modifyprojectaction.java

使用JSP+Servlet+Hibernate+Struts实现的一个学生软件发布平台

/*
 * Generated by MyEclipse Struts
 * Template path: templates/java/JavaClass.vtl
 */
package edu.neu.sspp.struts.action;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.apache.struts.action.Action;
import org.apache.struts.action.ActionForm;
import org.apache.struts.action.ActionForward;
import org.apache.struts.action.ActionMapping;
import org.apache.struts.action.ActionRedirect;
import org.hibernate.Transaction;

import edu.neu.sspp.SSPPLogger;
import edu.neu.sspp.hibernate.HibernateSessionFactory;
import edu.neu.sspp.hibernate.TProject;
import edu.neu.sspp.hibernate.TProjectDAO;
import edu.neu.sspp.hibernate.TUser;
import edu.neu.sspp.struts.form.ModifyProjectForm;

/** 
 * MyEclipse Struts
 * Creation date: 06-19-2007
 * 
 * XDoclet definition:
 * @struts.action path="/modifyProject" name="modifyProjectForm" input="/proj_jsp/mod_proj.jsp" scope="request" validate="true"
 */
public class ModifyProjectAction extends Action {
	/*
	 * Generated Methods
	 */

	/** 
	 * Method execute
	 * @param mapping
	 * @param form
	 * @param request
	 * @param response
	 * @return ActionForward
	 */
	public ActionForward execute(ActionMapping mapping, ActionForm form,
			HttpServletRequest request, HttpServletResponse response) {
		ModifyProjectForm modifyProjectForm = (ModifyProjectForm) form;// TODO Auto-generated method stub
		
		TProjectDAO projectDAO = new TProjectDAO();
		TProject project = projectDAO.findById(modifyProjectForm.getProjID());
		TUser user = project.getTUser();
		
		if(!user.getUserUid().equals((String)request.getSession().getAttribute("id"))) {
			SSPPLogger.logWarn("用户越权操作" + "IP:" + request.getRemoteAddr());
			
			return new ActionRedirect("error_page/error_500.jsp");
		}
		
		project.setName(modifyProjectForm.getName());
		project.setIntro(modifyProjectForm.getIntro());
		project.setUrl("null");
		
		Transaction transaction = HibernateSessionFactory.getSession().beginTransaction();
		
		projectDAO.save(project);
		
		transaction.commit();
		
		return new ActionRedirect(user.getUserName() + "/" + project.getProjUid());
	}
}