Repository navigation
Expand file tree
/
Copy pathDisableScoreboard.java
More file actions
96 lines (92 loc) · 4.14 KB
/
Copy pathDisableScoreboard.java
File metadata and controls
96 lines (92 loc) · 4.14 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
package servlets.admin.config;
import jakarta.servlet.ServletException;
import jakarta.servlet.http.Cookie;
import jakarta.servlet.http.HttpServlet;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
import jakarta.servlet.http.HttpSession;
import java.io.IOException;
import java.io.PrintWriter;
import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;
import utils.ScoreboardStatus;
import utils.ShepherdLogManager;
import utils.Validate;
/**
* This is the control class for disabling the the user accessible scoreboard <br>
* <br>
* This file is part of the Security Shepherd Project.
*
* <p>The Security Shepherd project is free software: you can redistribute it and/or modify it under
* the terms of the GNU General Public License as published by the Free Software Foundation, either
* version 3 of the License, or (at your option) any later version.<br>
*
* <p>The Security Shepherd project is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
* PURPOSE. See the GNU General Public License for more details.<br>
*
* <p>You should have received a copy of the GNU General Public License along with the Security
* Shepherd project. If not, see <http://www.gnu.org/licenses/>.
*
* @author Mark Denihan
*/
public class DisableScoreboard extends HttpServlet {
private static final long serialVersionUID = 1L;
private static final Logger log = LogManager.getLogger(DisableScoreboard.class);
/**
* Initiated by assignPlayers.jsp. A number of players can be assigned to a new class. Changing
* the actual class of the player is handed by Setter.changePlayerClass
*
* @param classId The identifier of the class to add the players to
* @param players[] An array of player identifiers to add to the specified class
* @param csrfToken
*/
public void doPost(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
// Setting IpAddress To Log and taking header for original IP if forwarded from proxy
ShepherdLogManager.setRequestIp(request.getRemoteAddr(), request.getHeader("X-Forwarded-For"));
log.debug("*** servlets.Admin.DisableScoreboard ***");
PrintWriter out = response.getWriter();
out.print(getServletInfo());
HttpSession ses = request.getSession(true);
Cookie tokenCookie = Validate.getToken(request.getCookies());
Object tokenParmeter = request.getParameter("csrfToken");
if (Validate.validateAdminSession(ses, tokenCookie, tokenParmeter)) {
ShepherdLogManager.setRequestIp(
request.getRemoteAddr(),
request.getHeader("X-Forwarded-For"),
ses.getAttribute("userName").toString());
String htmlOutput = new String();
if (Validate.validateTokens(tokenCookie, tokenParmeter)) {
try {
log.debug("Scoreboard Disabled by: " + ses.getAttribute("userName"));
ScoreboardStatus.disableScoreboard();
htmlOutput = "Scoreboard is now disabled and cannot be accessed.";
log.debug(htmlOutput);
htmlOutput =
"<h3 class='title'>Scoreboard Settings Updated</h3>" + "<p>" + htmlOutput + "</p>";
out.write(htmlOutput);
} catch (Exception e) {
log.error("SetDefaultClass Error: " + e.toString());
out.print(
"<h3 class=\"title\">Scoreboard Configuration Failure</h3><br>"
+ "<p>"
+ "<font color=\"red\">An error Occurred! Please try again.</font>"
+ "<p>");
}
} else {
log.debug("CSRF Tokens did not match");
out.print(
"<h3 class=\"title\">Scoreboard Configuration Failure</h3><br>"
+ "<p>"
+ "<font color=\"red\">An error Occurred! Please try again.</font>"
+ "<p>");
}
} else {
out.print(
"<h3 class=\"title\">Failure</h3><br><p><font color=\"red\">An error Occurred! Please try"
+ " non administrator functions!</font><p>");
}
log.debug("*** DisableScoreboard END ***");
}
}