Method getModuleAddress

src/main/java/dbProcs/Getter.java:1045–1080

This method returns the address of a module based on the module identifier submitted. If user has not accessed this level before, they are put down as starting the level at this time. If the level is a client side attack, or other issues that cannot be abused to return a result key (like XSS, CSRF o

(String ApplicationRoot, String moduleId, String userId)

	 * @return The module address
	 */
	public static String getModuleAddress (String ApplicationRoot, String moduleId, String userId)
	{
		log.debug("*** Getter.getModuleAddress ***");
		String output = new String();
		String type = new String();
		Connection conn = Database.getCoreConnection(ApplicationRoot);
		try
		{
			CallableStatement callstmt = conn.prepareCall("call moduleGetHash(?, ?)");
			callstmt.setString(1, moduleId);
			callstmt.setString(2, userId);
			log.debug("Gathering moduleGetHash ResultSet");
			ResultSet modules = callstmt.executeQuery();
			log.debug("Opening Result Set from moduleGetHash");
			modules.next(); //Exception thrown if no hash was found
			//Set Type. Used to ensure the URL points at the correct directory
			if(modules.getString(3).equalsIgnoreCase("challenge"))
			{
				type = "challenges";
			}
			else
			{
				type = "lessons";
			}
			output = type + "/" + modules.getString(1) + ".jsp";
		}
		catch(Exception e)
		{
			log.error("Module Hash Retrieval: " + e.toString());
			log.error("moduleID = " + moduleId);
			log.error("userID = " + userId);
		}
		Database.closeConnection(conn);
		log.debug("*** END getModuleAddress() ***");
		return output;
	}
	
	/**
	 * Retrieves the module category based on the moduleId submitted