package net.acai.forum;
/**
 * Title:        清清網絡
 * Description:
 * Copyright:    Copyright (c) 2002
 * Company:      www.qingqing.com
 * @author:       qingqing
 * @version 1.0
 */
import net.acai.forum.*;
import net.acai.database.*;
import java.sql.*;
import java.util.Vector;
import javax.servlet.http.*;
import net.acai.util.*;
public class UserManager{
	public static void createUser(String username,String password)
	throws UserAlreadyExistException,Exception{
		DBConnect dbc=new DBConnect("select * from bbs.myuser where UserName=?");
		dbc.setBytes(1,(new String(username.getBytes("ISO-8859-1"),"GBK")).getBytes());
		java.sql.ResultSet rs=dbc.executeQuery();
		if(rs.next())
			throw new UserAlreadyExistException();
		else{
			dbc.clearParameters();
			dbc.prepareStatement("insert into bbs.myuser (UserName,UserPassword) values(?,?)");
			dbc.setString(1,username);
			dbc.setString(2,password);
			dbc.executeUpdate();
		}
		dbc.close();
	}
	public static User findUser(String userName) throws UserNotFoundException,Exception{
		try{
			DBConnect dbc=new DBConnect("select * from bbs.myuser where UserName like ?");
			dbc.setBytes(1,(new String(userName.trim().getBytes("ISO-8859-1"),"GBK")).getBytes());
			ResultSet rs=dbc.executeQuery();
			if(rs.next()){
				//此處對USER的各種屬性進行定義了
				User tempUser=new User();
				tempUser.setUserID(rs.getInt(1));
				tempUser.setUserName(rs.getString(2));
				tempUser.setUserEmail(rs.getString(3));
				tempUser.setArticle(rs.getInt(4));
				tempUser.setUserPassword(rs.getString(5));
				tempUser.setSign(rs.getString(6));
				tempUser.setSex(rs.getString(7));
				tempUser.setHomePage(rs.getString(8));
				tempUser.setAddDate(rs.getString(9));
				tempUser.setLogins(rs.getInt(10));
				tempUser.setFace(rs.getString(11));
				tempUser.setWidth(rs.getInt(12));
				tempUser.setHeight(rs.getInt(13));
				tempUser.setOicq(rs.getString(14));
				tempUser.setLastLogin(rs.getString(15));
				tempUser.setBbsType(rs.getInt(16));
				tempUser.setUserClass(rs.getInt(18));
				tempUser.setUserGroup(rs.getString(19));
				tempUser.setUserWealth(rs.getInt(20));
				tempUser.setUserEP(rs.getInt(21));
				tempUser.setUserCP(rs.getInt(22));
				tempUser.setTitle(rs.getString(23));
				tempUser.setReann(rs.getString(25));
				dbc.close();
				return tempUser;
			}
			else{
				dbc.close();
				throw new UserNotFoundException("<li>對不起，沒有發現此用戶"+userName+"</li>");
			}

		}
		catch(Exception e){
			e.printStackTrace();
			throw new UserNotFoundException(e.getMessage());
		}

	}
	public static Vector findUsers(String userName) throws UserNotFoundException,Exception{
		try{
			DBConnect dbc=new DBConnect("select * from bbs.myuser where UserName like ?");
			dbc.setBytes(1,(new String(("%"+userName.trim()+"%").getBytes("ISO-8859-1"),"GBK")).getBytes());
			ResultSet rs=dbc.executeQuery();
			if(!rs.next()){
				dbc.close();
				throw new Exception();
			}
			Vector userVector=new Vector();
			do{
				//此處對USER的各種屬性進行定義了
				User tempUser=new User();
				tempUser.setUserID(rs.getInt(1));
				tempUser.setUserName(rs.getString(2));
				tempUser.setUserEmail(rs.getString(3));
				tempUser.setArticle(rs.getInt(4));
				tempUser.setUserPassword(rs.getString(5));
				tempUser.setSign(rs.getString(6));
				tempUser.setSex(rs.getString(7));
				tempUser.setHomePage(rs.getString(8));
				tempUser.setAddDate(rs.getString(9));
				tempUser.setLogins(rs.getInt(10));
				tempUser.setFace(rs.getString(11));
				tempUser.setWidth(rs.getInt(12));
				tempUser.setHeight(rs.getInt(13));
				tempUser.setOicq(rs.getString(14));
				tempUser.setLastLogin(rs.getString(15));
				tempUser.setBbsType(rs.getInt(16));
				tempUser.setUserClass(rs.getInt(18));
				tempUser.setUserGroup(rs.getString(19));
				tempUser.setUserWealth(rs.getInt(20));
				tempUser.setUserEP(rs.getInt(21));
				tempUser.setUserCP(rs.getInt(22));
				tempUser.setTitle(rs.getString(23));
				tempUser.setReann(rs.getString(25));
				userVector.add(tempUser);

			}
			while(rs.next());
			dbc.close();
			return userVector;

		}
		catch(Exception e){
			e.printStackTrace();
			throw new UserNotFoundException(e.getMessage());
		}

	}
	public static void updateUser(HttpServletRequest request) throws Exception{
		String userName=ParamUtil.getString(request,"userName","");
		String userPassword=ParamUtil.getString(request,"userPassword","");
		String userEmail=ParamUtil.getString(request,"userEmail","");
		String face=ParamUtil.getString(request,"face","");
		int width=ParamUtil.getInt(request,"width",0);
		int height=ParamUtil.getInt(request,"height",0);
		String oicq=ParamUtil.getString(request,"oicq");
		String sign=ParamUtil.getString(request,"sign","");
		String myFace=ParamUtil.getString(request,"myface","");
		boolean foundErr=false;
		String errMSG="";
		int sex=0;
		int showRe=0;
		if("".equals(userName)||userName.length()>20)
		{
			errMSG=errMSG+"<br>"+"<li>請輸入您的用戶名(長度不能大于20)。";
			foundErr=true;
		}
		if (userName.indexOf('=')>-1||userName.indexOf('%')>-1||userName.indexOf('?')>-1||userName.indexOf('&')>-1 || userName.indexOf(';')>-1 ||userName.indexOf(',')>0 || userName.indexOf('\'')>-1 || userName.indexOf('+') >-1){
			errMSG=errMSG+"<br>"+"<li>用戶名中含有非法字符。";
			foundErr=true;
		}
		try{
			sex=ParamUtil.getInt(request,"sex");
		}
		catch(NumberFormatException e)
		{
			errMSG=errMSG+"<br>"+"<li>請選擇您的性別。";
			foundErr=true;
		}



		if (userEmail.indexOf('@')<0||userEmail.indexOf('.')<0){
			errMSG=errMSG+"<br>"+"<li>您的Email有錯誤。";
   			foundErr=true;
   		}
   		if (!"".equals(myFace)){
   			if (width==0 || height==0){
				errMSG=errMSG+"<br>"+"<li>請輸入圖片的寬度和高度。";
				foundErr=true;
			}
			else if (width<20|| width>80){
				errMSG=errMSG+"<br>"+"<li>您輸入的圖片寬度不符合標準。";
				foundErr=true;
			}
			else if (height<20 || height>80){
				errMSG=errMSG+"<br>"+"<li>您輸入的圖片高度不符合標準。";
				foundErr=true;
			}
			else face=myFace;

		}
		else
			if ("".equals(face)){
				errMSG=errMSG+"<br>"+"<li>請選擇您的個性頭像。";
				foundErr=true;
			}
			else if (face.endsWith(".gif")){
				width=32;
				height=32;
			}
			else{

				errMSG=errMSG+"<br>"+"<li>您選擇了錯誤的頭像。";
				foundErr=true;
			}
		if(oicq==null)
			oicq="";
		else
			try{
				Integer.parseInt(oicq);
			}
			catch(NumberFormatException e)
			{

				errMSG=errMSG+"<br>"+"<li>Oicq號碼只能是4-10位數字，您可以選擇不輸入。";
				foundErr=true;
			}

		if(!foundErr)
		{
			try{
				DBConnect dbc=new DBConnect("select * from bbs.myuser where username=? ");
				dbc.setBytes(1,(new String(userName.getBytes("ISO-8859-1"),"GBK")).getBytes());


				ResultSet rs=dbc.executeQuery();
				if(rs.next()){
					MD5 md5=new MD5();
					dbc.clearParameters();
					dbc.prepareStatement("update bbs.myuser set userPassword=?,userEmail=?,sign=?,oicq=?,sex=?,face=?,width=?,height=? where userName=?");
					dbc.setBytes(1,(new String(md5.getMD5ofStr(userPassword).getBytes("ISO-8859-1"),"GBK")).getBytes());
					dbc.setBytes(2,(new String(userEmail.getBytes("ISO-8859-1"),"GBK")).getBytes());
					dbc.setBytes(3,(new String(sign.getBytes("ISO-8859-1"),"GBK")).getBytes());
					dbc.setBytes(4,(new String(oicq.getBytes("ISO-8859-1"),"GBK")).getBytes());
					dbc.setInt(5,sex);
					dbc.setBytes(6,(new String(face.getBytes("ISO-8859-1"),"GBK")).getBytes());
					dbc.setInt(7,width);
					dbc.setInt(8,height);
					dbc.setBytes(9,(new String(userName.getBytes("ISO-8859-1"),"GBK")).getBytes());
					dbc.executeUpdate();


				}

				else
					throw new UserNotFoundException();


				//ForumPropertiesManager.resetManager();
				dbc.close();
			}
			catch(UserNotFoundException e){
				errMSG=errMSG+"<br>"+"<li>對不起，您輸入的用戶名已經被注冊，請重新輸入。";
				throw new Exception(errMSG);
			}
			catch(Exception e){
				e.printStackTrace();
				throw e;
			}

		}
		if(foundErr)
			throw new Exception(errMSG);
	}
	public static void delUser(HttpServletRequest request) throws Exception{
		String [] userID=request.getParameterValues("userID");
		DBConnect dbc=new DBConnect();
		String sql;
		for(int i=0;i<userID.length;i++){
			sql="delete from bbs.myuser where userID="+userID[i];
			dbc.executeUpdate(sql);
		}
		dbc.close();


	}
	public static void addAdmin(HttpServletRequest request,int wealthReg,int epReg,int cpReg) throws Exception{
		String userName=ParamUtil.getString(request,"userName","");

		String psw=ParamUtil.getString(request,"psw","");
		String userPassword="";
		String pswc=ParamUtil.getString(request,"pswc","");
		String userEmail=ParamUtil.getString(request,"userEmail","");
		String face=ParamUtil.getString(request,"face","");
		int width=ParamUtil.getInt(request,"width",0);
		int height=ParamUtil.getInt(request,"height",0);
		String oicq=ParamUtil.getString(request,"oicq");
		String sign=ParamUtil.getString(request,"sign","");
		String myFace=ParamUtil.getString(request,"myface","");
		boolean foundErr=false;
		String errMSG="";
		int sex=0;
		int showRe=0;
		if("".equals(userName)||userName.length()>20)
		{
			errMSG=errMSG+"<br>"+"<li>請輸入您的用戶名(長度不能大于20)。";
			foundErr=true;
		}
		if (userName.indexOf('=')>-1||userName.indexOf('%')>-1||userName.indexOf('?')>-1||userName.indexOf('&')>-1 || userName.indexOf(';')>-1 ||userName.indexOf(',')>0 || userName.indexOf('\'')>-1 || userName.indexOf('+') >-1){
			errMSG=errMSG+"<br>"+"<li>用戶名中含有非法字符。";
			foundErr=true;
		}
		try{
			sex=ParamUtil.getInt(request,"sex");
		}
		catch(NumberFormatException e)
		{
			errMSG=errMSG+"<br>"+"<li>請選擇您的性別。";
			foundErr=true;
		}
		try{
			showRe=ParamUtil.getInt(request,"showRe");
		}
		catch(NumberFormatException e){
			errMSG=errMSG+"<br>"+"<li>請選擇您的帖子有回復時是否要提示您。";
			foundErr=true;
		}
		if("".equals(psw) || psw.length()>10){
			errMSG=errMSG+"<br>"+"<li>請輸入您的密碼(長度不能大于10)。";
			foundErr=true;
		}
		if (!pswc.equals(psw)){
			errMSG=errMSG+"<br>"+"<li>您輸入的密碼和確認密碼不一致。";
			foundErr=true;
		}
		else
			userPassword=psw;

		if (userEmail.indexOf('@')<0||userEmail.indexOf('.')<0){
			errMSG=errMSG+"<br>"+"<li>您的Email有錯誤。";
   			foundErr=true;
   		}
   		if (!"".equals(myFace)){
   			if (width==0 || height==0){
				errMSG=errMSG+"<br>"+"<li>請輸入圖片的寬度和高度。";
				foundErr=true;
			}
			else if (width<20|| width>80){
				errMSG=errMSG+"<br>"+"<li>您輸入的圖片寬度不符合標準。";
				foundErr=true;
			}
			else if (height<20 || height>80){
				errMSG=errMSG+"<br>"+"<li>您輸入的圖片高度不符合標準。";
				foundErr=true;
			}
			else face=myFace;

		}
		else
			if ("".equals(face)){
				errMSG=errMSG+"<br>"+"<li>請選擇您的個性頭像。";
				foundErr=true;
			}
			else if (face.endsWith(".gif")){
				width=32;
				height=32;
			}
			else{

				errMSG=errMSG+"<br>"+"<li>您選擇了錯誤的頭像。";
				foundErr=true;
			}
		if(oicq==null)
			oicq="";
		else
			try{
				Integer.parseInt(oicq);
			}
			catch(NumberFormatException e)
			{

				errMSG=errMSG+"<br>"+"<li>Oicq號碼只能是4-10位數字，您可以選擇不輸入。";
				foundErr=true;
			}

		if(!foundErr)
		{
			try{
				DBConnect dbc=new DBConnect("select * from bbs.myuser where username=?");
				dbc.setBytes(1,(new String(userName.getBytes("ISO-8859-1"),"GBK")).getBytes());

				ResultSet rs=dbc.executeQuery();
				if(rs.next()){
					dbc.close();
					throw new UserAlreadyExistException();
				}
				MD5 md5=new MD5();
				dbc.clearParameters();
				dbc.prepareStatement("insert into bbs.myuser ( userName,userPassword,userEmail,userClass,sign,oicq,article,lockuser,sex,showRe,addDate,face,width,height,logins,lastlogin,userWealth,userEP,userCP) values( ?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)");
				dbc.setBytes(1,(new String(userName.getBytes("ISO-8859-1"),"GBK")).getBytes());
				dbc.setBytes(2,(new String(md5.getMD5ofStr(userPassword).getBytes("ISO-8859-1"),"GBK")).getBytes());
				dbc.setBytes(3,(new String(userEmail.getBytes("ISO-8859-1"),"GBK")).getBytes());
				dbc.setInt(4,20);
				dbc.setBytes(5,(new String(sign.getBytes("ISO-8859-1"),"GBK")).getBytes());
				dbc.setBytes(6,(new String(oicq.getBytes("ISO-8859-1"),"GBK")).getBytes());
				dbc.setInt(7,0);
				dbc.setInt(8,0);
				dbc.setInt(9,sex);
				dbc.setInt(10,showRe);
				dbc.setString(11,Format.getDateTime());
				dbc.setBytes(12,(new String(face.getBytes("ISO-8859-1"),"GBK")).getBytes());
				dbc.setInt(13,width);
				dbc.setInt(14,height);
				dbc.setInt(15,1);
				dbc.setString(16,Format.getDateTime());
				dbc.setInt(17,wealthReg);
				dbc.setInt(18,epReg);
				dbc.setInt(19,cpReg);
				dbc.executeUpdate();

				dbc.clearParameters();
				dbc.prepareStatement("update bbs.config set usernum=usernum+1,lastUser=?");
				dbc.setBytes(1,userName.getBytes());
				dbc.executeUpdate();

				String forumName=ForumPropertiesManager.getString("ForumName");
				String sender=forumName;
				String title=forumName+"歡迎您的到來";
				String body=forumName+"全體管理人員歡迎您的到來\n如有任何疑問請及時聯系系統管理員。\n如有任何使用上的問題請查看論壇幫助。\n感謝您注冊本系統，讓我們一起來建設這個網上家園！";
				String sql="insert into bbs.message(incept,sender,title,content,sendtime,flag,issend) values(?,?,?,?,getdate(),0,1)";
				dbc.prepareStatement(sql);
				dbc.setBytes(1,(new String(userName.getBytes("ISO-8859-1"),"GBK")).getBytes());
				dbc.setBytes(2,(new String(sender.getBytes("ISO-8859-1"),"GBK")).getBytes());
				dbc.setBytes(3,(new String(title.getBytes("ISO-8859-1"),"GBK")).getBytes());
				dbc.setBytes(4,(new String(body.getBytes("ISO-8859-1"),"GBK")).getBytes());
				dbc.executeUpdate();
				dbc.close();
				ForumPropertiesManager.resetManager();
			}
			catch(UserAlreadyExistException e){
				errMSG=errMSG+"<br>"+"<li>對不起，您輸入的用戶名已經被注冊，請重新輸入。";
				throw new Exception(errMSG);
			}
			catch(Exception e){
				e.printStackTrace();
				throw e;
			}

		}
		if(foundErr)
			throw new Exception(errMSG);
	}


}