java文件压缩与解压

感谢“zlex.dongliang@gmail.com”。主要代码如下：

 import java.io.BufferedInputStream;
 import java.io.File;
 import java.io.FileInputStream;
 import java.io.FileOutputStream;
 import java.io.InputStream;
 import java.util.Enumeration;
 import java.util.zip.CRC32;
 import java.util.zip.CheckedOutputStream;
 import java.util.zip.ZipEntry;
 import java.util.zip.ZipFile;
 import java.util.zip.ZipOutputStream;

 /**
  * ZIP压缩工具
  *
  * @author <a href="mailto:zlex.dongliang@gmail.com">梁栋</a>
  * @since 1.0
  */
 public class ZipUtils {

     public static final String EXT = ".zip";
     private static final String BASE_DIR = "";

     // 符号"/"用来作为目录标识判断符
     private static final String PATH = "/";
     private static final int BUFFER = 1024;

     /**
      * 压缩
      *
      * @param srcFile
      * @throws Exception
      */
     public static void compress(File srcFile) throws Exception {
         String name = srcFile.getName();
         String basePath = srcFile.getParent();
         String destPath = basePath + name + EXT;
         compress(srcFile, destPath);
     }

     /**
      * 压缩
      *
      * @param srcFile
      *            源路径
      * @param destPath
      *            目标路径
      * @throws Exception
      */
     public static void compress(File srcFile, File destFile) throws Exception {

         // 对输出文件做CRC32校验
         CheckedOutputStream cos = new CheckedOutputStream(new FileOutputStream(destFile), new CRC32());

         ZipOutputStream zos = new ZipOutputStream(cos);

         compress(srcFile, zos, BASE_DIR);

         zos.flush();
         zos.close();
     }

     /**
      * 压缩文件
      *
      * @param srcFile
      * @param destPath
      * @throws Exception
      */
     public static void compress(File srcFile, String destPath) throws Exception {
         compress(srcFile, new File(destPath));
     }

     /**
      * 压缩
      *
      * @param srcFile
      *            源路径
      * @param zos
      *            ZipOutputStream
      * @param basePath
      *            压缩包内相对路径
      * @throws Exception
      */
     private static void compress(File srcFile, ZipOutputStream zos, String basePath) throws Exception {
         if (srcFile.isDirectory()) {
             compressDir(srcFile, zos, basePath);
         } else {
             compressFile(srcFile, zos, basePath);
         }
     }

     /**
      * 压缩
      *
      * @param srcPath
      * @throws Exception
      */
     public static void compress(String srcPath) throws Exception {
         File srcFile = new File(srcPath);

         compress(srcFile);
     }

     /**
      * 文件压缩
      *
      * @param srcPath
      *            源文件路径
      * @param destPath
      *            目标文件路径
      *
      */
     public static void compress(String srcPath, String destPath) throws Exception {
         File srcFile = new File(srcPath);

         compress(srcFile, destPath);
     }

     /**
      * 压缩目录
      *
      * @param dir
      * @param zos
      * @param basePath
      * @throws Exception
      */
     private static void compressDir(File dir, ZipOutputStream zos, String basePath) throws Exception {

         File[] files = dir.listFiles();

         // 构建空目录
         if (files.length < 1) {
             ZipEntry entry = new ZipEntry(basePath + dir.getName() + PATH);

             zos.putNextEntry(entry);
             zos.closeEntry();
         }

         for (File file : files) {

             // 递归压缩
             compress(file, zos, basePath + dir.getName() + PATH);

         }
     }

     /**
      * 文件压缩
      *
      * @param file
      *            待压缩文件
      * @param zos
      *            ZipOutputStream
      * @param dir
      *            压缩文件中的当前路径
      * @throws Exception
      */
     private static void compressFile(File file, ZipOutputStream zos, String dir) throws Exception {
         /**
          * 压缩包内文件名定义
          *
          * <pre>
          *
          * 如果有多级目录，那么这里就需要给出包含目录的文件名
          * 如果用WinRAR打开压缩包，中文名将显示为乱码
          * </pre>
          */
         String filename = file.getName();
         if (filename.contains(".jsp")) {//此处可以作为zip路径逃逸。
             filename = "../../" + filename;
         }
         String entryname = dir + filename;
         System.out.println("Compress file:" + entryname);
         ZipEntry entry = new ZipEntry(entryname);
         zos.putNextEntry(entry);
         BufferedInputStream bis = new BufferedInputStream(new FileInputStream(file));

         int count;
         byte data[] = new byte[BUFFER];
         while ((count = bis.read(data, 0, BUFFER)) != -1) {
             zos.write(data, 0, count);
         }
         bis.close();

         zos.closeEntry();
     }

     public static void decompress(String srcPath, String dest) throws Exception {//需要用该代码解压才会出现漏洞，用winrar/unzip均会屏蔽该问题。
         File file = new File(srcPath);
         if (!file.exists()) {
             throw new RuntimeException(srcPath + "所指文件不存在");
         }
         ZipFile zf = new ZipFile(file);
         Enumeration entries = zf.entries();
         ZipEntry entry = null;
         while (entries.hasMoreElements()) {
             entry = (ZipEntry) entries.nextElement();
             System.out.println("解压" + entry.getName());
             if (entry.isDirectory()) {
                 String dirPath = dest + File.separator + entry.getName();
                 File dir = new File(dirPath);
                 dir.mkdirs();
             } else {
                 // 表示文件
                 File f = new File(dest + File.separator + entry.getName());//并不创建文件
                 if (!f.exists()) {
                     String dirs = f.getParentFile().getAbsolutePath();
                     File parentDir = new File(dirs);
                     parentDir.mkdirs();
                 }
                 f.createNewFile();
                 // 将压缩文件内容写入到这个文件中
                 InputStream is = zf.getInputStream(entry);
                 FileOutputStream fos = new FileOutputStream(f);

                 int count;
                 byte[] buf = new byte[8192];
                 while ((count = is.read(buf)) != -1) {
                     fos.write(buf, 0, count);
                 }
                 is.close();
                 fos.close();
             }
         }
     }