/* 
    P/P   *  Method: net.sourceforge.pebble.web.action.SaveFileAction__static_init
          */
     1  /*
     2   * Copyright (c) 2003-2006, Simon Brown
     3   * All rights reserved.
     4   *
     5   * Redistribution and use in source and binary forms, with or without
     6   * modification, are permitted provided that the following conditions are met:
     7   *
     8   *   - Redistributions of source code must retain the above copyright
     9   *     notice, this list of conditions and the following disclaimer.
    10   *
    11   *   - Redistributions in binary form must reproduce the above copyright
    12   *     notice, this list of conditions and the following disclaimer in
    13   *     the documentation and/or other materials provided with the
    14   *     distribution.
    15   *
    16   *   - Neither the name of Pebble nor the names of its contributors may
    17   *     be used to endorse or promote products derived from this software
    18   *     without specific prior written permission.
    19   *
    20   * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
    21   * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
    22   * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
    23   * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
    24   * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
    25   * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
    26   * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
    27   * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
    28   * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
    29   * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
    30   * POSSIBILITY OF SUCH DAMAGE.
    31   */
    32  package net.sourceforge.pebble.web.action;
    33  
    34  import net.sourceforge.pebble.Constants;
    35  import net.sourceforge.pebble.domain.FileManager;
    36  import net.sourceforge.pebble.domain.FileMetaData;
    37  import net.sourceforge.pebble.domain.IllegalFileAccessException;
    38  import net.sourceforge.pebble.domain.Blog;
    39  import net.sourceforge.pebble.util.StringUtils;
    40  import net.sourceforge.pebble.web.security.RequireSecurityToken;
    41  import net.sourceforge.pebble.web.view.ForbiddenView;
    42  import net.sourceforge.pebble.web.view.ForwardView;
    43  import net.sourceforge.pebble.web.view.View;
    44  
         /* 
    P/P   *  Method: void net.sourceforge.pebble.web.action.SaveFileAction()
          */
    45  import javax.servlet.ServletException;
    46  import javax.servlet.http.HttpServletRequest;
    47  import javax.servlet.http.HttpServletResponse;
    48  import java.io.IOException;
    49  
    50  /**
    51   * Allows the user to save an existing file.
    52   *
    53   * @author    Simon Brown
    54   */
    55  @RequireSecurityToken
    56  public class SaveFileAction extends AbstractFileAction {
    57  
    58    /**
    59     * Peforms the processing associated with this action.
    60     *
    61     * @param request  the HttpServletRequest instance
    62     * @param response the HttpServletResponse instance
    63     * @return the name of the next view
    64     */
    65    public View process(HttpServletRequest request, HttpServletResponse response) throws ServletException {
             /* 
    P/P       *  Method: View process(HttpServletRequest, HttpServletResponse)
              * 
              *  Preconditions:
              *    request != null
              *    this.model != null
              *    this.model.data != null
              * 
              *  Presumptions:
              *    java.util.HashMap:get(...)@63 != null
              *    javax.servlet.http.HttpServletRequest:getParameter(...)@68 != null
              * 
              *  Postconditions:
              *    return_value in Addr_Set{&new ForwardView(process#7),&new ForbiddenView(process#5)}
              *    new ForbiddenView(process#5) num objects <= 1
              *    new ForwardView(process#7) num objects <= 1
              *    new ForwardView(process#7).uri == &".editFile.secureaction"
              * 
              *  Test Vectors:
              *    java.lang.String:equals(...)@77: {0}, {1}
              */
    66      Blog blog = (Blog)getModel().get(Constants.BLOG_KEY);
    67      String name = request.getParameter("name");
    68      String type = request.getParameter("type");
    69      String path = request.getParameter("path");
    70      String content = request.getParameter("fileContent");
    71  
    72      try {
    73        FileManager fileManager = new FileManager(blog, type);
    74        fileManager.saveFile(path, name, content);
    75  
    76        // if it's a theme file, also save a copy to blog.dir/theme
    77        if (type.equals(FileMetaData.THEME_FILE)) {
    78          fileManager = new FileManager(blog, FileMetaData.BLOG_DATA);
    79          fileManager.saveFile("/theme" + path, name, content);
    80        }
    81  
    82        blog.info("File \"" + StringUtils.transformHTML(name) + "\" saved.");
    83      } catch (IllegalFileAccessException e) {
    84        return new ForbiddenView();
    85      } catch (IOException ioe) {
    86        throw new ServletException(ioe);
    87      }
    88  
    89      return new ForwardView("/editFile.secureaction");
    90    }
    91  
    92  }