package servlets.admin.moduleManagement; import dbProcs.Setter; import jakarta.servlet.ServletException; import jakarta.servlet.http.Cookie; import jakarta.servlet.http.HttpServlet; import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpServletResponse; import jakarta.servlet.http.HttpSession; import java.io.IOException; import java.io.PrintWriter; import org.apache.logging.log4j.LogManager; import org.apache.logging.log4j.Logger; import utils.ShepherdLogManager; import utils.Validate; public class OpenMobileModules extends HttpServlet { private static final long serialVersionUID = 1L; private static final Logger log = LogManager.getLogger(OpenMobileModules.class); /** * Control class used to open all modules when called by an administrator * * @param csrfToken The csrf protection token for this funciton */ public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { String servletName = "servlets.module.OpenMobileModules"; // Setting IpAddress To Log and taking header for original IP if forwarded from proxy ShepherdLogManager.setRequestIp(request.getRemoteAddr(), request.getHeader("X-Forwarded-For")); log.debug("&&& " + servletName + " &&&"); PrintWriter out = response.getWriter(); out.print(getServletInfo()); String htmlOutput = new String(); HttpSession ses = request.getSession(true); Cookie tokenCookie = Validate.getToken(request.getCookies()); Object tokenParmeter = request.getParameter("csrfToken"); if (Validate.validateAdminSession(ses, tokenCookie, tokenParmeter)) { ShepherdLogManager.setRequestIp( request.getRemoteAddr(), request.getHeader("X-Forwarded-For"), ses.getAttribute("userName").toString()); if (Validate.validateTokens(tokenCookie, tokenParmeter)) { String ApplicationRoot = getServletContext().getRealPath(""); Setter.openOnlyMobileCategories(ApplicationRoot); htmlOutput = "

Only Mobile Levels Are Now Open

All of the Security Shepherd" + " Mobile Security levels are now open! All other categories have been" + " closed.

"; } else { log.debug("CSRF Tokens did not match"); htmlOutput = "

Error

CSRF Tokens Did Not Match. Function Aborted

"; } } else { log.error("Invalid Session Detected"); htmlOutput = "
"; } out.write(htmlOutput); log.debug("&&& END " + servletName + " &&&"); } }