#include <EShopSession.h>

Public Member Functions
	EShopSession (HttpServletContextEx &ctx, SQLConnection pSQLConn) __DCL_THROWS1(SQLException )
bool	login (ListedStringToStringArrayMap &params)
void	logout ()
void	onViewSessions (ListedStringToStringArrayMap &params, Writer &out, const String &strMainCommand, int nMainCommandID, const String &strCommandID, const EShopServlet &_servlet)
const String &	sessionID () const
int	userID () const
int	groupID () const
const String &	userName () const
bool	isAdmin () const
bool	isGuest () const
int	command () const
void	setCommand (int nCM)
SQLConnection *	SQLConn () const

Protected Attributes
String	m_strSessionID
int	m_nCommand
int	m_nUserID
int	m_nGroupID
String	m_strUserName
SQLConnection *	m_pSQLConn

Detailed Description

Definition at line 8 of file EShopSession.h.

Constructor & Destructor Documentation

◆ EShopSession()

__DCL_BEGIN_NAMESPACE EShopSession::EShopSession	(	HttpServletContextEx &	ctx,
		SQLConnection *	pSQLConn )

Definition at line 22 of file EShopSession.cpp.

{
    m_pSQLConn = pSQLConn;
 
    m_nCommand = CM_ABOUT;
    ListedStringToStringArrayMap::Iterator it = ctx.__queryMap.find(COMMAND_STR);
    if ((it != ctx.__queryMap.end()) && (!(*it).value.isEmpty())) {
        try {
            m_nCommand = Int32::parse((*it).value[0]);
        }
        catch(Exception* e) {
            e->destroy();
        }
    }
 
    m_nUserID = 2;
    m_nGroupID = 2;   // 
    m_strSessionID = ctx.__cookieMap[L"sid"];
    if (m_strSessionID.isEmpty()) {
        StringBuilder str = ctx.remoteAddr();
        str += String::valueOf(ctx.remotePort());
        str += String::valueOf(time(NULL));
        m_strSessionID = MD5::final(str);
 
        __DCL_TRACE2(L"sessionId [%zd][%ls]\n",
            m_strSessionID.length(), m_strSessionID.data());
 
        HttpSetCookie cookie(
                    L"sid",
                    m_strSessionID,
                    0,
                    Files::dirname(ctx.path())
                    );
        ctx.addHeader(cookie);
 
        SQLQuery q(pSQLConn);
        q.prepare(L""
            "INSERT INTO ES_SESSION(SESSION_ID, LAST_USE) "
            "   VALUES(:SESSION_ID, CURRENT_TIMESTAMP)"
            );
        q.params()[0].setValue(m_strSessionID);
        q.execute();
//      __DCL_TRACE1(L"%d\n", q.affectedRows());
    }
    else {
        // user info
        SQLQuery q(pSQLConn);
        q.execute(L""
            "SELECT USER_ID "
            "   FROM ES_SESSION "
            "   WHERE SESSION_ID = \'" + m_strSessionID + L'\''
            );
        q.fetch();
        if (!q.eof()) {
            q.execute(L""
                "UPDATE ES_SESSION "
                "   SET LAST_USE = CURRENT_TIMESTAMP "
                "   WHERE SESSION_ID = \'" + m_strSessionID + L'\''
                );
        }
        else {
//          if (q.affectedRows() == 0)
//          {
            // mysql에서 1초 미만에 update 했더니 affectedRows() 가 0인 경우가 있다.
            // 세션 시간이 초과되어 삭제 되었다.
            // guest 세션을 생성한다.
            q.prepare(L""
                "INSERT INTO ES_SESSION(SESSION_ID, USER_ID, LAST_USE) "
                "   VALUES(:SESSION_ID, :USER_ID, CURRENT_TIMESTAMP)"
                );
 
            int nUserID = 2;
            q.params()[0].setValue(m_strSessionID);
            q.params()[1].setValue(nUserID);    // guest id
            q.execute();
            __DCL_TRACE1(L"%d\n", q.affectedRows());
        }
 
        q.execute(L""
            "SELECT S.USER_ID, U.GROUP_ID, U.USER_NAME "
            "   FROM ES_SESSION S "
            "       INNER JOIN ES_USER U ON (S.USER_ID = U.USER_ID) "
            "   WHERE SESSION_ID = \'" + m_strSessionID + L'\''
            );
        q.fetch();
        __DCL_ASSERT(!q.eof());
 
        m_nUserID = q.fields().byName(L"USER_ID").asInteger();
        m_nGroupID = q.fields().byName(L"GROUP_ID").asInteger();
        m_strUserName = q.fields().byName(L"USER_NAME").asString();
    }
}

Member Function Documentation

◆ command()

int EShopSession::command ( ) const

inline

Definition at line 34 of file EShopSession.h.

34{ return m_nCommand; }

◆ groupID()

int EShopSession::groupID ( ) const

inline

Definition at line 30 of file EShopSession.h.

30{ return m_nGroupID; }

◆ isAdmin()

bool EShopSession::isAdmin ( ) const

inline

Definition at line 32 of file EShopSession.h.

32{ return m_nGroupID == 1; }

◆ isGuest()

bool EShopSession::isGuest ( ) const

inline

Definition at line 33 of file EShopSession.h.

33{ return m_nUserID == 2; }

◆ login()

bool EShopSession::login ( ListedStringToStringArrayMap & params )

Definition at line 118 of file EShopSession.cpp.

{
    __DCL_ASSERT(m_pSQLConn != NULL);
 
    String strLogin;
    String strPassword = L"";
 
    ListedStringToStringArrayMap::Iterator it = params.find(L"login");
    if ((it != params.end()) && (!(*it).value.isEmpty()))
        strLogin = (*it).value[0];
 
    it = params.find(L"password");
    if ((it != params.end()) && (!(*it).value.isEmpty()))
        strPassword = (*it).value[0];
 
    if (strLogin.isEmpty())
        return false;
 
    SQLQuery q(m_pSQLConn);
    q.prepare(L""
        "SELECT USER_ID FROM ES_USER "
        "   WHERE LOGIN_ID LIKE :LOGIN_ID AND PASSWORD LIKE :PASSWORD"
        );
    q.params()[0].setValue(strLogin);
    q.params()[1].setValue(strPassword);
 
    q.execute();
    q.fetch();
    if (q.eof()) {
        __DCL_TRACE0(L"false\n");
        return false;
    }
 
    int nUserID = 0;
    nUserID = q.fields()[0].asInteger();
 
    __DCL_TRACE1(L"UserID : %d\n", nUserID);
    q.prepare(L""
        "UPDATE ES_SESSION SET USER_ID = :USER_ID "
        "   WHERE SESSION_ID LIKE :SESSION_ID"
        );
 
    q.params()[0].setValue(nUserID);
    q.params()[1].setValue(m_strSessionID);
    q.execute();
 
    q.execute(L""
        "SELECT S.USER_ID, U.GROUP_ID, U.USER_NAME "
        "   FROM ES_SESSION S "
        "       INNER JOIN ES_USER U ON (S.USER_ID = U.USER_ID) "
        "   WHERE SESSION_ID = \'" + m_strSessionID + L'\''
        );
    q.fetch();
    __DCL_ASSERT(!q.eof());
 
    m_nUserID = q.fields().byName(L"USER_ID").asInteger();
    m_nGroupID = q.fields().byName(L"GROUP_ID").asInteger();
    m_strUserName = q.fields().byName(L"USER_NAME").asString();
 
    return true;
}

◆ logout()

void EShopSession::logout ( )

Definition at line 180 of file EShopSession.cpp.

{
    SQLQuery q(m_pSQLConn);
    q.execute(L""
        "DELETE FROM ES_SHOPPING_BASKET "
        "   WHERE SESSION_ID = \'" + m_strSessionID + L'\''
        );
 
    q.execute(L""
        "UPDATE ES_SESSION SET USER_ID = 2 "
        "   WHERE SESSION_ID = \'" + m_strSessionID + L'\''
        );
 
    q.execute(L""
        "SELECT S.USER_ID, U.GROUP_ID, U.USER_NAME "
        "   FROM ES_SESSION S "
        "       INNER JOIN ES_USER U ON (S.USER_ID = U.USER_ID) "
        "   WHERE SESSION_ID = \'" + m_strSessionID + L'\''
        );
    q.fetch();
    __DCL_ASSERT(!q.eof());
 
    m_nUserID = q.fields().byName(L"USER_ID").asInteger();
    m_nGroupID = q.fields().byName(L"GROUP_ID").asInteger();
    m_strUserName = q.fields().byName(L"USER_NAME").asString();
}

◆ onViewSessions()

void EShopSession::onViewSessions	(	ListedStringToStringArrayMap &	params,
		Writer &	out,
		const String &	strMainCommand,
		int	nMainCommandID,
		const String &	strCommandID,
		const EShopServlet &	_servlet )

Definition at line 208 of file EShopSession.cpp.

{
    SQLQuery q(m_pSQLConn);
 
    ListedStringToStringArrayMap::Iterator it = params.find(L"idle");
    if (it != params.end())
    {
        int nMin = 0;
        try
        {
            nMin = Int32::parse(((*it).value)[0]);
        }
        catch(Exception* e)
        {
            e->destroy();
        }
 
        q.prepare(L""
            "DELETE FROM ES_SESSION "
            "WHERE SESSION_ID != :SESSION_ID "
            "   AND (CURRENT_TIMESTAMP - LAST_USE) >= (:MIN * 60) "
            );
        q.params()[0].setValue(sessionID());
        q.params()[1].setValue(nMin);
        q.execute();
    }
 
    TextTemplate tpl(_servlet.readTemplate(L"view_session.html"));
    String strHREF = String::format(L"?%ls=%d",
                    strMainCommand.data(), nMainCommandID
                    );
 
    tpl.assign(L"ACTION_HREF", strHREF);
 
    TextTemplate& row = tpl[L"ROW"];
    q.execute(L""
        "SELECT S.SESSION_ID, U.LOGIN_ID, U.USER_NAME,"
        "   S.LAST_USE, (CURRENT_TIMESTAMP - S.LAST_USE) / 60 AS IDLE_TIME\n"
        "FROM ES_SESSION S\n"
        "   INNER JOIN ES_USER U ON (S.USER_ID = U.USER_ID)\n"
        "ORDER BY S.LAST_USE"
        );
    q.fetch();
    while(!q.eof())
    {
        row.assign(q.fields(), L"&nbsp;");
        tpl.append(L"ROW", row);
        q.fetch();
    }
 
    out << tpl;
}

◆ sessionID()

const String & EShopSession::sessionID ( ) const

inline

Definition at line 28 of file EShopSession.h.

28{ return m_strSessionID; }

◆ setCommand()

void EShopSession::setCommand ( int nCM )

inline

Definition at line 35 of file EShopSession.h.

35{ m_nCommand = nCM; }

◆ SQLConn()

SQLConnection * EShopSession::SQLConn ( ) const

inline

Definition at line 37 of file EShopSession.h.

37{ return m_pSQLConn; }

◆ userID()

int EShopSession::userID ( ) const

inline

Definition at line 29 of file EShopSession.h.

29{ return m_nUserID; }

◆ userName()

const String & EShopSession::userName ( ) const

inline

Definition at line 31 of file EShopSession.h.

31{ return m_strUserName; }

Member Data Documentation

◆ m_nCommand

int EShopSession::m_nCommand

protected

Definition at line 41 of file EShopSession.h.

◆ m_nGroupID

int EShopSession::m_nGroupID

protected

Definition at line 43 of file EShopSession.h.

◆ m_nUserID

int EShopSession::m_nUserID

protected

Definition at line 42 of file EShopSession.h.

◆ m_pSQLConn

SQLConnection* EShopSession::m_pSQLConn

protected

Definition at line 46 of file EShopSession.h.

◆ m_strSessionID

String EShopSession::m_strSessionID

protected

Definition at line 40 of file EShopSession.h.

◆ m_strUserName

String EShopSession::m_strUserName

protected

Definition at line 44 of file EShopSession.h.

The documentation for this class was generated from the following files:

Public Member Functions

Protected Attributes

Detailed Description

Constructor & Destructor Documentation

◆ EShopSession()

Member Function Documentation

◆ command()

◆ groupID()

◆ isAdmin()

◆ isGuest()

◆ login()

◆ logout()

◆ onViewSessions()

◆ sessionID()

◆ setCommand()

◆ SQLConn()

◆ userID()

◆ userName()

Member Data Documentation

◆ m_nCommand

◆ m_nGroupID

◆ m_nUserID

◆ m_pSQLConn

◆ m_strSessionID

◆ m_strUserName