Example #1
0
  public void doPost(HttpServletRequest request, HttpServletResponse response)
      throws ServletException, IOException {
    PrintWriter writer = response.getWriter();
    HttpSession session = request.getSession();

    String username = request.getParameter("username");
    String password = request.getParameter("password");
    String type = request.getParameter("type");
    System.out.println(username + password + type);

    session.setAttribute("user", username);

    try {
      writer.println("<html>");
      writer.println("<body bgcolor=green>");
      writer.println("<center>");
      ps.setString(1, username);
      ps.setString(2, password);
      ps.setString(3, type);
      ResultSet rs = ps.executeQuery();

      if (rs.next()) {
        writer.println("<h1>LOGIN SUCCESSFUL</h1><br><br>");
        writer.println("<a href=account.html>click here to see your account</a>");
      } else {
        writer.println("<h1>LOGIN FAILED</h1><br><br>");
        writer.println("<a href=login.html>click here to login again</a>");
      }
      writer.println("</center>");
      writer.println("</body>");
      writer.println("</html>");
    } catch (Exception e) {
      e.printStackTrace();
    }
  }
  @Override
  protected void doPost(HttpServletRequest request, HttpServletResponse response)
      throws ServletException, IOException {

    // get a connection
    ConnectionPool pool = ConnectionPool.getInstance();
    Connection connection = pool.getConnection();

    String sqlStatement = request.getParameter("sqlStatement");
    String sqlResult = "";
    try {
      // create a statement
      Statement statement = connection.createStatement();

      // parse the SQL string
      sqlStatement = sqlStatement.trim();
      if (sqlStatement.length() >= 6) {
        String sqlType = sqlStatement.substring(0, 6);
        if (sqlType.equalsIgnoreCase("select")) {
          // create the HTML for the result set
          ResultSet resultSet = statement.executeQuery(sqlStatement);
          sqlResult = SQLUtil.getHtmlTable(resultSet);
          resultSet.close();
        } else {
          int i = statement.executeUpdate(sqlStatement);
          if (i == 0) {
            sqlResult = "<p>The statement executed successfully.</p>";
          } else { // an INSERT, UPDATE, or DELETE statement
            sqlResult = "<p>The statement executed successfully.<br>" + i + " row(s) affected.</p>";
          }
        }
      }
      statement.close();
      connection.close();
    } catch (SQLException e) {
      sqlResult = "<p>Error executing the SQL statement: <br>" + e.getMessage() + "</p>";
    } finally {
      pool.freeConnection(connection);
    }

    HttpSession session = request.getSession();
    session.setAttribute("sqlResult", sqlResult);
    session.setAttribute("sqlStatement", sqlStatement);

    String url = "/index.jsp";
    getServletContext().getRequestDispatcher(url).forward(request, response);
  }
 // ---TODO: This feels like a kludge.  Find a better way to handle it.
 public void respondToEditForm(HttpServletRequest request, HttpSession session) {
   String pid = request.getParameter("productid");
   if (pid != null) {
     try {
       int product_id = Integer.parseInt(pid);
       Product prod = Product.loadProduct(new Integer(product_id));
       if (prod == null) {
         Util.noteError(
             session, "Internal error: No product with ID " + product_id + " was found.");
       } else {
         setProduct(prod);
       }
     } catch (NumberFormatException e) {
       Util.noteError(session, "Internal error: Illegal productid: " + pid);
     }
   }
   super.respondToEditForm(request, session);
   Debug.println("Version.respondToEditForm: Setting 'record' to " + getProduct());
   session.setAttribute("record", getProduct());
 }
 public void doPost(HttpServletRequest request, HttpServletResponse response)
     throws ServletException, IOException {
   // I use "session" in order to throws the object named user bean.
   HttpSession session = request.getSession(true);
   response.setContentType("text/html");
   request.setCharacterEncoding("UTF-8");
   UserBean ub = (UserBean) session.getAttribute("user");
   if (ub == null) {
     String haveLogin = "******";
     session.setAttribute("haveLogin", haveLogin);
     response.sendRedirect("cart");
   } else {
     String mID = ub.getmID();
     String iID = (String) request.getParameter("iID");
     // String idx = (String)request.getParameter("idx");
     Connection conn = null;
     try {
       // Getting the connection from database.
       Class.forName("com.mysql.jdbc.Driver");
       /*conn = DriverManager
       .getConnection("jdbc:mysql://localhost/se?"
       		+ "user=root");*/
       conn =
           DriverManager.getConnection(
               "jdbc:mysql://localhost/user_register?"
                   + "user=sqluser&password=sqluserpw&useUnicode=true&characterEncoding=UTF-8");
       String sql = "delete from cart_item_mapping where mID=? and iID = ?";
       PreparedStatement pst = conn.prepareStatement(sql);
       // Using preparedstatement by set the parameter related to "?" symbol.
       pst.setString(1, mID);
       pst.setString(2, iID);
       pst.executeUpdate();
       pst.close();
       response.sendRedirect("ShowCartController");
     } catch (Exception e) {
       e.printStackTrace();
     }
   }
 }
Example #5
0
  public void doGet(HttpServletRequest request, HttpServletResponse response)
      throws ServletException, IOException {

    response.setContentType("text/html");
    HttpSession session = request.getSession(false);
    String reseller = null;
    if (session != null && session.getAttribute("reseller") != null)
      reseller = "%" + session.getAttribute("reseller") + "%";
    List<LicenseData> searchResult = null;
    if (reseller != null) {
      /*  session.setAttribute("fieldsearch", true);
      session.removeAttribute("datesearch");*/

      if (request.getParameter("so") != null && !request.getParameter("so").isEmpty()) {

        log.info(
            "Search Fields : Sales Order Search "
                + request.getParameter("so")
                + " for reseller "
                + session.getAttribute("reseller"));

        searchResult = getSearchByFieldResults(reseller, request.getParameter("so"), "so");

        session.setAttribute("so", request.getParameter("so"));
        session.removeAttribute("enduser");
        session.removeAttribute("ek");
        session.setAttribute("label", "Sales Order");
        session.setAttribute("value", request.getParameter("so"));

      } else if (request.getParameter("enduser") != null
          && !request.getParameter("enduser").isEmpty()) {

        log.info(
            "Search Fields : End User Search "
                + request.getParameter("enduser")
                + " for reseller "
                + session.getAttribute("reseller"));

        searchResult =
            getSearchByFieldResults(reseller, request.getParameter("enduser"), "enduser");
        session.setAttribute("enduser", request.getParameter("enduser"));
        session.removeAttribute("so");
        session.removeAttribute("sno");
        session.removeAttribute("ek");
        session.setAttribute("label", "End User");
        session.setAttribute("value", request.getParameter("enduser"));

      } else if (request.getParameter("ek") != null && !request.getParameter("ek").isEmpty()) {

        log.info(
            "Search Fields : Entitlement Key Search "
                + request.getParameter("ek")
                + " for reseller "
                + session.getAttribute("reseller"));

        searchResult = getSearchByFieldResults(reseller, request.getParameter("ek"), "ek");
        session.setAttribute("ek", request.getParameter("ek"));
        session.removeAttribute("so");
        session.removeAttribute("sno");
        session.removeAttribute("enduser");
        session.setAttribute("label", "Entitlement Key");
        session.setAttribute("value", request.getParameter("ek"));

      } else if (request.getParameter("sno") != null && !request.getParameter("sno").isEmpty()) {

        log.info(
            "Search Fields : Serial Number Search "
                + request.getParameter("sno")
                + " for reseller "
                + session.getAttribute("reseller"));

        searchResult = getSearchByFieldResults(reseller, request.getParameter("sno"), "sno");
        session.setAttribute("sno", request.getParameter("sno"));
        session.removeAttribute("ek");
        session.removeAttribute("so");
        session.removeAttribute("enduser");
        request.setAttribute("sno", 1);
        session.setAttribute("label", "Serial Number");
        session.setAttribute("value", request.getParameter("sno"));

      } else if (request.getParameter("po") != null && !request.getParameter("po").isEmpty()) {

        log.info(
            "Search Fields : Purchase Order Search "
                + request.getParameter("po")
                + " for reseller "
                + session.getAttribute("reseller"));

        searchResult = getSearchByFieldResults(reseller, request.getParameter("po"), "po");
        session.setAttribute("po", request.getParameter("po"));
        session.setAttribute("label", "Purchase Order");
        session.setAttribute("value", request.getParameter("po"));

      } else if (request.getParameter("hm") != null && !request.getParameter("hm").isEmpty()) {

        log.info(
            "Search Fields : HM ID Search "
                + request.getParameter("hm")
                + " for reseller "
                + session.getAttribute("hm"));

        searchResult = getSearchByFieldResults(reseller, request.getParameter("hm"), "hm");
        session.setAttribute("hm", request.getParameter("hm"));
        session.setAttribute("label", "Hive Manager ID");
        session.setAttribute("value", request.getParameter("hm"));
      }

      session.setAttribute("fieldSearchList", searchResult);
      String nextJSP = "/viewFieldSearchResult.jsp";
      RequestDispatcher dispatcher = getServletContext().getRequestDispatcher(nextJSP);
      dispatcher.forward(request, response);
    } else {

      log.info("Search Fields : Reseller Blank  ");
      String nextJSP = "/login.jsp";
      RequestDispatcher dispatcher = getServletContext().getRequestDispatcher(nextJSP);
      dispatcher.forward(request, response);
    }
  }
Example #6
0
 public void doGet(HttpServletRequest request, HttpServletResponse response) {
   response.setContentType("text/html");
   PrintWriter webPageOutput = null;
   try {
     webPageOutput = response.getWriter();
   } catch (IOException error) {
     Routines.writeToLog(servletName, "getWriter error : " + error, false, context);
   }
   HttpSession session = request.getSession();
   session.setAttribute("redirect", request.getRequestURL() + "?" + request.getQueryString());
   Connection database = null;
   try {
     database = pool.getConnection(servletName);
   } catch (SQLException error) {
     Routines.writeToLog(servletName, "Unable to connect to database : " + error, false, context);
   }
   if (Routines.loginCheck(true, request, response, database, context)) {
     return;
   }
   String server = context.getInitParameter("server");
   boolean liveSever = false;
   if (server == null) {
     server = "";
   }
   if (server.equals("live")) {
     response.setHeader("Refresh", "60");
   }
   Routines.WriteHTMLHead(
       "View System Log", // title
       false, // showMenu
       13, // menuHighLight
       false, // seasonsMenu
       false, // weeksMenu
       false, // scores
       false, // standings
       false, // gameCenter
       false, // schedules
       false, // previews
       false, // teamCenter
       false, // draft
       database, // database
       request, // request
       response, // response
       webPageOutput, // webPageOutput
       context); // context
   webPageOutput.println("<CENTER>");
   webPageOutput.println(
       "<IMG SRC=\"../Images/Admin.gif\"" + " WIDTH='125' HEIGHT='115' ALT='Admin'>");
   webPageOutput.println("</CENTER>");
   pool.returnConnection(database);
   webPageOutput.println(Routines.spaceLines(1));
   Routines.tableStart(false, webPageOutput);
   Routines.tableHeader("System Log", 0, webPageOutput);
   Routines.tableDataStart(true, false, false, true, true, 0, 0, "scoresrow", webPageOutput);
   boolean firstLine = true;
   int numOfLines = 0;
   try {
     String file = context.getRealPath("/");
     FileReader logFile = new FileReader(file + "/Data/log.txt");
     BufferedReader logFileBuffer = new BufferedReader(logFile);
     boolean endOfFile = false;
     while (!endOfFile) {
       String logFileText = logFileBuffer.readLine();
       if (logFileText == null) {
         endOfFile = true;
       } else {
         if (firstLine) {
           firstLine = false;
         } else {
           webPageOutput.println(Routines.spaceLines(1));
         }
         numOfLines++;
         webPageOutput.println(logFileText);
       }
     }
     logFileBuffer.close();
   } catch (IOException error) {
     Routines.writeToLog(servletName, "Problem with log file : " + error, false, context);
   }
   Routines.tableDataEnd(false, true, true, webPageOutput);
   Routines.tableEnd(webPageOutput);
   if (numOfLines < 20) {
     webPageOutput.println(Routines.spaceLines(20 - numOfLines));
   }
   Routines.WriteHTMLTail(request, response, webPageOutput);
 }
Example #7
0
  protected void doPost(HttpServletRequest request, HttpServletResponse response)
      throws ServletException, IOException {
    // Variable initializations.
    HttpSession session = request.getSession();
    FileItem image_file = null;
    int record_id = 0;
    int image_id;

    // Check if a record ID has been entered.
    if (request.getParameter("recordID") == null || request.getParameter("recordID").equals("")) {
      // If no ID has been entered, send message to jsp.
      response_message =
          "<p><font color=FF0000>No Record ID Detected, Please Enter One.</font></p>";
      session.setAttribute("msg", response_message);
      response.sendRedirect("UploadImage.jsp");
    }

    try {
      // Parse the HTTP request to get the image stream.
      DiskFileUpload fu = new DiskFileUpload();
      // Will get multiple image files if that happens and can be accessed through FileItems.
      List<FileItem> FileItems = fu.parseRequest(request);

      // Connect to the database and create a statement.
      conn = getConnected(drivername, dbstring, username, password);
      stmt = conn.createStatement();

      // Process the uploaded items, assuming only 1 image file uploaded.
      Iterator<FileItem> i = FileItems.iterator();

      while (i.hasNext()) {
        FileItem item = (FileItem) i.next();

        // Test if item is a form field and matches recordID.
        if (item.isFormField()) {
          if (item.getFieldName().equals("recordID")) {
            // Covert record id from string to integer.
            record_id = Integer.parseInt(item.getString());

            String sql = "select count(*) from radiology_record where record_id = " + record_id;
            int count = 0;

            try {
              rset = stmt.executeQuery(sql);

              while (rset != null && rset.next()) {
                count = (rset.getInt(1));
              }
            } catch (SQLException e) {
              response_message = e.getMessage();
            }

            // Check if recordID is in the database.
            if (count == 0) {
              // Invalid recordID, send message to jsp.
              response_message =
                  "<p><font color=FF0000>Record ID Does Not Exist In Database.</font></p>";
              session.setAttribute("msg", response_message);
              // Close connection.
              conn.close();
              response.sendRedirect("UploadImage.jsp");
            }
          }
        } else {
          image_file = item;

          if (image_file.getName().equals("")) {
            // No file, send message to jsp.
            response_message = "<p><font color=FF0000>No File Selected For Record ID.</font></p>";
            session.setAttribute("msg", response_message);
            // Close connection.
            conn.close();
            response.sendRedirect("UploadImage.jsp");
          }
        }
      }

      // Get the image stream.
      InputStream instream = image_file.getInputStream();

      BufferedImage full_image = ImageIO.read(instream);
      BufferedImage thumbnail = shrink(full_image, 10);
      BufferedImage regular_image = shrink(full_image, 5);

      // First, to generate a unique img_id using an SQL sequence.
      rset1 = stmt.executeQuery("SELECT image_id_sequence.nextval from dual");
      rset1.next();
      image_id = rset1.getInt(1);

      // Insert an empty blob into the table first. Note that you have to
      // use the Oracle specific function empty_blob() to create an empty blob.
      stmt.execute(
          "INSERT INTO pacs_images VALUES("
              + record_id
              + ","
              + image_id
              + ", empty_blob(), empty_blob(), empty_blob())");

      // to retrieve the lob_locator
      // Note that you must use "FOR UPDATE" in the select statement
      String cmd = "SELECT * FROM pacs_images WHERE image_id = " + image_id + " FOR UPDATE";
      rset = stmt.executeQuery(cmd);
      rset.next();
      BLOB myblobFull = ((OracleResultSet) rset).getBLOB(5);
      BLOB myblobThumb = ((OracleResultSet) rset).getBLOB(3);
      BLOB myblobRegular = ((OracleResultSet) rset).getBLOB(4);

      // Write the full size image to the blob object.
      OutputStream fullOutstream = myblobFull.getBinaryOutputStream();
      ImageIO.write(full_image, "jpg", fullOutstream);
      // Write the thumbnail size image to the blob object.
      OutputStream thumbOutstream = myblobThumb.getBinaryOutputStream();
      ImageIO.write(thumbnail, "jpg", thumbOutstream);
      // Write the regular size image to the blob object.
      OutputStream regularOutstream = myblobRegular.getBinaryOutputStream();
      ImageIO.write(regular_image, "jpg", regularOutstream);

      // Commit the changes to database.
      stmt.executeUpdate("commit");
      response_message = "<p><font color=00CC00>Upload Successful.</font></p>";
      session.setAttribute("msg", response_message);

      instream.close();
      fullOutstream.close();
      thumbOutstream.close();
      regularOutstream.close();

      // Close connection.
      conn.close();
      response.sendRedirect("UploadImage.jsp");

      instream.close();
      fullOutstream.close();
      thumbOutstream.close();
      regularOutstream.close();

      // Close connection.
      conn.close();
    } catch (Exception ex) {
      response_message = ex.getMessage();
    }
  }
  /** @see HttpServlet#doPost(HttpServletRequest request, HttpServletResponse response) */
  protected void doPost(HttpServletRequest request, HttpServletResponse response)
      throws ServletException, IOException {
    // TODO Auto-generated method stub
    response.setContentType("text/html");

    Connection conn = null;
    System.out.println("Reached here 1");
    String driver = "sun.jdbc.odbc.JdbcOdbcDriver";
    String user = "";
    String userpass = "";
    String strQuery = "";

    Statement st = null;
    ResultSet rs = null;
    HttpSession session = request.getSession(true);

    try {
      Class.forName(driver);

      conn = DriverManager.getConnection("jdbc:odbc:test", "", "");

      if (request.getParameter("user") != null
          && request.getParameter("user") != ""
          && request.getParameter("userpass") != null
          && request.getParameter("userpass") != "") {
        user = request.getParameter("user").toString();
        userpass = request.getParameter("userpass").toString();
        strQuery = "select * from register ";

        st = conn.createStatement();
        System.out.println("Reached here 2");

        rs = st.executeQuery(strQuery);

        System.out.println("Reached here 3");
        String cpass = null;
        String name = null;
        while (rs.next()) {
          if (rs.getString(3).equals(user)) {
            name = rs.getString(1);
            cpass = rs.getString("pass");
            break;
          }
        }
        session.setAttribute("sname", name);

        System.out.println("Reached Here 4");

        StringBuffer q = pack.calc(userpass);
        String q1 = q.toString();
        System.out.println("Reached Here 5");
        if (cpass.equals(q1)) {

          RequestDispatcher rd =
              this.getServletConfig().getServletContext().getRequestDispatcher("/home.jsp");
          rd.forward(request, response);

        } else {
          RequestDispatcher rd =
              this.getServletConfig().getServletContext().getRequestDispatcher("/login5.jsp");
          rd.forward(request, response);
        }
      }

      conn.close();

    } catch (Exception e) {
      e.printStackTrace();
    }
  }
Example #9
0
  public void doPost(HttpServletRequest request, HttpServletResponse response)
      throws ServletException, IOException {

    server svr = new server();
    response.setContentType("text/html");
    HttpSession session = request.getSession(true);
    PrintWriter out = response.getWriter();
    String email = request.getParameter("email");
    String pw1 = request.getParameter("pw1");
    String pw2 = request.getParameter("pw2");
    String error = null;
    String username = session.getAttribute("username").toString();
    if (pw1.compareTo(pw2) != 0) {
      error = "Passwords do not match";
      session.setAttribute("ErrorMessage", error);
      response.sendRedirect("home.jsp");
    }
    try {
      Statement st = null;
      String strQuery = null;
      if ((pw1.length() == 0) && (email.length() == 0)) {
        session.setAttribute("ErrorMessage", "Nothing to change!");
        response.sendRedirect("home.jsp");
      } else if ((pw1.length() != 0) && (email.length() != 0)) {
        strQuery =
            "UPDATE `twitter2012`.`users` SET `password`='"
                + pw1
                + "', `email_address`='"
                + email
                + "' WHERE `username`='"
                + username
                + "'";
        session.setAttribute("email", email);
      } else if ((pw1.length() == 0) && (email.length() != 0)) {
        strQuery =
            "UPDATE `twitter2012`.`users` SET `email_address`='"
                + email
                + "' WHERE `username`='"
                + username
                + "'";
        session.setAttribute("email", email);
      } else if ((pw1.length() != 0) && (email.length() == 0)) {
        strQuery =
            "UPDATE `twitter2012`.`users` SET `password`='"
                + pw1
                + "' WHERE `username`='"
                + username
                + "'";
      }
      Connection dbcon = null;
      Class.forName("com.mysql.jdbc.Driver").newInstance();
      dbcon = DriverManager.getConnection(svr.getURL(), svr.getUN(), svr.getPW());
      st = dbcon.createStatement();
      st.executeUpdate(strQuery);
      session.setAttribute("ErrorMessage", "Details Changed");
      dbcon.close();
      session.setAttribute("ErrorMessage", "Details Changed");
      response.sendRedirect("home.jsp");
    } catch (Exception ex) {
      out.println(ex);
    }
  }
Example #10
0
  // *****************************************************
  // Process the initial request from Proshop_main
  // *****************************************************
  //
  public void doGet(HttpServletRequest req, HttpServletResponse resp)
      throws ServletException, IOException {

    //
    //  Prevent caching so sessions are not mangled
    //
    resp.setHeader("Pragma", "no-cache"); // for HTTP 1.0
    resp.setHeader("Cache-Control", "no-store, no-cache, must-revalidate"); // for HTTP 1.1
    resp.setDateHeader("Expires", 0); // prevents caching at the proxy server

    resp.setContentType("text/html");
    PrintWriter out = resp.getWriter();

    HttpSession session = SystemUtils.verifyHotel(req, out); // check for intruder

    if (session == null) {

      return;
    }

    String club = (String) session.getAttribute("club"); // get club name
    String user = (String) session.getAttribute("user");

    if (req.getParameter("clubswitch") != null
        && req.getParameter("clubswitch").equals("1")
        && req.getParameter("club") != null) {

      //
      //  Request is to switch clubs - switch the db (TPC or Demo sites)
      //
      String newClub = req.getParameter("club");

      Connection con = null;

      //
      //  release the old connection
      //
      ConnHolder holder = (ConnHolder) session.getAttribute("connect");

      if (holder != null) {

        con = holder.getConn(); // get the connection for previous club
      }

      if (con != null) {
        /*
                   // abandon any unfinished transactions
                   try { con.rollback(); }
                   catch (Exception ignore) {}
        */
        // close/release the connection
        try {
          con.close();
        } catch (Exception ignore) {
        }
      }

      //
      //  Connect to the new club
      //
      try {
        con = dbConn.Connect(newClub); // get connection to this club's db
      } catch (Exception ignore) {
      }

      holder = new ConnHolder(con);

      session.setAttribute("club", newClub);
      session.setAttribute("connect", holder);

      out.println("<HTML><HEAD><Title>Switching Sites</Title>");
      out.println("<meta http-equiv=\"Refresh\" content=\"0; url=/" + rev + "/hotel_home.htm\">");
      out.println("</HEAD>");
      out.println("<BODY><CENTER><BR>");
      out.println("<BR><H2>Switching Sites</H2><BR>");
      out.println("<a href=\"/" + rev + "/hotel_home.htm\" target=_top>Continue</a><br>");
      out.println("</CENTER></BODY></HTML>");
      out.close();
      return;
    }

    //
    //  Call is to display the Home page.
    //
    out.println("<html><head>");
    out.println("<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-1252\">");
    out.println("<meta http-equiv=\"Content-Language\" content=\"en-us\">");
    out.println("<title> \"ForeTees Hotel Home Page\"</title>");
    out.println(
        "<script language=\"JavaScript\" src=\"/" + rev + "/web utilities/foretees.js\"></script>");

    out.println(
        "<style type=\"text/css\"> body {text-align: center} </style>"); // so body will align on
                                                                         // center

    out.println("</head>");

    out.println("<body bgcolor=\"#CCCCAA\" text=\"#000000\">");

    out.println("<div style=\"align:center; margin:0px auto;\">");

    if (club.startsWith("tpc") && user.startsWith("passport")) { // if TPC Passport user

      out.println("<br><H3>Welcome to ForeTees</H3><br>");

      String clubname = "";
      String fullname = "";

      Connection con = null;

      try {
        con = dbConn.Connect(rev); // get connection to the Vx db

        //
        //  Get the club names for each TPC club
        //
        PreparedStatement pstmt =
            con.prepareStatement("SELECT fullname FROM clubs WHERE clubname=?");

        pstmt.clearParameters();
        pstmt.setString(1, club);
        ResultSet rs = pstmt.executeQuery();

        if (rs.next()) {

          fullname = rs.getString("fullname"); // get the club's full name
        }

        out.println("<p>You are currently connected to: <b>" + fullname + "</b><br><br>");
        out.println("To continue with this site, simply use the navigation menus above.<br><br>");
        out.println("To switch sites, click on the desired club name below.</p><br>");

        //
        //  Get the club names for each TPC club
        //
        pstmt =
            con.prepareStatement(
                "SELECT clubname, fullname FROM clubs WHERE inactive=0 AND clubname LIKE 'tpc%' ORDER BY fullname");

        pstmt.clearParameters();
        rs = pstmt.executeQuery();

        while (rs.next()) {

          clubname = rs.getString("clubname"); // get a club name

          if (clubname.startsWith("tpc")) {

            fullname = rs.getString("fullname"); // get the club's full name

            out.println(
                "<a href=\"Hotel_home?clubswitch=1&club="
                    + clubname
                    + "\" target=_top>"
                    + fullname
                    + "</a><br>");
          }
        }
        pstmt.close();

      } catch (Exception e) {

        // Error connecting to db....
        out.println(
            "<BR><BR>Sorry, we encountered an error while trying to connect to the database.");
        // out.println("<br><br>Error: " + e.toString() + "<br>");
        out.println("<BR><BR> <A HREF=\"Hotel_home\">Return</A>.");
        out.println("</BODY></HTML>");
        return;
      }

    } else {

      out.println(
          "<BR><BR> You have entered here by mistake. Please contact ForeTees Support at 651-765-6006.");
      out.println("</BODY></HTML>");
    }
    out.println("</div></BODY></HTML>");
  } // end of doGet
Example #11
0
  public void _jspService(HttpServletRequest request, HttpServletResponse response)
      throws java.io.IOException, ServletException {

    PageContext pageContext = null;
    HttpSession session = null;
    ServletContext application = null;
    ServletConfig config = null;
    JspWriter out = null;
    Object page = this;
    JspWriter _jspx_out = null;
    PageContext _jspx_page_context = null;

    try {
      response.setContentType("text/html");
      pageContext = _jspxFactory.getPageContext(this, request, response, "", true, 8192, true);
      _jspx_page_context = pageContext;
      application = pageContext.getServletContext();
      config = pageContext.getServletConfig();
      session = pageContext.getSession();
      out = pageContext.getOut();
      _jspx_out = out;

      out.write('\n');
      out.write('\n');

      Connection conn = null;
      Class.forName("com.mysql.jdbc.Driver");
      conn = DriverManager.getConnection("jdbc:mysql://localhost:3306/db_shas", "root", "password");

      ResultSet rsdoLogin = null;
      PreparedStatement psdoLogin = null;

      String sUserID = request.getParameter("username");
      String sPassword = request.getParameter("password");
      String message = "User login successfully ";

      try {
        String sqlOption =
            "select * FROM Users where username='******' and Password='******'";
        psdoLogin = conn.prepareStatement(sqlOption);
        //     psdoLogin.setString(1,sUserID);
        //     psdoLogin.setString(2,sPassword);

        rsdoLogin = psdoLogin.executeQuery();

        if (rsdoLogin.next()) {
          String sUserName =
              rsdoLogin.getString("firstname") + " " + rsdoLogin.getString("lastname");
          session.setAttribute("sUserID", sUserName);
          // session.setAttribute("sUserID",rsdoLogin.getString("firstname"));
          //       session.setAttribute("iUserType",rsdoLogin.getString("iUserType"));
          //       session.setAttribute("iUserLevel",rsdoLogin.getString("iUserLevel"));
          //       session.setAttribute("sUserName",sUserName);

          response.sendRedirect("success.jsp?statusmsg=" + message);
        } else {
          message = "Invalid credentials";
          response.sendRedirect("Invalid.jsp?error=" + message);
        }
      } catch (Exception e) {
        e.printStackTrace();
      }

      /// close object and connection
      try {
        if (psdoLogin != null) {
          psdoLogin.close();
        }
        if (rsdoLogin != null) {
          rsdoLogin.close();
        }

        if (conn != null) {
          conn.close();
        }
      } catch (Exception e) {
        e.printStackTrace();
      }

    } catch (Throwable t) {
      if (!(t instanceof SkipPageException)) {
        out = _jspx_out;
        if (out != null && out.getBufferSize() != 0)
          try {
            out.clearBuffer();
          } catch (java.io.IOException e) {
          }
        if (_jspx_page_context != null) _jspx_page_context.handlePageException(t);
      }
    } finally {
      _jspxFactory.releasePageContext(_jspx_page_context);
    }
  }
Example #12
0
  public void doGet(HttpServletRequest request, HttpServletResponse response)
      throws ServletException, IOException {
    String userAgent = request.getHeader("user-agent");
    if (userAgent.matches(".*Android.*")) {
      int flag = 0;
      try {
        Connection con = DBConnectionAdmin.getConnection();
        Statement stmt = con.createStatement();
        ResultSet rs = stmt.executeQuery("SELECT email,password FROM admin");

        String emailmember = request.getParameter("mail");
        String passwordmember = request.getParameter("pass");
        while (rs.next()) {
          String email = rs.getString("email");
          String password = rs.getString("password");
          if (email.equals(emailmember) && password.equals(passwordmember)) {
            flag = 1; // success in login
            break;
          }
        }

        /*if(request.getParameter("remember")!=null ){
        	if( request.getParameter("remember").equals("yes") ){
        					Cookie c1 = new Cookie("email", emailmember);
        					c1.setMaxAge(60*60*24*365);
        					response.addCookie(c1);
        					Cookie c2 = new Cookie("password", passwordmember);
        					c2.setMaxAge(60*60*24*365);
        					response.addCookie(c2);

        	}
        }
        else{
        	Cookie[] cookies = request.getCookies();
        	if (cookies != null) {
        		for(Cookie cookie: cookies) {
        			if(cookie.getName().equals("email")){
        				cookie.setMaxAge(0);
        				response.addCookie(cookie);
        			}
        			else if(cookie.getName().equals("password")){
        				cookie.setMaxAge(0);
        				response.addCookie(cookie);
        			}
        		}
        	}

        }*/

      } catch (SQLException | ClassNotFoundException e1) {
        e1.printStackTrace();
      }
      if (flag == 1) {
        response.setContentType("text/html");
        PrintWriter out = response.getWriter();
        String docType = "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 " + "Transitional//EN\">\n";
        String title = "You Signed In Successfully";
        out.println(
            docType
                + "<HTML>\n"
                + "<HEAD>"
                + "<script type='text/javascript'>"
                + "function changeweb() {"
                + "   AndroidFunction.Second();"
                + "}"
                + "</script>"
                + "<TITLE>"
                + title
                + "</TITLE></HEAD>\n"
                + "<BODY BGCOLOR=\"#FDF5E6\" ><H1 ALIGN=CENTER>"
                + title
                + "</H1>\n"
                + "<button type='button' onclick=\"changeweb()\">Click Me!</button>"
                + "</BODY></HTML>");
        HttpSession session = request.getSession(true);
        String email = request.getParameter("mail");
        session.setAttribute("email", email);

      } else {
        response.setContentType("text/html");
        PrintWriter out = response.getWriter();
        String docType = "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 " + "Transitional//EN\">\n";
        String title = "Wrong password or E-mail.Please try again.";
        out.println(
            docType
                + "<HTML>\n"
                + "<HEAD><TITLE>"
                + title
                + "</TITLE></HEAD>\n"
                + "<BODY BGCOLOR=\"#FDF5E6\" ><H1 ALIGN=CENTER>"
                + title
                + "</H1>\n</BODY></HTML>");
      }
    } else {
      response.setContentType("text/html");
      PrintWriter out = response.getWriter();
      String docType = "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 " + "Transitional//EN\">\n";
      String title = "Main";
      out.println(
          docType
              + "<HTML>\n"
              + "<HEAD><TITLE>"
              + title
              + "</TITLE>"
              + "<style>"
              + "ul"
              + "{"
              + "list-style-type:none;"
              + "margin:0;"
              + "padding:0;"
              + "overflow:hidden;"
              + "}"
              + "li"
              + "{"
              + "float:left;"
              + "}"
              + "a:link,a:visited"
              + "{"
              + "display:block;"
              + "font-weight:bold;"
              + "font-size:200%;"
              + "color:#FFFFFF;"
              + "background-color:#98bf21;"
              + "text-align:center;"
              + "padding:4px;"
              + "text-decoration:none;"
              + "text-transform:uppercase;"
              + "border: 1px solid black;"
              + "padding:25px"
              + "}"
              + "a:hover,a:active"
              + "{"
              + "background-color:#7A991A;"
              + "}"
              + "</style>"
              + "</HEAD>\n"
              + "<body style='background-color:black' >\n");

      out.println("<ul>");
      out.println("<li><a href='http://localhost:8083/TestProject/main.html'>New Event!!</a></li>");
      out.println("<li><a href='post.Eventlist'>Events</a></li>");
      out.println("<li><a href='post.Myeventlist'>My Events</a></li>");
      out.println("<li><a href='post.Memberslist'>Members</a></li>");
      out.println("<li><a href='post.Profile'>Profile</a></li>");
      out.println("<li><a href='post.Help'>Help</a></li>");
      out.println("</ul>");
      out.println("</BODY></HTML>");
    }
  }
  /**
   * Processes requests for both HTTP <code>GET</code> and <code>POST</code> methods.
   *
   * @param request servlet request
   * @param response servlet response
   */
  protected void processRequest(HttpServletRequest request, HttpServletResponse response)
      throws ServletException, IOException {
    response.setContentType("text/html");
    PrintWriter out = response.getWriter();
    HttpSession session = request.getSession();

    try {
      db.connectDB();
      String query =
          "SELECT * FROM Account_Information WHERE AI_ID='" + session.getAttribute("id") + "'";

      ResultSet r = db.get_query(query);
      AccountInfoBean account = new AccountInfoBean();

      while (r.next()) {
        String login = "******" + r.getString("AI_ID");
        String password = "******" + r.getString("AI_Password");
        String type = " " + r.getString("AI_Type");
        String firstName = " " + r.getString("AI_First_Name");
        String middleName = " " + r.getString("AI_Mid_Name");
        String lastName = " " + r.getString("AI_Last_Name");
        String email = " " + r.getString("AI_EMail");
        String phone = " " + r.getString("AI_Phone");
        String age = " " + r.getString("AI_Age");
        String address1 = " " + r.getString("AI_Address1");
        String address2 = " " + r.getString("AI_Address2");
        String city = " " + r.getString("AI_City");
        String state = " " + r.getString("AI_State");
        String zip = " " + r.getInt("AI_Zip");

        account.setLogin(login.trim());
        account.setPassword(password.trim());
        account.setPassword2(password.trim());
        account.setType(type.trim());
        account.setFirstName(firstName.trim());
        account.setMiddleName(middleName.trim());
        account.setLastName(lastName.trim());
        account.setEmail(email.trim());
        account.setPhone(phone.trim());
        account.setAge(age.trim());
        account.setAddress1(address1.trim());
        account.setAddress2(address2.trim());
        account.setCity(city.trim());
        account.setState(state.trim());
        account.setZip(zip.trim());
        session.setAttribute("account", account);
      }
    } catch (Exception e) {
      System.out.println(e);
    }

    response.sendRedirect("accountedit.jsp");

    /* TODO output your page here
    out.println("<html>");
    out.println("<head>");
    out.println("<title>Servlet</title>");
    out.println("</head>");
    out.println("<body>");

    out.println("</body>");
    out.println("</html>");
     */
    out.close();
  }