zoukankan      html  css  js  c++  java
  • 【转】如何监控某个驱动器或目录及其下面的所有子目录的创建文件的动作

    1、如何监控某个驱动器或目录及其下面的所有子目录的创建文件的动作

    http://m.codes51.com/wd/2535822.html

    2、我的代码:(Form1,Button1,Mome1)

    unit Unit1;
    
    interface
    
    uses
      Windows, Messages, SysUtils, Variants, Classes, Graphics, Controls, Forms,
      Dialogs, StdCtrls,
      shlobj, Activex;
    
    const
      SHCNE_RENAMEITEM = $1;
      SHCNE_CREATE = $2;
      SHCNE_DELETE = $4;
      SHCNE_MKDIR = $8;
      SHCNE_RMDIR = $10;
      SHCNE_MEDIAINSERTED = $20;
      SHCNE_MEDIAREMOVED = $40;
      SHCNE_DRIVEREMOVED = $80;
      SHCNE_DRIVEADD = $100;
      SHCNE_NETSHARE = $200;
      SHCNE_NETUNSHARE = $400;
      SHCNE_ATTRIBUTES = $800;
      SHCNE_UPDATEDIR = $1000;
      SHCNE_UPDATEITEM = $2000;
      SHCNE_SERVERDISCONNECT = $4000;
      SHCNE_UPDATEIMAGE = $8000;
      SHCNE_DRIVEADDGUI = $10000;
      SHCNE_RENAMEFOLDER = $20000;
      SHCNE_FREESPACE = $40000;
      SHCNE_ASSOCCHANGED = $8000000;
      SHCNE_DISKEVENTS = $2381F;
      SHCNE_GLOBALEVENTS = $C0581E0;
      SHCNE_ALLEVENTS = $7FFFFFFF;
      SHCNE_INTERRUPT = $80000000;
      SHCNF_IDLIST = 0; // LPITEMIDLIST
      SHCNF_PATHA = $1; // path name
      SHCNF_PRINTERA = $2; // printer friendly name
      SHCNF_DWORD = $3; // DWORD
      SHCNF_PATHW = $5; // path name
      SHCNF_PRINTERW = $6; // printer friendly name
      SHCNF_TYPE = $FF;
      SHCNF_FLUSH = $1000;
      SHCNF_FLUSHNOWAIT = $2000;
      SHCNF_PATH = SHCNF_PATHW;
      SHCNF_PRINTER = SHCNF_PRINTERW;
      WM_SHNOTIFY = $401;
      NOERROR = 0;
      
    type
      TForm1 = class(TForm)
        Button1: TButton;
        Memo1: TMemo;
        procedure FormClose(Sender: TObject; var Action: TCloseAction);
        procedure Button1Click(Sender: TObject);
        procedure FormCreate(Sender: TObject);
      private
        procedure WMShellReg(var Message:TMessage);message WM_SHNOTIFY;
      public
        { Public declarations }
      end;
    
    type
      PSHNOTIFYSTRUCT=^SHNOTIFYSTRUCT;
      SHNOTIFYSTRUCT = record
        dwItem1 : PItemIDList;
        dwItem2 : PItemIDList;
      end;
    Type
      PSHFileInfoByte=^SHFileInfoByte;
      _SHFileInfoByte = record
        hIcon :Integer;
        iIcon :Integer;
        dwAttributes : Integer;
        szDisplayName : array [0..259] of char;
        szTypeName : array [0..79] of char;
      end;
      SHFileInfoByte=_SHFileInfoByte;
    Type
      PIDLSTRUCT = ^IDLSTRUCT;
      _IDLSTRUCT = record
        pidl : PItemIDList;
        bWatchSubFolders : Integer;
      end;
      IDLSTRUCT =_IDLSTRUCT;
     
    function SHNotify_Register(hWnd : Integer) : Bool;
    function SHNotify_UnRegister:Bool;
    function SHEventName(strPath1,strPath2:string;lParam:Integer):string;
    Function SHChangeNotifyDeregister(hNotify:integer):integer;stdcall;external 'Shell32.dll' index 4;
    Function SHChangeNotifyRegister(hWnd,uFlags,dwEventID,uMSG,cItems:LongWord;lpps:PIDLSTRUCT):integer;stdcall;external 'Shell32.dll' index 2;
    Function SHGetFileInfoPidl(pidl : PItemIDList;
      dwFileAttributes : Integer;
      psfib : PSHFILEINFOBYTE;
      cbFileInfo : Integer;
      uFlags : Integer):Integer;stdcall;
      external 'Shell32.dll' name 'SHGetFileInfoA';
    
    var
      Form1: TForm1;
      m_hSHNotify:Integer;
      m_pidlDesktop : PItemIDList;
    
    implementation
    
    {$R *.dfm}
    
    function SHEventName(strPath1,strPath2:string;lParam:Integer):string;
    var
      sEvent:String;
    begin
      case lParam of //file://根据参数设置提示消息
        SHCNE_RENAMEITEM: sEvent := '重命名文件'+strPath1+''+strpath2;
        SHCNE_CREATE: sEvent := '建立文件 文件名:'+strPath1;
        SHCNE_DELETE: sEvent := '删除文件 文件名:'+strPath1;
        SHCNE_MKDIR: sEvent := '新建目录 目录名:'+strPath1;
        SHCNE_RMDIR: sEvent := '删除目录 目录名:'+strPath1;
        SHCNE_MEDIAINSERTED: sEvent := strPath1+'中插入可移动存储介质';
        SHCNE_MEDIAREMOVED: sEvent := strPath1+'中移去可移动存储介质'+strPath1+' '+strpath2;
        SHCNE_DRIVEREMOVED: sEvent := '移去驱动器'+strPath1;
        SHCNE_DRIVEADD: sEvent := '添加驱动器'+strPath1;
        SHCNE_NETSHARE: sEvent := '改变目录'+strPath1+'的共享属性';
        SHCNE_ATTRIBUTES: sEvent := '改变文件目录属性 文件名'+strPath1;
        SHCNE_UPDATEDIR: sEvent := '更新目录'+strPath1;
        SHCNE_UPDATEITEM: sEvent := '更新文件 文件名:'+strPath1;
        SHCNE_SERVERDISCONNECT: sEvent := '断开与服务器的连接'+strPath1+' '+strpath2;
        SHCNE_UPDATEIMAGE: sEvent := 'SHCNE_UPDATEIMAGE';
        SHCNE_DRIVEADDGUI: sEvent := 'SHCNE_DRIVEADDGUI';
        SHCNE_RENAMEFOLDER: sEvent := '重命名文件夹'+strPath1+''+strpath2;
        SHCNE_FREESPACE: sEvent := '磁盘空间大小改变';
        SHCNE_ASSOCCHANGED: sEvent := '改变文件关联';
      else
        sEvent:='未知操作'+IntToStr(lParam);
      end;
      Result:=sEvent;
    end;
    function SHNotify_Register(hWnd : Integer) : Bool;
    var
      //ps:PIDLSTRUCT;
      ps :IDLSTRUCT;
    begin
      {$R-}
      Result:=False;
      If m_hSHNotify = 0 then
      begin
        //file://获取桌面文件夹的Pidl
        if SHGetSpecialFolderLocation(0, CSIDL_DESKTOP,
        m_pidlDesktop)<> NOERROR then
          Form1.close;
        if Boolean(m_pidlDesktop) then
        begin
          ps.bWatchSubFolders := 1;
          ps.pidl := m_pidlDesktop;
          // 利用SHChangeNotifyRegister函数注册系统消息处理
          m_hSHNotify := SHChangeNotifyRegister(
            hWnd,
            (SHCNF_TYPE Or SHCNF_IDLIST),
            (SHCNE_ALLEVENTS Or SHCNE_INTERRUPT),
            //WM_SHNOTIFY, 1, ps);
            WM_SHNOTIFY, 1, @ps);
          Result := Boolean(m_hSHNotify);
        end
        Else
        // 如果出现错误就使用 CoTaskMemFree函数来释放句柄
        CoTaskMemFree(m_pidlDesktop);
      End;
      {$R+}
    end;
    function SHNotify_UnRegister:Bool;
    begin
      Result:=False;
      If Boolean(m_hSHNotify) Then
        //file://取消系统消息监视,同时释放桌面的Pidl
        If Boolean(SHChangeNotifyDeregister(m_hSHNotify)) Then
        begin
          {$R-}
          m_hSHNotify := 0;
          CoTaskMemFree(m_pidlDesktop);
          Result := True;
          {$R-}
        End;
    end;
    
    procedure TForm1.WMShellReg(var Message:TMessage); //file://系统消息处理函数
    var
      strPath1,strPath2:String;
      charPath:array[0..259]of char;
      pidlItem:PSHNOTIFYSTRUCT;
    begin
      pidlItem:=PSHNOTIFYSTRUCT(Message.wParam);
      //file://获得系统消息相关得路径
      SHGetPathFromIDList(pidlItem.dwItem1,charPath);
      strPath1:=charPath;
      SHGetPathFromIDList(pidlItem.dwItem2,charPath);
      strPath2:=charPath;
      Memo1.Lines.Add(SHEvEntName(strPath1,strPath2,Message.lParam)+chr(13)+chr(10));
    end;
    
    procedure TForm1.FormClose(Sender: TObject; var Action: TCloseAction);
    begin
      //file://在程序退出的同时删除监视
      if Boolean(m_pidlDesktop) then
        SHNotify_Unregister;
    end;
    
    procedure TForm1.Button1Click(Sender: TObject);
    begin
      m_hSHNotify:=0;
      if SHNotify_Register(Form1.Handle) then begin// file://注册Shell监视
        ShowMessage('Shell监视程序成功注册');
        Button1.Enabled := False;
      end
      else
        ShowMessage('Shell监视程序注册失败');
    end;
    
    procedure TForm1.FormCreate(Sender: TObject);
    begin
      Button1.Caption := '打开监视';
    end;
    
    end.

    3、

    4、

    5、

  • 相关阅读:
    点图换说明文字
    酷酷的图片预览带加载效果
    阿里巴巴右侧6滑块VS雅虎右侧6滑块VS自定义6滑块
    绝对经典的滑轮新闻显示(javascript+css)
    一个城市、日历选择功能
    比较两个日期大小
    我对委托/事件的理解
    今天写信息采集小程序时实现程序中同时只允许5个线程运行
    Web页面接受客户端POST数据,并且返回数据
    项目中用到的一个树控件[经过修改]
  • 原文地址:https://www.cnblogs.com/CodeSkill/p/5998583.html
Copyright © 2011-2022 走看看