package servlets.admin.moduleManagement;
import dbProcs.Getter;
import jakarta.servlet.ServletException;
import jakarta.servlet.http.Cookie;
import jakarta.servlet.http.HttpServlet;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
import jakarta.servlet.http.HttpSession;
import java.io.IOException;
import java.io.PrintWriter;
import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;
import utils.ModuleBlock;
import utils.ShepherdLogManager;
import utils.Validate;
/**
* Class to manage interaction of an optional blocking module. This is used to prevent users from
* getting ahead of themselfs. By deafult this is not enabled
*
* This file is part of the Security Shepherd Project.
*
*
The Security Shepherd project is free software: you can redistribute it and/or modify it under
* the terms of the GNU General Public License as published by the Free Software Foundation, either
* version 3 of the License, or (at your option) any later version.
*
*
The Security Shepherd project is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
* PURPOSE. See the GNU General Public License for more details.
*
*
You should have received a copy of the GNU General Public License along with the Security
* Shepherd project. If not, see .
*
* @author Mark Denihan
*/
public class EnableModuleBlock extends HttpServlet {
private static final long serialVersionUID = 1L;
private static final Logger log = LogManager.getLogger(EnableModuleBlock.class);
/**
* Used to set a limit to the progress a player can make in a CTF environment
*
* @param moduleId The identifier of the module that is locked, preventing the user from
* continuing in the game
*/
public void doPost(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
// Setting IpAddress To Log and taking header for original IP if forwarded from proxy
ShepherdLogManager.setRequestIp(request.getRemoteAddr(), request.getHeader("X-Forwarded-For"));
log.debug("&&& servlets.module.StopHere &&&");
PrintWriter out = response.getWriter();
out.print(getServletInfo());
HttpSession ses = request.getSession(true);
Cookie tokenCookie = Validate.getToken(request.getCookies());
Object tokenParmeter = request.getParameter("csrfToken");
if (Validate.validateAdminSession(ses, tokenCookie, tokenParmeter)) {
ShepherdLogManager.setRequestIp(
request.getRemoteAddr(),
request.getHeader("X-Forwarded-For"),
ses.getAttribute("userName").toString());
if (Validate.validateTokens(tokenCookie, tokenParmeter)) {
boolean notNull = false;
String storedResult = null;
try {
String applicationRoot = getServletContext().getRealPath("");
log.debug("Getting Parameters");
String moduleId = (String) request.getParameter("moduleId");
;
log.debug("moduleId = " + moduleId.toString());
String blockedMessage =
Validate.validateParameter(request.getParameter("blockedMessage"), 500);
String message = new String();
if (blockedMessage.isEmpty()) {
message = "Ask your administrator when these modules will be made available";
} else {
log.debug("Custom Message Detected");
message = blockedMessage;
}
log.debug("Blocked Message = " + message);
// Validation
notNull = (moduleId != null);
if (notNull) {
storedResult = Getter.getModuleResult(applicationRoot, moduleId);
}
if (notNull && storedResult != null) {
// Data is good, Module exists! Store it as the Blocking module. Storing the message as
// well to show
ModuleBlock.blockerId = moduleId;
ModuleBlock.setMessage(message);
ModuleBlock.blockerEnabled = true;
log.debug("Blocker Enabled on module ");
out.write(
"
Block Enabled
The block has been enabled"
+ " successfully
");
} else {
// Validation Error Responses
if (!notNull) {
log.error("Null values detected");
} else if (storedResult == null) {
log.error("Module not found");
}
out.write("Error
Invalid data Received
");
}
} catch (Exception e) {
log.error("StopHere Error: " + e.toString());
}
} else {
log.debug("CSRF Tokens did not match");
}
} else {
log.error("Invalid Session Detected");
out.write("css/images/loggedOutSheep.jpg");
}
log.debug("&&& END StopHere &&&");
}
}