Method doPost

src/main/java/servlets/module/GetCheat.java:53–107

This method will reject requests if cheat sheet availability is marked as unavailable by administration. @param moduleId @param csrfToken

(HttpServletRequest request, HttpServletResponse response)

	 * @param csrfToken
	 */
	public void doPost (HttpServletRequest request, HttpServletResponse response) 
	throws ServletException, IOException
	{
		//Setting IpAddress To Log and taking header for original IP if forwarded from proxy
		ShepherdLogManager.setRequestIp(request.getRemoteAddr(), request.getHeader("X-Forwarded-For"));
		log.debug("*** servlets.Admin.GetCheat ***");
		String[] result = null;
		PrintWriter out = response.getWriter();  
		out.print(getServletInfo());
		
		HttpSession ses = request.getSession(true);
		if(Validate.validateSession(ses))
		{
			ShepherdLogManager.setRequestIp(request.getRemoteAddr(), request.getHeader("X-Forwarded-For"), ses.getAttribute("userName").toString());
			log.debug("Current User: " + ses.getAttribute("userName").toString());
			Cookie tokenCookie = Validate.getToken(request.getCookies());
			Object tokenParmeter = request.getParameter("csrfToken");
			if(Validate.validateTokens(tokenCookie, tokenParmeter))
			{
				if(CheatSheetStatus.showCheat(ses.getAttribute("userRole").toString()))
				{
					String ApplicationRoot = getServletContext().getRealPath("");
					String moduleId = request.getParameter("moduleId");
					Locale locale = new Locale(Validate.validateLanguage(request.getSession()));
					log.debug(ses.getAttribute("userName") + " submitted the following moduleId: " + moduleId);
					if(moduleId != null)
					{
						result = Getter.getModuleSolution(ApplicationRoot, moduleId, locale);
						if(result != null)
						{
							out.write(
									"<div id='theActualCheat' class='cheatBox'>" + 
									"<big style='color:#A878EF;'>" + Encode.forHtml(result[0]) + " Cheat</big>" +
									"<p>" +
									result[1] +
									"</div></p><br>");
						}
					}
				}
			}
			else
			{
				log.error("CSRF Attack Detected: Made Against" + ses.getAttribute("userName"));
			}
		}
		else
		{
			out.write("<img src='css/images/loggedOutSheep.jpg'/>");
		}
		if(result == null)
		{
			out.write("An error Occurred...");
		}
		log.debug("*** END servlets.Admin.GetCheat ***");
	}
}