package servlets.module.challenge;
import dbProcs.Database;
import dbProcs.Getter;
import jakarta.servlet.ServletException;
import jakarta.servlet.http.HttpServlet;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
import jakarta.servlet.http.HttpSession;
import java.io.IOException;
import java.io.PrintWriter;
import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.util.Locale;
import java.util.ResourceBundle;
import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;
import org.owasp.encoder.Encode;
import utils.Hash;
import utils.ShepherdLogManager;
import utils.Validate;
/**
* Session Management Challenge Two
*
* This file is part of the Security Shepherd Project.
*
* The Security Shepherd project is free software: you can redistribute it and/or modify it under
* the terms of the GNU General Public License as published by the Free Software Foundation, either
* version 3 of the License, or (at your option) any later version.
*
*
The Security Shepherd project is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
* PURPOSE. See the GNU General Public License for more details.
*
*
You should have received a copy of the GNU General Public License along with the Security
* Shepherd project. If not, see .
*
* @author Mark Denihan
*/
public class SessionManagement2 extends HttpServlet {
private static final long serialVersionUID = 1L;
private static final Logger log = LogManager.getLogger(SessionManagement2.class);
private static String levelName = "Session Management Challenge Two";
private static String levelHash =
"d779e34a54172cbc245300d3bc22937090ebd3769466a501a5e7ac605b9f34b7";
/**
* The user attempts to use this function to sign into a sub schema. If they successfully sign in
* then they are able to retrieve the result key for the challenge If they sign in with a correct
* user name but incorrect password then the email address of the user will be returned in a error
* message
*
* @param subName Sub schema user name
* @param subName Sub schema user password
*/
public void doPost(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
// Setting IpAddress To Log and taking header for original IP if forwarded from proxy
ShepherdLogManager.setRequestIp(request.getRemoteAddr(), request.getHeader("X-Forwarded-For"));
HttpSession ses = request.getSession(true);
// Translation Stuff
Locale locale = new Locale(Validate.validateLanguage(request.getSession()));
ResourceBundle errors = ResourceBundle.getBundle("i18n.servlets.errors", locale);
ResourceBundle bundle =
ResourceBundle.getBundle(
"i18n.servlets.challenges.sessionManagement.sessionManagement2", locale);
if (Validate.validateSession(ses)) {
ShepherdLogManager.setRequestIp(
request.getRemoteAddr(),
request.getHeader("X-Forwarded-For"),
ses.getAttribute("userName").toString());
log.debug(levelName + " servlet accessed by: " + ses.getAttribute("userName").toString());
PrintWriter out = response.getWriter();
out.print(getServletInfo());
String htmlOutput = new String();
log.debug(levelName + " Servlet accessed");
try {
log.debug("Getting Challenge Parameters");
Object nameObj = request.getParameter("subName");
Object passObj = request.getParameter("subPassword");
String subName = new String();
String subPass = new String();
String userAddress = new String();
if (nameObj != null) {
subName = (String) nameObj;
}
if (passObj != null) {
subPass = (String) passObj;
}
log.debug("subName = " + subName);
log.debug("subPass = " + subPass);
log.debug("Getting ApplicationRoot");
String ApplicationRoot = getServletContext().getRealPath("");
log.debug("Servlet root = " + ApplicationRoot);
Connection conn =
Database.getChallengeConnection(ApplicationRoot, "BrokenAuthAndSessMangChalTwo");
log.debug("Checking credentials");
PreparedStatement callstmt;
log.debug("Committing changes made to database");
callstmt = conn.prepareStatement("COMMIT");
callstmt.execute();
log.debug("Changes committed.");
callstmt =
conn.prepareStatement(
"SELECT userName, userAddress FROM users WHERE userName = ? AND userPassword ="
+ " SHA(?)");
callstmt.setString(1, subName);
callstmt.setString(2, subPass);
log.debug("Executing authUser");
ResultSet resultSet = callstmt.executeQuery();
if (resultSet.next()) {
log.debug("Successful Login");
// Get key and add it to the output
String userKey =
Hash.generateUserSolution(
Getter.getModuleResultFromHash(ApplicationRoot, levelHash),
(String) ses.getAttribute("userName"));
htmlOutput =
"
"
+ bundle.getString("response.welcome")
+ " "
+ Encode.forHtml(resultSet.getString(1))
+ "
"
+ ""
+ bundle.getString("response.resultKey")
+ " "
+ userKey
+ ""
+ "
";
} else {
log.debug("Incorrect credentials, checking if user name correct");
callstmt = conn.prepareStatement("SELECT userAddress FROM users WHERE userName = ?");
callstmt.setString(1, subName);
log.debug("Executing getAddress");
resultSet = callstmt.executeQuery();
if (resultSet.next()) {
log.debug("User Found");
userAddress =
bundle.getString("response.badPass")
+ " "
+ Encode.forHtml(resultSet.getString(1))
+ "
";
} else {
userAddress = bundle.getString("response.badUser") + "
";
}
htmlOutput = makeTable(userAddress, bundle);
}
Database.closeConnection(conn);
log.debug("Outputting HTML");
out.write(htmlOutput);
} catch (Exception e) {
out.write(errors.getString("error.funky"));
log.fatal(levelName + " - " + e.toString());
}
} else {
log.error(levelName + " servlet accessed with no session");
}
}
private static String makeTable(String userAddress, ResourceBundle bundle) {
return "";
}
}