/* * Juick * Copyright (C) 2008-2011, Ugnich Anton * * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU Affero General Public License as * published by the Free Software Foundation, either version 3 of the * License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Affero General Public License for more details. * * You should have received a copy of the GNU Affero General Public License * along with this program. If not, see . */ package com.juick.api; import com.juick.server.UserQueries; import org.springframework.jdbc.core.JdbcTemplate; import javax.servlet.http.Cookie; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.Part; import java.io.FileOutputStream; import java.io.InputStream; import java.net.URL; import java.net.URLConnection; import java.sql.ResultSet; import java.sql.SQLException; import java.sql.Statement; import java.util.ArrayList; import java.util.Base64; import java.util.UUID; /** * * @author Ugnich Anton */ public class Utils { public static String getCookie(HttpServletRequest request, String name) { Cookie cookies[] = request.getCookies(); if (cookies != null) { for (int i = 0; i < cookies.length; i++) { if (cookies[i].getName().equals(name)) { return cookies[i].getValue(); } } } return null; } public static com.juick.User getVisitorUser(JdbcTemplate sql, HttpServletRequest request) { String hash = getCookie(request, "hash"); if (hash != null) { return com.juick.server.UserQueries.getUserByHash(sql, hash); } else { return null; } } public static int getVisitorUID(JdbcTemplate sql, HttpServletRequest request) { Cookie cookies[] = request.getCookies(); if (cookies != null) { for (int i = 0; i < cookies.length; i++) { if (cookies[i].getName().equals("hash")) { String hash = cookies[i].getValue(); return com.juick.server.UserQueries.getUIDbyHash(sql, hash); } } } return 0; } public static int getHttpAuthUID(JdbcTemplate sql, HttpServletRequest request) { String auth = request.getHeader("Authorization"); if (auth != null && auth.length() > 8 && auth.startsWith("Basic ")) { Base64.Decoder dec = Base64.getDecoder(); String loginpassw[] = new String(dec.decode(auth.substring(6))).split(":", 2); if (loginpassw.length == 2 && loginpassw[0].length() > 1 && loginpassw[0].length() < 16 && loginpassw[0].matches("[a-zA-Z0-9\\-]+") && !loginpassw[1].isEmpty()) { return UserQueries.checkPassword(sql, loginpassw[0], loginpassw[1]); } } return 0; } public static int getVisitorQueryStringUID(JdbcTemplate sql, HttpServletRequest request) { String hash = request.getParameter("hash"); if (hash != null && hash.length() == 16) { return com.juick.server.UserQueries.getUIDbyHash(sql, hash); } return 0; } public static void sendPermanentRedirect(HttpServletResponse response, String location) { response.setStatus(HttpServletResponse.SC_MOVED_PERMANENTLY); response.setHeader("Location", location); } public static void finishSQL(ResultSet rs, Statement stmt) { if (rs != null) { try { rs.close(); } catch (SQLException e) { } } if (stmt != null) { try { stmt.close(); } catch (SQLException e) { } } } public static String convertArray2String(ArrayList mids) { String q = ""; for (int i = 0; i < mids.size(); i++) { if (i > 0) { q += ","; } q += mids.get(i); } return q; } public static String encodeHTML(String str) { String ret = str; ret = ret.replaceAll("<", "<"); ret = ret.replaceAll(">", ">"); return str; } public static String encodeSphinx(String str) { String ret = str; ret = ret.replaceAll("@", "\\\\@"); return ret; } public static int parseInt(String str, int def) { int ret = def; if (str != null) { try { ret = Integer.parseInt(str); } catch (Exception e) { } } return ret; } public static String getPartFilename(Part part) { for (String cd : part.getHeader("content-disposition").split(";")) { if (cd.trim().startsWith("filename")) { String filename = cd.substring(cd.indexOf('=') + 1).trim().replace("\"", ""); return filename.substring(filename.lastIndexOf('/') + 1).substring(filename.lastIndexOf('\\') + 1); // MSIE fix. } } return null; } public static String receiveMultiPartFile(HttpServletRequest request, String name) throws Exception { String attachmentFName = null; Part filePart = request.getPart("attach"); if (filePart != null) { String partname = Utils.getPartFilename(filePart); if (partname != null && partname.length() > 0) { String attachmentType = partname.substring(partname.length() - 3).toLowerCase(); if (attachmentType.equals("jpg") || attachmentType.equals("peg") || attachmentType.equals("png")) { if (attachmentType.equals("peg")) { attachmentType = "jpg"; } attachmentFName = UUID.randomUUID().toString() + "." + attachmentType; filePart.write("/var/www/juick.com/i/tmp/" + attachmentFName); } else { throw new Exception("Wrong file type"); } } } return attachmentFName; } public static String downloadImage(URL url) throws Exception { String attachmentFName = null; Exception ex = null; InputStream is = null; FileOutputStream fos = null; try { URLConnection urlConn = url.openConnection(); is = urlConn.getInputStream(); String mime = urlConn.getContentType(); String attachmentType; if (mime != null && mime.equals("image/jpeg")) { attachmentType = "jpg"; } else if (mime != null && mime.equals("image/png")) { attachmentType = "png"; } else { throw new Exception("Wrong file type"); } attachmentFName = UUID.randomUUID().toString() + "." + attachmentType; fos = new FileOutputStream("/var/www/juick.com/i/tmp/" + attachmentFName); byte[] buffer = new byte[10240]; int len; while ((len = is.read(buffer)) > 0) { fos.write(buffer, 0, len); } } catch (Exception e) { ex = e; attachmentFName = null; } finally { try { if (is != null) { is.close(); } } finally { if (fos != null) { fos.close(); } } } if (ex != null) { throw ex; } else { return attachmentFName; } } }