view src/main/java/app/bbs/thinks/deleteAttributeServlet.java @ 175:ac7d1070f449

sanitizing
author tatsuki
date Wed, 30 Jul 2014 22:17:23 +0900
parents 066f58e93a14
children 6f104ab4eb81
line wrap: on
line source

package app.bbs.thinks;

import java.io.PrintWriter;

import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.apache.commons.lang.StringEscapeUtils;

import app.bbs.NetworkBulletinBoard;
import jp.ac.u_ryukyu.ie.cr.shoshi.jungle.bbs.BulletinBoard;

public class deleteAttributeServlet extends HttpServlet
{
	private final NetworkBulletinBoard bbs;
	private static final String PARAM_BOARD_NAME = "bname";
	private static final String PARAM_NODE_PATH = "path";
	private static final String PARAM_BOARD_MESSAGE= "msg";
	private static final String PARAM_BOARD_EDITKEY = "key";
	private static final String PARAM_NODE_ID = "id";
	private static final long serialVersionUID = 1L;
	
	public deleteAttributeServlet(NetworkBulletinBoard _bbs)
	{
		bbs = _bbs;
	}
	
	public void doGet(HttpServletRequest _req,HttpServletResponse _res)
	{
		String bname = (_req.getParameter(PARAM_BOARD_NAME));
		String path = (_req.getParameter(PARAM_NODE_PATH));
		String id = (_req.getParameter(PARAM_NODE_ID));
		
		
		try{
			_res.setCharacterEncoding("UTF-8");
			PrintWriter pw = _res.getWriter();
			pw.write("<html><body><h1>delete Attribute ?</h1>");
			pw.write("<form method='POST'\n");
			pw.write("<p><input type='hidden' name='path' value='"+path+"'/>" +
					"<input type='hidden' name='id' value='"+id+"'/>" +
					"<input type='hidden' name='bname' value='"+bname+"'</p>\n");
			pw.write("<p><input type='submit' value='submit'/></p>\n");
			pw.write("</body></html>");
			pw.flush();
		}catch(Exception _e){
			_res.setStatus(500);
		}
	}

	public void doPost(HttpServletRequest _req,HttpServletResponse _res)
	{
		String boardName = (_req.getParameter(PARAM_BOARD_NAME));
		String path = (_req.getParameter(PARAM_NODE_PATH));
		String id = (_req.getParameter(PARAM_NODE_ID));
		
		try{
			bbs.deleteAttribute(boardName, path,id);
			PrintWriter pw = _res.getWriter();
			pw.write("successfully written");
			pw.flush();
		}catch(Exception _e){
			_res.setStatus(500);
		}
	}
}