/*

 * AccessServlet.java - a sample servlet for "member.access" version 2.0.

 * John Neffenger <john@volano.com>

 */



package COM.volano;

import  java.io.*;

import  java.net.*;

import  java.util.*;

import  javax.servlet.*;

import  javax.servlet.http.*;



/**

 * This servlet verifies a member name and password using the original 2.0

 * format of the "member.access" script.

 *

 * @version 30 April 1999

 * @author  John Neffenger

 */



public class AccessServlet extends HttpServlet {

  protected static final String TRUE     = "<result value=\"true\">";

  protected static final String FALSE    = "<result value=\"false\">";

  protected static final String ERROR    = "<result value=\"error\">";

  protected static final String SUFFIX   = "</result>";

  protected static final int    PASSWORD = 0;	// Password array index

  protected static final int    PROFILE	 = 1;	// Profile array index

  protected static final int    DOCUMENT = 2;	// Document array index



  protected static Hashtable database;		// Acts as a member database



  /**

   * Returns a string containing information about the servlet, such as its

   * author, version, and copyright.

   *

   * @return the servlet information string.

   */



  public String getServletInfo() {

    return getClass().getName() + " 1.0 (http://www.volano.com/)";

  }



  /**

   * Called once by the network service each time it loads this servlet.  This

   * method is guaranteed to finish before any service requests are accepted.

   *

   * @param config the servlet configuration information.

   * @exception javax.servlet.ServletException if a servlet error occurs.

   * @exception java.io.IOException if an I/O error occurs.

   */



  public synchronized void init(ServletConfig config) throws ServletException {

    super.init(config);			// To store servlet configuration

    if (database == null) {		// Do this once among all subclasses



      // Here is where you would open up a connection to a real database.  We

      // use a simple in-memory database here as an example.



      String[][] members = 		// Here's our hard-coded database.

        {{"password1", "This is the profile for Member #1.", "http://www.volano.com/~member1/"},

         {"password2", "This is the profile for Member #2.", null},

         {"password3", "This is the profile for Member #3.", "http://www.volano.com/~member3/"},

         {"password4", "This is the profile for Member #4.", null},

         {"password5", "This is the profile for Member #5.", "http://www.volano.com/~member5/"}};

      database = new Properties();

      for (int i = 0; i < members.length; i++)

        database.put("member" + (i + 1), members[i]);

    }

  }



  /**

   * Called when an HTTP GET request is received for this servlet.

   *

   * @param req encapsulates the request to the servlet.

   * @param res encapsulates the response from the servlet.

   * @exception javax.servlet.ServletException if a servlet error occurs.

   * @exception java.io.IOException if an I/O error occurs.

   */



  public void doGet(HttpServletRequest req, HttpServletResponse res) throws ServletException, IOException {

    res.setContentType("text/plain");

    ServletOutputStream out = res.getOutputStream();

    String name = req.getParameter("name");

    if (name == null || name.length() == 0) {

      out.println(ERROR);		// No name given

      out.println("Missing \"name\" parameter");

    }

    else {

      String password = req.getParameter("password");

      if (password == null || password.length() == 0) {

        out.println(ERROR);		// No password given

        out.println("Missing \"password\" parameter");

      }

      else {



        // Here is where you would do a lookup in the real database.  We simply

        // access the in-memory database as an example here.



        String   memberName  = URLEncoder.encode(name.toLowerCase());

        String[] memberValue = (String[]) database.get(memberName);

        if (memberValue != null && password.equals(memberValue[PASSWORD])) {

          out.println(TRUE);			// Access granted

          out.println(memberValue[PROFILE]);	// Add member profile string

        }

        else

          out.println(FALSE);	// Not a member or bad password

      }

    }

    out.println(SUFFIX);

  }

}