DownloadとUpload

JavaEE (Servlet)

<a href="/project/download/test.zip">xxx</a>

或いは

<a href="/project/download?filename=test.zip">xxx</a>

String clientFileName = request.getParameter("filename");

String serverFileName = getServletContext().getRealPath("/download/" + clientFileName);

download(clientFileName, serverFileName);

public static void download(String clientFileName, String serverFileName) {

HttpServletResponse response = ResponseUtil.getResponse(); // Seasar2

String encodingFileName = null;

try {

encodingFileName = URLEncoder.encode(clientFileName, "UTF-8");

} catch (UnsupportedEncodingException e) {

...

}

response.setCharacterEncoding("UTF-8");

response.setContentType("application/octet-stream");

//response.setContentType(getServletContext().getMimeType(serverFileName));

response.setHeader("Content-Disposition",

"inline;filename=\"" + encodingFileName + "\"");

※"inline"(埋め込み)|"attachment"(添付)

// 書き方１

try (

BufferedReader in =

new BufferedReader(

new InputStreamReader(

new FileInputStream(serverFileName), "UTF-8"));

BufferedWriter out =

new BufferedWriter(

new OutputStreamWriter(response.getOutputStream(), "UTF-8"))

) {

String line = null;

while ((line = in.readLine()) != null) {

out.write(line);

out.newLine();

}

} catch (IOException e) {

...

}

// 書き方２

try (

BufferedInputStream in =

new BufferedInputStream(

new FileInputStream("/usr/local/test.csv"));

BufferedOutputStream out =

new BufferedOutputStream(response.getOutputStream())

) {

int x;

while ((x = in.read()) >= 0) {

out.write(x);

}

}catch(IOException e){

...

}

}

JavaEE (JAX-RS)

@GET

@Path("/download")

@Produces(MediaType.APPLICATION_OCTET_STREAM)

public Response download() throws UnsupportedEncodingException {

StringBuilder contents = new StringBuilder();

contents.append("...");

InputStream is =

new ByteArrayInputStream(contents.toString().getBytes("UTF-8"));

String fileName = URLEncoder.encode("ファイル名.txt", "UTF-8");

return Response.ok(is)

.header("Content-disposition",

"attachment; filename=" + fileName)

.build();

}

@GET

@Path("/text/{fileName}")

//@Path("/pdf/{fileName}")

//@Path("/image/{fileName}")

@Produces("text/plain")

//@Produces("application/pdf")

//@Produces("image/jpeg")

public Response getFile(@PathParam("fileName") String fileName) {

if(isNullOrEmpty(fileName)) {

ResponseBuilder response = Response.status(Status.BAD_REQUEST);

return response.build();

}

File file = new File("/path/xxxFile.txt");

//File file = new File("/path/xxxFile.pdf");

//File file = new File("/path/xxxFile.jpeg");

ResponseBuilder response = Response.ok((Object) file);

response.header("Content-Disposition", "attachment; filename='dw.txt'");

//response.header("Content-Disposition", "attachment; filename='dw.pdf'");

//response.header("Content-Disposition", "attachment; filename='dw.jpeg'");

return response.build();

}

Seasar2

public class FileDownloadAction {

@Execute(validator = false)

public String index() {

String fileName = ...;

// 日本語ファイル名対応

String userAgent = RequestUtil.getRequest().getHeader("USER-AGENT");

if(userAgent.indexOf("MSIE") >= 0 && userAgent.indexOf("Opera") < 0) {

fileName =

new String(fileName.getBytes("Windows-31J"), "ISO8859_1");

}else{

fileName = new String(fileName.getBytes("UTF-8"), "ISO8859_1");

}

InputStream is = ...;

ResponseUtil.download(fileName, is);

return null;

}

}

PHP

function downloadFile(){

$filepath = "D:\data\xxx.out";

header('Content-Disposition: attachment; filename="' . basename($filepath) . '"');

header('Content-Type: application/octet-stream'); // バイナリ

header('Content-Transfer-Encoding: binary');

header('Content-Length: ' . filesize($filepath));

flush();

readfile($filepath);

unlink($filepath); //一時的なファイルの場合に削除

}

header('Content-Type: application/zip'); // 圧縮

header("Content-Type: text/xml"); //XML

echo '<?xml version="1.0" encoding="utf-8">...';

header("Content-Type: application/x-javascript"); //JavaScript

echo "var a = 3";

header("Content-Type: text/css"); //CSS

echo "#id { background:blue; }";

クライアント側はExtJS、サーバ側はCakePHPの場合

var mask = null;

// マスク設定

mask = new Ext.LoadMask(Ext.getBody(), {msg: 'ダウンロード中…'});

mask.show();

var params = {

id: 101,

name: 'Andy'

};

// ダウンロードを要求

Ext.Ajax.request({

url: '<?php echo $html->url("/sample/createFile")?>',

success: callback,

params: params,

method: 'POST'

});

function callback(response, options){

if ( mask != null ) {

mask.hide();

mask = null;

}

// ファイルをダウンロードするため、ダミーフォームを作成

if (!Ext.fly('frmDummy')){

var frm = document.createElement('form');

frm.id = 'frmDummy';

frm.name = id;

frm.className = 'x-hidden';

frm.action = '<?php echo $html->url("/sample/downloadFile")?>'

frm.method = 'post';

document.body.appendChild(frm);

}

Ext.fly('frmDummy').dom.submit();

}

★セキュリティ対策

PHPの場合

if(strstr($_GET['filename'], '..')){

exit;

}

readfile('/usr/local/', $_GET['filename']);

Javaの場合

if(filename.indexOf("..") >= 0){

throw new Exception();

}

is = new FileInputStream("/usr/local/" + request.getParameter("filename"));

★日本語ファイル名対応

PHP

$filename = urlencode($filename);

header('Content-Disposition: attachment; filename=' . $filename);

$filename = mb_convert_encoding($filename, "SJIS", "auto"); // Windowsの場合

Java

filename = URLEncoder.encode(filename, "UTF-8");

response.setHeader("Content-Disposition", "attachment; filename=" + filename);