@SuppressWarnings("unchecked")
public ActionForward submitContent(ActionMapping rMapping, ActionForm form,
HttpServletRequest request, HttpServletResponse response)
throws Exception {
ActionErrors errors = new ActionErrors();
ActionMessages message = new ActionMessages();
HttpSession session = request.getSession();
UploadServletRequest uploadReq = (UploadServletRequest) request;
Host host = hostWebAPI.getCurrentHost(request);
boolean useCaptcha = false;
boolean useAudioCaptcha =false;
boolean autoPublish = false;
String moderatorRole="";
List<Field> imageFields = new ArrayList<Field>();
List<Field> fileFields = new ArrayList<Field>();
List<String> imageNames = new ArrayList<String>();
List<String> fileNames = new ArrayList<String>();
/**
* Getting Referrer
*/
String referrer = request.getParameter("referrer");
if(referrer.endsWith("?")){
referrer = referrer.substring(0,referrer.length()-1);
}
ActionForward af = new ActionForward(SecurityUtils.stripReferer(request, referrer));
af.setRedirect(true);
int index = referrer.lastIndexOf('/');
String htmlServlet = null;
if (index < 0)
htmlServlet = referrer;
else
htmlServlet = referrer.substring(index + 1);
if (htmlServlet.indexOf('.') < 0) {
//If is a servlet
referrer += "/";
}
String params="";
HibernateUtil.startTransaction();
try {
/**
* Getting user
*/
String userId = request.getParameter("userId");
/**
* Getting content structure
*/
String structureInode = request.getParameter("structure");
Structure st = StructureCache.getStructureByInode(structureInode);
/**
* Getting options flags
*/
String options = request.getParameter("options");
if(UtilMethods.isSet(options)){
options = PublicEncryptionFactory.decryptString(options);
String[] opt = options.split(";");
for(String text: opt){
if(text.indexOf("contentUseCaptcha") != -1){
useCaptcha = Boolean.parseBoolean(text.substring(text.indexOf("=")+1));
}else if(text.indexOf("contentUseAudioCaptcha") != -1){
useAudioCaptcha = Boolean.parseBoolean(text.substring(text.indexOf("=")+1));
}else if(text.indexOf("contentAutoPublish") != -1){
autoPublish = Boolean.parseBoolean(text.substring(text.indexOf("=")+1));
}else if(text.indexOf("contentModeration") != -1){
moderatorRole = text.substring(text.indexOf("=")+1);
}
}
}
/**
* Setting content values
*/
URLEncoder encoder = new URLEncoder();
StringBuilder paramsBuff=new StringBuilder();
List<String> parametersName = new ArrayList<String>();
List<String[]> values = new ArrayList<String[]>();
List<String> parametersfileName = new ArrayList<String>();
List<String[]> filevalues = new ArrayList<String[]>();
java.util.Enumeration<String> parameterNames = request.getParameterNames();
Map <String, String> parameters= new HashMap <String, String> ();
String parameterName;
String emailvalues;
String []emailvaluessep;
List <String> emails= new ArrayList <String>();
if (st.getStructureType() == Structure.STRUCTURE_TYPE_FORM) {
emailvalues = st.getFieldVar("formEmail").getValues();
if(UtilMethods.isSet(emailvalues)){
emailvalues = emailvalues.trim().toLowerCase();
}
else {
emailvalues = "";
}
if (UtilMethods.isSet(emailvalues)) {
if (emailvalues.contains(",")) {
emailvaluessep = emailvalues.split(",");
for (String email : emailvaluessep) {
if(RegEX.contains(email.trim(),"^[_A-Za-z0-9-]+(\\.[_A-Za-z0-9-]+)*@[A-Za-z0-9-]+(\\.[A-Za-z0-9-]+)*((\\.[A-Za-z]{2,}){1}$)"))
emails.add(email.trim());
else throw new Exception("The email list provided by the Form is incorrectly formmated, please enter on the Form properties a valid email addresses separated by a comma.");
}
}else
if(RegEX.contains(emailvalues.trim(),"^[_A-Za-z0-9-]+(\\.[_A-Za-z0-9-]+)*@[A-Za-z0-9-]+(\\.[A-Za-z0-9-]+)*((\\.[A-Za-z]{2,}){1}$)"))
emails.add(emailvalues.trim());
else throw new Exception("The email provided by the Form is incorrect, please enter on the Form properties valid email address. ");
}
parameters.put("formTitle", st.getFieldVar("formTitle").getValues());
parameters.put("formEmail", emailvalues);
parameters.put("formReturnPage", st.getFieldVar("formReturnPage").getValues());
}
for (; parameterNames.hasMoreElements();) {
parameterName = parameterNames.nextElement();
Field field = st.getFieldVar(parameterName);
String fieldTypeStr = field!=null?field.getFieldType():"";
Field.FieldType fieldType = Field.FieldType.getFieldType(fieldTypeStr);
String[] fieldValues = request.getParameterValues(parameterName);
String value = "";
if(fieldValues.length>1){
for(String val:fieldValues){
value+=","+val;
}
parameters.put(parameterName,value.substring(1));
}else{
parameters.put(parameterName,fieldValues[0]);
}
if(fieldType == null || (fieldType!=null && !fieldType.equals(Field.FieldType.IMAGE) && !fieldType.equals(Field.FieldType.FILE)&& !fieldType.equals(Field.FieldType.BINARY))){
parametersName.add(parameterName);
String[] vals = request.getParameterValues(parameterName);
values.add(vals);
if(!parameterName.equals("dispatch") && !parameterName.equals("captcha") && !parameterName.equals("options") && !parameterName.equals("structure") && !parameterName.equals("userId") && !parameterName.equals("referrer")){
if(!SubmitContentUtil.imageOrFileParam(st, parameterName) && !UtilMethods.isImage(parameterName)){
for(String val : vals){
if(val.length() < 512) {
paramsBuff.append("&").append(parameterName).append("=").append(encoder.encode(val));
}
}
}
}
}
else {
parametersfileName.add(parameterName);
String[] vals = request.getParameterValues(parameterName);
filevalues.add(vals);
if(!parameterName.equals("dispatch") && !parameterName.equals("captcha") && !parameterName.equals("options") && !parameterName.equals("structure") && !parameterName.equals("userId") && !parameterName.equals("referrer")){
if(!SubmitContentUtil.imageOrFileParam(st, parameterName)){
for(String val : vals){
paramsBuff.append("&").append(parameterName).append("=").append(encoder.encode(val));
}
}
}
}
}
params=paramsBuff.toString();
/*
* Checking for captcha
*/
if(useCaptcha){
if(!CaptchaUtil.isValidImageCaptcha(request)){
User user = com.liferay.portal.util.PortalUtil.getUser(request);
String mes=LanguageUtil.get(user, "org.dotcms.frontend.content.submission.captcha.validation.image");
mes = mes.replace(":", "");
errors.add(ActionMessages.GLOBAL_MESSAGE, new ActionMessage("message.contentlet.required", mes));
saveMessages(session, errors);
if(errors.size() > 0 && UtilMethods.isSet(params)){
referrer=referrer+"?"+params.substring(1);
af = new ActionForward(referrer);
af.setRedirect(true);
}
return af;
}
}
if(useAudioCaptcha){
if(!CaptchaUtil.isValidAudioCaptcha(request)){
errors.add(ActionMessages.GLOBAL_MESSAGE, new ActionMessage("message.contentlet.required","Validation Sound"));
saveMessages(session, errors);
if(errors.size() > 0 && UtilMethods.isSet(params)){
referrer=referrer+"?"+params.substring(1);
af = new ActionForward(referrer);
af.setRedirect(true);
}
return af;
}
}
/**
* Get Categories
*/
ArrayList<Category> cats = new ArrayList<Category>();
String[] arr = request.getParameterValues("categories") == null?new String[0]:request.getParameterValues("categories");
if (arr != null && arr.length > 0) {
for (int i = 0; i < arr.length; i++) {
if(UtilMethods.isSet(arr[i])){
Category c = catAPI.find(arr[i], SubmitContentUtil.getUserFromId(userId), true);
if(UtilMethods.isSet(c))
cats.add(c);
}
}
}
for (int i = 0; i < parametersName.size(); ++i) {
Field field = st.getFieldVar(parametersName.get(i));
String[] fieldValue = values.get(i);
int size = 0;
if(fieldValue!= null && !fieldValue[0].equals("") ){
size=1;
if (fieldValue[0].contains(",")) {
String[] fieldValueaux = fieldValue[0].split(",");
fieldValue = fieldValueaux;
size = fieldValue.length;
}
}
for (int j = 0; j < size; j++) {
if ((field != null)&& (field.getFieldType() != null)&& (field.getFieldType().equals(Field.FieldType.CATEGORY.toString()))){
Category c = catAPI.find(com.dotmarketing.util.VelocityUtil.cleanVelocity(fieldValue[j].trim()),SubmitContentUtil.getUserFromId(userId), true);
if(UtilMethods.isSet(c))
cats.add(c);
}
}
}
List<Map<String,Object>> fileParameters = new ArrayList<Map<String,Object>>();
DotContentletValidationException cve = new DotContentletValidationException("Contentlet's fields are not valid");
boolean hasError = false;
/**
* Get image fields
*/
imageFields = StructureFactory.getImagesFieldsList(st, parametersfileName, filevalues);
if(imageFields.size() > 0){
for(Field f : imageFields){
java.io.File uploadedFile = uploadReq.getFile(f.getVelocityVarName());
String title = uploadReq.getFileName(f.getVelocityVarName());
if(f.isRequired() && !UtilMethods.isSet(title)){
cve.addRequiredField(f);
hasError = true;
continue;
}
if(uploadedFile!=null && uploadedFile.length()> 0){
String contentType = uploadReq.getContentType(f.getVelocityVarName());
if(contentType.equals("image/png") || contentType.equals("image/gif") || contentType.equals("image/jpeg")){
Map<String,Object> temp = new HashMap<String,Object>();
temp.put("field", f);
temp.put("title", title);
temp.put("file", uploadedFile);
temp.put("host", host);
fileParameters.add(temp);
}else{
cve.addBadTypeField(f);
hasError = true;
imageNames.add(title);
continue;
}
}
}
}
/**
* Get file fields
*/
//http://jira.dotmarketing.net/browse/DOTCMS-3463
Map <String, Object> tempBinaryValues= new HashMap <String, Object>();
fileFields = StructureFactory.getFilesFieldsList(st, parametersfileName, filevalues);
List <Field> fields = st.getFields();
for(Field field:fields){
Map <String, Object> binaryvalues= new HashMap <String, Object>();
if (field.getFieldType().equals("binary"))
{
tempBinaryValues=processBinaryTempFileUpload( field.getVelocityVarName(), request, field.getFieldContentlet()) ;
binaryvalues.put("field", field);
parametersName.add(tempBinaryValues.get("parameterName").toString());
Object ob = tempBinaryValues.get("parameterValues");
if(ob != null){
File f = (File)ob;
binaryvalues.put("file", f);
values.add(new String []{f.getAbsolutePath()});
}else{
binaryvalues.put(field.getVelocityVarName(), null);
values.add(new String []{""});
}
fileParameters.add(binaryvalues);
}
}
if(fileFields.size() > 0){
for(Field f : fileFields){
java.io.File uploadedFile = uploadReq.getFile(f.getVelocityVarName());
String title = uploadReq.getFileName(f.getVelocityVarName());
fileNames.add(title);
if(f.isRequired() && !UtilMethods.isSet(title)){
cve.addRequiredField(f);
hasError = true;
continue;
}
if(uploadedFile!=null && uploadedFile.length()> 0) {
Map<String,Object> temp = new HashMap<String,Object>();
temp.put("field", f);
temp.put("title", title);
temp.put("file", uploadedFile);
temp.put("host", host);
fileParameters.add(temp);
}
}
}
if(hasError){
throw cve;
}
/**
* Save content
*/
Contentlet contentlet = SubmitContentUtil.createContent(st, cats, userId, parametersName, values, options, fileParameters, autoPublish, host, moderatorRole);
message.add(Globals.MESSAGE_KEY, new ActionMessage("message.contentlet.save"));
session.setAttribute(Globals.MESSAGE_KEY, message);
HibernateUtil.commitTransaction();
if(!APILocator.getContentletAPI().isInodeIndexed(contentlet.getInode())){
Logger.error(this, "Unable to index contentlet");
}
if (st.getStructureType()== Structure.STRUCTURE_TYPE_FORM ){
if(st.getFieldVar("formReturnPage")!= null && UtilMethods.isSet(st.getFieldVar("formReturnPage").getValues())){
af.setPath(st.getFieldVar("formReturnPage").getValues());
}
if(UtilMethods.isSet(request.getParameter("formReturnPageOverride"))){
af.setPath(request.getParameter("formReturnPageOverride"));
}
parameters.put("returnUrl", af.getPath());
parameters.put("IP:", request.getRemoteAddr());
String reverseName = null;
try{
reverseName = DNSUtil.reverseDns(request.getRemoteAddr());
if(!reverseName.equals(request.getRemoteAddr())){
parameters.put("reverseName", reverseName);
}
}
catch(Throwable t){
}
try{
String referer = request.getHeader("Referer");
if(referer.indexOf("?") > -1){
referer = referer.substring(0,referer.indexOf("?"));
}
parameters.put("referrer", referer);
}
catch(Exception e){
}
Clickstream clickstream = (Clickstream) request.getSession().getAttribute("clickstream");
if(clickstream != null && UtilMethods.isSet(clickstream.getInitialReferrer())){
parameters.put("Initial Referer", clickstream.getInitialReferrer());
}
parameters.remove("options");
parameters.remove("structure");
parameters.remove("dispatch");
parameters.remove("formEmail");
parameters.remove("formTitle");
parameters.remove("formReturnPage");
EmailUtils.SendContentSubmitEmail(parameters, st,emails);
}
}catch (DotContentletValidationException ve) {
HibernateUtil.rollbackTransaction();
Logger.debug(this, ve.getMessage());
Language userlang=langAPI.getLanguage(
(String)request.getSession().getAttribute(
com.dotmarketing.util.WebKeys.HTMLPAGE_LANGUAGE));
if(ve.hasRequiredErrors()){
List<Field> reqs = ve.getNotValidFields().get(DotContentletValidationException.VALIDATION_FAILED_REQUIRED);
for (Field errorField : reqs) {
String fname=langAPI.getStringKey(userlang, errorField.getFieldName());
String customizedMessage = SubmitContentUtil.getCustomizedFieldErrorMessage(errorField, SubmitContentUtil.errorFieldVariable);
if(UtilMethods.isSet(customizedMessage)){
errors.add(Globals.ERROR_KEY,
new ActionMessage("secure.form.error.message.contentlet", fname,
langAPI.getStringKey(userlang, customizedMessage)));
}else{
errors.add(Globals.ERROR_KEY, new ActionMessage("message.contentlet.required", fname));
}
}
}
if(ve.hasLengthErrors()){
List<Field> reqs = ve.getNotValidFields().get(DotContentletValidationException.VALIDATION_FAILED_MAXLENGTH);
for (Field errorField : reqs) {
String fname=langAPI.getStringKey(userlang, errorField.getFieldName());
String customizedMessage = SubmitContentUtil.getCustomizedFieldErrorMessage(errorField, SubmitContentUtil.errorFieldVariable);
if(UtilMethods.isSet(customizedMessage)){
errors.add(Globals.ERROR_KEY,
new ActionMessage("secure.form.error.message.contentlet", fname,
langAPI.getStringKey(userlang, customizedMessage)));
}else{
errors.add(Globals.ERROR_KEY, new ActionMessage("message.contentlet.maxlength", fname,"255"));
}
}
}
if(ve.hasPatternErrors()){
List<Field> reqs = ve.getNotValidFields().get(DotContentletValidationException.VALIDATION_FAILED_PATTERN);
for (Field errorField : reqs) {
String fname=langAPI.getStringKey(userlang, errorField.getFieldName());
String customizedMessage = SubmitContentUtil.getCustomizedFieldErrorMessage(errorField, SubmitContentUtil.errorFieldVariable);
if(UtilMethods.isSet(customizedMessage)){
errors.add(Globals.ERROR_KEY,
new ActionMessage("secure.form.error.message.contentlet", fname,
langAPI.getStringKey(userlang, customizedMessage)));
}else{
errors.add(Globals.ERROR_KEY, new ActionMessage("message.contentlet.format", fname));
}
}
}
if(ve.hasRelationshipErrors()){
//need to update message to support multiple relationship validation errors
errors.add(Globals.ERROR_KEY, new ActionMessage("message.relationship.required", "relationships"));
}
if(ve.hasUniqueErrors()){
List<Field> reqs = ve.getNotValidFields().get(DotContentletValidationException.VALIDATION_FAILED_UNIQUE);
for (Field errorField : reqs) {
String fname=langAPI.getStringKey(userlang, errorField.getFieldName());
String customizedMessage = SubmitContentUtil.getCustomizedFieldErrorMessage(errorField, SubmitContentUtil.errorFieldVariable);
if(UtilMethods.isSet(customizedMessage)){
errors.add(Globals.ERROR_KEY,
new ActionMessage("secure.form.error.message.contentlet", fname,
langAPI.getStringKey(userlang, customizedMessage)));
}else{
errors.add(Globals.ERROR_KEY, new ActionMessage("message.contentlet.unique", fname));
}
}
}
if(ve.hasBadTypeErrors()){
List<Field> reqs = ve.getNotValidFields().get(DotContentletValidationException.VALIDATION_FAILED_BADTYPE);
for (Field errorField : reqs) {
String fname=langAPI.getStringKey(userlang, errorField.getFieldName());
String customizedMessage = SubmitContentUtil.getCustomizedFieldErrorMessage(errorField, SubmitContentUtil.errorFieldVariable);
if(UtilMethods.isSet(customizedMessage)){
errors.add(Globals.ERROR_KEY,
new ActionMessage("secure.form.error.message.contentlet", fname,
langAPI.getStringKey(userlang, customizedMessage)));
}else{
errors.add(Globals.ERROR_KEY, new ActionMessage("message.contentlet.invalid.image", fname));
}
}
}
//errors.add(Globals.ERROR_KEY, new ActionMessage("error.invalid.field",e.getMessage()));
session.setAttribute(Globals.ERROR_KEY, errors);
}catch (Exception e) {
HibernateUtil.rollbackTransaction();
Logger.debug(this, e.getMessage());
errors.add(Globals.ERROR_KEY, new ActionMessage("error.generic.message",e.getMessage()));
session.setAttribute(Globals.ERROR_KEY, errors);
}
if(errors.size() > 0 && UtilMethods.isSet(params)){
String[] paramList = params.split("&");
String l = "";
for(String param : paramList){