package servlets.module.challenge;
import dbProcs.Database;
import jakarta.servlet.ServletException;
import jakarta.servlet.http.HttpServlet;
import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
import jakarta.servlet.http.HttpSession;
import java.io.IOException;
import java.io.PrintWriter;
import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.util.Locale;
import java.util.ResourceBundle;
import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;
import org.owasp.encoder.Encode;
import utils.Hash;
import utils.ShepherdLogManager;
import utils.Validate;
/**
* Session Management Challenge Three
*
* This file is part of the Security Shepherd Project.
*
* The Security Shepherd project is free software: you can redistribute it and/or modify it under
* the terms of the GNU General Public License as published by the Free Software Foundation, either
* version 3 of the License, or (at your option) any later version.
*
*
The Security Shepherd project is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
* PURPOSE. See the GNU General Public License for more details.
*
*
You should have received a copy of the GNU General Public License along with the Security
* Shepherd project. If not, see .
*
* @author Mark Denihan
*/
public class SessionManagement3 extends HttpServlet {
private static final long serialVersionUID = 1L;
private static final Logger log = LogManager.getLogger(SessionManagement3.class);
private static String levelName = "Session Management Challenge Three";
private static String levelHash =
"t193c6634f049bcf65cdcac72269eeac25dbb2a6887bdb38873e57d0ef447bc3";
private static String levelResult = "e62008dc47f5eb065229d48963";
public static String getLevelHash() {
return levelHash;
}
/**
* Users must use this functionality to sign in as an administrator to retrieve the result key. If
* the user name is valid but not the passwor, an error message with the user name is returned.
*
* @param userName Sub schema user name
* @param password Sub schema user password
*/
public void doPost(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
// Setting IpAddress To Log and taking header for original IP if forwarded from proxy
ShepherdLogManager.setRequestIp(request.getRemoteAddr(), request.getHeader("X-Forwarded-For"));
HttpSession ses = request.getSession(true);
// Translation Stuff
Locale locale = new Locale(Validate.validateLanguage(request.getSession()));
ResourceBundle errors = ResourceBundle.getBundle("i18n.servlets.errors", locale);
ResourceBundle bundle =
ResourceBundle.getBundle(
"i18n.servlets.challenges.sessionManagement.sessionManagement3", locale);
if (Validate.validateSession(ses)) {
ShepherdLogManager.setRequestIp(
request.getRemoteAddr(),
request.getHeader("X-Forwarded-For"),
ses.getAttribute("userName").toString());
log.debug(levelName + " servlet accessed by: " + ses.getAttribute("userName").toString());
PrintWriter out = response.getWriter();
out.print(getServletInfo());
String htmlOutput = new String();
log.debug(levelName + " Servlet Accessed");
try {
log.debug("Getting Challenge Parameters");
Object nameObj = request.getParameter("subUserName");
Object passObj = request.getParameter("subUserPassword");
String subName = new String();
String subPass = new String();
String userAddress = new String();
if (nameObj != null) {
subName = (String) nameObj;
}
if (passObj != null) {
subPass = (String) passObj;
}
log.debug("subName = " + subName);
log.debug("subPass = " + subPass);
log.debug("Getting ApplicationRoot");
String ApplicationRoot = getServletContext().getRealPath("");
log.debug("Servlet root = " + ApplicationRoot);
Connection conn =
Database.getChallengeConnection(ApplicationRoot, "BrokenAuthAndSessMangChalThree");
log.debug("Checking credentials");
PreparedStatement callstmt;
log.debug("Committing changes made to database");
callstmt = conn.prepareStatement("COMMIT");
callstmt.execute();
log.debug("Changes committed.");
callstmt =
conn.prepareStatement(
"SELECT userName, userAddress, userRole FROM users WHERE userName = ?");
callstmt.setString(1, subName);
log.debug("Executing findUser");
ResultSet resultSet = callstmt.executeQuery();
if (resultSet.next()) {
log.debug("User found");
if (resultSet.getString(3).equalsIgnoreCase("admin")) {
log.debug("Admin Detected");
callstmt =
conn.prepareStatement(
"SELECT userName, userAddress, userRole FROM users WHERE userName = ? AND"
+ " userPassword = SHA(?)");
callstmt.setString(1, subName);
callstmt.setString(2, subPass);
log.debug("Executing authUser");
ResultSet resultSet2 = callstmt.executeQuery();
if (resultSet2.next()) {
log.debug("Successful Admin Login");
// Get key and add it to the output
String userKey =
Hash.generateUserSolution(levelResult, (String) ses.getAttribute("userName"));
htmlOutput =
"
"
+ bundle.getString("response.welcome")
+ " "
+ Encode.forHtml(resultSet2.getString(1))
+ "
"
+ ""
+ bundle.getString("response.resultKey")
+ " "
+ userKey
+ ""
+ "
";
} else {
userAddress =
bundle.getString("response.badPass")
+ " "
+ Encode.forHtml(resultSet.getString(1))
+ "
";
htmlOutput = makeTable(userAddress, bundle);
}
} else {
log.debug("Successful Guest Login");
htmlOutput =
makeTable(bundle)
+ ""
+ bundle.getString("response.welcomeGuest")
+ "
"
+ ""
+ bundle.getString("response.guestMessage")
+ "
";
}
} else {
userAddress = bundle.getString("response.badUser") + "
";
htmlOutput = makeTable(userAddress, bundle);
}
Database.closeConnection(conn);
log.debug("Outputting HTML");
out.write(htmlOutput);
} catch (Exception e) {
out.write(errors.getString("error.funky"));
log.fatal(levelName + " - " + e.toString());
}
} else {
log.error(levelName + " servlet accessed with no session");
}
}
private static String makeTable(String userAddress, ResourceBundle bundle) {
return "";
}
private static String makeTable(ResourceBundle bundle) {
return "";
}
}