是否只有JSP中的POST变量才能使用request.getParameter？

Question

In PHP there is $_REQUEST, $_GET, and $_POST. What if I want to only get POST variables in JSP to prevent someone from putting the variables in the url? Is there away to do this? Thanks!

Answer 1

The query string is available from the HttpServletRequest object - so you know what was on the URL. You can therefore filter out anything in the getParameterMap() that was in the query string, leaving only stuff that was posted.

Answer 2

Your HttpServletRequest object has a getMethod() property which will tell you if it was a GET or a POST. You could just reject all GETs.

I don't think that <form action="mypage?foo=bar"> actually works, that is, I don't think you can have both POST and GET parameters at the same time. I could be wrong, though.