VisitorBook.cpp

Go to the documentation of this file.

#include <dcl/Config.h>
 
#if __DCL_WINDOWS
#include <windows.h>
#endif
 
#include <dcl/String.h>
#include <dcl/Html.h>
 
#include "EShopServlet.h"
#include "VisitorBook.h"
 
#ifdef __DCL_DEBUG
#undef __THIS_FILE__
static const wchar_t __THIS_FILE__[] = L"eshop/VisitorBook.cpp";
#endif
 
__DCL_BEGIN_NAMESPACE
 
IMPLEMENT_CLASSINFO(VisitorBook, Object)
 
VisitorBook::VisitorBook(
        const String& strMainCommand,
        int nMainCommandID,
        const String& strCommand,
        const EShopServlet& _servlet
        ) : __servlet(_servlet)
{
    m_strMainCommand = strMainCommand;
    m_nMainCommandID = nMainCommandID;
    m_strCommand = strCommand;
}
 
bool VisitorBook::onVisitorBook(
            HttpServletContextEx& ctx,
            Writer& out,
            SQLConnection* pSQLConn
            )
{
    int nCMD = CM_VISITOR_BOOK_LIST;
    ListedStringToStringArrayMap params = ctx.__queryMap;
    {
        for (ListedStringToStringArrayMap::ConstIterator it = ctx.__formMap.begin();
            it != ctx.__formMap.end(); it++) {
            const StringArray& ss = (*it).value;
            StringArray& ds = params[(*it).key];
            for (size_t i = 0; i < ss.size(); i++) {
                ds.add(ss[i]);
            }
        }
    }
 
    ListedStringToStringArrayMap::Iterator it = params.find(m_strCommand);
    if (it != params.end()) {
        if (!((*it).value.isEmpty()))
        {
            try {
                nCMD = Int32::parse((*it).value[0]);
            }
            catch(Exception* e) {
                e->destroy();
            }
        }
    }
 
    __DCL_TRACE1(L"nCMD [%d]\n", nCMD);
 
    switch(nCMD) {
    case CM_VISITOR_BOOK_LIST :
        onVisitorBookList(pSQLConn, out);
        break;
    case CM_VISITOR_BOOK_BODY :
        return onVisitorBookBody(params, pSQLConn, out);
        break;
    case CM_VISITOR_BOOK_DELETE :
        onVisitorBookDelete(params,  pSQLConn, out);
        break;
    case CM_VISITOR_BOOK_UPDATE_FORM :
        onVisitorBookUpdateForm(params, pSQLConn, out);
        break;
    case CM_VISITOR_BOOK_UPDATE :
        onVisitorBookUpdate(params, ctx, pSQLConn, out);
        break;
    default :
        return false;
    }
 
    return true;
}
    
void VisitorBook::onVisitorBookList(
            SQLConnection* pSQLConn,
            Writer& out
            )
{
    TextTemplate tplList(__servlet.readTemplate(L"visitlist.html"));
    TextTemplate& row = tplList[L"row"];
 
    StringBuilder strHREF = String::format(L"?%ls=%d&%ls=%d",
                    m_strMainCommand.data(), m_nMainCommandID,
                    m_strCommand.data(), CM_VISITOR_BOOK_UPDATE_FORM
                    );
    tplList.assign(L"HREF_NEW_MSG", strHREF);
 
    SQLQuery q(pSQLConn);
    q.prepare(L"SELECT ID, SUBJECT, BODY, REGIST, VISITOR, EMAIL, RHOST"
        " FROM ES_VISITOR_BOOK ORDER BY ID");
    q.execute();
    q.fetch();
    while(!q.eof()) {
        strHREF = String::format(L"?%ls=%d&%ls=%d&%ls=%ls",
                    m_strMainCommand.data(), m_nMainCommandID,
                    m_strCommand.data(), CM_VISITOR_BOOK_BODY,
                    L"id", q.fields().byName(L"ID").asString().data()
                    );
        row.assign(L"HREF_MSG_BODY", strHREF);
        row.assign(q.fields(), L"&nbsp;");
 
        tplList.append(L"row", row);
        q.fetch();
    }
    out << tplList;
}
 
bool VisitorBook::onVisitorBookBody(
            ListedStringToStringArrayMap& params,
            SQLConnection* pSQLConn,
            Writer& out
            )
{
    ListedStringToStringArrayMap::Iterator it = params.find(L"id");
    if (it == params.end()) {
        onVisitorBookList(pSQLConn, out);
        return false;
    }
 
    String strID;
    if (!(*it).value.isEmpty())
        strID = (*it).value[0];
 
    TextTemplate tplBody(__servlet.readTemplate(L"visitbody.html"));
    SQLQuery q(pSQLConn);
    q.prepare(L"SELECT ID, SUBJECT, BODY, REGIST, VISITOR, EMAIL, RHOST"
            " FROM ES_VISITOR_BOOK WHERE ID = " + strID);
    q.execute();
    q.fetch();
    if (q.eof())
        return false;
    else {
        String strHREF = String::format(L"?%ls=%d",
                    m_strMainCommand.data(), m_nMainCommandID
                    );
        tplBody.assign(L"HREF_ACTION", strHREF);
        tplBody.assign(L"COMMAND_STR", m_strCommand);
        tplBody.assign(L"CM_VISITOR_BOOK_LIST", String::valueOf(CM_VISITOR_BOOK_LIST));
        tplBody.assign(L"CM_VISITOR_BOOK_UPDATE_FORM", String::valueOf(CM_VISITOR_BOOK_UPDATE_FORM));
        tplBody.assign(L"CM_VISITOR_BOOK_DELETE", String::valueOf(CM_VISITOR_BOOK_DELETE));
 
        tplBody.assign(q.fields(), L"&nbsp;");
        if (!q.fields().byName(L"BODY").isNull()) {
            tplBody.assign(L"BODY", 
                Html::format(
                    q.fields().byName(L"BODY").asString(),
                    4,  L"", L"<br>\n"
                    ));
        }
                                
 
        out << tplBody;
    }
    return true;
}
 
void VisitorBook::onVisitorBookUpdateForm(
            ListedStringToStringArrayMap& params,
            SQLConnection* pSQLConn,
            Writer& out
            )
{
    String strID;
    ListedStringToStringArrayMap::Iterator it = params.find(L"id");
    if ((it != params.end()) && (!(*it).value.isEmpty()))
        strID = (*it).value[0];
 
    StringBuilder strHREF;
    strHREF.format(L"?%ls=%d&%ls=%d",
                    m_strMainCommand.data(), m_nMainCommandID,
                    m_strCommand.data(), CM_VISITOR_BOOK_UPDATE
                    );
        
    TextTemplate tpl(__servlet.readTemplate(L"visitupdate.html"));
    if (!strID.isEmpty()) {
        SQLQuery q(pSQLConn);
        q.execute(L"SELECT ID, SUBJECT, BODY, REGIST, VISITOR, EMAIL, RHOST"
                " FROM ES_VISITOR_BOOK WHERE ID = " + strID);
        q.fetch();
        if (!q.eof()) {
            strHREF += L"&id=" + q.fields().byName(L"ID").asString();
            tpl.assign(L"HREF_ACTION", strHREF);
            tpl.assign(q.fields(), L"&nbsp");
 
            out << tpl;
            return;
        }
    }
 
    tpl.assign(L"HREF_ACTION", strHREF);
    tpl.assign(L"SUBJECT", L"");
    tpl.assign(L"VISITOR", L"");
    tpl.assign(L"EMAIL", L"");
    tpl.assign(L"BODY", L"");
 
    out << tpl;
}
 
void VisitorBook::onVisitorBookDelete(
            ListedStringToStringArrayMap& params,
            SQLConnection* pSQLConn,
            Writer& out
            )
{
    String strID;
    String strPasswd;
 
    ListedStringToStringArrayMap::Iterator it = params.find(L"id");
    if ((it != params.end()) && (!(*it).value.isEmpty()))
        strID = (*it).value[0];
 
    it = params.find(L"passwd");
    if ((it != params.end()) && (!(*it).value.isEmpty()))
        strPasswd = (*it).value[0];
 
 
    SQLQuery q(pSQLConn);
    q.execute(L"SELECT PASSWD FROM ES_VISITOR_BOOK WHERE ID = " + strID);
    q.fetch();
    if (!q.eof()) {
        bool bDoDelete = false;
        if (q.fields()[0].isNull() && strPasswd.isEmpty())
            bDoDelete = true;
        else {
            if (q.fields()[0].asString() == strPasswd)
                bDoDelete = true;
        }
 
        if (bDoDelete)
            q.execute(L"DELETE FROM ES_VISITOR_BOOK WHERE ID = " + strID);
 
    }
 
    if (q.affectedRows() > 0)
        onVisitorBookList(pSQLConn, out);
    else
        onVisitorBookBody(params, pSQLConn, out);
}
 
void VisitorBook::onVisitorBookUpdate(
        ListedStringToStringArrayMap& params,
        HttpServletContextEx& ctx,
        SQLConnection* pSQLConn,
        Writer& out
        )
{
    String strID;
    String strPasswd;
 
    String strSubject;
    String strBody;
    String strVisitor;
    String strEmail;
    String strRHost = ctx.remoteAddr();
 
    ListedStringToStringArrayMap::Iterator it;
 
    it = params.find(L"id");
    if ((it != params.end()) && (!(*it).value.isEmpty()))
        strID = (*it).value[0];
 
    it = params.find(L"passwd");
    if ((it != params.end()) && (!(*it).value.isEmpty()))
        strPasswd = (*it).value[0];
 
    it = params.find(L"subject");
    if ((it != params.end()) && (!(*it).value.isEmpty()))
        strSubject = (*it).value[0];
 
    it = params.find(L"body");
    if ((it != params.end()) && (!(*it).value.isEmpty()))
        strBody = (*it).value[0];
 
    it = params.find(L"visitor");
    if ((it != params.end()) && (!(*it).value.isEmpty()))
        strVisitor = (*it).value[0];
 
    it = params.find(L"email");
    if ((it != params.end()) && (!(*it).value.isEmpty()))
        strEmail = (*it).value[0];
 
    if (strSubject.isEmpty() 
        || strBody.isEmpty() 
        || strVisitor.isEmpty() 
        || strEmail.isEmpty())
    {
        out << L"<br><br><p><strong>모두 입력해 주세요!!</strong></p>";
        return;
    }
 
    String strSQL = L""
            "INSERT INTO "
            "       ES_VISITOR_BOOK(SUBJECT, BODY, REGIST, VISITOR,"
            "               EMAIL, RHOST, PASSWD) "
            "   VALUES(:SUBJECT, :BODY, CURRENT_TIMESTAMP, :VISITOR,"
            "               :EMAIL, :RHOST, :PASSWD)";
 
    SQLQuery q(pSQLConn);
    if (!strID.isEmpty()) {
        q.execute(L"SELECT PASSWD FROM ES_VISITOR_BOOK WHERE ID = " + strID);
        q.fetch();
        if (!q.eof()) {
            if (q.fields()[0].isNull() 
                || q.fields()[0].asString() == strPasswd) {
                strSQL = L""
                "UPDATE ES_VISITOR_BOOK "
                "   SET SUBJECT = :SUBJECT, BODY = :BODY, VISITOR = :VISITOR, "
                "       EMAIL = :EMAIL, RHOST = :RHOST, PASSWD = :PASSWD "
                "   WHERE ID = " + strID;
            }
            else {
                onVisitorBookBody(params, pSQLConn, out);
                return;
            }
        }
    }
 
    q.prepare(strSQL);
    SQLParams& sqlParams = q.params();
    sqlParams.byName(L"SUBJECT").setValue(strSubject);
    sqlParams.byName(L"BODY").setValue(strBody);
    sqlParams.byName(L"VISITOR").setValue(strVisitor);
    sqlParams.byName(L"EMAIL").setValue(strEmail);
    sqlParams.byName(L"RHOST").setValue(strRHost);
    sqlParams.byName(L"PASSWD").setValue(strPasswd);
 
    q.execute();
 
    onVisitorBookList(pSQLConn, out);
}
 
__DCL_END_NAMESPACE