最近进行的MVC系统需要用到记录操作日志和过滤特殊字符的功能，如果每个action中都调用记录日志的方法就太麻烦了，所以根据需要结合mvc的过滤机制
写了个特殊字符验证与记录操作日志的公用类：
1 public class CustomFilterAttribute : ActionFilterAttribute
2 {
3 public CustomFilterAttribute()
4 {
5 IsLog = false;
6 FilterSpecialChar = true;
7 }
8
9 /// <summary>
10 /// 是否记录日志
11 /// </summary>
12 public bool IsLog { get; set; }
13
14 /// <summary>
15 /// 是否过滤特殊字符
16 /// </summary>
17 public bool FilterSpecialChar { get; set; }
18
19 /// <summary>
20 /// 登录用户
21 /// </summary>
22 public string UserName { get; set; }
23
24 /// <summary>
25 /// 操作简介
26 /// </summary>
27 public string Message { get; set; }
28
29 /// <summary>
30 /// action执行前特殊字符过滤
31 /// </summary>
32 /// <param name="filterContext"></param>
33 public override void OnActionExecuting(ActionExecutingContext filterContext)
34 {
35 base.OnActionExecuting(filterContext);
36
37 if (filterContext.ActionParameters.Count > 0)
38 {
39 if (filterContext.HttpContext.Request.IsAjaxRequest())
40 {
41 if (IsContainSpecialChar(filterContext.ActionParameters))
42 {
43 var json = new JsonResult();
44 json.Data = new { status = false, msg = "您输入的数据中包含特殊字符。" };
45 json.JsonRequestBehavior = JsonRequestBehavior.AllowGet;
46 filterContext.Result = json;
47 }
48 }
49 else if (IsContainSpecialChar(filterContext.ActionParameters))
50 {
51 var ReturnUrl = "/Login/Index";
52 filterContext.Result = new RedirectResult(ReturnUrl);
53 }
54 }
55
56 return;
57 }
58
59 /// <summary>
60 /// action执行后记录日志
61 /// </summary>
62 /// <param name="filterContext"></param>
63 public override void OnActionExecuted(ActionExecutedContext filterContext)
64 {
65 base.OnActionExecuted(filterContext);
66 if (this.IsLog)
67 {
68 var ActionName = filterContext.ActionDescriptor.ActionName;
69 var Url = "/" + filterContext.ActionDescriptor.ControllerDescriptor.ControllerName + "/" + ActionName;
70
71 //var loginInfo = (ViewModel.t_User_VModel)filterContext.HttpContext.Session["userMdl"];
72 string OperateIP = HttpContext.Current.Request.UserHostAddress;
73
74 //登录用户
75 //if (loginInfo != null)
76 //{
77 // this.UserName = loginInfo.UserName;
78 //}
79 this.UserName = "测试";
80 Message = filterContext.Exception == null ? "成功" : "失败" + Message;
81
82 new JiaSoftOTOSystem.BLL.OperateLog_BLL().AddOprateLog(UserName, OperateIP, Url, ActionName, Message);
83 }
84 }
85
86 //public override void OnResultExecuting(ResultExecutingContext filterContext)
87 //{
88 // base.OnResultExecuting(filterContext);
89 // //filterContext.HttpContext.Response.Write("返回Result之前" + Message + "<br />");
90 //}
91
92 //public override void OnResultExecuted(ResultExecutedContext filterContext)
93 //{
94 // base.OnResultExecuted(filterContext);
95 // //filterContext.HttpContext.Response.Write("返回Result之后" + Message + "<br />");
96 //}
97
98 /// <summary>
99 /// 验证string类型参数中是否含有特殊字符
100 /// </summary>
101 /// <param name="paramters"></param>
102 /// <returns>有：true，没有：false</returns>
103 public bool IsContainSpecialChar(IDictionary<string, object> paramters)
104 {
105 bool bResult = false;
106 System.Text.StringBuilder strParam = new System.Text.StringBuilder();
107 foreach (var item in paramters)
108 {
109 if (item.Value != null)
110 {
111 Type types = item.Value.GetType();
112 if (types.Name.EndsWith("Model"))
113 {
114 System.Reflection.PropertyInfo[] ps = types.GetProperties();
115 foreach (PropertyInfo pi in ps)
116 {
117 object value = pi.GetValue(item.Value, null);//用pi.GetValue获得值
118 string name = pi.Name;//获得属性的名字,后面就可以根据名字判断来进行些自己想要的操作
119 //获得属性的类型,进行判断然后进行以后的操作,例如判断获得的属性是整数
120 if (value != null && value.ToString().Length > 0)
121 {
122 if (value.GetType() == typeof(string))
123 {
124 if (FilterSpecialChar && !bResult && Regex.IsMatch(value.ToString(), @"[~<>$%\^\+\&\\\/\?\|:\{}()‘;=]"))
125 {
126 bResult = true;
127 strParam.Append(name + "=" + value.ToString().Replace("‘", "‘").Replace("\"", "").Replace("&", "&").Replace("<", "<").Replace(">", ">") + "|");
128 }
129 else if (IsLog)
130 {
131 strParam.Append(name + "=" + value + "|");
132 }
133 }
134 else if (IsLog && item.Value.GetType() == typeof(Guid) && item.Value.ToString() != Guid.Empty.ToString())
135 {
136 strParam.Append(name + "=" + value + "|");
137 }
138 else if (IsLog && (item.Value.GetType() == typeof(int) || item.Value.GetType() == typeof(decimal)) && item.Value.ToString() != "0")
139 {
140 strParam.Append(name + "=" + value + "|");
141 }
142 else if (IsLog)
143 {
144 strParam.Append(name + "=" + value + "|");
145 }
146 }
147 }
148 }
149 else if (item.Value != null && item.Value.ToString().Length > 0)
150 {
151 if (item.Value.GetType() == typeof(string))
152 {
153 if (FilterSpecialChar && !bResult && Regex.IsMatch(item.Value.ToString(), @"[~<>$%\^\+\&\\\/\?\|:\{}()‘;=]"))
154 {
155 bResult = true;
156 strParam.Append(item.Key + "=" + item.Value.ToString().Replace("‘", "‘").Replace("\"", "").Replace("&", "&").Replace("<", "<").Replace(">", ">") + "|");
157 }
158 else if (IsLog)
159 {
160 strParam.Append(item.Key + "=" + item.Value + "|");
161 }
162 }
163 else if (IsLog && item.Value.GetType() == typeof(Guid) && item.Value.ToString() != Guid.Empty.ToString())
164 {
165 strParam.Append(item.Key + "=" + item.Value + "|");
166 }
167 else if (IsLog && (item.Value.GetType() == typeof(int) || item.Value.GetType() == typeof(decimal)) && item.Value.ToString() != "0")
168 {
169 strParam.Append(item.Key + "=" + item.Value + "|");
170 }
171 else if (IsLog)
172 {
173 strParam.Append(item.Key + "=" + item.Value + "|");
174 }
175 }
176 }
177 }
178
179 this.Message = "。参数：" + strParam.ToString();
180
181 return false;
182 }
183
184 }
调用方式如下：
验证结果：如果包含特殊字符：如果是ajax请求则返回json，否则返回到错误页。
时间： 2024-10-13 01:47:58