4769l1.txt100664 2046 330 4555 7343735644 11177 0ustar jillljedit4769l1 Listing 1. Category Class API package net.confidentialfiles.OpenReference; import java.util.*; import java.sql.*; // net.confidentialfiles.DBUtils.* is a // collection of basic functions to assembly // SQL strings from Hashtables and arrays import net.confidentialfiles.DBUtils.*; public class Category extends DatabaseTable { // Data Table definition static public String TABLE = "Category"; static public String[] FIELDS = new String[] { "CategoryID", "Name", "OrderWeight", "ParentCategory" }; static public String[] SEARCH_FIELDS = new String[] { "Name" }; static public String[] USER_FIELDS = new String[] { "Name", "OrderWeight" }; static public String PRIMARY_FIELD = "Name"; // Data Table preset values static public String ROOT_CATEGORY_ID="-1"; static public String ROOT_PARENT_CATEGORY="-2"; // A list of public methods. Implementation omitted // test if an category is leaf static public boolean isLeaf( String catid ); // add a new subcategory to "cat.ParentCategory" static public long addCategory(Hashtable cat); // delete a category and connect its children // to its parent static public boolean deleteCatNode(String catid); // get the parent category static public Hashtable getParent( String catid); // add a new level of subcategory "cat" between // "cat.ParentCategory" and its current children static public boolean expandLevel(Hashtable cat); // Get sibling categories static public Vector getSiblings(String catid); // Update category "newCat.CategoryID" with // values in this hash static public boolean updateCategory( Hashtable newCat); // Get subcategories and order them according to // "OrderWeight" field in the return // Vector; "order" is "ASC" or "DESC" static public Vector getSubCategories( String catid, String order); // Get a category's fields static public Hashtable getCatInfo(String catid); // Return a Vector containing categories on the // path from root to catid static public Vector tracePath(String catid); // search the keywords in the "SEARCH_FIELDS" // and return matched categories. The "searchOp" // is "AND" or "OR" static public Vector search(String[] keywords, String searchOp); } 4769l2.txt100664 2046 330 4453 7343735644 11175 0ustar jillljedit4769l2 Listing 2. Filtering HTML Tags and Composing the SQL Query String Using a Regular Expression Engine package net.confidentialfiles.DBUtils; import java.util.*; import gnu.regexp.*; // Only one method is shown here to save space. public class HTMLUtil { // "Hashtable h" is a collection of field/value // pairs to enter the database table // // "String mode" is either "plain" for plain text // values or "HTML" for html text // // "String[] allowed" is an array of allowed HTML // tags // // This method handles the blank values, // validates HTML text public static void processInput(Hashtable h, String mode, String[] allowed) throws Exception { Object o; NullValue nv = new NullValue(); RE re1, re2; REMatch[] rematch; String tag; for (Enumeration e = h.keys(); e.hasMoreElements(); ) { o = e.nextElement(); String s = (String)h.get(o); if ( !isStr(s) ) { h.put(o, nv); } else { if ( mode.equals("plain") ) { // in plain mode all "<"s are "<" re1 = new RE ("<"); s = re1.substituteAll( s, "<" ); } else { // in html mode, only allowed tags are // permitted other tags are will be // converted to "<tagname" re1 = new RE ( "<(\\w+)" ); rematch = re1.getAllMatches( s ); for (int i=0; i