📄 memberwebhandler.java
字号:
if (fileUploadCount > 1) {
// never throw
throw new AssertionException("Assertion: Cannot upload more than 1 file while processing upload avatar for Member.");
}
}
if (myFile == null || myFile.isFormField() == true) {
String localizedMessage = MVNForumResourceBundle.getString(locale, "mvncore.exception.AssertionException.cannot_process_upload_avatar_with_form_field");
throw new AssertionException(localizedMessage);
//throw new AssertionException("Cannot process uploaded avatar with a form field.");
}
// now everything all right, go ahead and create thumbnail
//@Trong
// InputStream inputStream = myFile.getInputStream();
// StringBuffer bufferPicFile = new StringBuffer(128);
//@Trong
// bufferPicFile.append(MVNForumConfig.getAvatarDir());
// log.debug("Upload avatar to the folder " + MVNForumConfig.getAvatarDir());
// bufferPicFile.append(File.separatorChar).append(memberName).append(".jpg");
// String thumbnailFile = bufferPicFile.toString();
//log.trace("uploaded file = " + thumbnailFile);
//@Trong
//The below method closes the inputStream after it have done its work.
//ImageUtil.createThumbnail(inputStream, thumbnailFile, 150/*maxWidth*/, 150/*maxHeight*/);// can throw BadInputException
//@Trong
// now the image has been save, go ahead and update database
//DAOFactory.getMemberDAO().updateAvatar(memberID, MemberBean.MEMBER_AVATAR_USING_UPLOAD);
String binaryMimeType = myFile.getContentType();
binaryMimeType = DisableHtmlTagFilter.filter(binaryMimeType);
int binaryFileSize = (int)myFile.getSize();
String fullFilePath = myFile.getName();
String binaryFilename = FileUtil.getFileName(fullFilePath);
binaryFilename = DisableHtmlTagFilter.filter(binaryFilename);
String binaryCreationIP = request.getRemoteAddr();
BinaryStorage binaryStorage = ManagerFactory.getBinaryStorage();
binaryStorage.storeData(BinaryStorage.CATEGORY_AVATAR, String.valueOf(memberID), binaryFilename,
myFile.getInputStream(), binaryFileSize, 0, 0, binaryMimeType, binaryCreationIP);
}
public void prepareForgotPassword(GenericRequest request)
throws AssertionException, DatabaseException, AuthenticationException {
OnlineUser onlineUser = onlineUserManager.getOnlineUser(request);
if (MVNForumConfig.getEnableCaptcha()) {
onlineUser.buildNewCaptcha();
}
}
public void forgotPassword(GenericRequest request)
throws BadInputException, ObjectNotFoundException, DatabaseException, MessagingException,
AssertionException, AssertionException, DatabaseException, AuthenticationException, IOException,TemplateException {
// use for the captcha feature
OnlineUser onlineUser = onlineUserManager.getOnlineUser(request);
Locale locale = I18nUtil.getLocaleInRequest(request);
int memberID = 0;
String memberName = GenericParamUtil.getParameter(request, "MemberName");
StringUtil.checkGoodName(memberName);
String memberEmail = GenericParamUtil.getParameter(request, "MemberEmail");
if (memberEmail.length() > 0) {
memberEmail = GenericParamUtil.getParameterEmail(request, "MemberEmail");
}
if (memberName.length() > 0) {// user enter his MemberName
// we find the email of this memberID, not the provided email
try {
memberID = DAOFactory.getMemberDAO().getMemberIDFromMemberName(memberName);
} catch (ObjectNotFoundException e) {
String localizedMessage = MVNForumResourceBundle.getString(locale, "mvncore.exception.ObjectNotFoundException.membername_not_exists", new Object[] {memberName});
throw new ObjectNotFoundException(localizedMessage);
}
MemberBean bean = DAOFactory.getMemberDAO().getMember_forPublic(memberID);
memberEmail = bean.getMemberEmail();
} else if (memberEmail.length() > 0) {// user enter his email
// we find the MemberID of this mail, now we sure that user didnt enter his MemberID
memberID = DAOFactory.getMemberDAO().getMemberIDFromMemberEmail(memberEmail);
MemberBean bean = DAOFactory.getMemberDAO().getMember_forPublic(memberID);
memberName = bean.getMemberName();
} else {// user didnt enter any thing
String localizedMessage = MVNForumResourceBundle.getString(locale, "mvncore.exception.BadInputException.your_member_name_or_email_is_not_entered");
throw new BadInputException(localizedMessage);
//throw new BadInputException("You must enter at least your MemberName or email");
}
// now we have the correct pair of MemberID and MemberEmail
// Check the assumption above
MemberBean memberBean = DAOFactory.getMemberDAO().getMember_forPublic(memberID);
if (!memberEmail.equalsIgnoreCase(memberBean.getMemberEmail())) {
String localizedMessage = MVNForumResourceBundle.getString(locale, "mvncore.exception.AssertionException.serious_bug");
throw new AssertionException(localizedMessage);
//throw new AssertionException("Assertion when process forgot password. This is a serious bug. Please contact the Web site administrator to report the bug.");
}
// end check
// Now check the captcha
if (MVNForumConfig.getEnableCaptcha()) {
String captchaResponse = GenericParamUtil.getParameterSafe(request, "CaptchaResponse", false);
onlineUser.ensureCorrectCaptchaResponse(captchaResponse);
}
String currentTempPassword = DAOFactory.getMemberDAO().getTempPassword(memberID);
// if the current value length is less then 5, we assume that it is not set
// and we generate the new value only in this case. This will prevent the
// different values are sent out and confuse user.
if (currentTempPassword.length() < 5) {
//generate a temp password
currentTempPassword = RandomGenerator.getRandomMD5_Base64();
DAOFactory.getMemberDAO().updateTempPassword(memberID, currentTempPassword);
}
// next, encode to make sure it could be put on a link
String urlEncodedTempPassword = Encoder.encodeURL(currentTempPassword);
// we have pass the assertion check, go ahead
String serverName = ParamUtil.getServerPath();//ParamUtil.getServer2(request);
StringBuffer passwordResetUrl = new StringBuffer(256);
passwordResetUrl.append(serverName);
passwordResetUrl.append(ParamUtil.getContextPath());
passwordResetUrl.append(UserModuleConfig.getUrlPattern());
passwordResetUrl.append("/resetpassword?temppassword=");
passwordResetUrl.append(urlEncodedTempPassword);
passwordResetUrl.append("&member=");
passwordResetUrl.append(memberName);
// Prepare the FreeMarker configuration;
Configuration cfg = MVNForumConfig.getFreeMarkerConfiguration();
//Below is a code to map content of email to template
Map root = new HashMap();
root.put("serverName", serverName);
root.put("MVNForumInfo", MVNForumInfo.getProductDesc());
root.put("passwordResetUrl", passwordResetUrl.toString());
root.put("memberName", memberName);
root.put("currentTempPassword", currentTempPassword);
StringWriter subjectWriter = new StringWriter(256);
Template subjectTemplate = cfg.getTemplate(MVNForumGlobal.TEMPLATE_FORGOTPASSWORD_SUBJECT, "UTF-8");
subjectTemplate.process(root, subjectWriter);
String subject = subjectWriter.toString();
StringWriter bodyWriter = new StringWriter(1024);
Template bodyTemplate = cfg.getTemplate(MVNForumGlobal.TEMPLATE_FORGOTPASSWORD_BODY, "UTF-8");
bodyTemplate.process(root, bodyWriter);
String body = bodyWriter.toString();
log.debug("subject = " + subject);
log.debug("body = " + body);
try {
MailUtil.sendMail(MVNForumConfig.getWebMasterEmail() /*use the default MailFrom value*/,
memberEmail /*to*/, "" /*cc*/, "" /*bcc*/, subject, body);
} catch (UnsupportedEncodingException e) {
log.error("Cannot support encoding", e);
}
// Only destroy captcha when send mail successfully
if (MVNForumConfig.getEnableCaptcha()) {
onlineUser.destroyCurrentCaptcha();
}
}
public void resetPassword(GenericRequest request)
throws BadInputException, ObjectNotFoundException, DatabaseException {
Locale locale = I18nUtil.getLocaleInRequest(request);
String memberName = GenericParamUtil.getParameter(request, "member", true);
StringUtil.checkGoodName(memberName);
// IMPORTANT: MUST check that temp password is not empty, because temppassword = empty
// means cannot reset password
String memberTempPassword = GenericParamUtil.getParameter(request, "temppassword", true);
int memberID = 0;
try {
memberID = DAOFactory.getMemberDAO().getMemberIDFromMemberName(memberName);
} catch (ObjectNotFoundException e) {
String localizedMessage = MVNForumResourceBundle.getString(locale, "mvncore.exception.ObjectNotFoundException.membername_not_exists", new Object[] {memberName});
throw new ObjectNotFoundException(localizedMessage);
}
String currentTempPassword = DAOFactory.getMemberDAO().getTempPassword(memberID);
if (memberTempPassword.equals(currentTempPassword) == false) {
String localizedMessage = MVNForumResourceBundle.getString(locale, "mvncore.exception.BadInputException.wrong_temporary_password");
throw new BadInputException(localizedMessage);
//throw new BadInputException("Your temporary password is not correct, please try the forgot password feature.");
}
String memberPassword1 = GenericParamUtil.getParameterPassword(request, "MemberMatkhau", 3, 0);
String memberPassword2 = GenericParamUtil.getParameterPassword(request, "MemberMatkhauConfirm", 3, 0);
if (!memberPassword1.equals(memberPassword2)) {
String localizedMessage = MVNForumResourceBundle.getString(locale, "mvncore.exception.BadInputException.confirmed_password_is_not_match");
throw new BadInputException(localizedMessage);
//throw new BadInputException("Password and confirmed password are not the same, please try again.");
}
String memberPassword = Encoder.getMD5_Base64(memberPassword1);
DAOFactory.getMemberDAO().updatePassword(memberID, memberPassword);
DAOFactory.getMemberDAO().updateTempPassword(memberID, "");// reset the temp password
}
public void sendActivateCode(GenericRequest request)
throws BadInputException, ObjectNotFoundException, DatabaseException,
MessagingException, IOException, TemplateException {
Locale locale = I18nUtil.getLocaleInRequest(request);
int memberID = 0;
String memberName = GenericParamUtil.getParameter(request, "MemberName", true);
StringUtil.checkGoodName(memberName);
String memberEmail = GenericParamUtil.getParameterEmail(request, "MemberEmail");
// we find the email of this memberID, not the provided email
try {
memberID = DAOFactory.getMemberDAO().getMemberIDFromMemberName(memberName);
} catch (ObjectNotFoundException e) {
String localizedMessage = MVNForumResourceBundle.getString(locale, "mvncore.exception.ObjectNotFoundException.membername_not_exists", new Object[] {memberName});
throw new ObjectNotFoundException(localizedMessage);
}
// Check if the email is correct
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -