mirrors
/
PretendYoureXyzzy
mirror of https://github.com/ajanata/PretendYoureXyzzy.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

page to add new cards, and let somebody else's IP address in since he was helping

This commit is contained in:
Andy Janata 2012-07-01 23:54:53 -07:00
parent e01359df45
commit 9ef0d0eae0
2 changed files with 139 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

138
WebContent/addcard.jsp Normal file
View File

@ -0,0 +1,138 @@
<?xml version="1.0" encoding="UTF-8" ?>
<%--
Copyright (c) 2012, Andy Janata
All rights reserved.
Redistribution and use in source and binary forms, with or without modification, are permitted
provided that the following conditions are met:
* Redistributions of source code must retain the above copyright notice, this list of conditions
and the following disclaimer.
* Redistributions in binary form must reproduce the above copyright notice, this list of
conditions and the following disclaimer in the documentation and/or other materials provided
with the distribution.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR
IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND
FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR
CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY
WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
--%>
<%--
Administration tools.
@author Andy Janata (ajanata@socialgamer.net)
--%>
<%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8" %>
<%@ page import="net.socialgamer.cah.HibernateUtil" %>
<%@ page import="net.socialgamer.cah.db.BlackCard" %>
<%@ page import="net.socialgamer.cah.db.WhiteCard" %>
<%@ page import="org.hibernate.Session" %>
<%@ page import="org.hibernate.Transaction" %>
<%
String remoteAddr = request.getRemoteAddr();
// TODO better access control than hard-coding IP addresses.
if (!(remoteAddr.equals("0:0:0:0:0:0:0:1") || remoteAddr.equals("127.0.0.1") ||
remoteAddr.equals("98.248.33.90") || remoteAddr.equals("207.161.125.132"))) {
response.sendError(403, "Access is restricted to known hosts");
return;
}
String error = "";
String status = "";
String field = "";
final String color = request.getParameter("color");
if (color != null) {
if ("black".equals(color)) {
final String text = request.getParameter("text");
final String pick_s = request.getParameter("pick");
final String draw_s = request.getParameter("draw");
if (text == null || "".equals(text) || pick_s == null || "".equals(pick_s) || draw_s == null ||
"".equals(draw_s)) {
error = "You didn't specify something.";
} else {
int pick = 0;
int draw = 0;
try {
pick = Integer.parseInt(pick_s);
draw = Integer.parseInt(draw_s);
} catch (NumberFormatException e) {
error = "Something isn't a number.";
}
if (0 == pick) {
error += " Pick can't be 0.";
} else {
final Session s = HibernateUtil.instance.sessionFactory.openSession();
final Transaction transaction = s.beginTransaction();
transaction.begin();
final BlackCard card = new BlackCard();
card.setText(text);
card.setPick(pick);
card.setDraw(draw);
s.save(card);
transaction.commit();
status = "Saved '" + text + "'.";
field = "black";
}
}
} else if ("white".equals(color)) {
final String text = request.getParameter("text");
if (text == null || "".equals(text)) {
error = "You didn't specify something.";
} else {
final Session s = HibernateUtil.instance.sessionFactory.openSession();
final Transaction transaction = s.beginTransaction();
transaction.begin();
final WhiteCard card = new WhiteCard();
card.setText(text);
s.save(card);
transaction.commit();
status = "Saved '" + text + "'.";
field = "white";
}
}
}
%>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>PYX - Add Cards</title>
</head>
<body>
<span style="color:red"><%= error %></span>
<span style="color:blue"><%= status %></span>
<p>Convention is to use four underscores for the blanks on black cards.</p>
<h1 id="black">Black Card</h1>
<form method="post" action="addcard.jsp">
<input type="hidden" name="color" value="black" />
<label for="black_text">Card Text</label><input type="text" id="black_text" name="text" size="150" />
<br/>
<label for="pick">Pick</label><input type="text" id="pick" name="pick" size="3" value="1" />
<br/>
<label for="draw">Draw</label><input type="text" id="draw" name="draw" size="3" value="0" />
<br/>
<input type="submit" value="Add card" />
</form>
<h1 id="white">White Card</h1>
<form method="post" action="addcard.jsp">
<input type="hidden" name="color" value="white" />
<label for="white_text">Card Text</label><input type="text" id="white_text" name="text" size="150" />
<br/>
<input type="submit" value="Add card" />
</form>
<script type="text/javascript">
var field = '<%= field %>';
if ('' != field) {
document.getElementById(field + '_text').focus();
}
</script>
</body>
</html>

2
WebContent/admin.jsp
View File

@ -46,7 +46,7 @@ Administration tools.
String remoteAddr = request.getRemoteAddr();
// TODO better access control than hard-coding IP addresses.
if (!(remoteAddr.equals("0:0:0:0:0:0:0:1") || remoteAddr.equals("127.0.0.1") ||
remoteAddr.equals("98.248.33.90"))) {
remoteAddr.equals("98.248.33.90") || remoteAddr.equals("207.161.125.132"))) {
response.sendError(403, "Access is restricted to known hosts");
return;
}