CusAccessObjectUtil.java 1.7 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647
  1. package com.yihu.jw.util;
  2. import javax.servlet.http.HttpServletRequest;
  3. /**
  4. * 自定义访问对象工具类
  5. *
  6. * 获取对象的IP地址等信息
  7. * @author X-rapido
  8. *
  9. */
  10. public class CusAccessObjectUtil {
  11. /**
  12. * 获取用户真实IP地址,不使用request.getRemoteAddr();的原因是有可能用户使用了代理软件方式避免真实IP地址,
  13. *
  14. * 可是,如果通过了多级反向代理的话,X-Forwarded-For的值并不止一个,而是一串IP值,究竟哪个才是真正的用户端的真实IP呢?
  15. * 答案是取X-Forwarded-For中第一个非unknown的有效IP字符串。
  16. *
  17. * 如:X-Forwarded-For:192.168.1.110, 192.168.1.120, 192.168.1.130,
  18. * 192.168.1.100
  19. *
  20. * 用户真实IP为: 192.168.1.110
  21. *
  22. * @param request
  23. * @return
  24. */
  25. public static String getIpAddress(HttpServletRequest request) {
  26. String ip = request.getHeader("x-forwarded-for");
  27. if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
  28. ip = request.getHeader("Proxy-Client-IP");
  29. }
  30. if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
  31. ip = request.getHeader("WL-Proxy-Client-IP");
  32. }
  33. if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
  34. ip = request.getHeader("HTTP_CLIENT_IP");
  35. }
  36. if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
  37. ip = request.getHeader("HTTP_X_FORWARDED_FOR");
  38. }
  39. if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
  40. ip = request.getRemoteAddr();
  41. }
  42. return ip;
  43. }
  44. }