Class SqlTableAlert

zap/src/main/java/org/zaproxy/zap/db/sql/SqlTableAlert.java:33–393

import org.parosproxy.paros.db.TableAlert;

public class SqlTableAlert extends SqlAbstractTable implements TableAlert {

    private static final String TABLE_NAME = DbSQL.getSQL("alert.table_name");

    private static final String ALERT_INDEX = DbSQL.getSQL("alert.field.alert_index");
    private static final String ALERTID = DbSQL.getSQL("alert.field.alertid");
    private static final String SCANID = DbSQL.getSQL("alert.field.scanid");
    private static final String PLUGINID = DbSQL.getSQL("alert.field.pluginid");
    private static final String ALERT = DbSQL.getSQL("alert.field.alert");
    private static final String RISK = DbSQL.getSQL("alert.field.risk");
    private static final String RELIABILITY = DbSQL.getSQL("alert.field.reliability");
    private static final String DESCRIPTION = DbSQL.getSQL("alert.field.description");
    private static final String URI = DbSQL.getSQL("alert.field.uri");
    private static final String PARAM = DbSQL.getSQL("alert.field.param");
    private static final String ATTACK = DbSQL.getSQL("alert.field.attack");
    private static final String OTHERINFO = DbSQL.getSQL("alert.field.otherinfo");
    private static final String SOLUTION = DbSQL.getSQL("alert.field.solution");
    private static final String REFERENCE = DbSQL.getSQL("alert.field.reference");
    private static final String EVIDENCE = DbSQL.getSQL("alert.field.evidence");
    private static final String INPUT_VECTOR = DbSQL.getSQL("alert.field.inputvector");
    private static final String CWEID = DbSQL.getSQL("alert.field.cweid");
    private static final String WASCID = DbSQL.getSQL("alert.field.wascid");
    private static final String HISTORYID = DbSQL.getSQL("alert.field.historyid");
    private static final String SOURCEHISTORYID = DbSQL.getSQL("alert.field.sourcehistoryid");
    private static final String SOURCEID = DbSQL.getSQL("alert.field.sourceid");
    private static final String ALERTREF = DbSQL.getSQL("alert.field.alertref");
    private static final String NODENAME = DbSQL.getSQL("alert.field.nodename");

    public SqlTableAlert() {}

    @Override
    protected void reconnect(Connection conn) throws DatabaseException {
        try {
            updateTable(conn);
        } catch (Exception e) {
            throw new DatabaseException(e);
        }
    }

    // ZAP: Added the method.
    private void updateTable(Connection connection) throws DatabaseException {
        try {
            // Add the SOURCEHISTORYID column to the db if necessary
            if (!DbUtils.hasColumn(connection, TABLE_NAME, SOURCEHISTORYID)) {
                DbUtils.execute(connection, DbSQL.getSQL("alert.ps.addsourcehistoryid"));
            }

            // Add the ATTACK column to the db if necessary
            if (!DbUtils.hasColumn(connection, TABLE_NAME, ATTACK)) {
                DbUtils.execute(connection, DbSQL.getSQL("alert.ps.addattack"));
            }

            if (!DbUtils.hasColumn(connection, TABLE_NAME, EVIDENCE)) {
                // Evidence, cweId and wascId all added at the same time
                DbUtils.execute(connection, DbSQL.getSQL("alert.ps.addevidence"));
                DbUtils.execute(connection, DbSQL.getSQL("alert.ps.addcweid"));
                DbUtils.execute(connection, DbSQL.getSQL("alert.ps.addwascid"));
            }