dao.PasswordUpdateQuery.java Source code

Introduction

Here is the source code for dao.PasswordUpdateQuery.java

Source

/**
* Copyright (c) 2001-2012 "Redbasin Networks, INC" [http://redbasin.org]
*
* This file is part of Redbasin OpenDocShare community project.
*
* Redbasin OpenDocShare is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*/

package dao;

import java.sql.Connection;
import java.sql.PreparedStatement;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import util.RegexStrUtil;
import util.WebUtil;

/**
 * This class implements PasswordUpdateQuery
 * Used by <code>Userpage</code> bean
 * In future used by <code>Registration</code> bean
 * @author Smitha Gudur (smitha@redbasin.com)
 * @version $Revision: 1.1 $
 */
class PasswordUpdateQuery extends BaseCommonQuery {

    protected final Log logger = LogFactory.getLog(getClass());

    /**
     * Method adds a user to diarynet
     * @param conn - the connection
     * @param params
     *    login - the login
     *    fname - the fname
     *    lname - the lname
     *    mname - the mname
     *    email - the email
     * @throws BaseDaoException - when error occurs
     **/
    //public void run(Connection conn, String login, String fname, String lname, 
    //String mname, String email, String password, int aCode, String aFlag ) throws BaseDaoException {

    public void run(Connection conn, String[] params) throws BaseDaoException {

        String password = params[0];
        String login = params[1];
        if (RegexStrUtil.isNull(password) || RegexStrUtil.isNull(login)) {
            throw new BaseDaoException("params are null");
        }

        try {
            if (WebUtil.isPasswordEncrypted()) {
                if (WebUtil.isEncryptionMD5()) {
                    PreparedStatement stmt = conn.prepareStatement(
                            "update hdlogin set password=md5('" + password + "') where login='" + login + "'");
                    stmt.executeUpdate();
                } else {
                    if (WebUtil.isEncryptionSHA1()) {
                        PreparedStatement stmt = conn.prepareStatement(
                                "update hdlogin set password=sha1('" + password + "') where login='" + login + "'");
                        stmt.executeUpdate();
                    }
                }
            } else {
                PreparedStatement stmt = conn.prepareStatement(
                        "update hdlogin set password='" + password + "' where login='" + login + "'");
                stmt.executeUpdate();
                String query = ("update hdlogin set password='" + password + "' where login='" + login + "'");
                logger.info("PasswordUpdateQuery = " + query);
            }
        } catch (Exception e) {
            logger.warn("Error occured while executing PasswordUpdateQuery", e);
            throw new BaseDaoException("Error occured while executing PasswordUpdateQuery", e);
        }
    }
}