boundaryLocation)).getBytes()).length;
            FileOutputStream fileOut = new FileOutputStream(saveFile);
            fileOut.write(dataBytes, startPos, (endPos - startPos));
            fileOut.flush();
            fileOut.close();

            FileInputStream fis = new FileInputStream(saveFile);
            ByteArrayOutputStream bos = new ByteArrayOutputStream();
            byte[] buf = new byte[1024];
            for (int readNum; (readNum = fis.read(buf)) != -1;) {
                bos.write(buf, 0, readNum);
            }
            byte[] bytes = bos.toByteArray();


            bos.close();
fis.close();
in.close();