Spring2.5MVC实现控制重复提交

1.实现原理：

  提交表单时，从session中取出当前的token值与保存在页面上token值进行比较，如果相等，可以保存表单数据，并将新生成的token保存到session中，如果不相等，则判断为重复提交。

本例采用spring的HandlerInterceptorAdapter拦截器来实现控制重复提交。

 

2.spring 配置：spring-servlet.xml

  <?xml version="1.0" encoding="UTF-8"?>

<beans xmlns="http://www.springframework.org/schema/beans" 

    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

        xmlns:p="http://www.springframework.org/schema/p" 

        xmlns:context="http://www.springframework.org/schema/context"

        xsi:schemaLocation="http://www.springframework.org/schema/beanshttp://www.springframework.org/schema/beans/spring-beans-2.5.xsd

                http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-2.5.xsd">

    

    <!--

        - The controllers are autodetected POJOs labeled with the @Controller annotation.

    -->

 <context:component-scan base-package="com.allwin" use-default-filters="false" >  

  <context:include-filter type="annotation" expression="org.springframework.stereotype.Controller"/>  

 </context:component-scan>

 

    <bean class="org.springframework.web.servlet.mvc.annotation.AnnotationMethodHandlerAdapter">

     <property name="webBindingInitializer">   

         <bean class="com.allwin.erp.web.action.common.WebBindingObjectRegister" />   

     </property> 

    </bean>

    <!--

        - This bean configures the 'prefix' and 'suffix' properties of 

        - InternalResourceViewResolver, which resolves logical view names 

        - returned by Controllers. For example, a logical view name of "vets" 

        - will be mapped to "/WEB-INF/jsp/vets.jsp".

    -->

    <bean class="org.springframework.web.servlet.view.InternalResourceViewResolver" 

       p:prefix="/WEB-INF/jsp/" 

       p:suffix=".jsp" />

       

    <context:annotation-config/>

 <bean id="multipartResolver" class="org.springframework.web.multipart.commons.CommonsMultipartResolver">  

        <property name="defaultEncoding"><value>UTF-8</value></property>    

        <property name="maxUploadSize">

            <value>52428800</value>  

        </property>  

 </bean>

 <!--

        - This bean controller double submit

    -->
 <bean id="doubleSubmitInterceptor" class="com.allwin.erp.web.action.common.DoubleSubmitInterceptor">  
 <!--

        - 配置要拦截的url

    -->

    

 <property name="mappingURL" value=".*/(save|approve|active)\.do" /> 

     <property name="viewURL" value=".*/(view|copy)\.do" />   

 </bean>  

 <bean class="org.springframework.web.servlet.mvc.annotation.DefaultAnnotationHandlerMapping">  

     <property name="interceptors">  

         <list>  

             <ref bean="doubleSubmitInterceptor"/>  

         </list>  

      </property>  

 </bean>  
</beans>

红色字体部分是配置判断重复提交的拦截器

 

3.java类HandlerInterceptorAdapter.java

 

public class DoubleSubmitInterceptor extends HandlerInterceptorAdapter {

 

 // matches URL

 private String mappingURL;

 private String viewURL;

 // page number

 private static long pageNum = 0l;

 /**

  * summary: filter request(view/save/approve/active method)

  * 

  * @param : request HttpServletRequest

  * @param : response HttpServletResponse

  * @param : handler Object

  *

  * @return boolean true:normal false:double submit 

  */

 @Override  

    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {   

  String url=request.getRequestURL().toString();   

  // 设置页面编号

  if(url.matches(viewURL)){

   if(Strings.isEmpty(request.getParameter("pageNum"))){

    request.getSession().setAttribute("pageNum",++pageNum);

   }

  }

        if(url.matches(mappingURL)){

         // 设置当前token名称（即session中存放token数据的key值）

         String tokenName = handler.getClass().getSimpleName() + request.getParameter("pageNum");

         // 取得当前session中的token值

         String sessionToken = (String)request.getSession().getAttribute(tokenName);

         if(sessionToken == null || sessionToken.equals("")){

          // 生成新的token

          long date = new Date().getTime();

          request.getSession().setAttribute(tokenName, request.getSession().getId() + String.valueOf(date));

          request.getSession().setAttribute("token", request.getSession().getId() + String.valueOf(date));

          request.getSession().setAttribute("pageNum",request.getParameter("pageNum"));

          return true;

         } else { // 判断是否重复提交（如果session中的token值与request中的token值不一致则判定重复提交）

    String requestToken = (String)request.getParameter("token");

          if(requestToken == null || !requestToken.equals(sessionToken)){           

           request.getRequestDispatcher("/front/doubleSubmit.jsp").forward(request, response);   

           return false;

          } else {

           // 替换旧的token

           long date = new Date().getTime();

           request.getSession().setAttribute(tokenName, request.getSession().getId() + String.valueOf(date));

           request.getSession().setAttribute("token", request.getSession().getId() + String.valueOf(date));

           request.getSession().setAttribute("pageNum",request.getParameter("pageNum"));

           return true;

          }

         }

        } else {

         return true;

        }

    }   

 /**

  * @param mappingURL the mappingURL to set

  */

 public void setMappingURL(String mappingURL) {

  this.mappingURL = mappingURL;

 }

 /**

  * @param viewURL the viewURL to set

  */

 public void setViewURL(String viewURL) {

  this.viewURL = viewURL;

 }

}

 

4.jsp

在保存数据表单的jsp中加如两个隐藏变量

<input type="hidden" name="token" id="token" value="${token}"> session中的token值

<input type="hidden" name="pageNum" id="pageNum" value="${pageNum}">生成页面唯一编号

 

你这东西貌似不能完全避免重复提交啊。在你替换旧的token之前，可能第二次提交的线程已经过了条件判断。

条件判断那边需要加一个同步锁。