package org.cacert.gigi.util;
-import java.sql.PreparedStatement;
-import java.sql.ResultSet;
-import java.sql.SQLException;
import java.text.ParseException;
+import java.util.Calendar;
import java.util.Date;
+import java.util.GregorianCalendar;
import org.cacert.gigi.GigiApiException;
-import org.cacert.gigi.database.DatabaseConnection;
+import org.cacert.gigi.database.GigiPreparedStatement;
+import org.cacert.gigi.database.GigiResultSet;
+import org.cacert.gigi.dbObjects.Group;
import org.cacert.gigi.dbObjects.Name;
import org.cacert.gigi.dbObjects.User;
import org.cacert.gigi.output.DateSelector;
public class Notary {
- public static void writeUserAgreement(int memid, String document, String method, String comment, boolean active, int secmemid) throws SQLException {
- PreparedStatement q = DatabaseConnection.getInstance().prepare("insert into `user_agreements` set `memid`=?, `secmemid`=?," + " `document`=?,`date`=NOW(), `active`=?,`method`=?,`comment`=?");
- q.setInt(1, memid);
- q.setInt(2, secmemid);
- q.setString(3, document);
- q.setInt(4, active ? 1 : 0);
- q.setString(5, method);
- q.setString(6, comment);
- q.execute();
+ public static void writeUserAgreement(User member, String document, String method, String comment, boolean active, int secmemid) {
+ try (GigiPreparedStatement q = new GigiPreparedStatement("INSERT INTO `user_agreements` SET `memid`=?, `secmemid`=?," + " `document`=?,`date`=NOW(), `active`=?,`method`=?,`comment`=?")) {
+ q.setInt(1, member.getId());
+ q.setInt(2, secmemid);
+ q.setString(3, document);
+ q.setBoolean(4, active);
+ q.setString(5, method);
+ q.setString(6, comment);
+ q.execute();
+ }
}
public static void checkAssuranceIsPossible(User assurer, User target) throws GigiApiException {
if (assurer.getId() == target.getId()) {
throw new GigiApiException("You cannot assure yourself.");
}
- try {
- PreparedStatement ps = DatabaseConnection.getInstance().prepare("SELECT 1 FROM `notary` where `to`=? and `from`=? AND `deleted`=0");
+ try (GigiPreparedStatement ps = new GigiPreparedStatement("SELECT 1 FROM `notary` where `to`=? and `from`=? AND `deleted` IS NULL")) {
ps.setInt(1, target.getId());
ps.setInt(2, assurer.getId());
- ResultSet rs = ps.executeQuery();
+ GigiResultSet rs = ps.executeQuery();
if (rs.next()) {
rs.close();
throw new GigiApiException("You have already assured this member.");
}
- rs.close();
- if ( !assurer.canAssure()) {
- throw new GigiApiException("You are not an assurer.");
- }
- } catch (SQLException e) {
- throw new GigiApiException(e);
+ }
+ if ( !assurer.canAssure()) {
+ throw new GigiApiException("You are not an assurer.");
}
}
+ public static final Group ASSURER_BLOCKED = Group.getByString("blockedassurer");
+
+ public static final Group ASSUREE_BLOCKED = Group.getByString("blockedassuree");
+
/**
* This method assures another user.
*
* the location where the assurance took place
* @param date
* the date when the assurance took place
- * @throws SQLException
- * if SQL goes wrong
* @throws GigiApiException
* if the assurance fails (for various reasons)
*/
- public synchronized static void assure(User assurer, User assuree, Name assureeName, Date dob, int awarded, String location, String date) throws SQLException, GigiApiException {
+ public synchronized static void assure(User assurer, User assuree, Name assureeName, Date dob, int awarded, String location, String date) throws GigiApiException {
GigiApiException gae = new GigiApiException();
-
+ if (assuree.isInGroup(ASSUREE_BLOCKED)) {
+ gae.mergeInto(new GigiApiException("The assuree is blocked."));
+ }
+ if (assurer.isInGroup(ASSURER_BLOCKED)) {
+ gae.mergeInto(new GigiApiException("The assurer is blocked."));
+ }
+ if ( !gae.isEmpty()) {
+ throw gae;
+ }
if (date == null || date.equals("")) {
gae.mergeInto(new GigiApiException("You must enter the date when you met the assuree."));
} else {
try {
Date d = DateSelector.getDateFormat().parse(date);
- if (d.getTime() > System.currentTimeMillis()) {
+ Calendar gc = GregorianCalendar.getInstance();
+ gc.setTimeInMillis(System.currentTimeMillis());
+ gc.add(Calendar.HOUR_OF_DAY, 12);
+ if (d.getTime() > gc.getTimeInMillis()) {
gae.mergeInto(new GigiApiException("You must not enter a date in the future."));
}
} catch (ParseException e) {
gae.mergeInto(e);
}
- if ( !assuree.getName().equals(assureeName) || !assuree.getDob().equals(dob)) {
+ if ( !assuree.getName().equals(assureeName) || !assuree.getDoB().equals(dob)) {
gae.mergeInto(new GigiApiException("The person you are assuring changed his personal details."));
}
if (awarded > assurer.getMaxAssurePoints() || awarded < 0) {
throw gae;
}
- PreparedStatement ps = DatabaseConnection.getInstance().prepare("INSERT INTO `notary` SET `from`=?, `to`=?, `points`=?, `location`=?, `date`=?");
- ps.setInt(1, assurer.getId());
- ps.setInt(2, assuree.getId());
- ps.setInt(3, awarded);
- ps.setString(4, location);
- ps.setString(5, date);
- ps.execute();
+ try (GigiPreparedStatement ps = new GigiPreparedStatement("INSERT INTO `notary` SET `from`=?, `to`=?, `points`=?, `location`=?, `date`=?")) {
+ ps.setInt(1, assurer.getId());
+ ps.setInt(2, assuree.getId());
+ ps.setInt(3, awarded);
+ ps.setString(4, location);
+ ps.setString(5, date);
+ ps.execute();
+ }
assurer.invalidateMadeAssurances();
assuree.invalidateReceivedAssurances();
}