view src/main/java/app/bbs/thinks/ShowMatrix.java @ 175:ac7d1070f449

sanitizing
author tatsuki
date Wed, 30 Jul 2014 22:17:23 +0900
parents 066f58e93a14
children 6f104ab4eb81
line wrap: on
line source

package app.bbs.thinks;

import java.io.PrintWriter;

import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.apache.commons.lang.StringEscapeUtils;
import org.eclipse.jetty.util.thread.ThreadPool;

import app.bbs.NetworkBulletinBoard;
import jp.ac.u_ryukyu.ie.cr.shoshi.jungle.bbs.BoardMessage;

public class ShowMatrix extends HttpServlet {
	/**
	 * edit Node Path is rename editNodePath
	 **/
	private static final long serialVersionUID = 1L;
	private final NetworkBulletinBoard bbs;
	private final String createBoardMessagePath;
	private final String editNodePath;
	private final String showMatrixPath;
	private final String createAttributePath;
	private final String editAttributePath;
	private final String deleteAttributePath;
	private final String deleteNodePath;
	private static final String PARAM_BOARD_NAME = "bname";
	private static final String PARAM_NODE_PATH = "uuid";
	private static final String PARAM_NODE_NAME = "nodeName";

	public ShowMatrix(NetworkBulletinBoard _bbs,
			String _createBoardMessagePath, String _editNodePath,
			String _showMatrixPath, String _createAttributePath,
			String _editAttributePath, String _deleteAttributePath,
			String _deleteNodePath, ThreadPool thp) {
		bbs = _bbs;
		deleteAttributePath = _deleteAttributePath;
		deleteNodePath = _deleteNodePath;
		createAttributePath = _createAttributePath;
		editAttributePath = _editAttributePath;
		showMatrixPath = _showMatrixPath;
		createBoardMessagePath = _createBoardMessagePath;
		editNodePath = _editNodePath;
	}

	public void doGet(HttpServletRequest _req, HttpServletResponse _res) {
		final String bname = _req.getParameter(PARAM_BOARD_NAME);
		String path = _req.getParameter(PARAM_NODE_PATH);
		String nodeName = _req.getParameter(PARAM_NODE_NAME);
		try {
			_res.setCharacterEncoding("UTF-8");
			printBoard(bname, path, nodeName, _res.getWriter());
		} catch (Exception _e) {
			_res.setStatus(500);
		}
	}

	private void printBoard(String _bname, String path, String nodeName,
			PrintWriter _pw) throws Exception {
		_pw.write("<html><body>\n");

		if (nodeName == null)
			nodeName = "rootNode";

		_pw.write("<h1>" + bbs.sanitize(nodeName) + " Path = " + path + "</h1>\n");

		_pw.write("<form action='" + createBoardMessagePath
				+ "' method='POST'>\n");
		_pw.write("<p><input type='hidden' name='bname' value='" + bbs.sanitize(_bname)
				+ "'/> </p>\n");
		_pw.write("<p>Folder Name<br/> <input type='textarea' name='name'/> </p>\n");
		_pw.write("<input type='hidden' name='path' value='" + path + "'/>");
		_pw.write("<p><input type='submit' value='submit'/></p>\n");
		_pw.write("</form>");

		_pw.write("<p><br>add Attribute</p>");
		_pw.write("<form action='" + createAttributePath + "' method='POST'\n");
		_pw.write("<p><input type='hidden' name='bname' value='" + bbs.sanitize(_bname)
				+ "'</p>\n");
		_pw.write("<p>attributeName<br/> <input type='textarea' name='msg'/> </p>\n");
		_pw.write("<input type='hidden' name='path' value='" + path + "'/>");
		_pw.write("<p><input type='submit' value='submit'/></p>\n");
		_pw.write("</form>");
		_pw.write("<hr/>");
		_pw.write("<p>Folder</p>");

		for (BoardMessage msg : bbs.getFolder(_bname, path)) {
			_pw.write("<small><a href=" + showMatrixPath + "?bname=" + bbs.sanitize(_bname)
					+ "&uuid=" + path + "/" + msg.getUUID() + "&nodeName="
					+ bbs.sanitize(msg.getMessage()) + ">" + bbs.sanitize(msg.getMessage())
					+ "</a></small>");
			_pw.write("   ");
			_pw.write("<small><a href='" + editNodePath + "?bname=" + bbs.sanitize(_bname)
					+ "&path=" + path + "/" + msg.getUUID()
					+ "'>edit</a></small>");
			_pw.write("   ");
			_pw.write("<small><a href='" + deleteNodePath + "?bname=" + bbs.sanitize(_bname)
					+ "&path=" + path + "&id=" + msg.getUUID()
					+ "'>delete</a><br><br></small>");
		}

		_pw.write("<br><hr/><p>Value</p>");
		getAttributeImp attribute = (bbs.getAttribute(_bname, path));
		for (int count = 0; attribute.getMessage(count) != null; count++) {
			_pw.write("<p><b>" + count + " :  </b>");
			_pw.write("<a href='" + editAttributePath + "?bname=" + bbs.sanitize(_bname)
					+ "&path=" + path + "&id=" + count + "'>"
					+ bbs.sanitize(attribute.getMessage(count)) + "</a>");
			_pw.write("<a href='" + deleteAttributePath + "?bname=" + bbs.sanitize(_bname)
					+ "&path=" + path + "&id=" + count + "'>" + "   delete"
					+ "</a></p>");
		}
		_pw.write("</body></html>");
		_pw.flush();
	}
}