QCOperation.jsp
3.25 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
<%@ page language="java" import="java.util.*" pageEncoding="UTF-8"%>
<%@page import="weaver.hrm.HrmUserVarify"%>
<%@page import="weaver.hrm.User"%>
<%@page import="org.json.JSONObject"%>
<%@page import="weaver.general.Util"%>
<%@page import="org.apache.commons.lang3.StringUtils"%>
<%@page import="weaver.conn.RecordSet"%>
<%@page import="weaver.file.*" %>
<%
JSONObject obj = new JSONObject() ;
FileUpload fu = new FileUpload(request) ;
String operateflag = fu.getParameter("operateflag");
User user = HrmUserVarify.getUser (request , response) ;
if(user==null) {
obj.put("code","-1") ;
out.print(obj.toString()) ;
return;
}
if("addUserCaCert".equals(operateflag)){
String loginid = Util.null2String(fu.getParameter("loginid")) ;
String lastname = Util.null2String(fu.getParameter("lastname")) ;
String cert18name = Util.null2String(fu.getParameter("cert18name")) ;
String cert18id = Util.null2String(fu.getParameter("cert18id")) ;
if(!loginid.equals(user.getLoginid())){
obj.put("code","-1") ;
out.print(obj.toString()) ;
return;
}
int userid = user.getUID() ;
String cert = Util.null2String(fu.getParameter("cert")) ;
if(StringUtils.isBlank(cert)){
obj.put("code","-101") ;
out.print(obj.toString()) ;
return;
}
RecordSet rs = new RecordSet() ;
rs.execute("select userid,uuid from hrm_mobile_ca_cert where cert='"+cert+"'") ;
if(rs.next()){
int dbUserid = rs.getInt("userid") ;
if(userid != dbUserid){
obj.put("code","-100") ;
out.print(obj.toString()) ;
return ;
}else{// 用户已经绑定，无需做数据库变更
obj.put("code","1") ;
out.print(obj.toString()) ;
return ;
}
}else{
// 不存在
rs.executeUpdate("insert into hrm_mobile_ca_cert(userid,uuid,cert,lastname,cert18name,cert18id,status) values (?,?,?,?,?,?,0)",
userid,null,cert,lastname,cert18name,cert18id) ;
obj.put("code","1") ;
out.print(obj.toString()) ;
return ;
}
}else if("deleteUserCaCert".equals(operateflag)){
String loginid = Util.null2String(fu.getParameter("loginid")) ;
if(!loginid.equals(user.getLoginid())){
obj.put("code","-1") ;
out.print(obj.toString()) ;
return;
}
int userid = user.getUID() ;
String cert = Util.null2String(fu.getParameter("cert")) ;
if(StringUtils.isBlank(cert)){
obj.put("code","-101") ;
out.print(obj.toString()) ;
return;
}
RecordSet rs = new RecordSet() ;
rs.executeUpdate("delete from hrm_mobile_ca_cert where userid=? and cert=?",userid,cert) ;
obj.put("code","1") ;
out.print(obj.toString()) ;
return ;
}else if("delAllCaCertForUnavailableUser".equals(operateflag)){
if(1 != user.getUID()){
obj.put("code","-1") ;
out.print(obj.toString()) ;
return;
}
RecordSet rs = new RecordSet() ;
rs.executeUpdate("delete from hrm_mobile_ca_cert where id in (select id from hrmresource where status not in (0,1,2,3))") ;
obj.put("code","1") ;
out.print(obj.toString()) ;
return ;
}else if("delAllCaCertForUser".equals(operateflag)){
if(1 != user.getUID()){
obj.put("code","-1") ;
out.print(obj.toString()) ;
return;
}
String userid = Util.null2String(fu.getParameter("userid")) ;
RecordSet rs = new RecordSet() ;
rs.executeUpdate("delete from hrm_mobile_ca_cert where id=?",userid) ;
obj.put("code","1") ;
out.print(obj.toString()) ;
return ;
}
%>