usermanager.java

BBS论坛设计JSP＋MYSQL

		if (!"".equals(oicq)) {
			try {
				Integer.parseInt(oicq);
			} catch (NumberFormatException e) {
				errMSG = errMSG + "<br>" + "<li>Oicq号码只能是4-10位数字，您可以选择不输入。";
				foundErr = true;
			}
		}
		if (!foundErr) {
			DBConnect dbc = new DBConnect();
			try {
				dbc.prepareStatement("select username from user where username=? and userPassword=?");
				dbc.setString(1, userName);
				dbc.setString(2, oldUserPassword);
				ResultSet rs = dbc.executeQuery();
				if (rs.next()) {
					//
					dbc.prepareStatement("update user set userPassword=?,userEmail=?,sign=?,oicq=?,sex=?,face=?,width=?,height=?,title=? where userName=?");
					dbc.setString(1, (userPassword));
					dbc.setString(2, userEmail);
					dbc.setString(3, sign);
					dbc.setString(4, oicq);
					dbc.setInt(5, sex);
					dbc.setString(6, face);
					dbc.setInt(7, width);
					dbc.setInt(8, height);
					dbc.setString(9, title);
					dbc.setString(10, userName);
					dbc.executeUpdate();
					//
					CacheManager.getCache(ENV.FORUM_USER).remove(userName);
				} else {
					throw new UserNotFoundException();
				}
				ForumPropertiesManager.resetManager();
			} catch (UserNotFoundException e) {
				e.printStackTrace();
				errMSG = errMSG + "<br>" + "</li>对不起，您的用户名或者密码错误。";
				throw new Exception(errMSG);
			} catch (Exception e) {
				e.printStackTrace();
				throw e;
			} finally {
				dbc.close();
			}

		} else {
			throw new Exception(errMSG);
		}
	}

	/**
	 * 删除用户
	 * 
	 * @param request
	 * @throws Exception
	 */
	public static void delUser(HttpServletRequest request) throws Exception {
		String[] userID = request.getParameterValues("userID");
		DBConnect dbc = new DBConnect();
		try {
			String sql;
			for (int i = 0; i < userID.length; i++) {
				sql = "delete from user where userID=" + userID[i];
				dbc.executeUpdate(sql);
			}
		} catch (SQLException e) {
			e.printStackTrace();
			throw new Exception("删除用户出错！");
		} finally {
			dbc.close();
		}
	}

	/**
	 * 添加用户
	 * 
	 * @param request
	 * @param wealthReg
	 * @param epReg
	 * @param cpReg
	 * @throws Exception
	 */
	public static void addAdmin(HttpServletRequest request, int wealthReg,
			int epReg, int cpReg) throws Exception {
		String userName = ParamUtil.getString(request, "userName", "");

		String psw = ParamUtil.getString(request, "psw", "");
		String userPassword = "";
		String pswc = ParamUtil.getString(request, "pswc", "");
		String userEmail = ParamUtil.getString(request, "userEmail", "");
		String face = ParamUtil.getString(request, "face", "");
		int width = ParamUtil.getInt(request, "width", 0);
		int height = ParamUtil.getInt(request, "height", 0);
		String oicq = ParamUtil.getString(request, "oicq", "");
		String sign = ParamUtil.getString(request, "sign", "");
		String myFace = ParamUtil.getString(request, "myface", "");
		boolean foundErr = false;
		String errMSG = "";
		int sex = 0;
		int showRe = 0;
		if ("".equals(userName) || userName.length() > 20) {
			errMSG = errMSG + "<br>" + "<li>请输入您的用户名(长度不能大于20)。";
			foundErr = true;
		}
		if (userName.indexOf('=') > -1 || userName.indexOf('%') > -1
				|| userName.indexOf('?') > -1 || userName.indexOf('&') > -1
				|| userName.indexOf(';') > -1 || userName.indexOf(',') > 0
				|| userName.indexOf('\'') > -1 || userName.indexOf('+') > -1) {
			errMSG = errMSG + "<br>" + "<li>用户名中含有非法字符。";
			foundErr = true;
		}
		try {
			sex = ParamUtil.getInt(request, "sex");
		} catch (NumberFormatException e) {
			errMSG = errMSG + "<br>" + "<li>请选择您的性别。";
			foundErr = true;
		}
		try {
			showRe = ParamUtil.getInt(request, "showRe");
		} catch (NumberFormatException e) {
			errMSG = errMSG + "<br>" + "<li>请选择您的帖子有回复时是否要提示您。";
			foundErr = true;
		}
		if ("".equals(psw) || psw.length() > 10) {
			errMSG = errMSG + "<br>" + "<li>请输入您的密码(长度不能大于10)。";
			foundErr = true;
		}
		if (!pswc.equals(psw)) {
			errMSG = errMSG + "<br>" + "<li>您输入的密码和确认密码不一致。";
			foundErr = true;
		} else
			userPassword = psw;

		if (userEmail.indexOf('@') < 0 || userEmail.indexOf('.') < 0) {
			errMSG = errMSG + "<br>" + "<li>您的Email有错误。";
			foundErr = true;
		}
		if (!"".equals(myFace)) {
			if (width == 0 || height == 0) {
				errMSG = errMSG + "<br>" + "<li>请输入图片的宽度和高度。";
				foundErr = true;
			} else if (width < 20 || width > 150) {
				errMSG = errMSG + "<br>" + "<li>您输入的图片宽度不符合标准。";
				foundErr = true;
			} else if (height < 20 || height > 250) {
				errMSG = errMSG + "<br>" + "<li>您输入的图片高度不符合标准。";
				foundErr = true;
			} else
				face = myFace;

		} else if ("".equals(face)) {
			errMSG = errMSG + "<br>" + "<li>请选择您的个性头像。";
			foundErr = true;
		} else if (face.endsWith(".gif")) {
			width = 32;
			height = 32;
		} else {

			errMSG = errMSG + "<br>" + "<li>您选择了错误的头像。";
			foundErr = true;
		}
		if (!"".equals(oicq)) {
			try {
				Integer.parseInt(oicq);
			} catch (NumberFormatException e) {

				errMSG = errMSG + "<br>" + "<li>Oicq号码只能是4-10位数字，您可以选择不输入。";
				foundErr = true;
			}
		}
		if (!foundErr) {
			DBConnect dbc = new DBConnect();
			try {
				SqlQuery rs = new SqlQuery(
						"select UserPassword from user where username='"
								+ userName + "'");

				if (rs.next()) {
					throw new UserAlreadyExistException();
				}
				dbc
						.prepareStatement("insert into user ( userName,userPassword,userEmail,userClass,sign,oicq,article,lockuser,sex,showRe,addDate,face,width,height,logins,lastlogin,userWealth,userEP,userCP) values( ?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)");
				dbc.setString(1, userName);
				dbc.setString(2, (userPassword));
				dbc.setString(3, userEmail);
				dbc.setInt(4, 20);
				dbc.setString(5, sign);
				dbc.setString(6, oicq);
				dbc.setInt(7, 0);
				dbc.setInt(8, 0);
				dbc.setInt(9, sex);
				dbc.setInt(10, showRe);
				dbc.setString(11, Format.getDateTime());
				dbc.setString(12, face);
				dbc.setInt(13, width);
				dbc.setInt(14, height);
				dbc.setInt(15, 1);
				dbc.setString(16, Format.getDateTime());
				dbc.setInt(17, wealthReg);
				dbc.setInt(18, epReg);
				dbc.setInt(19, cpReg);
				dbc.executeUpdate();
				//
				dbc.clearParameters();
				dbc
						.prepareStatement("update config set usernum=usernum+1,lastUser=?");
				dbc.setString(1, userName);
				dbc.executeUpdate();
				//
				String forumName = ForumPropertiesManager
						.getString("ForumName");
				String sender = SysUtil.encodeInDB(forumName);
				String title = forumName + "欢迎您的到来";
				String body = forumName
						+ "全体管理人员欢迎您的到来\n如有任何疑问请及时联系系统管理员。\n如有任何使用上的问题请查看论坛帮助。\n感谢您注册本系统，让我们一起来建设这个网上家园！";
				String sql = "insert into message(incept,sender,title,content,sendtime,flag,issend) values(?,?,?,?,now(),0,1)";
				dbc.prepareStatement(sql);
				dbc.setString(1, SysUtil.encodeInDB(userName));
				dbc.setString(2, SysUtil.encodeInDB(sender));
				dbc.setString(3, SysUtil.encodeInDB(title));
				dbc.setString(4, SysUtil.encodeInDB(body));
				dbc.executeUpdate();
				ForumPropertiesManager.resetManager();
			} catch (UserAlreadyExistException e) {
				errMSG = errMSG + "<br>" + "<li>对不起，您输入的用户名已经被注册，请重新输入。";
				throw new Exception(errMSG);
			} catch (Exception e) {
				e.printStackTrace();
				throw new Exception("添加用户出错。");
			} finally {
				dbc.close();
			}
		} else {
			throw new Exception(errMSG);
		}
	}

}