/*
* Juick
* Copyright (C) 2008-2011, Ugnich Anton
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see .
*/
package com.juick.server;
import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.sql.Statement;
import java.util.ArrayList;
import java.util.Random;
/**
*
* @author Ugnich Anton
*/
public class UserQueries {
static final String ABCDEF = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ";
public static int createUser(Connection sql, String username, String password, String lang) {
int uid = 0;
PreparedStatement stmt = null;
ResultSet rs = null;
try {
stmt = sql.prepareStatement("INSERT INTO users(nick,passw,lang) VALUES (?,?,?)", Statement.RETURN_GENERATED_KEYS);
stmt.setString(1, username);
stmt.setString(2, password);
stmt.setString(3, lang);
stmt.executeUpdate();
rs = stmt.getGeneratedKeys();
if (rs.first()) {
uid = rs.getInt(1);
}
} catch (SQLException e) {
System.err.println(e);
} finally {
Utils.finishSQL(rs, stmt);
}
PreparedStatement stmt2 = null;
try {
stmt2 = sql.prepareStatement("INSERT INTO useroptions(user_id) VALUES (?)");
stmt2.setInt(1, uid);
stmt2.executeUpdate();
} catch (SQLException e) {
System.err.println(e);
} finally {
Utils.finishSQL(null, stmt);
}
return uid;
}
public static com.juick.User getUserByNick(Connection sql, String username) {
com.juick.User user = null;
PreparedStatement stmt = null;
ResultSet rs = null;
try {
stmt = sql.prepareStatement("SELECT id,nick FROM users WHERE nick=?");
stmt.setString(1, username);
rs = stmt.executeQuery();
if (rs.first()) {
user = new com.juick.User();
user.UID = rs.getInt(1);
user.UName = rs.getString(2);
}
} catch (SQLException e) {
System.err.println(e);
} finally {
Utils.finishSQL(rs, stmt);
}
return user;
}
public static ArrayList getUsersByID(Connection sql, ArrayList uids) {
ArrayList users = new ArrayList();
PreparedStatement stmt = null;
ResultSet rs = null;
try {
stmt = sql.prepareStatement("SELECT id,nick FROM users WHERE id IN (" + Utils.convertArray2String(uids) + ")");
rs = stmt.executeQuery();
rs.beforeFirst();
while (rs.next()) {
com.juick.User u = new com.juick.User();
u.UID = rs.getInt(1);
u.UName = rs.getString(2);
users.add(u);
}
} catch (SQLException e) {
System.err.println(e);
} finally {
Utils.finishSQL(rs, stmt);
}
return users;
}
public static String getJIDbyUID(Connection sql, int uid) {
return SQLHelpers.getString(sql, "SELECT jid FROM jids WHERE user_id=? AND active=1", uid);
}
public static int getUIDbyJID(Connection sql, String jid) {
return SQLHelpers.getInt(sql, "SELECT user_id FROM jids WHERE jid=?", jid, 0);
}
public static int getUIDbyHash(Connection sql, String hash) {
return SQLHelpers.getInt(sql, "SELECT user_id FROM logins WHERE hash=?", hash, 0);
}
public static com.juick.User getUserByHash(Connection sql, String hash) {
com.juick.User user = null;
PreparedStatement stmt = null;
ResultSet rs = null;
try {
stmt = sql.prepareStatement("SELECT logins.user_id,users.nick FROM logins INNER JOIN users ON logins.user_id=users.id WHERE logins.hash=?");
stmt.setString(1, hash);
rs = stmt.executeQuery();
if (rs.first()) {
user = new com.juick.User();
user.UID = rs.getInt(1);
user.UName = rs.getString(2);
}
} catch (SQLException e) {
System.err.println(e);
} finally {
Utils.finishSQL(rs, stmt);
}
return user;
}
public static String getHashByUID(Connection sql, int uid) {
String hash = SQLHelpers.getString(sql, "SELECT hash FROM logins WHERE user_id=?", uid);
if (hash == null) {
hash = generateHash(16);
PreparedStatement stmt = null;
try {
stmt = sql.prepareStatement("INSERT INTO logins(user_id,hash) VALUES (?,?)");
stmt.setInt(1, uid);
stmt.setString(2, hash);
stmt.executeUpdate();
} catch (SQLException e) {
System.err.println(e);
} finally {
Utils.finishSQL(null, stmt);
}
}
return hash;
}
public static String generateHash(int len) {
Random rnd = new Random();
StringBuilder sb = new StringBuilder(len);
for (int i = 0; i < len; i++) {
sb.append(ABCDEF.charAt(rnd.nextInt(ABCDEF.length())));
}
return sb.toString();
}
public static boolean checkUserNameValid(String uname) {
return uname != null && uname.length() > 1 && uname.length() < 16 && uname.matches("[a-zA-Z0-9\\-\\.\\@]+");
}
public static int checkPassword(Connection sql, String username, String password) {
int uid = 0;
PreparedStatement stmt = null;
ResultSet rs = null;
try {
stmt = sql.prepareStatement("SELECT id,passw FROM users WHERE nick=?");
stmt.setString(1, username);
rs = stmt.executeQuery();
if (rs.first()) {
if (password.equals(rs.getString(2))) {
uid = rs.getInt(1);
} else {
uid = -1;
}
}
} catch (SQLException e) {
System.err.println(e);
} finally {
Utils.finishSQL(rs, stmt);
}
return uid;
}
public static int getUserOptionInt(Connection sql, int uid, String option, int defaultValue) {
int ret = defaultValue;
PreparedStatement stmt = null;
ResultSet rs = null;
try {
stmt = sql.prepareStatement("SELECT " + option + " FROM useroptions WHERE user_id=?");
stmt.setInt(1, uid);
rs = stmt.executeQuery();
if (rs.first()) {
ret = rs.getInt(1);
}
} catch (SQLException e) {
System.err.println(e);
} finally {
Utils.finishSQL(rs, stmt);
}
return ret;
}
public static void setUserOptionInt(Connection sql, int uid, String option, int value) {
PreparedStatement stmt = null;
try {
stmt = sql.prepareStatement("UPDATE useroptions SET " + option + "=? WHERE user_id=?");
stmt.setInt(1, value);
stmt.setInt(2, uid);
stmt.executeUpdate();
} catch (SQLException e) {
System.err.println(e);
} finally {
Utils.finishSQL(null, stmt);
}
}
public static boolean getCanMedia(Connection sql, int uid) {
boolean ret = false;
PreparedStatement stmt = null;
ResultSet rs = null;
try {
stmt = sql.prepareStatement("SELECT users.lastphoto-UNIX_TIMESTAMP() FROM users WHERE id=?");
stmt.setInt(1, uid);
rs = stmt.executeQuery();
if (rs.first()) {
ret = rs.getInt(1) < 3600;
}
} catch (SQLException e) {
System.err.println(e);
} finally {
Utils.finishSQL(rs, stmt);
}
return ret;
}
public static boolean isInWL(Connection sql, int uid, int check) {
boolean ret = false;
PreparedStatement stmt = null;
ResultSet rs = null;
try {
stmt = sql.prepareStatement("SELECT 1 FROM wl_users WHERE user_id=? AND wl_user_id=?");
stmt.setInt(1, uid);
stmt.setInt(2, check);
rs = stmt.executeQuery();
if (rs.first()) {
ret = rs.getInt(1) == 1;
}
} catch (SQLException e) {
System.err.println(e);
} finally {
Utils.finishSQL(rs, stmt);
}
return ret;
}
public static boolean isInBL(Connection sql, int uid, int check) {
boolean ret = false;
PreparedStatement stmt = null;
ResultSet rs = null;
try {
stmt = sql.prepareStatement("SELECT 1 FROM bl_users WHERE user_id=? AND bl_user_id=?");
stmt.setInt(1, uid);
stmt.setInt(2, check);
rs = stmt.executeQuery();
if (rs.first()) {
ret = rs.getInt(1) == 1;
}
} catch (SQLException e) {
System.err.println(e);
} finally {
Utils.finishSQL(rs, stmt);
}
return ret;
}
public static ArrayList checkBL(Connection sql, int visitor, ArrayList uids) {
ArrayList ret = new ArrayList();
PreparedStatement stmt = null;
ResultSet rs = null;
try {
stmt = sql.prepareStatement("SELECT user_id FROM bl_users WHERE bl_user_id=? and user_id IN (" + Utils.convertArray2String(uids) + ")");
stmt.setInt(1, visitor);
rs = stmt.executeQuery();
rs.beforeFirst();
while (rs.next()) {
ret.add(rs.getInt(1));
}
} catch (SQLException e) {
System.err.println(e);
} finally {
Utils.finishSQL(rs, stmt);
}
return ret;
}
public static boolean isSubscribed(Connection sql, int uid, int check) {
boolean ret = false;
PreparedStatement stmt = null;
ResultSet rs = null;
try {
stmt = sql.prepareStatement("SELECT 1 FROM subscr_users WHERE suser_id=? AND user_id=?");
stmt.setInt(1, uid);
stmt.setInt(2, check);
rs = stmt.executeQuery();
if (rs.first()) {
ret = rs.getInt(1) == 1;
}
} catch (SQLException e) {
System.err.println(e);
} finally {
Utils.finishSQL(rs, stmt);
}
return ret;
}
public static ArrayList getUserRead(Connection sql, int uid) {
return SQLHelpers.getArrayInteger(sql, "SELECT user_id FROM subscr_users WHERE suser_id=?", uid);
}
public static ArrayList getUserReaders(Connection sql, int uid) {
return SQLHelpers.getArrayInteger(sql, "SELECT suser_id FROM subscr_users WHERE user_id=?", uid);
}
public static int getStatsIRead(Connection sql, int uid) {
return SQLHelpers.getInt(sql, "SELECT COUNT(*) FROM subscr_users WHERE suser_id=?", uid, 0);
}
public static int getStatsMyReaders(Connection sql, int uid) {
return SQLHelpers.getInt(sql, "SELECT COUNT(*) FROM subscr_users WHERE user_id=?", uid, 0);
}
public static int getStatsMessages(Connection sql, int uid) {
return SQLHelpers.getInt(sql, "SELECT COUNT(*) FROM messages WHERE user_id=?", uid, 0);
}
public static int getStatsReplies(Connection sql, int uid) {
return SQLHelpers.getInt(sql, "SELECT COUNT(*) FROM replies WHERE user_id=?", uid, 0);
}
}