]> WPIA git - gigi.git/blob - src/org/cacert/gigi/pages/wot/AssuranceForm.java
Enforce Output of CSRF token.
[gigi.git] / src / org / cacert / gigi / pages / wot / AssuranceForm.java
1 package org.cacert.gigi.pages.wot;
2
3 import java.io.InputStreamReader;
4 import java.io.PrintWriter;
5 import java.sql.SQLException;
6 import java.text.ParseException;
7 import java.text.SimpleDateFormat;
8 import java.util.Date;
9 import java.util.HashMap;
10 import java.util.Map;
11
12 import javax.servlet.http.HttpServletRequest;
13
14 import org.cacert.gigi.Language;
15 import org.cacert.gigi.User;
16 import org.cacert.gigi.output.Form;
17 import org.cacert.gigi.output.Template;
18 import org.cacert.gigi.pages.LoginPage;
19 import org.cacert.gigi.util.Notary;
20
21 public class AssuranceForm extends Form {
22         User assuree;
23         static final Template templ;
24         static {
25                 templ = new Template(new InputStreamReader(
26                                 AssuranceForm.class.getResourceAsStream("AssuranceForm.templ")));
27         }
28
29         public AssuranceForm(int assuree) {
30                 this.assuree = new User(assuree);
31         }
32         SimpleDateFormat sdf = new SimpleDateFormat("yyyy-MM-dd");
33
34         @Override
35         public void outputContent(PrintWriter out, Language l,
36                         Map<String, Object> vars) {
37                 HashMap<String, Object> res = new HashMap<String, Object>();
38                 res.putAll(vars);
39                 res.put("name", assuree.getName());
40                 try {
41                         res.put("maxpoints", assuree.getMaxAssurePoints());
42                 } catch (SQLException e) {
43                         e.printStackTrace();
44                 }
45                 res.put("dob", sdf.format(assuree.getDob()));
46                 templ.output(out, l, res);
47         }
48
49         @Override
50         public boolean submit(PrintWriter out, HttpServletRequest req) {
51                 out.println("<div class='formError'>");
52                 boolean failed = false;
53
54                 if (!"1".equals(req.getParameter("certify"))
55                                 || !"1".equals(req.getParameter("rules"))
56                                 || !"1".equals(req.getParameter("CCAAgreed"))
57                                 || !"1".equals(req.getParameter("assertion"))) {
58                         outputError(out, req, "You failed to check all boxes to validate"
59                                         + " your adherence to the rules and policies of CAcert");
60                         failed = true;
61
62                 }
63                 if (req.getParameter("date") == null
64                                 || req.getParameter("date").equals("")) {
65                         outputError(out, req,
66                                         "You must enter the date when you met the assuree.");
67                         failed = true;
68                 } else {
69                         try {
70                                 Date d = sdf.parse(req.getParameter("date"));
71                                 if (d.getTime() > System.currentTimeMillis()) {
72                                         outputError(out, req,
73                                                         "You must not enter a date in the future.");
74                                         failed = true;
75                                 }
76                         } catch (ParseException e) {
77                                 outputError(out, req,
78                                                 "You must enter the date in this format: YYYY-MM-DD.");
79                                 failed = true;
80                         }
81                 }
82                 // check location, min 3 characters
83                 if (req.getParameter("location") == null
84                                 || req.getParameter("location").equals("")) {
85                         outputError(out, req,
86                                         "You failed to enter a location of your meeting.");
87                         failed = true;
88                 } else if (req.getParameter("location").length() <= 2) {
89                         outputError(out, req,
90                                         "You must enter a location with at least 3 characters eg town and country.");
91                         failed = true;
92                 }
93                 // TODO checkPoints
94                 String points = req.getParameter("points");
95                 if (points == null || "".equals(points)) {
96                         // TODO message
97                         failed = true;
98                 }
99                 if (failed) {
100                         out.println("</div>");
101                         return false;
102                 }
103                 try {
104                         boolean success = Notary.assure(LoginPage.getUser(req), assuree,
105                                         Integer.parseInt(req.getParameter("points")),
106                                         req.getParameter("location"), req.getParameter("date"));
107                         if (!success) {
108                                 outputError(out, req,
109                                                 "Assurance failed. Maybe user data changed.");
110                         }
111                         out.println("</div>");
112                         return success;
113                 } catch (SQLException e) {
114                         e.printStackTrace();
115                 }
116
117                 out.println("</div>");
118                 return false;
119         }
120 }