fixed 2 problems with john's code: publish_path shouldn't be used, and the
[mir.git] / source / mircoders / servlet / ServletModuleOpenIndy.java
index be5d5a9..58a79a6 100755 (executable)
-package mircoders.servlet;
-
-import java.io.*;
-import java.sql.*;
-import java.util.*;
-import javax.servlet.*;
-import javax.servlet.http.*;
-
-import freemarker.template.*;
-import com.oreilly.servlet.multipart.*;
-import com.oreilly.servlet.*;
-
-import mir.servlet.*;
-import mir.module.*;
-import mir.misc.*;
-import mir.entity.*;
-import mir.storage.*;
-
-import mircoders.entity.*;
-import mircoders.storage.*;
-import mircoders.module.*;
-import mircoders.producer.*;
-
-/*
- *  ServletModuleOpenIndy -
- *   is the open-access-servlet, which is responsible for
- *    adding comments to articles &
- *    open-postings to the newswire
- *
- * @author RK
- */
-
-public class ServletModuleOpenIndy extends ServletModule
-{
-
-  private String          commentFormTemplate, commentFormDoneTemplate;
-  private String          postingFormTemplate, postingFormDoneTemplate;
-  private ModuleContent   contentModule;
-  private ModuleImages    imageModule;
-  private String          directOp ="yes";
-
-  // Singelton / Kontruktor
-  private static ServletModuleOpenIndy instance = new ServletModuleOpenIndy();
-  public static ServletModule getInstance() { return instance; }
-
-  private ServletModuleOpenIndy() {
-    try {
-      theLog = Logfile.getInstance(MirConfig.getProp("Home") + MirConfig.getProp("ServletModule.OpenIndy.Logfile"));
-      commentFormTemplate = MirConfig.getProp("ServletModule.OpenIndy.CommentTemplate");
-      commentFormDoneTemplate = MirConfig.getProp("ServletModule.OpenIndy.CommentDoneTemplate");
-      postingFormTemplate = MirConfig.getProp("ServletModule.OpenIndy.PostingTemplate");
-      postingFormDoneTemplate = MirConfig.getProp("ServletModule.OpenIndy.PostingDoneTemplate");
-      directOp = MirConfig.getProp("DirectOpenposting").toLowerCase();
-      //directOp="yes";
-      mainModule = new ModuleComment(DatabaseComment.getInstance());
-      contentModule = new ModuleContent(DatabaseContent.getInstance());
-      imageModule = new ModuleImages(DatabaseImages.getInstance());
-      defaultAction="addposting";
-    }
-    catch (StorageObjectException e) {
-        theLog.printError("servletmoduleopenindy could not be initialized");
-    }
-  }
-
-
-  /**
-   *  Method for making a comment
-   */
-
-  public void addcomment(HttpServletRequest req, HttpServletResponse res) throws ServletModuleException
-  {
-    String aid = req.getParameter("aid"); // the article id the comment will belong to
-    if (aid!=null && !aid.equals(""))
-    {
-      SimpleHash mergeData = new SimpleHash();
-      // ok, article
-      mergeData.put("aid", aid);
-      deliver(req, res, mergeData, commentFormTemplate);
-    }
-    else throw new ServletModuleException("aid not set!");
-  }
-
-  /**
-   *  Method for inserting a comment into the Database and delivering
-   *  the commentDone Page
-   */
-
-  public void inscomment(HttpServletRequest req, HttpServletResponse res) throws ServletModuleException
-  {
-    String aid = req.getParameter("to_media"); // the article id the comment will belong to
-    if (aid!=null && !aid.equals(""))
-    {
-      // ok, collecting data from form
-      try {
-        HashMap withValues = getIntersectingValues(req, DatabaseComment.getInstance());
-        withValues.put("is_published","1");
-
-        // inserting into database
-        String id = mainModule.add(withValues);
-
-        // producing new page
-        new ProducerContent().handle(null, null, true, false, aid);
-
-        // sync the server
-        int exitValue = Helper.rsync();
-                               theLog.printDebugInfo("rsync:"+exitValue);
-
-        // redirecting to url
-        // should implement back to article
-        SimpleHash mergeData = new SimpleHash();
-        deliver(req, res, mergeData, commentFormDoneTemplate);
-      }
-      catch (StorageObjectException e) { throw new ServletModuleException(e.toString());}
-      catch (ModuleException e) { throw new ServletModuleException(e.toString());}
-
-    }
-    else throw new ServletModuleException("aid not set!");
-
-  }
-
-  /**
-   *  Method for delivering the form-Page for open posting
-   */
-
-  public void addposting(HttpServletRequest req, HttpServletResponse res) throws ServletModuleException
-  {
-    SimpleHash mergeData = new SimpleHash();
-    /** @todo popups missing */
-    try{
-      mergeData.put("languagePopUpData",DatabaseLanguage.getInstance().getPopupData());
-    } catch (Exception e) {
-      theLog.printError("languagePopUpData failed");
-    }
-    deliver(req, res, mergeData, postingFormTemplate);
-  }
-
-  /**
-   *  Method for inserting an open posting into the Database and delivering
-   *  the postingDone Page
-   */
-
-  public void insposting(HttpServletRequest req, HttpServletResponse res)
-    throws ServletModuleException
-  {
-    SimpleHash mergeData = new SimpleHash();
-    boolean setMedia=false;
-
-    try {
-
-      WebdbMultipartRequest mp = new WebdbMultipartRequest(req);
-      HashMap withValues = mp.getParameters();
-      byte[] mediaData=mp.getMedia();
-      String fileName=mp.getFilename();
-      
-      theLog.printDebugInfo("ContentType: "+mp.getContentType());
-      
-      // if op contains imagedata
-      String mediaId=null;
-      if (mediaData!=null && fileName!=null) {
-        HashMap mediaValues = new HashMap();
-        mediaValues.put("date", StringUtil.date2webdbDate(new GregorianCalendar()));
-        mediaValues.put("to_publisher", "1"); // op user
-        mediaValues.put("to_media_folder", "7"); // op media_folder
-        mediaValues.put("is_produced", "0");
-        mediaValues.put("is_published","1");
-
-        String mediaTitle=(String)withValues.get("media_title");
-        if (mediaTitle==null)
-          mediaTitle = (String)withValues.get("title");
-        mediaValues.put("title",mediaTitle);
-
-        if (fileName.toLowerCase().endsWith("rm")) {
-          // this is video !!
-          //theLog.printDebugInfo("--GOT VIDEO");
-          EntityVideo entVideo = new EntityVideo(DatabaseVideos.getInstance());
-          entVideo.setValues(mediaValues);
-          mediaId = entVideo.insert();
-          entVideo.setVideoData(mediaData);
-        }
-        else if (fileName.toLowerCase().endsWith(".jpg") || fileName.toLowerCase().endsWith(".gif")) {
-          // this is image !!
-          mediaId = imageModule.add(mediaValues);
-          EntityImage entImage = (EntityImage)imageModule.getById(mediaId);
-
-          int fileType = -1;
-          if (fileName.toLowerCase().endsWith(".jpg")) fileType=0;
-          if (fileName.toLowerCase().endsWith(".gif")) fileType=1;
-          if (fileType>=0) {
-            entImage.setImage(mediaData, fileType);
-            setMedia=true;
-          }
-          else
-            theLog.printDebugInfo("Wrong file uploaded!" + fileName);
-        }
-      }
-
-      withValues.put("date", StringUtil.date2webdbDate(new GregorianCalendar()));
-      withValues.put("publish_path", StringUtil.webdbDate2path((String)withValues.get("date")));
-      withValues.put("is_produced", "0");
-      // op-articles are immediatly published
-      withValues.put("is_published","1");
-      // if op direct article-type == newswire
-      if (directOp.equals("yes")) withValues.put("to_article_type","1");
-      theLog.printDebugInfo("direct op: "+directOp);
-      
-      // owner is openposting user
-      withValues.put("to_publisher","1");
-      if (withValues.get("creator").toString().equals(""))
-        withValues.put("creator","Anonym");
-
-      // inserting  content into database
-      String id = contentModule.add(withValues);
-      
-      // inserting content and media id in table content_x_media
-      try{
-        DatabaseContentToMedia.getInstance().setMedia(id,mediaId);
-        theLog.printError("setting content_x_topic success");
-      } catch (Exception e) {
-        theLog.printError("setting content_x_topic failed");
-      }
-
-
-      // producing new page
-      if(mediaId!=null){
-        new ProducerImages().handle(null, null, false, false, mediaId);
-      }
-      // producing openpostinglist
-      new ProducerOpenPosting().handle(null,null,false,false);
-      // producing new page
-      new ProducerContent().handle(null, null, false, false,id);
-      //if direct op producing startpage
-      if (directOp.equals("yes")) new ProducerStartPage().handle(null,null);
-      
-
-      // sync the server
-      //should be configureable
-      int exitValue = Helper.rsync();
-                       theLog.printDebugInfo("rsync: "+exitValue);
-
-    }
-    catch (IOException e) { throw new ServletModuleException(e.toString());}
-    catch (StorageObjectException e) { throw new ServletModuleException(e.toString());}
-    catch (ModuleException e) { throw new ServletModuleException(e.toString());}
-
-    deliver(req, res, mergeData, postingFormDoneTemplate);
-  }
-
-}
-
+/*\r
+ * Copyright (C) 2001, 2002  The Mir-coders group\r
+ *\r
+ * This file is part of Mir.\r
+ *\r
+ * Mir is free software; you can redistribute it and/or modify\r
+ * it under the terms of the GNU General Public License as published by\r
+ * the Free Software Foundation; either version 2 of the License, or\r
+ * (at your option) any later version.\r
+ *\r
+ * Mir is distributed in the hope that it will be useful,\r
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of\r
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the\r
+ * GNU General Public License for more details.\r
+ *\r
+ * You should have received a copy of the GNU General Public License\r
+ * along with Mir; if not, write to the Free Software\r
+ * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA\r
+ *\r
+ * In addition, as a special exception, The Mir-coders gives permission to link\r
+ * the code of this program with the com.oreilly.servlet library, any library\r
+ * licensed under the Apache Software License, The Sun (tm) Java Advanced\r
+ * Imaging library (JAI), The Sun JIMI library (or with modified versions of\r
+ * the above that use the same license as the above), and distribute linked\r
+ * combinations including the two.  You must obey the GNU General Public\r
+ * License in all respects for all of the code used other than the above\r
+ * mentioned libraries.  If you modify this file, you may extend this exception\r
+ * to your version of the file, but you are not obligated to do so.  If you do\r
+ * not wish to do so, delete this exception statement from your version.\r
+ */\r
+\r
+package mircoders.servlet;\r
+\r
+import java.io.*;\r
+import java.lang.*;\r
+import java.sql.*;\r
+import java.util.*;\r
+import java.net.*;\r
+import java.lang.reflect.*;\r
+import javax.servlet.*;\r
+import javax.servlet.http.*;\r
+\r
+import freemarker.template.*;\r
+import com.oreilly.servlet.multipart.*;\r
+import com.oreilly.servlet.*;\r
+\r
+import org.apache.commons.net.smtp.*;\r
+\r
+import org.xml.sax.InputSource;\r
+import org.xml.sax.XMLReader;\r
+\r
+import org.apache.fop.apps.Driver;\r
+import org.apache.fop.apps.Version;\r
+import org.apache.fop.apps.XSLTInputHandler;\r
+\r
+import org.apache.lucene.analysis.standard.StandardAnalyzer;\r
+import org.apache.lucene.search.*;\r
+import org.apache.lucene.document.Document;\r
+import org.apache.lucene.document.Field;\r
+import org.apache.lucene.analysis.standard.*;\r
+import org.apache.lucene.queryParser.*;\r
+\r
+import org.apache.log.*;\r
+\r
+import mir.servlet.*;\r
+import mir.module.*;\r
+import mir.misc.*;\r
+import mir.entity.*;\r
+import mir.storage.*;\r
+import mir.media.*;\r
+import mir.log.*;\r
+import mir.util.StringRoutines;\r
+\r
+import mircoders.entity.*;\r
+import mircoders.storage.*;\r
+import mircoders.module.*;\r
+import mircoders.producer.*;\r
+import mircoders.media.MediaRequest;\r
+import mircoders.global.*;\r
+import mircoders.localizer.*;\r
+import mircoders.search.*;\r
+\r
+/*\r
+ *  ServletModuleOpenIndy -\r
+ *   is the open-access-servlet, which is responsible for\r
+ *    adding comments to articles &\r
+ *    open-postings to the newswire\r
+ *\r
+ * @author mir-coders group\r
+ * @version $Id: ServletModuleOpenIndy.java,v 1.56 2003/01/21 18:03:09 zapata Exp $\r
+ *\r
+ */\r
+\r
+public class ServletModuleOpenIndy extends ServletModule\r
+{\r
+\r
+  private String        commentFormTemplate, commentFormDoneTemplate,\r
+    commentFormDupeTemplate;\r
+  private String        postingFormTemplate, postingFormDoneTemplate,\r
+    postingFormDupeTemplate;\r
+  private String        searchResultsTemplate;\r
+  private String        prepareMailTemplate,sentMailTemplate;\r
+  private ModuleContent contentModule;\r
+  private ModuleComment commentModule;\r
+  private ModuleImages  imageModule;\r
+  private ModuleTopics  themenModule;\r
+  private String        directOp ="yes";\r
+  private String        passwdProtection ="yes";\r
+  // Singelton / Kontruktor\r
+  private static ServletModuleOpenIndy instance = new ServletModuleOpenIndy();\r
+  public static ServletModule getInstance() { return instance; }\r
+\r
+  private ServletModuleOpenIndy() {\r
+    try {\r
+      logger = new LoggerWrapper("ServletModule.OpenIndy");\r
+\r
+      commentFormTemplate = MirConfig.getProp("ServletModule.OpenIndy.CommentTemplate");\r
+      commentFormDoneTemplate = MirConfig.getProp("ServletModule.OpenIndy.CommentDoneTemplate");\r
+      commentFormDupeTemplate = MirConfig.getProp("ServletModule.OpenIndy.CommentDupeTemplate");\r
+      postingFormTemplate = MirConfig.getProp("ServletModule.OpenIndy.PostingTemplate");\r
+      postingFormDoneTemplate = MirConfig.getProp("ServletModule.OpenIndy.PostingDoneTemplate");\r
+      postingFormDupeTemplate = MirConfig.getProp("ServletModule.OpenIndy.PostingDupeTemplate");\r
+      searchResultsTemplate = MirConfig.getProp("ServletModule.OpenIndy.SearchResultsTemplate");\r
+      prepareMailTemplate = MirConfig.getProp("ServletModule.OpenIndy.PrepareMailTemplate");\r
+      sentMailTemplate = MirConfig.getProp("ServletModule.OpenIndy.SentMailTemplate");\r
+      directOp = MirConfig.getProp("DirectOpenposting").toLowerCase();\r
+      passwdProtection = MirConfig.getProp("PasswdProtection").toLowerCase();\r
+      mainModule = new ModuleComment(DatabaseComment.getInstance());\r
+      contentModule = new ModuleContent(DatabaseContent.getInstance());\r
+      themenModule = new ModuleTopics(DatabaseTopics.getInstance());\r
+      imageModule = new ModuleImages(DatabaseImages.getInstance());\r
+      defaultAction="addposting";\r
+\r
+    }\r
+    catch (StorageObjectException e) {\r
+      logger.error("servletmoduleopenindy could not be initialized: " + e.getMessage());\r
+    }\r
+  }\r
+\r
+\r
+  /**\r
+   *  Method for making a comment\r
+   */\r
+\r
+  public void addcomment(HttpServletRequest req, HttpServletResponse res) throws ServletModuleException\r
+  {\r
+    String aid = req.getParameter("aid"); // the article id the comment will belong to\r
+    String language = req.getParameter("language");\r
+\r
+    if (aid!=null && !aid.equals("")) {\r
+      try {\r
+        SimpleHash mergeData = new SimpleHash();\r
+\r
+        // onetimepasswd\r
+        if (passwdProtection.equals("yes")) {\r
+          String passwd = this.createOneTimePasswd();\r
+          System.out.println(passwd);\r
+          HttpSession session = req.getSession(false);\r
+          session.setAttribute("passwd", passwd);\r
+          mergeData.put("passwd", passwd);\r
+        }\r
+\r
+        if (language != null) {\r
+          HttpSession session = req.getSession(false);\r
+          session.setAttribute("Locale", new Locale(language, ""));\r
+          session.setAttribute("passwd", language);\r
+        }\r
+\r
+        mergeData.put("aid", aid);\r
+\r
+        SimpleHash extraInfo = new SimpleHash();\r
+        extraInfo.put("languagePopUpData", DatabaseLanguage.getInstance().getPopupData());\r
+\r
+        deliver(req, res, mergeData, extraInfo, commentFormTemplate);\r
+      }\r
+      catch (Throwable t) {\r
+        throw new ServletModuleException("ServletModuleOpenIndy.addcomment: " + t.getMessage());\r
+      }\r
+    }\r
+    else throw new ServletModuleException("aid not set!");\r
+  }\r
+\r
+  /**\r
+   *  Method for inserting a comment into the Database and delivering\r
+   *  the commentDone Page\r
+   */\r
+\r
+  public void inscomment(HttpServletRequest req, HttpServletResponse res)\r
+    throws ServletModuleException,ServletModuleUserException\r
+  {\r
+    String aid = req.getParameter("to_media"); // the article id the comment will belong to\r
+    if (aid!=null && !aid.equals(""))\r
+      {\r
+        // ok, collecting data from form\r
+        try {\r
+          HashMap withValues = getIntersectingValues(req, DatabaseComment.getInstance());\r
+\r
+          //no html in comments(for now)\r
+          for (Iterator i=withValues.keySet().iterator(); i.hasNext(); ){\r
+            String k=(String)i.next();\r
+            String v=(String)withValues.get(k);\r
+\r
+            withValues.put(k,StringUtil.removeHTMLTags(v));\r
+          }\r
+          withValues.put("is_published","1");\r
+          withValues.put("to_comment_status","1");\r
+\r
+          //checking the onetimepasswd\r
+          if(passwdProtection.equals("yes")){\r
+            HttpSession session = req.getSession(false);\r
+            String sessionPasswd = (String)session.getAttribute("passwd");\r
+            if ( sessionPasswd == null){\r
+              throw new ServletModuleUserException("Lost password");\r
+            }\r
+            String passwd = req.getParameter("passwd");\r
+            if ( passwd == null || (!sessionPasswd.equals(passwd))) {\r
+              throw new ServletModuleUserException("Missing password");\r
+            }\r
+            session.invalidate();\r
+          }\r
+\r
+          // inserting into database\r
+          String id = mainModule.add(withValues);\r
+          logger.debug("id: "+id);\r
+          //insert was not successfull\r
+          if(id==null){\r
+            deliver(req, res, new SimpleHash(), commentFormDupeTemplate);\r
+          } else {\r
+            DatabaseContent.getInstance().setUnproduced("id="+aid);\r
+\r
+            try {\r
+              EntityComment comment = (EntityComment) DatabaseComment.getInstance().selectById(id);\r
+              MirGlobal.localizer().openPostings().afterCommentPosting(comment);\r
+            }\r
+            catch (Throwable t) {\r
+              throw new ServletModuleException(t.getMessage());\r
+            }\r
+          }\r
+\r
+          // redirecting to url\r
+          // should implement back to article\r
+          SimpleHash mergeData = new SimpleHash();\r
+          deliver(req, res, mergeData, commentFormDoneTemplate);\r
+        }\r
+        catch (StorageObjectException e) { throw new ServletModuleException(e.toString());}\r
+        catch (ModuleException e) { throw new ServletModuleException(e.toString());}\r
+\r
+      }\r
+    else throw new ServletModuleException("aid not set!");\r
+\r
+  }\r
+\r
+  /**\r
+   *  Method for delivering the form-Page for open posting\r
+   */\r
+\r
+  public void addposting(HttpServletRequest req, HttpServletResponse res)\r
+    throws ServletModuleException {\r
+    SimpleHash mergeData = new SimpleHash();\r
+\r
+    // onetimepasswd\r
+    if(passwdProtection.equals("yes")){\r
+      String passwd = this.createOneTimePasswd();\r
+      System.out.println(passwd);\r
+      HttpSession session = req.getSession(false);\r
+      session.setAttribute("passwd",passwd);\r
+      mergeData.put("passwd", passwd);\r
+    }\r
+\r
+    String maxMedia = MirConfig.getProp("ServletModule.OpenIndy.MaxMediaUploadItems");\r
+    String defaultMedia = MirConfig.getProp("ServletModule.OpenIndy.DefaultMediaUploadItems");\r
+    String numOfMedia = req.getParameter("medianum");\r
+\r
+    if(numOfMedia==null||numOfMedia.equals("")){\r
+      numOfMedia=defaultMedia;\r
+    }\r
+    else if(Integer.parseInt(numOfMedia) > Integer.parseInt(maxMedia)) {\r
+      numOfMedia = maxMedia;\r
+    }\r
+\r
+    int mediaNum = Integer.parseInt(numOfMedia);\r
+    SimpleList mediaFields = new SimpleList();\r
+    for(int i =0; i<mediaNum;i++){\r
+      Integer mNum = new Integer(i+1);\r
+      mediaFields.add(mNum.toString());\r
+    }\r
+    mergeData.put("medianum",numOfMedia);\r
+    mergeData.put("mediafields",mediaFields);\r
+\r
+\r
+    SimpleHash extraInfo = new SimpleHash();\r
+    try{\r
+      extraInfo.put("languagePopUpData", DatabaseLanguage.getInstance().getPopupData() );\r
+      extraInfo.put("themenPopupData", themenModule.getTopicsAsSimpleList());\r
+\r
+      extraInfo.put("topics", themenModule.getTopicsList());\r
+\r
+    }\r
+    catch (Exception e) {\r
+      logger.error("languagePopUpData or getTopicslist failed "+e.toString());\r
+      throw new ServletModuleException("OpenIndy -- failed getting language or topics: "+e.toString());\r
+    }\r
+\r
+\r
+\r
+    deliver(req, res, mergeData, extraInfo, postingFormTemplate);\r
+  }\r
+\r
+  /**\r
+   *  Method for inserting an open posting into the Database and delivering\r
+   *  the postingDone Page\r
+   */\r
+\r
+  public void insposting(HttpServletRequest req, HttpServletResponse res)\r
+    throws ServletModuleException, ServletModuleUserException\r
+  {\r
+    SimpleHash mergeData = new SimpleHash();\r
+    boolean setMedia=false;\r
+    boolean setTopic = false;\r
+\r
+    try {\r
+\r
+      WebdbMultipartRequest mp = null;\r
+      EntityList mediaList = null;\r
+      try {\r
+        // new MediaRequest, "1" is the id for the openPosting user\r
+        MediaRequest mediaReq = new MediaRequest("1", true, true);\r
+        mp = new WebdbMultipartRequest(req, (FileHandler)mediaReq);\r
+        mediaList = mediaReq.getEntityList();\r
+      }\r
+      catch (FileHandlerUserException e) {\r
+        throw new ServletModuleUserException(e.getMessage());\r
+      }\r
+\r
+      HashMap withValues = mp.getParameters();\r
+\r
+      //checking the onetimepasswd\r
+      if(passwdProtection.equals("yes")){\r
+        HttpSession session = req.getSession(false);\r
+        String sessionPasswd = (String)session.getAttribute("passwd");\r
+        if ( sessionPasswd == null){\r
+          throw new ServletModuleUserException("Lost password");\r
+        }\r
+        String passwd = (String)withValues.get("passwd");\r
+        if ( passwd == null || (!sessionPasswd.equals(passwd))) {\r
+          throw new ServletModuleUserException("Missing password");\r
+        }\r
+        session.invalidate();\r
+      }\r
+\r
+      if ((((String)withValues.get("title")).length() == 0) ||\r
+          (((String)withValues.get("description")).length() == 0) ||\r
+          (((String)withValues.get("content_data")).length() == 0))\r
+        throw new ServletModuleUserException("Missing field");\r
+\r
+      // call the routines that escape html\r
+\r
+      for (Iterator i=withValues.keySet().iterator(); i.hasNext(); ){\r
+        String k=(String)i.next();\r
+        String v=(String)withValues.get(k);\r
+\r
+        if (k.equals("content_data")){\r
+          //this doesn't quite work yet, so for now, all html goes\r
+          //withValues.put(k,StringUtil.approveHTMLTags(v));\r
+          withValues.put(k,StringUtil.deleteForbiddenTags(v));\r
+        } else if (k.equals("description")) {\r
+          String tmp = StringUtil.deleteForbiddenTags(v);\r
+          withValues.put(k,StringUtil.deleteHTMLTableTags(tmp));\r
+        } else {\r
+          withValues.put(k,StringUtil.removeHTMLTags(v));\r
+        }\r
+\r
+      }\r
+\r
+      withValues.put("date", StringUtil.date2webdbDate(new GregorianCalendar()));\r
+      withValues.put("publish_path", StringUtil.webdbDate2path((String)withValues.get("date")));\r
+      withValues.put("is_produced", "0");\r
+      // by default stuff is published, they can be un-published through the\r
+      // admin interface.\r
+      withValues.put("is_published","1");\r
+      // if op direct article-type == newswire\r
+      if (directOp.equals("yes")) withValues.put("to_article_type","1");\r
+\r
+      withValues.put("to_publisher","1");\r
+\r
+      // owner is openposting user\r
+      //      ML: this is not multi-language friendly and this can be done in a template\r
+      //      if (withValues.get("creator").toString().equals(""))\r
+      //        withValues.put("creator","Anonym");\r
+\r
+      // inserting  content into database\r
+      String cid = contentModule.add(withValues);\r
+      logger.debug("id: "+cid);\r
+      //insert was not successfull\r
+      if(cid==null){\r
+        //How do we know that it was not succesful cause of a\r
+        //dupe, what if it failed cause of "No space left on device"?\r
+        //Or is there something I am missing? Wouldn't it be better\r
+        //to have an explicit dupe check and then insert? I have no\r
+        //idea what I am talking about. this comment is in case\r
+        //I forget to explicitely ask. -mh\r
+        deliver(req, res, mergeData, postingFormDupeTemplate);\r
+      }\r
+\r
+      String[] to_topicsArr = mp.getParameterValues("to_topic");\r
+\r
+      if (to_topicsArr != null && to_topicsArr.length > 0) {\r
+        try{\r
+          DatabaseContentToTopics.getInstance().setTopics(cid,to_topicsArr);\r
+          setTopic = true;\r
+        }\r
+        catch (Exception e) {\r
+          logger.error("setting content_x_topic failed");\r
+          contentModule.deleteById(cid);\r
+          throw new ServletModuleException("smod - openindy :: insposting: setting content_x_topic failed: "+e.toString());\r
+        } //end try\r
+      } //end if\r
+\r
+      //if we're here all is ok... associate the media to the article\r
+      for(int i=0;i<mediaList.size();i++) {\r
+        Entity mediaEnt = (Entity)mediaList.elementAt(i);\r
+        DatabaseContentToMedia.getInstance().addMedia(cid,mediaEnt.getId());\r
+      }\r
+\r
+      try {\r
+        MirGlobal.localizer().openPostings().afterContentPosting(\r
+                                                                 (EntityContent)contentModule.getById(cid));\r
+      }\r
+      catch (Throwable t) {\r
+        throw new ServletModuleException(t.getMessage());\r
+      }\r
+    }\r
+    catch (FileHandlerException e) {\r
+      e.printStackTrace(System.out);\r
+      throw new ServletModuleException("MediaException: "+ e.getMessage());\r
+    }\r
+    catch (IOException e) { throw new ServletModuleException("IOException: "+ e.getMessage());}\r
+    catch (StorageObjectException e) { throw new ServletModuleException("StorageObjectException" + e.getMessage());}\r
+    catch (ModuleException e) { throw new ServletModuleException("ModuleException"+e.getMessage());}\r
+\r
+    deliver(req, res, mergeData, postingFormDoneTemplate);\r
+  }\r
+\r
+    /*\r
+   * Method for preparing and sending a content as an email message\r
+   */\r
+\r
+  public void mail(HttpServletRequest req, HttpServletResponse res)\r
+    throws ServletModuleException, ServletModuleUserException {\r
+    String aid = req.getParameter("mail_aid");\r
+    if (aid == null){\r
+      throw new ServletModuleUserException("An article id must be specified in requests to email an article.  Something therefore went badly wrong....");\r
+    }\r
+\r
+    String to = req.getParameter("mail_to");\r
+    String from = req.getParameter("mail_from");\r
+    String from_name = req.getParameter("mail_from_name");\r
+    String comment = req.getParameter("mail_comment");\r
+    String mail_language = req.getParameter("mail_language");\r
+\r
+    SimpleHash mergeData = new SimpleHash();\r
+\r
+    if (to == null || from == null || from_name == null|| to.equals("") || from.equals("") || from_name.equals("") || mail_language == null || mail_language.equals("")){\r
+\r
+      for (Enumeration theParams = req.getParameterNames(); theParams.hasMoreElements() ;) {\r
+        String pName=(String)theParams.nextElement();\r
+        if (pName.startsWith("mail_")){\r
+          mergeData.put(pName,new SimpleScalar(req.getParameter(pName)));\r
+        }\r
+      }\r
+      deliver(req,res,mergeData,prepareMailTemplate);\r
+    }\r
+    else {\r
+      //run checks on to and from and mail_language to make sure no monkey business occurring\r
+      if (mail_language.indexOf('.') != -1 || mail_language.indexOf('/') != -1 ){\r
+        throw new ServletModuleUserException("Sorry, you've entered an illegal character into the language field.  Go back and try again, asshole.");\r
+      }\r
+      if (to.indexOf('\n') != -1\r
+          || to.indexOf('\r') != -1\r
+          || to.indexOf(',') != -1\r
+          || from.indexOf('\n') != -1\r
+          || from.indexOf('\r') != -1\r
+          || from.indexOf(',') != -1 ){\r
+        throw new ServletModuleUserException("Sorry, you've entered an illegal character into the from or to field.  Go back and try again.");\r
+      }\r
+      EntityContent contentEnt;\r
+      try{\r
+        contentEnt = (EntityContent)contentModule.getById(aid);\r
+      }\r
+      catch (ModuleException e){\r
+        throw new ServletModuleUserException("Couldn't get content for article "+aid);\r
+      }\r
+      String producerStorageRoot=MirConfig.getProp("Producer.StorageRoot");\r
+      String producerDocRoot=MirConfig.getProp("Producer.DocRoot");\r
+      String publishPath = StringUtil.webdbDate2path(contentEnt.getValue("date"));\r
+      String txtFilePath = producerStorageRoot + producerDocRoot + "/" + mail_language +\r
+         publishPath + "/" + aid + ".txt";\r
+\r
+\r
+      File inputFile = new File(txtFilePath);\r
+      String content;\r
+\r
+      try{\r
+        FileReader in = new FileReader(inputFile);\r
+        StringWriter out = new StringWriter();\r
+        int c;\r
+        while ((c = in.read()) != -1)\r
+          out.write(c);\r
+        in.close();\r
+        content= out.toString();\r
+      }\r
+      catch (FileNotFoundException e){\r
+        throw new ServletModuleUserException("No text file found in " + txtFilePath);\r
+      }\r
+      catch (IOException e){\r
+        throw new ServletModuleUserException("Problem reading file in " + txtFilePath);\r
+      }\r
+      // add some headers\r
+      content = "To: " + to + "\nReply-To: "+ from + "\n" + content;\r
+      // put in the comment where it should go\r
+      if (comment != null) {\r
+        String commentTextToInsert = "\n\nAttached comment from " + from_name + ":\n" + comment;\r
+        try {\r
+          content=StringRoutines.performRegularExpressionReplacement(content,"!COMMENT!",commentTextToInsert);\r
+        }\r
+        catch (Exception e){\r
+          throw new ServletModuleUserException("Problem doing regular expression replacement " + e.toString());\r
+        }\r
+      }\r
+      else{\r
+        try {\r
+          content=StringRoutines.performRegularExpressionReplacement(content,"!COMMENT!","");\r
+        }\r
+        catch (Exception e){\r
+          throw new ServletModuleUserException("Problem doing regular expression replacement " + e.toString());\r
+        }\r
+      }\r
+\r
+      SMTPClient client=new SMTPClient();\r
+      try {\r
+        int reply;\r
+        client.connect(MirConfig.getProp("ServletModule.OpenIndy.SMTPServer"));\r
+        System.out.print(client.getReplyString());\r
+\r
+        reply = client.getReplyCode();\r
+\r
+        if(!SMTPReply.isPositiveCompletion(reply)) {\r
+          client.disconnect();\r
+          throw new ServletModuleUserException("SMTP server refused connection.");\r
+        }\r
+\r
+        client.sendSimpleMessage(MirConfig.getProp("ServletModule.OpenIndy.EmailIsFrom"),to,content);\r
+\r
+        client.disconnect();\r
+        //mission accomplished\r
+        deliver(req,res,mergeData,sentMailTemplate);\r
+\r
+      } catch(IOException e) {\r
+        if(client.isConnected()) {\r
+          try {\r
+            client.disconnect();\r
+          } catch(IOException f) {\r
+            // do nothing\r
+          }\r
+        }\r
+        throw new ServletModuleUserException(e.toString());\r
+      }\r
+    }\r
+  }\r
+\r
+\r
+  /*\r
+   * Method for querying a lucene index\r
+   */\r
+  public void search(HttpServletRequest req, HttpServletResponse res)\r
+    throws ServletModuleException, ServletModuleUserException {\r
+    try {\r
+      int increment=10;\r
+\r
+      HttpSession session = req.getSession(false);\r
+\r
+      String queryString="";\r
+\r
+      SimpleHash mergeData = new SimpleHash();\r
+\r
+      KeywordSearchTerm dateTerm = new KeywordSearchTerm("date_formatted","search_date","webdb_create_formatted","webdb_create_formatted","webdb_create_formatted");\r
+      UnIndexedSearchTerm whereTerm = new UnIndexedSearchTerm("","","","where","where");\r
+      TextSearchTerm creatorTerm = new TextSearchTerm("creator","search_creator","creator","creator","creator");\r
+      TextSearchTerm titleTerm = new TextSearchTerm("title","search_content","title","title","title");\r
+      TextSearchTerm descriptionTerm =  new TextSearchTerm("description","search_content","description","description","description");\r
+      ContentSearchTerm contentTerm = new ContentSearchTerm("content_data","search_content","content","","");\r
+      TopicSearchTerm topicTerm = new TopicSearchTerm();\r
+      ImagesSearchTerm imagesTerm = new ImagesSearchTerm();\r
+      AudioSearchTerm audioTerm = new AudioSearchTerm();\r
+      VideoSearchTerm videoTerm = new VideoSearchTerm();\r
+\r
+      //make the query available to subsequent iterations\r
+\r
+      for (Enumeration theParams = req.getParameterNames(); theParams.hasMoreElements() ;) {\r
+        String pName=(String)theParams.nextElement();\r
+        if (pName.startsWith("search_")){\r
+          mergeData.put(pName,new SimpleScalar(req.getParameter(pName)));\r
+        }\r
+      }\r
+\r
+      try{\r
+        mergeData.put("topics", themenModule.getTopicsAsSimpleList());\r
+      }\r
+      catch(ModuleException e) {\r
+        logger.debug("Can't get topics: " + e.toString());\r
+      }\r
+\r
+      String searchBackValue = req.getParameter("search_back");\r
+      String searchForwardValue = req.getParameter("search_forward");\r
+\r
+      if (searchBackValue != null){\r
+        int totalHits = ((Integer) session.getAttribute("numberOfHits")).intValue();\r
+        int newPosition=((Integer)session.getAttribute("positionInResults")).intValue()-increment;\r
+        if (newPosition < 0 || newPosition >= totalHits){\r
+          throw new ServletModuleUserException("newPosition: index out bounds, value was:"+(new Integer(newPosition)).toString());\r
+        }\r
+        session.setAttribute("positionInResults",new Integer(newPosition));\r
+\r
+      }\r
+      else {\r
+        if (searchForwardValue != null){\r
+          int totalHits = ((Integer) session.getAttribute("numberOfHits")).intValue();\r
+          int newPosition=((Integer)session.getAttribute("positionInResults")).intValue()+increment;\r
+          if (newPosition < 0 || newPosition >= totalHits){\r
+            throw new ServletModuleUserException("newPosition: index out bounds, value was:"+(new Integer(newPosition)).toString());\r
+          }\r
+          session.setAttribute("positionInResults",new Integer(newPosition));\r
+\r
+        }\r
+        else {\r
+          String indexPath=MirConfig.getProp("IndexPath");\r
+\r
+\r
+          String creatorFragment = creatorTerm.makeTerm(req);\r
+          if (creatorFragment != null){\r
+            queryString = queryString + " +" + creatorFragment;\r
+          }\r
+\r
+          // search title, description, and content for something\r
+          // the contentTerm uses param "search_boolean" to combine its terms\r
+          String contentFragment = contentTerm.makeTerm(req);\r
+          if (contentFragment != null){\r
+            logger.debug("contentFragment: " + contentFragment);\r
+            queryString = queryString + " +" + contentFragment;\r
+          }\r
+\r
+          String topicFragment = topicTerm.makeTerm(req);\r
+          if (topicFragment != null){\r
+            queryString = queryString + " +" + topicFragment;\r
+          }\r
+\r
+          String imagesFragment = imagesTerm.makeTerm(req);\r
+          if (imagesFragment != null){\r
+            queryString = queryString + " +" + imagesFragment;\r
+          }\r
+\r
+          String audioFragment = audioTerm.makeTerm(req);\r
+          if (audioFragment != null){\r
+            queryString = queryString + " +" + audioFragment;\r
+          }\r
+\r
+          String videoFragment = videoTerm.makeTerm(req);\r
+          if (videoFragment != null){\r
+            queryString = queryString + " +" + videoFragment;\r
+          }\r
+\r
+          if (queryString == null || queryString == ""){\r
+            queryString = "";\r
+          }\r
+          else{\r
+            try{\r
+              Searcher searcher = null;\r
+              try {\r
+                searcher = new IndexSearcher(indexPath);\r
+              }\r
+              catch(IOException e) {\r
+                logger.debug("Can't open indexPath: " + indexPath);\r
+                throw new ServletModuleUserException("Problem with Search Index! : "+ e.toString());\r
+              }\r
+\r
+              Query query = null;\r
+              try {\r
+                query = QueryParser.parse(queryString, "content", new StandardAnalyzer());\r
+              }\r
+              catch(Exception e) {\r
+                searcher.close();\r
+                logger.debug("Query don't parse: " + queryString);\r
+                throw new ServletModuleUserException("Problem with Query String! (was '"+queryString+"')");\r
+              }\r
+\r
+              Hits hits = null;\r
+              try {\r
+                hits = searcher.search(query);\r
+              }\r
+              catch(IOException e) {\r
+                searcher.close();\r
+                logger.debug("Can't get hits: " + e.toString());\r
+                throw new ServletModuleUserException("Problem getting hits!");\r
+              }\r
+\r
+              int start = 0;\r
+              int end = hits.length();\r
+\r
+              String sortBy=req.getParameter("search_sort");\r
+              if (sortBy == null || sortBy.equals("")){\r
+                throw new ServletModuleUserException("Please let me sort by something!(missing search_sort)");\r
+              }\r
+\r
+              // here is where the documents will go for storage across sessions\r
+              ArrayList theDocumentsSorted = new ArrayList();\r
+\r
+              if (sortBy.equals("score")){\r
+                for(int i = start; i < end; i++) {\r
+                  theDocumentsSorted.add(hits.doc(i));\r
+                }\r
+              }\r
+              else{\r
+                // then we'll sort by date!\r
+                HashMap dateToPosition = new HashMap(end,1.0F); //we know how big it will be\r
+                for(int i = start; i < end; i++) {\r
+                  String creationDate=(hits.doc(i)).get("creationDate");\r
+                  // do a little dance in case two contents created at the same second!\r
+                  if (dateToPosition.containsKey(creationDate)){\r
+                    ((ArrayList) (dateToPosition.get(creationDate))).add(new Integer(i));\r
+                  }\r
+                  else{\r
+                    ArrayList thePositions = new ArrayList();\r
+                    thePositions.add(new Integer(i));\r
+                    dateToPosition.put(creationDate,thePositions);\r
+                  }\r
+                }\r
+                Set keys = dateToPosition.keySet();\r
+                ArrayList keyList= new ArrayList(keys);\r
+                Collections.sort(keyList);\r
+                if (sortBy.equals("date_desc")){\r
+                  Collections.reverse(keyList);\r
+                }\r
+                else{\r
+                  if (!sortBy.equals("date_asc")){\r
+                    throw new ServletModuleUserException("don't know how to sort by: "+ sortBy);\r
+                  }\r
+                }\r
+                ListIterator keyTraverser = keyList.listIterator();\r
+                while (keyTraverser.hasNext()){\r
+                  ArrayList positions = (ArrayList)dateToPosition.get((keyTraverser.next()));\r
+                  ListIterator positionsTraverser=positions.listIterator();\r
+                  while (positionsTraverser.hasNext()){\r
+                    theDocumentsSorted.add(hits.doc(((Integer)(positionsTraverser.next())).intValue()));\r
+                  }\r
+                }\r
+              }\r
+\r
+              try{\r
+                searcher.close();\r
+              }\r
+              catch (IOException e){\r
+                logger.debug("Can't close searcher: " + e.toString());\r
+                throw new ServletModuleUserException("Problem closing searcher(normal)!");\r
+              }\r
+\r
+\r
+              session.removeAttribute("numberOfHits");\r
+              session.removeAttribute("theDocumentsSorted");\r
+              session.removeAttribute("positionInResults");\r
+\r
+              session.setAttribute("numberOfHits",new Integer(end));\r
+              session.setAttribute("theDocumentsSorted",theDocumentsSorted);\r
+              session.setAttribute("positionInResults",new Integer(0));\r
+\r
+            }\r
+            catch (IOException e){\r
+              logger.debug("Can't close searcher: " + e.toString());\r
+              throw new ServletModuleUserException("Problem closing searcher!");\r
+            }\r
+          }\r
+        }\r
+      }\r
+\r
+      try {\r
+        ArrayList theDocs = (ArrayList)session.getAttribute("theDocumentsSorted");\r
+        if (theDocs != null){\r
+\r
+          mergeData.put("numberOfHits", ((Integer)session.getAttribute("numberOfHits")).toString());\r
+          SimpleList theHits = new SimpleList();\r
+          int pIR=((Integer)session.getAttribute("positionInResults")).intValue();\r
+          int terminus;\r
+          int numHits=((Integer)session.getAttribute("numberOfHits")).intValue();\r
+\r
+          if (!(pIR+increment>=numHits)){\r
+            mergeData.put("hasNext","y");\r
+          }\r
+          if (pIR-increment>=0){\r
+            mergeData.put("hasPrevious","y");\r
+          }\r
+\r
+          if ((pIR+increment)>numHits){\r
+            terminus=numHits;\r
+          }\r
+          else {\r
+            terminus=pIR+increment;\r
+          }\r
+          for(int i = pIR; i < terminus; i++) {\r
+            SimpleHash h = new SimpleHash();\r
+            Document theHit = (Document)theDocs.get(i);\r
+            whereTerm.returnMeta(h,theHit);\r
+            creatorTerm.returnMeta(h,theHit);\r
+            titleTerm.returnMeta(h,theHit);\r
+            descriptionTerm.returnMeta(h,theHit);\r
+            dateTerm.returnMeta(h,theHit);\r
+            imagesTerm.returnMeta(h,theHit);\r
+            audioTerm.returnMeta(h,theHit);\r
+            videoTerm.returnMeta(h,theHit);\r
+            theHits.add(h);\r
+          }\r
+          mergeData.put("hits",theHits);\r
+        }\r
+      }\r
+      catch (Exception e) {\r
+        logger.debug("Can't iterate over hits: " + e.toString());\r
+        throw new ServletModuleUserException("Problem getting hits!");\r
+      }\r
+\r
+      mergeData.put("queryString",queryString);\r
+      deliver(req,res,mergeData,searchResultsTemplate);\r
+    }\r
+    catch (NullPointerException n){\r
+      n.printStackTrace();\r
+      throw new ServletModuleUserException("Null Pointer"+n.toString());\r
+    }\r
+  }\r
+\r
+  /*\r
+   * Method for dynamically generating a pdf from a fo file\r
+   */\r
+  public void getpdf(HttpServletRequest req, HttpServletResponse res)\r
+    throws ServletModuleException, ServletModuleUserException {\r
+    String ID_REQUEST_PARAM = "id";\r
+    String language = req.getParameter("language");\r
+\r
+    String generateFO=MirConfig.getProp("GenerateFO");\r
+    String generatePDF=MirConfig.getProp("GeneratePDF");\r
+\r
+    //don't do anything if we are not making FO files, or if we are\r
+    //pregenerating PDF's\r
+    if (generateFO.equals("yes") && generatePDF.equals("no")){\r
+      //fop complains unless you do the logging this way\r
+      org.apache.log.Logger log = null;\r
+      Hierarchy hierarchy = Hierarchy.getDefaultHierarchy();\r
+      log = hierarchy.getLoggerFor("fop");\r
+      log.setPriority(Priority.WARN);\r
+\r
+      String producerStorageRoot=MirConfig.getProp("Producer.StorageRoot");\r
+      String producerDocRoot=MirConfig.getProp("Producer.DocRoot");\r
+      //      String templateDir=MirConfig.getPropWithHome("HTMLTemplateProcessor.Dir");\r
+      String xslSheet=MirConfig.getProp("Producer.HTML2FOStyleSheet");\r
+      try {\r
+        String idParam = req.getParameter(ID_REQUEST_PARAM);\r
+        if (idParam != null) {\r
+          EntityContent contentEnt =\r
+            (EntityContent)contentModule.getById(idParam);\r
+          String publishPath = StringUtil.webdbDate2path(contentEnt.getValue("date"));\r
+          String foFile;\r
+\r
+          if (language == null){\r
+            foFile = producerStorageRoot + producerDocRoot + "/"\r
+              + publishPath  + idParam + ".fo";\r
+          }\r
+          else{\r
+            foFile = producerStorageRoot + producerDocRoot + "/"\r
+              + language + publishPath  + idParam + ".fo";\r
+          }\r
+          logger.debug("USING FILES" + foFile + " and " + xslSheet);\r
+          XSLTInputHandler input = new XSLTInputHandler(new File(foFile),\r
+                                                        new File(xslSheet));\r
+\r
+          ByteArrayOutputStream out = new ByteArrayOutputStream();\r
+          res.setContentType("application/pdf");\r
+\r
+          Driver driver = new Driver();\r
+          driver.setLogger(log);\r
+          driver.setRenderer(Driver.RENDER_PDF);\r
+          driver.setOutputStream(out);\r
+          driver.render(input.getParser(), input.getInputSource());\r
+\r
+          byte[] content = out.toByteArray();\r
+          res.setContentLength(content.length);\r
+          res.getOutputStream().write(content);\r
+          res.getOutputStream().flush();\r
+        } else {\r
+          throw new ServletModuleUserException("Missing id parameter.");\r
+        }\r
+      } catch (Exception ex) {\r
+        logger.error(ex.toString());\r
+        throw new ServletModuleException(ex.toString());\r
+      }\r
+    } else {\r
+      throw new ServletModuleUserException("Can't generate a PDF because the config tells me not to.");\r
+    }\r
+  }\r
+\r
+  private void _throwBadContentType (String fileName, String contentType)\r
+    throws ServletModuleUserException {\r
+\r
+    logger.error("Wrong file type uploaded!: " + fileName+" "\r
+                          +contentType);\r
+    throw new ServletModuleUserException("The file you uploaded is of the "\r
+                                         +"following mime-type: "+contentType\r
+                                         +", we do not support this mime-type. "\r
+                                         +"Error One or more files of unrecognized type. Sorry");\r
+  }\r
+\r
+  protected String createOneTimePasswd(){\r
+    Random r = new Random();\r
+    int random = r.nextInt();\r
+    long l = System.currentTimeMillis();\r
+    l = (l*l*l*l)/random;\r
+    if(l<0) l = l * -1;\r
+    String returnString = ""+l;\r
+    return returnString.substring(5);\r
+  }\r
+\r
+\r
+  /* this is an overwritten method of ServletModule in order\r
+     to use different bundles for open and admin */\r
+  public void deliver(HttpServletRequest req, HttpServletResponse res,\r
+                      TemplateModelRoot rtm, TemplateModelRoot popups,\r
+                      String templateFilename)\r
+    throws ServletModuleException {\r
+    if (rtm == null) rtm = new SimpleHash();\r
+    try {\r
+      PrintWriter out = res.getWriter();\r
+      HTMLTemplateProcessor.process(res, templateFilename, rtm, popups, out,\r
+                                    getLocale(req), "bundles.open");\r
+      out.close();\r
+    }  catch (HTMLParseException e) {\r
+      throw new ServletModuleException(e.toString());\r
+    } catch (IOException e) {\r
+      throw new ServletModuleException(e.toString());\r
+    }\r
+  }\r
+}\r
+\r
+\r
+\r