/** Create local connection */
public Connection getConn() throws Exception {
Connection c = dataSource.getConnection();
c.setAutoCommit(false);
return c;
}
public void _jspService(HttpServletRequest request, HttpServletResponse response)
throws java.io.IOException, ServletException {
PageContext pageContext = null;
HttpSession session = null;
ServletContext application = null;
ServletConfig config = null;
JspWriter out = null;
Object page = this;
JspWriter _jspx_out = null;
PageContext _jspx_page_context = null;
try {
response.setContentType("text/html");
pageContext = _jspxFactory.getPageContext(this, request, response, null, true, 8192, true);
_jspx_page_context = pageContext;
application = pageContext.getServletContext();
config = pageContext.getServletConfig();
session = pageContext.getSession();
out = pageContext.getOut();
_jspx_out = out;
out.write("\n");
out.write("\n");
out.write("\n");
out.write("\n");
out.write("\n");
out.write("<!--%@ page errorPage=\"/error.jsp\" %-->\n");
response.setHeader("Pragma", "no-cache"); // HTTP 1.0
response.setDateHeader("Expires", 0);
response.setHeader("Cache-Control", "no-cache"); // HTTP 1.1
String _adminid = "";
String _adminname = "";
String _admintype = "";
String _admingroup = "";
String _approval = "";
String _adminclass = "";
String _adminmail = "";
try {
_adminid = (String) session.getAttribute("adminid");
if (_adminid == null || _adminid.length() == 0 || _adminid.equals("null")) {
response.sendRedirect("/admin/login_first.html");
return;
}
_adminname = (String) session.getAttribute("adminname");
_admintype = (String) session.getAttribute("admintype");
_admingroup = (String) session.getAttribute("admingroup");
_approval = (String) session.getAttribute("approval");
_adminclass = (String) session.getAttribute("adminclass");
_adminmail = (String) session.getAttribute("admin_email");
// session.setMaxInactiveInterval(60*60);
} catch (Exception e) {
response.sendRedirect("/admin/login_first.html");
return;
}
out.write('\n');
out.write('\n');
out.write('\n');
String password = request.getParameter("password");
String fromURL = request.getParameter("fromURL");
String oldPassword = "";
String sql = "";
int iCnt = 0;
boolean isSucceeded = false;
String strMsg = "";
Connection conn = null;
MatrixDataSet matrix = null;
DataProcess dataProcess = null;
PreparedStatement pstmt = null;
String targetUrl = "";
try {
if (password.equals("1111")) {
throw new UserDefinedException(
"The new password is not acceptable. Change your password.");
}
Context ic = new InitialContext();
DataSource ds = (DataSource) ic.lookup("java:comp/env/jdbc/scm");
conn = ds.getConnection();
matrix = new dbconn.MatrixDataSet();
dataProcess = new DataProcess();
sql =
" select password " + " from admin_01t " + " where adminid = '" + _adminid + "' ";
iCnt = dataProcess.RetrieveData(sql, matrix, conn);
if (iCnt > 0) {
oldPassword = matrix.getRowData(0).getData(0);
} else {
throw new UserDefinedException("Can't find User Information.");
}
if (password.equals(oldPassword)) {
throw new UserDefinedException(
"The new password is not acceptable. Change your password.");
}
// update ó¸®...
int idx = 0;
conn.setAutoCommit(false);
sql =
" update admin_01t "
+ " set password = ?, pw_date = sysdate() "
+ " where adminid = ? ";
pstmt = conn.prepareStatement(sql);
pstmt.setString(++idx, password);
pstmt.setString(++idx, _adminid);
iCnt = pstmt.executeUpdate();
if (iCnt != 1) {
throw new UserDefinedException("Password update failed.");
}
conn.commit();
isSucceeded = true;
} catch (UserDefinedException ue) {
try {
conn.rollback();
} catch (Exception ex) {
}
strMsg = ue.getMessage();
} catch (Exception e) {
try {
conn.rollback();
} catch (Exception ex) {
}
System.out.println("Exception /admin/resetAdminPasswd : " + e.getMessage());
throw e;
} finally {
if (pstmt != null) {
try {
pstmt.close();
} catch (Exception e) {
}
}
if (conn != null) {
try {
conn.setAutoCommit(true);
} catch (Exception e) {
}
conn.close();
}
}
// °á°ú ¸Þ½ÃÁö ó¸®
if (isSucceeded) {
// where to go?
if (fromURL.equals("menu")) {
targetUrl = "";
} else {
targetUrl = "/admin/index2.jsp";
}
strMsg = "The data are successfully processed.";
} else {
strMsg = "The operation failed.\\n" + strMsg;
targetUrl = "/admin/resetAdminPasswdForm.jsp";
}
out.write("\n");
out.write("<html>\n");
out.write("<head>\n");
out.write("<title></title>\n");
out.write("<link href=\"/common/css/style.css\" rel=\"stylesheet\" type=\"text/css\">\n");
out.write("</head>\n");
out.write("<body leftmargin='0' topmargin='0' marginwidth='0' marginheight='0'>\n");
out.write("<form name=\"form1\" method=\"post\" action=\"");
out.print(targetUrl);
out.write("\">\n");
out.write("<input type='hidden' name='fromURL' value='");
out.print(fromURL);
out.write("'>\n");
out.write("</form>\n");
out.write("<script language=\"javascript\">\n");
if (targetUrl.length() > 0) {
out.write("\n");
out.write(" alert('");
out.print(strMsg);
out.write("');\n");
out.write(" document.form1.submit();\n");
}
out.write("\n");
out.write("</script>\n");
out.write("<table width='840' border='0' cellspacing='0' cellpadding='0'><tr><td>\n");
out.write("\n");
out.write("<table width='99%' border='0' cellspacing='0' cellpadding='0'>\n");
out.write("<tr>\n");
out.write(" <td height='15' colspan='2'></td>\n");
out.write("</tr>\n");
out.write("<tr>\n");
out.write(" <td width='3%'><img src='/img/title_icon.gif'></td>\n");
out.write(" <td width='*' class='left_title'>Password Change</td>\n");
out.write("</tr>\n");
out.write("<tr>\n");
out.write(" <td width='100%' height='2' colspan='2'><hr width='100%'></td>\n");
out.write("</tr>\n");
out.write("<tr>\n");
out.write(" <td height='10' colspan='2'></td>\n");
out.write("</tr>\n");
out.write("</table>\n");
out.write("\n");
out.write("<table width='90%' border='0' cellspacing='0' cellpadding='0' align='center'>\n");
out.write("<tr>\n");
out.write(" <td width='100%' align='center'><img border=\"0\" src=\"/img/pass.jpg\">\n");
out.write(" <br><br>\n");
out.write(" <b>The Password has been changed successfully.</b></td>\n");
out.write("</tr>\n");
out.write("</table>\n");
out.println(CopyRightLogo());
out.write("\n");
out.write("</tr></td></table>\n");
out.write("</body>\n");
out.write("</html>");
} catch (Throwable t) {
if (!(t instanceof SkipPageException)) {
out = _jspx_out;
if (out != null && out.getBufferSize() != 0)
try {
out.clearBuffer();
} catch (java.io.IOException e) {
}
if (_jspx_page_context != null) _jspx_page_context.handlePageException(t);
}
} finally {
_jspxFactory.releasePageContext(_jspx_page_context);
}
}
/** moves data into certain tables to simulate the buying process */
private boolean buy(booksTable book, User buyer, Connection con) throws SQLException {
try {
Statement st = con.createStatement();
/*all parameters are considered to be full--
*book is completed and so as buyer object
*/
con.setAutoCommit(false);
// 1st add purchase to buyers table
st.addBatch(
"INSERT INTO "
+ TABLEBUYERS
+ " ("
+ buyersTable.BOOKID
+ ","
+ buyersTable.BUYERID
+ ","
+ buyersTable.DATE
+ ") values (\""
+ book.getID()
+ "\",\""
+ buyer.getID()
+ "\",\""
+ new DateObject().getDate()
+ "\")");
// 2nd add the book to old books
String[] oldbooksFields = {
oldBooksTable.SELLERID, oldBooksTable.BUYERID,
oldBooksTable.BOOKID, oldBooksTable.TITLE,
oldBooksTable.AUTHOR, oldBooksTable.ISBN,
oldBooksTable.CONDITION, oldBooksTable.PRICE,
oldBooksTable.COMMENT, oldBooksTable.COLLEGE,
oldBooksTable.DATE
};
String[] oldbooksValues = {
book.getSellerID(),
buyer.getID(),
book.getID(),
book.getTitle(),
book.getAuthor(),
book.getISBN(),
book.getCondition() + "",
book.getPrice() + "",
book.getComment(),
book.getCollegeID() + "",
new DateObject().getDate()
};
st.addBatch(
"INSERT INTO "
+ TABLEOLDBOOKS
+ " ("
+ sqlUtils.sql_fields(oldbooksFields)
+ ") values ("
+ sqlUtils.sql_values(oldbooksValues)
+ ")");
// 3rd delete record from booksTable
st.addBatch(
"DELETE FROM " + TABLEBOOKS + " WHERE " + booksTable.ID + " = '" + book.getID() + "'");
// execute all 3 steps and set auto commit mode
int[] updateCounts = st.executeBatch();
if (updateCounts[0] == 1 && updateCounts[1] == 1 && updateCounts[2] == 1) {
return true;
} else {
return false;
}
} catch (SQLException e) {
log.writeException(e.getMessage());
throw e;
} finally {
con.setAutoCommit(true);
}
}