How to avoid unauthorized access for feature permissions (URL access)

1. You can use the Request to get the previous page path: Request.getheader ("Referer"); then you can tell that this is a string type.

2. If you need to log in, you can get the login information from the session and then determine

3. You can use the previous page to pass the parameter, this page judge, if do not match on processing, parameters can be placed in the session or using Request.setattribute (); This method, do not URL parameter

4. JSP prevents direct URL access through filter implementations

How to avoid unauthorized access for feature permissions (URL access)