@Controller@RequestMapping(value = "sys/article")public class FileUploadController {    private static final ObjectMapper objectMapper = new ObjectMapper();    @PostMapping(value = "/fileUpload")    @ResponseBody    public Map
    
      fileUpload(HttpServletRequest request, HttpServletResponse response) {        ServletContext application = request.getSession().getServletContext();        String savePath = "D:/attached/";        // 文件保存目录URL        String saveUrl = request.getContextPath() + "/images/";        // 定义允许上传的文件扩展名        HashMap
     
       extMap = new HashMap
      
       ();        extMap.put("image", "gif,jpg,jpeg,png,bmp");        extMap.put("flash", "swf,flv");        extMap.put("media", "swf,flv,mp3,wav,wma,wmv,mid,avi,mpg,asf,rm,rmvb");        extMap.put("file", "doc,docx,xls,xlsx,ppt,htm,html,txt,zip,rar,gz,bz2");        // 最大文件大小        long maxSize = 1000000;        response.setContentType("text/html; charset=UTF-8");        if (!ServletFileUpload.isMultipartContent(request)) {            return getError("请选择文件。");        }        // 检查目录        File uploadDir = new File(savePath);        if (!uploadDir.isDirectory()) {            return getError("上传目录不存在。");        }        // 检查目录写权限        if (!uploadDir.canWrite()) {            return getError("上传目录没有写权限。");        }        String dirName = request.getParameter("dir");        if (dirName == null) {            dirName = "image";        }        if (!extMap.containsKey(dirName)) {            return getError("目录名不正确。");        }        // 创建文件夹        savePath += dirName + "/";        saveUrl += dirName + "/";        File saveDirFile = new File(savePath);        if (!saveDirFile.exists()) {            saveDirFile.mkdirs();        }        SimpleDateFormat sdf = new SimpleDateFormat("yyyyMMdd");        String ymd = sdf.format(new Date());        savePath += ymd + "/";        saveUrl += ymd + "/";        File dirFile = new File(savePath);        if (!dirFile.exists()) {            dirFile.mkdirs();        }        FileItemFactory factory = new DiskFileItemFactory();        ServletFileUpload upload = new ServletFileUpload(factory);        upload.setHeaderEncoding("UTF-8");        MultipartHttpServletRequest multipartRequest = (MultipartHttpServletRequest) request;        Iterator item = multipartRequest.getFileNames();        while (item.hasNext()) {            String fileName = (String) item.next();            MultipartFile file = multipartRequest.getFile(fileName);            // 检查文件大小            if (file.getSize() > maxSize) {                return getError("上传文件大小超过限制。");            }            // 检查扩展名            String fileExt = file.getOriginalFilename().substring(file.getOriginalFilename().lastIndexOf(".") + 1).toLowerCase();            if (!Arrays.asList(extMap.get(dirName).split(",")).contains(fileExt)) {                return getError("上传文件扩展名是不允许的扩展名。\n只允许"                        + extMap.get(dirName) + "格式。");            }            SimpleDateFormat df = new SimpleDateFormat("yyyyMMddHHmmss");            String newFileName = df.format(new Date()) + "_" + new Random().nextInt(1000) + "." + fileExt;            try {                File uploadedFile = new File(savePath, newFileName);                ByteStreams.copy(file.getInputStream(), new FileOutputStream(uploadedFile));            } catch (Exception e) {                return getError("上传文件失败。");            }            Map
       
         msg = new HashMap
        
         ();            msg.put("error", 0);            msg.put("url", saveUrl + newFileName);            return msg;        }        return null;    }    private Map
         
           getError(String errorMsg) { Map
          
            errorMap = new HashMap
           
            (); errorMap.put("error", 1); errorMap.put("message", errorMsg); return errorMap; } /** * 文件空间 * * @param request { @link HttpServletRequest} * @param response { @link HttpServletResponse} * @return json */ @GetMapping(value = "/fileManager") @ResponseBody public Object fileManager(HttpServletRequest request, HttpServletResponse response) throws Exception { ServletContext application = request.getSession().getServletContext(); ServletOutputStream out = response.getOutputStream(); //根目录路径，可以指定绝对路径 String rootPath = "D:/attached/"; //根目录URL，可以指定绝对路径，比如 http://www.yoursite.com/attached/ String rootUrl = request.getContextPath() + "/images/"; //图片扩展名 String[] fileTypes = new String[]{ "gif", "jpg", "jpeg", "png", "bmp"}; String dirName = request.getParameter("dir"); if (dirName != null) { if (!Arrays.
            
             asList(new String[]{ "image", "flash", "media", "file"}).contains(dirName)) { return "Invalid Directory name."; } rootPath += File.separator + dirName + File.separator; rootUrl += dirName + "/"; File saveDirFile = new File(rootPath); if (!saveDirFile.exists()) { saveDirFile.mkdirs(); } } //根据path参数，设置各路径和URL String path = request.getParameter("path") != null ? request.getParameter("path") : ""; String currentPath = rootPath + path; String currentUrl = rootUrl + path; String currentDirPath = path; String moveupDirPath = ""; if (!"".equals(path)) { String str = currentDirPath.substring(0, currentDirPath.length() - 1); moveupDirPath = str.lastIndexOf("/") >= 0 ? str.substring(0, str.lastIndexOf("/") + 1) : ""; } //排序形式，name or size or type String order = request.getParameter("order") != null ? request.getParameter("order").toLowerCase() : "name"; //不允许使用..移动到上一级目录 if (path.indexOf("..") >= 0) { return "Access is not allowed."; } //最后一个字符不是/ if (!"".equals(path) && !path.endsWith("/")) { return "Parameter is not valid."; } //目录不存在或不是目录 File currentPathFile = new File(currentPath); if (!currentPathFile.isDirectory()) { return "Directory does not exist."; } //遍历目录取的文件信息 List