From bad76543f34cbea8c558b59932d98a612d2379ec Mon Sep 17 00:00:00 2001
From: Adam R Claxton <adam.claxton@uconn.edu>
Date: Sun, 23 Apr 2017 23:03:16 -0400
Subject: [PATCH] Admin add/removal update from meagan

---
 .../webpages/administration/adminThings.jsp   |  75 ++++++
 .../webpages/administration/approveAdmin.jsp  | 240 ++++++++++++++++++
 src/database/AdminQuery.java                  | 152 +++++++++++
 3 files changed, 467 insertions(+)
 create mode 100644 WebContent/html/webpages/administration/adminThings.jsp
 create mode 100644 WebContent/html/webpages/administration/approveAdmin.jsp
 create mode 100644 src/database/AdminQuery.java
diff --git a/WebContent/html/webpages/administration/adminThings.jsp b/WebContent/html/webpages/administration/adminThings.jsp
new file mode 100644
index 0000000..587e09a
--- /dev/null
+++ b/WebContent/html/webpages/administration/adminThings.jsp
@@ -0,0 +1,75 @@
+<!-- The purpose of this file is to capture order form submissions and forward them to MySQLAccess  -->
+
+<%@ page import = "database.*,entities.*" %>
+<%@ page import = "java.util.Random" %>
+<%@ page import = "database.*" %>
+<%@ page language="java" contentType="text/html; charset=ISO-8859-1" pageEncoding="ISO-8859-1"%>
+<%@ page import = "java.sql.*" %>
+<%@ page import = "java.security.MessageDigest" %>
+<%@ page import = "java.security.NoSuchAlgorithmException" %>
+
+<!DOCTYPE html>
+<html>
+<head>
+<link rel = "stylesheet" type = "text/css" href = "../../css/stylesheet.css">
+<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">
+<script src="https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js"></script>
+<script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"></script>
+</head>
+<body>
+
+<script type="text/javascript">
+<%
+// If location id is 0, it is a custom location which must be added to the database before employee preffered location can be updated
+//Now update employee
+int sso = Integer.parseInt(request.getParameter("SSO"));
+//	User self = EmployeeQueries.getEmployeeByID(sso);
+
+String decision = request.getParameter("thing");
+if(decision == "add")
+{
+	String alphabet = "0123456789ABCDE";
+	int N = alphabet.length();
+	String password = "";
+	String generatedPass = null;
+
+	Random r = new Random();
+
+	for (int i = 0; i < 10; i++) {
+	    password += alphabet.charAt(r.nextInt(N));
+	}
+
+	try {
+		MessageDigest md = MessageDigest.getInstance("MD5");
+		md.update(password.getBytes());
+		byte[] bytes = md.digest();
+		StringBuilder sb = new StringBuilder();
+		for(int i = 0; i<bytes.length; i++)
+			sb.append(Integer.toString((bytes[i] & 0xff) + 0x100, 16).substring(1));
+		generatedPass = sb.toString();
+	}
+	catch (NoSuchAlgorithmException e){
+		
+	}
+
+
+
+	AdminQuery.addAdmin(sso, password);
+}
+if(decision == "remove")
+{
+	//AdminQuery.fingerCheck(sso);
+	if(AdminQuery.fingerCheck(sso)==false)
+	{
+		%>
+		alert("You cannot remove an admin until their fingerprint is removed from the locker");
+		<%
+	}
+}
+%>
+
+
+window.location.replace("../approveAdmin.jsp");
+</script>
+</body>
+</html>
\ No newline at end of file
diff --git a/WebContent/html/webpages/administration/approveAdmin.jsp b/WebContent/html/webpages/administration/approveAdmin.jsp
new file mode 100644
index 0000000..8c67fd7
--- /dev/null
+++ b/WebContent/html/webpages/administration/approveAdmin.jsp
@@ -0,0 +1,240 @@
+<%@ page import="database.*,entities.*"%>
+<%@ page language="java" contentType="text/html; charset=ISO-8859-1"
+	pageEncoding="ISO-8859-1"%>
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
+
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta http-equiv="X-UA-Compatible" content="IE=edge">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<!-- The above 3 meta tags *must* come first in the head; any other head content must come *after* these tags -->
+<meta name="description" content="">
+<meta name="author" content="">
+
+<title>Synchrony Financial</title>
+
+<link rel="stylesheet"
+	href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">
+<script
+	src="https://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.min.js"></script>
+<script
+	src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"></script>
+<link rel="stylesheet" type="text/css" href="../../css/stylesheet.css">
+<link rel="shortcut icon"
+	href="../imgs/synchrony-financial-logo-dlpx_1.ico">
+<style>
+div.deviceContainer {
+	border: solid;
+	border-width: thin;
+	padding: 15px;
+	background-color: #E9EAEB;
+	display: inline-block;
+}
+
+.table {
+	width: auto;
+	background-color: #E9EAEB;
+}
+
+div.imgContainer {
+	display: inline-block;
+	text-align: center;
+}
+
+img.device {
+	display: block;
+}
+
+div.deviceDescp {
+	display: inline-block;
+	width: 200px;
+	text-align: center;
+}
+
+button.approvebutton {
+	display: block;
+	margin: auto;
+}
+
+tr.entry {
+	cursor: pointer;
+}
+
+div.approveConfirm {
+	display: none;
+	top: 50%;
+	left: 50%;
+	position: fixed;
+	width: 155px;
+	height: 85px;
+	line-height: 85px;
+	text-align: center;
+	background-color: #FBC600;
+	border: solid;
+	border-color: #3B3C43;
+	border-radius: 5px;
+}
+</style>
+</head>
+
+<body>
+	<nav class="navbar navbar-inverse navbar-fixed-top"
+		id="navbaruniversal"><%@ include file="../components/adminnavbar.jsp"%>
+	</nav>
+
+	<div class="col-sm-3 col-md-2 sidebar">
+		<ul class="nav nav-sidebar">
+			<h4>Admin Options</h4>
+			<li class="option"><a href="../webpages/adminApprove.html">Approve
+					Devices</a></li>
+			<li class="option"><a href="#">Manage Admins</a></li>
+			<li class="option"><a href="#">Manage Devices</a></li>
+		</ul>
+	</div>
+
+	<div class="displayDevice">
+		<table class="table table-bordered table-hover" id="tabledisplay">
+			<tr>
+				<th>Name</th>
+				<th>SSO</th>
+				<th>Finger Print</th>
+			</tr>
+			<tbody id="tablemainbody">
+			</tbody>
+		</table>
+		<button type="button" id='addshit'>Add Admin</button>
+		<button type="button" id='deleteshit'>Remove Admin</button>
+	</div>
+
+
+
+	<div id="addAdminModal" class="modal">
+		<div class="modal-content"
+			style="overflow-y: auto; overflow-x: hidden">
+			<div class="modal-head">
+				<span id="closeOrderForm" class="close">&times;</span>
+				<h4>Input new admin information</h4>
+			</div>
+			<div class="modal-body">
+				<form name="addAdminModal" onsubmit="return addingAdmin()"
+					action="adminThings.jsp" method="post">
+					<input type="text" name="AdminID" style="display: none;" />
+					<div class="form-group row">
+					<input type = "text", name="thing" style=""display:none;">
+						<label for="SSO">SSO</label><br /> <input type="adminID"
+							class="form-control" name="adminID" placeholder="xxxxxxxxx"
+							style="margin: 0 auto; width: 60%" required>
+					</div>
+
+			<button type="submit" class="btn btn-primary" name="Submit">Submit</button>
+			</form>
+		</div>
+	</div>
+
+	<div id="removeAdminModal" class="modal">
+		<div class="modal-content"
+			style="overflow-y: auto; overflow-x: hidden">
+			<div class="modal-head">
+				<span id="closeOrderForm" class="close">&times;</span>
+				<h4>Enter the SSO of the admin to be deleted</h4>
+			</div>
+			<div class="modal-body">
+				<form name="removeAdminModal" onsubmit="return removingAdmin()"
+					action="adminThings.jsp" method="post">
+					<input type="text" name="AdminID" style="display: none;" />
+					<div class="form-group row">
+					<input type = "text", name="thing", style="display:none;">
+						<label for="SSO">SSO</label><br /> <input type="adminID"
+							class="form-control" name="adminID" placeholder="xxxxxxxxx"
+							style="margin: 0 auto; width: 60%" required>
+					</div>
+
+			</div>
+			<button type="submit" class="btn btn-primary" name="Submit">Submit</button>
+			</form>
+		</div>
+	</div>
+
+
+
+	<script src="../javascript/navbar.js"></script>
+</body>
+</html>
+
+<%
+	Admin[] admins = AdminQuery.getAllAdmin();
+	String adminString = Admin.arrayToString(admins);
+	adminString = adminString.replace("'", "\\'");
+%>
+
+<script type=text/javascript>
+ 
+
+  var admins = makeAdminArray();
+  populateAdmin();
+  var editAdmins = new Array;
+  
+  window.onclick = function(event) { 
+	    var modal = document.getElementById('addAdminModal');
+	    if(event.target == modal) modal.style.display = "none"; 
+	}
+  
+  $("tr.entry").click(changeColor);
+  document.getElementById('addshit').addEventListener('click', addAdmin);
+  document.getElementById('deleteshit').addEventListener('click', removeAdmin);
+
+  function populateAdmin()
+  {
+	  var html = "";
+	  for(var i = 0; i < admins.length; i++)
+	  {
+		  html += "<tr class = 'entry' id = '" + admins[i].id + "'><td>" + admins[i].name + "</td><td>" + admins[i].id + "</td><td>" + admins[i].finger + "</td></tr>";
+	  }
+	  document.getElementById("tablemainbody").innerHTML = html;
+  }
+  
+  function makeAdminArray()
+  {
+	  window.json = '<%=adminString%>';
+		return JSON.parse(window.json);
+	}
+
+	function changeColor() {
+		var id = this.getAttribute('id');
+		var i = 0;
+		if (editAdmins.includes(id)) {
+			while (i < editAdmins.length) {
+				if (editAdmins[i] == id) {
+					$(this).css("background-color", '#e9eaeb');
+					editAdmins.splice(i, 1);
+				}
+				i++;
+			}
+		} else {
+			editAdmins.push(id);
+			$(this).css("background-color", 'pink');
+		}
+
+	}
+
+	function addAdmin() {
+		document.getElementById('addAdminModal').style.display = 'block';
+	}
+
+	function removeAdmin()
+	{
+		document.getElementById('removeAdminModal').style.display = 'block';
+	}
+
+	
+	function addingAdmin()
+	{
+		document.addAdminModal.thing='add';
+	}
+	
+	function removingAdmin()
+	{
+		document.addAdminModal.thing='remove';
+	}
+</script>
\ No newline at end of file
diff --git a/src/database/AdminQuery.java b/src/database/AdminQuery.java
new file mode 100644
index 0000000..3d9f38f
--- /dev/null
+++ b/src/database/AdminQuery.java
@@ -0,0 +1,152 @@
+package database;
+
+import java.sql.*;
+
+import entities.Admin;
+import entities.User;
+
+public class AdminQuery {
+
+	private static String database = "jdbc:mysql://us-cdbr-iron-east-04.cleardb.net/ad_15a989204c2ff8a?user=b372dfe7409692&password=74f6e317";
+	private static String user = "b372dfe7409692";
+	private static String password = "74f6e317";
+
+	/*public static void initializeEmployee(int id) throws ClassNotFoundException, SQLException
+	{
+		System.getenv("VCAP_SERVICES");
+		Class.forName("com.mysql.jdbc.Driver");
+		Connection connection = DriverManager.getConnection(database, user, password);
+		Statement stmt = connection.createStatement();
+		stmt.executeUpdate("INSERT INTO employee (Employee_ID) VALUES ("+id+");");
+		stmt.close();
+		connection.close();
+	}*/
+
+	/*public static void updateEmployee(int id, String name, Boolean finger) throws ClassNotFoundException, SQLException
+	{
+		System.out.println("Updating admin "+id+": "+name+" "+finger);
+		System.getenv("VCAP_SERVICES");
+		Class.forName("com.mysql.jdbc.Driver");
+		Connection connection = DriverManager.getConnection(database, user, password);
+		Statement stmt = connection.createStatement();
+		String query = "";
+		query+="UPDATE employee SET ";
+		query+="Name='"+name;
+		query+="UPDATE admin SET";
+		query+="', Finger Print="+finger;
+		query+="' WHERE Employee_ID="+id;
+		System.out.println(query);
+		stmt.executeUpdate(query);
+		stmt.close();
+		connection.close();
+	}*/
+
+	/*public static void updateEmployee(int id, String name, int icon, String phone, String email) throws ClassNotFoundException, SQLException
+	{
+		System.getenv("VCAP_SERVICES");
+		Class.forName("com.mysql.jdbc.Driver");
+		Connection connection = DriverManager.getConnection(database, user, password);
+		Statement stmt = connection.createStatement();
+		System.out.println("Updating employee "+id+": "+name+".\nPhone: "+phone+", icon: "+icon+", email: "+email);
+		String query = "";
+		query+="UPDATE employee SET ";
+		query+="Name='"+name;
+		query+="', Phone_Number='"+phone;
+		query+="', Email ='"+email;
+		query+="', Img_Index="+icon;
+		query+=" WHERE Employee_ID="+id;
+		System.out.println(query);
+		stmt.executeUpdate(query);
+		stmt.close();
+		connection.close();
+	}*/
+
+
+	public static Admin[] getAllAdmin() throws SQLException, ClassNotFoundException, InterruptedException{
+		//database connect
+		System.getenv("VCAP_SERVICES");
+		Class.forName("com.mysql.jdbc.Driver");
+		Connection connection = DriverManager.getConnection(database, user, password);
+		Statement stmt = connection.createStatement();
+		
+		for(;;){
+			try{
+				stmt = connection.createStatement();
+				break;
+			}
+			catch(SQLException e){
+				Thread.sleep(1);
+			}
+		}
+		
+		
+		ResultSet resultSetAd = stmt.executeQuery("SELECT Admin_ID, Finger_Registered_Flag, employee.Name, employee.Location_ID FROM admin INNER JOIN employee ON admin.Admin_ID=employee.Employee_ID");
+		int counter = 0;
+
+		resultSetAd.last();
+		int rows = resultSetAd.getRow();
+		resultSetAd.beforeFirst();
+
+		//Covers amount of rows, and 6 attributes (indices 0-5)
+		Admin[] admin = new Admin[rows];
+
+		//iterate result set
+		while(resultSetAd.next()){
+			admin[counter] = new Admin(resultSetAd.getInt("Admin_ID"),0,resultSetAd.getString("Name"),"","",0,0,resultSetAd.getInt("Finger_Registered_Flag"),0);
+
+			counter++;
+		}
+
+
+		stmt.close();
+		connection.close();
+		return admin;		
+	}
+
+
+	public static void removeAdmin(int id) throws ClassNotFoundException, SQLException
+	{
+		System.getenv("VCAP_SERVICES");
+		Class.forName("com.mysql.jdbc.Driver");
+		Connection connection = DriverManager.getConnection(database, user, password);
+		Statement stmt = connection.createStatement();
+		stmt.executeUpdate("DELETE FROM admin WHERE Admin_ID = id");
+		stmt.close();
+		connection.close();
+	}
+
+	public static void addAdmin(int id, String password) throws ClassNotFoundException, SQLException
+	{
+		System.getenv("VCAP_SERVICES");
+		Class.forName("com.mysql.jdbc.Driver");
+		Connection connection = DriverManager.getConnection(database, user, password);
+		Statement stmt = connection.createStatement();
+		stmt.executeUpdate("INSERT INTO employee (Admin_ID, Password) values("+id+", "+password+")");
+		stmt.close();
+		connection.close();
+	}
+	
+	public static boolean fingerCheck(int id) throws ClassNotFoundException, SQLException
+	{
+		System.getenv("VCAP_SERVICES");
+		Class.forName("com.mysql.jdbc.Driver");
+		Connection connection = DriverManager.getConnection(database, user, password);
+		Statement stmt = connection.createStatement();
+		ResultSet finger = stmt.executeQuery("SELECT Finger_Registered_Flag FROM admin WHERE Admin_ID = id");
+		finger.next();
+		int flag = finger.getInt("Finger_Registered_Flag");
+		if(flag == 0)
+		{
+			removeAdmin(id);
+		}
+		else
+		{
+			System.out.println("Cut off their fingers first");
+		}
+		
+		stmt.close();
+		connection.close();
+		return flag==1;
+		
+	}
+}
\ No newline at end of file
