@RequestMapping(params="upLoadPicture")

     @ResponseBody

     public String addFilemsgPic(MultipartFile file,HttpServletRequest request) throws Exception{

         String path="../Manage_ssm/upLoadPicture";

         //创建文件

         File dir=new File(path);

         if(!dir.exists()){

             dir.mkdirs();

         }

         String username=(String) request.getSession().getAttribute("userName");

         //返回原来在客户端的文件系统的文件名

         String fileName=file.getOriginalFilename();

         //username+后缀名

         String img=username+fileName.substring(fileName.lastIndexOf("."));//zhao.jpg

         FileOutputStream imgOut=new FileOutputStream(new File(dir,img));//根据 dir 抽象路径名和 img 路径名字符串创建一个新 File 实例。

         imgOut.write(file.getBytes());//返回一个字节数组文件的内容

         imgOut.close();

         Map<String, String> map=new HashMap<String, String>();

         String rpath = path+"/"+img;

         map.put("rPath",rpath);

         JSONObject jsonObject = JSONObject.fromObject(map);//将json字符串转换为json对象

         String r=jsonObject.toString();

         String s=URLEncoder.encode(r, "utf-8");//加密

         return s;

     }

 @RequestMapping(params="pictureToDb")

     @ResponseBody

     public int pictureToDb(String src,HttpServletRequest request){

         String newSrc = src.replace(" ", "+");

         int flag=ConnOrcl.connToTable(newSrc,request);

         if(flag==)

             return ;

         else

             return ;

     }

 public class ConnOrcl {

         private static Connection conn;

         private static Statement stat;

         private static String driver = "oracle.jdbc.driver.OracleDriver";

         private static int SUCCESS=;

         private static int FILE=;

         public static int connToTable(String file,HttpServletRequest request)

         {

             try

             {

                 //数据库连接

                 Class.forName(driver);

                 conn = java.sql.DriverManager.getConnection("jdbc:oracle:thin:@127.0.0.1:1521:orcl", "GKBMFZXT", "GKBMFZXT");

                 stat = conn.createStatement();  

                 String username=(String) request.getSession().getAttribute("userName");

                 String sql="update user_table set picture='"+file+"' where user_name='"+username+"'";

                 stat.execute(sql.toString());  

                 return SUCCESS;

             }

             catch(ClassNotFoundException e)

             {

                 e.printStackTrace();

             }

             catch(SQLException e)

             {

                 e.printStackTrace();

             }

             finally

             {

                 if(null != stat)

                 {

                     try

                     {

                         stat.close();

                     }

                     catch (SQLException e)

                     {

                         e.printStackTrace();

                     }

                 }

                 if(null != conn)

                 {

                     try

                     {

                         conn.close();

                     }

                     catch (SQLException e)

                     {

                         e.printStackTrace();

                     }

                 }

             }

             return FILE;

         }  

 }

 <script src="js/ajaxfileupload.js"></script>

 <script type="text/javascript">

 function upload(){

     var file="file";

     var picElement=document.getElementById(file).value;

     var picFormat=picElement.substring(picElement.lastIndexOf('.')+1,picElement.length);

     if(picFormat!="jpg"){

         alert("请选择jpg 格式的文件!");

         return;

     }

     $.ajaxFileUpload({

              url:"user.do?upLoadPicture",

            secureuri: false,

            fileElementId:file,

            dataType: 'JSON',

            success:function(data){

                   data=decodeURIComponent(data);//解码

                   var arr=JSON.parse(data);//JSON.parse() 方法解析一个JSON字符串

                 $("#fsrc").val(arr.rPath);

                  $.post(

                         "user.do?pictureToDb&src="+$("#fsrc").val(),

                         function(data){

                             //data=decodeURIComponent(data);

                             //var arr=JSON.parse(data);

                             if(data==1){

                             alert("上传成功！");

                             }else{

                             alert("上传失败！");

                             }

                         }

                     );

         },

         error: function (){

                alert("上传失败!当前时间为:"+new Date().toLocaleTimeString());

        }

     });

 };

 function findFile(){

     document.getElementById("file").click();

 }