/** * Processes requests for both HTTP <code>GET</code> and <code>POST</code> methods. * * @param request servlet request * @param response servlet response * @throws ServletException if a servlet-specific error occurs * @throws IOException if an I/O error occurs */ final void processRequest(final HttpServletRequest request, final HttpServletResponse response) throws ServletException, IOException, CerberusException, JSONException { JSONObject jsonResponse = new JSONObject(); ApplicationContext appContext = WebApplicationContextUtils.getWebApplicationContext(this.getServletContext()); Answer ans = new Answer(); MessageEvent msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_ERROR_UNEXPECTED); msg.setDescription(msg.getDescription().replace("%DESCRIPTION%", "")); ans.setResultMessage(msg); response.setContentType("text/html;charset=UTF-8"); String charset = request.getCharacterEncoding(); // Parameter that are already controled by GUI (no need to decode) --> We SECURE them // Parameter that needs to be secured --> We SECURE+DECODE them String testbattery = ParameterParserUtil.parseStringParamAndDecodeAndSanitize( URLDecoder.decode(request.getParameter("testBattery"), "UTF-8"), null, charset); String description = ParameterParserUtil.parseStringParamAndDecodeAndSanitize( URLDecoder.decode(request.getParameter("description"), "UTF-8"), null, charset); // Parameter that we cannot secure as we need the html --> We DECODE them String batteryContent = ParameterParserUtil.parseStringParam(request.getParameter("batteryContent"), null); Answer finalAnswer = new Answer(); if (StringUtil.isNullOrEmpty(testbattery)) { msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_ERROR_EXPECTED); msg.setDescription( msg.getDescription() .replace("%ITEM%", "Battery") .replace("%OPERATION%", "Create") .replace("%REASON%", "Battery name is missing!")); finalAnswer.setResultMessage(msg); } else { ITestBatteryService testBatteryService = appContext.getBean(ITestBatteryService.class); IFactoryTestBattery factoryTestBattery = appContext.getBean(IFactoryTestBattery.class); TestBattery te = factoryTestBattery.create(0, testbattery, description); finalAnswer = testBatteryService.create(te); if (finalAnswer.isCodeEquals(MessageEventEnum.DATA_OPERATION_OK.getCode())) { /** Adding Log entry. */ ILogEventService logEventService = appContext.getBean(LogEventService.class); logEventService.createPrivateCalls( "/CreateTestBattery", "CREATE", "Create Test Battery : " + testbattery, request); if (batteryContent != null) { JSONArray batteriesContent = new JSONArray(batteryContent); ITestBatteryContentService testBatteryContentService = appContext.getBean(ITestBatteryContentService.class); IFactoryTestBatteryContent factoryTestBatteryContent = appContext.getBean(IFactoryTestBatteryContent.class); ArrayList<TestBatteryContent> arr = new ArrayList<>(); for (int i = 0; i < batteriesContent.length(); i++) { JSONObject bat = batteriesContent.getJSONObject(i); TestBatteryContent co = factoryTestBatteryContent.create( 0, bat.getString("test"), bat.getString("testCase"), testbattery); arr.add(co); } finalAnswer = testBatteryContentService.compareListAndUpdateInsertDeleteElements( te.getTestbattery(), arr); if (finalAnswer.isCodeEquals(MessageEventEnum.DATA_OPERATION_OK.getCode())) { /** Adding Log entry. */ logEventService.createPrivateCalls( "/CreateTestBattery", "Create", "Create Test battery : " + te.getTestbattery(), request); } } } } /** Formating and returning the json result. */ jsonResponse.put("messageType", finalAnswer.getResultMessage().getMessage().getCodeString()); jsonResponse.put("message", finalAnswer.getResultMessage().getDescription()); response.getWriter().print(jsonResponse); response.getWriter().flush(); }
@Override public AnswerList readDistinctValuesByCriteria( String searchTerm, Map<String, List<String>> individualSearch, String columnName) { AnswerList answer = new AnswerList(); MessageEvent msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_ERROR_UNEXPECTED); msg.setDescription(msg.getDescription().replace("%DESCRIPTION%", "")); List<String> distinctValues = new ArrayList<>(); StringBuilder searchSQL = new StringBuilder(); List<String> individalColumnSearchValues = new ArrayList<String>(); StringBuilder query = new StringBuilder(); query.append("SELECT distinct sol."); query.append(columnName); query.append(" as distinctValues FROM soaplibrary sol"); query.append(" where 1=1"); if (!StringUtil.isNullOrEmpty(searchTerm)) { searchSQL.append(" and (sol.Name like ?"); searchSQL.append(" or sol.Type like ?"); searchSQL.append(" or sol.ServicePath like ?"); searchSQL.append(" or sol.Method like ?"); searchSQL.append(" or sol.ParsingAnswer like ?"); searchSQL.append(" or sol.Description like ?"); searchSQL.append(" or sol.Envelope like ?)"); } if (individualSearch != null && !individualSearch.isEmpty()) { searchSQL.append(" and ( 1=1 "); for (Map.Entry<String, List<String>> entry : individualSearch.entrySet()) { searchSQL.append(" and sol."); searchSQL.append( SqlUtil.getInSQLClauseForPreparedStatement(entry.getKey(), entry.getValue())); individalColumnSearchValues.addAll(entry.getValue()); } searchSQL.append(" )"); } query.append(searchSQL); query.append(" group by ifnull(sol.").append(columnName).append(",'')"); query.append(" order by sol.").append(columnName).append(" asc"); // Debug message on SQL. if (LOG.isDebugEnabled()) { LOG.debug("SQL : " + query.toString()); } try (Connection connection = databaseSpring.connect(); PreparedStatement preStat = connection.prepareStatement(query.toString())) { int i = 1; if (!StringUtil.isNullOrEmpty(searchTerm)) { preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); } for (String individualColumnSearchValue : individalColumnSearchValues) { preStat.setString(i++, individualColumnSearchValue); } ResultSet resultSet = preStat.executeQuery(); // gets the data while (resultSet.next()) { distinctValues.add( resultSet.getString("distinctValues") == null ? "" : resultSet.getString("distinctValues")); } // get the total number of rows resultSet = preStat.executeQuery("SELECT FOUND_ROWS()"); int nrTotalRows = 0; if (resultSet != null && resultSet.next()) { nrTotalRows = resultSet.getInt(1); } if (distinctValues.size() >= MAX_ROW_SELECTED) { // Result of SQl was limited by MAX_ROW_SELECTED constrain. That // means that we may miss some lines in the resultList. LOG.error("Partial Result in the query."); msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_WARNING_PARTIAL_RESULT); msg.setDescription( msg.getDescription() .replace("%DESCRIPTION%", "Maximum row reached : " + MAX_ROW_SELECTED)); answer = new AnswerList(distinctValues, nrTotalRows); } else if (distinctValues.size() <= 0) { msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_NO_DATA_FOUND); answer = new AnswerList(distinctValues, nrTotalRows); } else { msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_OK); msg.setDescription( msg.getDescription().replace("%ITEM%", OBJECT_NAME).replace("%OPERATION%", "SELECT")); answer = new AnswerList(distinctValues, nrTotalRows); } } catch (Exception e) { LOG.warn("Unable to execute query : " + e.toString()); msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_ERROR_UNEXPECTED) .resolveDescription("DESCRIPTION", e.toString()); } finally { // We always set the result message answer.setResultMessage(msg); } answer.setResultMessage(msg); answer.setDataList(distinctValues); return answer; }
@Override public AnswerList readByVariousByCriteria( String system, String country, String environment, int start, int amount, String column, String dir, String searchTerm, String individualSearch) { AnswerList response = new AnswerList(); MessageEvent msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_ERROR_UNEXPECTED); msg.setDescription(msg.getDescription().replace("%DESCRIPTION%", "")); List<BuildRevisionBatch> resultList = new ArrayList<BuildRevisionBatch>(); StringBuilder searchSQL = new StringBuilder(); StringBuilder query = new StringBuilder(); // SQL_CALC_FOUND_ROWS allows to retrieve the total number of columns by disrearding the limit // clauses that // were applied -- used for pagination p query.append("SELECT SQL_CALC_FOUND_ROWS * FROM buildrevisionbatch "); searchSQL.append(" where 1=1 "); if (!StringUtil.isNullOrEmpty(searchTerm)) { searchSQL.append(" and (`id` like ?"); searchSQL.append(" or `system` like ?"); searchSQL.append(" or `Country` like ?"); searchSQL.append(" or `Environment` like ?"); searchSQL.append(" or `Build` like ?"); searchSQL.append(" or `Revision` like ?"); searchSQL.append(" or `Batch` like ?"); searchSQL.append(" or `DateBatch` like ?)"); } if (!StringUtil.isNullOrEmpty(individualSearch)) { searchSQL.append(" and ( ? )"); } if (!StringUtil.isNullOrEmpty(system)) { searchSQL.append(" and (`system` = ?)"); } if (!StringUtil.isNullOrEmpty(country)) { searchSQL.append(" and (`country` = ?)"); } if (!StringUtil.isNullOrEmpty(environment)) { searchSQL.append(" and (`environment` = ?)"); } query.append(searchSQL); if (!StringUtil.isNullOrEmpty(column)) { query.append(" order by `").append(column).append("` ").append(dir); } if ((amount <= 0) || (amount >= MAX_ROW_SELECTED)) { query.append(" limit ").append(start).append(" , ").append(MAX_ROW_SELECTED); } else { query.append(" limit ").append(start).append(" , ").append(amount); } // Debug message on SQL. if (LOG.isDebugEnabled()) { LOG.debug("SQL : " + query.toString()); } Connection connection = this.databaseSpring.connect(); try { PreparedStatement preStat = connection.prepareStatement(query.toString()); try { int i = 1; if (!Strings.isNullOrEmpty(searchTerm)) { preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); } if (!StringUtil.isNullOrEmpty(individualSearch)) { preStat.setString(i++, individualSearch); } if (!StringUtil.isNullOrEmpty(system)) { preStat.setString(i++, system); } if (!StringUtil.isNullOrEmpty(country)) { preStat.setString(i++, country); } if (!StringUtil.isNullOrEmpty(environment)) { preStat.setString(i++, environment); } ResultSet resultSet = preStat.executeQuery(); try { // gets the data while (resultSet.next()) { resultList.add(this.loadFromResultSet(resultSet)); } // get the total number of rows resultSet = preStat.executeQuery("SELECT FOUND_ROWS()"); int nrTotalRows = 0; if (resultSet != null && resultSet.next()) { nrTotalRows = resultSet.getInt(1); } if (resultList.size() >= MAX_ROW_SELECTED) { // Result of SQl was limited by MAX_ROW_SELECTED constrain. // That means that we may miss some lines in the resultList. LOG.error("Partial Result in the query."); msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_WARNING_PARTIAL_RESULT); msg.setDescription( msg.getDescription() .replace("%DESCRIPTION%", "Maximum row reached : " + MAX_ROW_SELECTED)); response = new AnswerList(resultList, nrTotalRows); } else if (resultList.size() <= 0) { msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_NO_DATA_FOUND); response = new AnswerList(resultList, nrTotalRows); } else { msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_OK); msg.setDescription( msg.getDescription() .replace("%ITEM%", OBJECT_NAME) .replace("%OPERATION%", "SELECT")); response = new AnswerList(resultList, nrTotalRows); } } catch (SQLException exception) { LOG.error("Unable to execute query : " + exception.toString()); msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_ERROR_UNEXPECTED); msg.setDescription( msg.getDescription() .replace("%DESCRIPTION%", "Unable to retrieve the list of entries!")); } finally { if (resultSet != null) { resultSet.close(); } } } catch (SQLException exception) { LOG.error("Unable to execute query : " + exception.toString()); msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_ERROR_UNEXPECTED); msg.setDescription( msg.getDescription() .replace("%DESCRIPTION%", "Unable to retrieve the list of entries!")); } finally { if (preStat != null) { preStat.close(); } } } catch (SQLException exception) { LOG.error("Unable to execute query : " + exception.toString()); msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_ERROR_UNEXPECTED); msg.setDescription( msg.getDescription().replace("%DESCRIPTION%", "Unable to retrieve the list of entries!")); } finally { try { if (!this.databaseSpring.isOnTransaction()) { if (connection != null) { connection.close(); } } } catch (SQLException exception) { LOG.error("Unable to close connection : " + exception.toString()); } } response.setResultMessage(msg); response.setDataList(resultList); return response; }
@Override public AnswerList readByCriteria( int start, int amount, String column, String dir, String searchTerm, Map<String, List<String>> individualSearch) { AnswerList response = new AnswerList(); MessageEvent msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_ERROR_UNEXPECTED); msg.setDescription(msg.getDescription().replace("%DESCRIPTION%", "")); List<SoapLibrary> objectList = new ArrayList<SoapLibrary>(); StringBuilder searchSQL = new StringBuilder(); List<String> individalColumnSearchValues = new ArrayList<String>(); StringBuilder query = new StringBuilder(); // SQL_CALC_FOUND_ROWS allows to retrieve the total number of columns by disrearding the limit // clauses that // were applied -- used for pagination p query.append("SELECT SQL_CALC_FOUND_ROWS * FROM soaplibrary sol "); query.append(" WHERE 1=1"); if (!StringUtil.isNullOrEmpty(searchTerm)) { searchSQL.append(" and (sol.Name like ?"); searchSQL.append(" or sol.Type like ?"); searchSQL.append(" or sol.ServicePath like ?"); searchSQL.append(" or sol.Method like ?"); searchSQL.append(" or sol.ParsingAnswer like ?"); searchSQL.append(" or sol.Description like ?"); searchSQL.append(" or sol.Envelope like ?)"); } if (individualSearch != null && !individualSearch.isEmpty()) { searchSQL.append(" and ( 1=1 "); for (Map.Entry<String, List<String>> entry : individualSearch.entrySet()) { searchSQL.append(" and "); String key = "IFNULL(sol." + entry.getKey() + ",'')"; String q = SqlUtil.getInSQLClauseForPreparedStatement(key, entry.getValue()); if (q == null || q == "") { q = "(sol." + entry.getKey() + " IS NULL OR " + entry.getKey() + " = '')"; } searchSQL.append(q); individalColumnSearchValues.addAll(entry.getValue()); } searchSQL.append(" )"); } query.append(searchSQL); if (!StringUtil.isNullOrEmpty(column)) { query.append(" order by sol.").append(column).append(" ").append(dir); } if ((amount <= 0) || (amount >= MAX_ROW_SELECTED)) { query.append(" limit ").append(start).append(" , ").append(MAX_ROW_SELECTED); } else { query.append(" limit ").append(start).append(" , ").append(amount); } // Debug message on SQL. if (LOG.isDebugEnabled()) { LOG.debug("SQL : " + query.toString()); } Connection connection = this.databaseSpring.connect(); try { PreparedStatement preStat = connection.prepareStatement(query.toString()); try { int i = 1; if (!StringUtil.isNullOrEmpty(searchTerm)) { preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); preStat.setString(i++, "%" + searchTerm + "%"); } for (String individualColumnSearchValue : individalColumnSearchValues) { preStat.setString(i++, individualColumnSearchValue); } ResultSet resultSet = preStat.executeQuery(); try { // gets the data while (resultSet.next()) { objectList.add(this.loadFromResultSet(resultSet)); } // get the total number of rows resultSet = preStat.executeQuery("SELECT FOUND_ROWS()"); int nrTotalRows = 0; if (resultSet != null && resultSet.next()) { nrTotalRows = resultSet.getInt(1); } if (objectList.size() >= MAX_ROW_SELECTED) { // Result of SQl was limited by MAX_ROW_SELECTED constrain. // That means that we may miss some lines in the resultList. LOG.error("Partial Result in the query."); msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_WARNING_PARTIAL_RESULT); msg.setDescription( msg.getDescription() .replace("%DESCRIPTION%", "Maximum row reached : " + MAX_ROW_SELECTED)); response = new AnswerList(objectList, nrTotalRows); } else if (objectList.size() <= 0) { msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_NO_DATA_FOUND); response = new AnswerList(objectList, nrTotalRows); } else { msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_OK); msg.setDescription( msg.getDescription() .replace("%ITEM%", OBJECT_NAME) .replace("%OPERATION%", "SELECT")); response = new AnswerList(objectList, nrTotalRows); } } catch (SQLException exception) { LOG.error("Unable to execute query : " + exception.toString()); msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_ERROR_UNEXPECTED); msg.setDescription(msg.getDescription().replace("%DESCRIPTION%", exception.toString())); } finally { if (resultSet != null) { resultSet.close(); } } } catch (SQLException exception) { LOG.error("Unable to execute query : " + exception.toString()); msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_ERROR_UNEXPECTED); msg.setDescription(msg.getDescription().replace("%DESCRIPTION%", exception.toString())); } finally { if (preStat != null) { preStat.close(); } } } catch (SQLException exception) { LOG.error("Unable to execute query : " + exception.toString()); msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_ERROR_UNEXPECTED); msg.setDescription(msg.getDescription().replace("%DESCRIPTION%", exception.toString())); } finally { try { if (!this.databaseSpring.isOnTransaction()) { if (connection != null) { connection.close(); } } } catch (SQLException exception) { LOG.warn("Unable to close connection : " + exception.toString()); } } response.setResultMessage(msg); response.setDataList(objectList); return response; }
/** * Processes requests for both HTTP <code>GET</code> and <code>POST</code> methods. * * @param request servlet request * @param response servlet response * @throws ServletException if a servlet-specific error occurs * @throws IOException if an I/O error occurs */ protected void processRequest(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException, CerberusException, JSONException { JSONObject jsonResponse = new JSONObject(); Answer ans = new Answer(); MessageEvent msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_ERROR_UNEXPECTED); msg.setDescription(msg.getDescription().replace("%DESCRIPTION%", "")); ans.setResultMessage(msg); PolicyFactory policy = Sanitizers.FORMATTING.and(Sanitizers.LINKS); response.setContentType("application/json"); /** Parsing and securing all required parameters. */ String robot = policy.sanitize(request.getParameter("robot")); String host = policy.sanitize(request.getParameter("host")); String port = policy.sanitize(request.getParameter("port")); String platform = policy.sanitize(request.getParameter("platform")); String browser = policy.sanitize(request.getParameter("browser")); String version = policy.sanitize(request.getParameter("version")); String active = policy.sanitize(request.getParameter("active")); String description = policy.sanitize(request.getParameter("description")); String userAgent = policy.sanitize(request.getParameter("useragent")); Integer robotid = 0; boolean robotid_error = true; try { if (request.getParameter("robotid") != null && !request.getParameter("robotid").equals("")) { robotid = Integer.valueOf(policy.sanitize(request.getParameter("robotid"))); robotid_error = false; } } catch (Exception ex) { robotid_error = true; } /** Checking all constrains before calling the services. */ if (StringUtil.isNullOrEmpty(robot)) { msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_ERROR_EXPECTED); msg.setDescription( msg.getDescription() .replace("%ITEM%", "Robot") .replace("%OPERATION%", "Update") .replace("%REASON%", "Robot name is missing.")); ans.setResultMessage(msg); } else if (robotid_error) { msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_ERROR_EXPECTED); msg.setDescription( msg.getDescription() .replace("%ITEM%", "Robot") .replace("%OPERATION%", "Update") .replace( "%REASON%", "Could not manage to convert robotid to an integer value or robotid is missing.")); ans.setResultMessage(msg); } else { /** All data seems cleans so we can call the services. */ ApplicationContext appContext = WebApplicationContextUtils.getWebApplicationContext(this.getServletContext()); IRobotService robotService = appContext.getBean(IRobotService.class); AnswerItem resp = robotService.readByKeyTech(robotid); if (!(resp.isCodeEquals(MessageEventEnum.DATA_OPERATION_OK.getCode()))) { /** Object could not be found. We stop here and report the error. */ msg = new MessageEvent(MessageEventEnum.DATA_OPERATION_ERROR_EXPECTED); msg.setDescription( msg.getDescription() .replace("%ITEM%", "Robot") .replace("%OPERATION%", "Update") .replace("%REASON%", "Robot does not exist.")); ans.setResultMessage(msg); } else { /** * The service was able to perform the query and confirm the object exist, then we can * update it. */ Robot robotData = (Robot) resp.getItem(); robotData.setRobot(robot); robotData.setHost(host); robotData.setPort(port); robotData.setPlatform(platform); robotData.setBrowser(browser); robotData.setVersion(version); robotData.setActive(active); robotData.setDescription(description); robotData.setUserAgent(userAgent); ans = robotService.update(robotData); if (ans.isCodeEquals(MessageEventEnum.DATA_OPERATION_OK.getCode())) { /** Update was succesfull. Adding Log entry. */ ILogEventService logEventService = appContext.getBean(LogEventService.class); logEventService.createPrivateCalls( "/UpdateRobot", "UPDATE", "Updated Robot : ['" + robotid + "'|'" + robot + "']", request); } } } /** Formating and returning the json result. */ jsonResponse.put("messageType", ans.getResultMessage().getMessage().getCodeString()); jsonResponse.put("message", ans.getResultMessage().getDescription()); response.getWriter().print(jsonResponse); response.getWriter().flush(); }