addforumaction.java

一个运行成功的论坛

package mybbs;
import org.apache.struts.action.*;
import javax.servlet.http.*;
import org.apache.struts.action.DynaActionForm;
import java.sql.*;
import javax.servlet.http.HttpSession;

/**
 * <p>Title发贴的管理 </p>
 */
public class AddForumAction  extends Action {
  public ActionForward execute(ActionMapping actionMapping,
                               ActionForm form,
                               HttpServletRequest request,
                               HttpServletResponse response) {

    DynaActionForm adminform = (DynaActionForm) form;
    DBConn conn = new DBConn();
    CAEncode ncode = new CAEncode();
    HttpSession session = request.getSession();
    String pp = (String) session.getAttribute("userpower");
    int power=Integer.parseInt(pp);
    String forumname = ncode.htmlEncode((String)adminform.get("forumname"));
    String fid = ncode.htmlEncode((String)adminform.get("forumid"));
    String admin = ncode.htmlEncode((String)adminform.get("admin"));
    String logo = ncode.htmlEncode((String)adminform.get("logo"));
    String description = ncode.htmlEncode((String)adminform.get("description"));

    String action=(String)adminform.get("action");
    String PageForward="";
    try{
    if(power>10){
      if (action.equals("1")) {
        String sql = "SELECT * FROM forums WHERE isparent=1";
        ResultSet rs = conn.query(sql);
        rs.last();
        int maxid = rs.getRow()+1;
        rs.close();
        String sql2 =
            "INSERT INTO forums(isparent,sortid,forum_name)VALUE(?,?,?)";
        PreparedStatement pstmt = conn.getPstmt(sql2);
        pstmt.setInt(1, 1);
        pstmt.setInt(2, maxid);
        pstmt.setString(3, forumname);
        int u = pstmt.executeUpdate();
        if (u > 0)
          PageForward = "addsuccess";
        else
          PageForward = "global";
        pstmt.close();
      }
      if (action.equals("2")) {
        int forumid = Integer.parseInt(fid);
        String sql2 =
            "INSERT INTO forums(isparent,sortid,forum_name)VALUE(?,?,?)";
        PreparedStatement pstmt = conn.getPstmt(sql2);
        pstmt.setInt(1, 0);
        pstmt.setInt(2, forumid);
        pstmt.setString(3, forumname);
        int u = pstmt.executeUpdate();
        if (u > 0)
          PageForward = "addsuccess";
        else
          PageForward = "global";
        pstmt.close();
      }
      if (action.equals("3")) {
        int forumid = Integer.parseInt(fid);
        String sql2 = "UPDATE forums SET forum_name=?,admin_author=?,pic_logo=?,description=? WHERE id="+fid;
        PreparedStatement pstmt = conn.getPstmt(sql2);
        pstmt.setString(1, forumname);
        pstmt.setString(2, admin);
        pstmt.setString(3, logo);
        pstmt.setString(4, description);
        int u = pstmt.executeUpdate();
        if (u > 0)
          PageForward = "addsuccess";
        else
          PageForward = "global";
      }
      if(action.equals("4")){
        String sql4="DELETE FROM forums WHERE id="+fid;
        conn.update(sql4);
        PageForward = "addsuccess";
      }
      if(action.equals("5")){
        String sql5="DELETE FROM forums WHERE sortid="+fid;
        conn.update(sql5);
        conn.update(sql5);
        PageForward = "addsuccess";
      }
    }
    else{
      PageForward = "global";
      request.setAttribute("throw", new String("无权操作！"));
    }
     conn.DBclose();
    }
    catch (Exception e) {
      PageForward = "global";
      request.setAttribute("throw", e.toString());
    }
    return actionMapping.findForward(PageForward);
  }

}