001    /*
002     * Copyright (c) 2009 The openGion Project.
003     *
004     * Licensed under the Apache License, Version 2.0 (the "License");
005     * you may not use this file except in compliance with the License.
006     * You may obtain a copy of the License at
007     *
008     *     http://www.apache.org/licenses/LICENSE-2.0
009     *
010     * Unless required by applicable law or agreed to in writing, software
011     * distributed under the License is distributed on an "AS IS" BASIS,
012     * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
013     * either express or implied. See the License for the specific language
014     * governing permissions and limitations under the License.
015     */
016    package org.opengion.hayabusa.taglib;
017    
018    import org.opengion.hayabusa.common.HybsSystem;
019    
020    import static org.opengion.fukurou.util.StringUtil.nval ;
021    
022    /**
023     * 謖?ｮ壹＆繧後◆ value 蛟､縺ｮ{&#064;XXXX} 螟画焚縺瑚ｨｭ螳壹＆繧後◆蝣ｴ蜷医?縺ｿ陦ｨ遉ｺ縺吶ｋ繧ｿ繧ｰ縺ｧ縺吶?
024     *
025     * value 蛟､縺ｫ縲＋&#064;XXXX} 螟画焚繧剃ｽｿ逕ｨ縺励※縲√Μ繧ｯ繧ｨ繧ｹ繝亥?縺瑚ｨｭ螳壹＆繧後◆蝣ｴ蜷医?縺ｿ
026     * 縺昴?蛟､繧定｡ｨ遉ｺ縺励∪縺吶?縺薙ｌ縺ｯ縲＋&#064;XXXX} 螟画焚縺ｨ蝗ｺ螳壼?繧堤ｵ?∩蜷医ｏ縺帙◆蝣ｴ蜷医〒繧?
027     * 蜷梧ｧ倥↓縲∝?縺瑚ｨｭ螳壹＆繧後※縺?↑縺??蜷医?縲∽ｽｿ逕ｨ縺輔ｌ縺ｾ縺帙ｓ縲?
028     * defaultVal 縺瑚ｨｭ螳壹＆繧後※縺翫ｊ縲√Μ繧ｯ繧ｨ繧ｹ繝亥?縺瑚ｨｭ螳壹＆繧後※縺?↑縺??蜷医?defaultVal 蛟､縺?
029     * 菴ｿ逕ｨ縺輔ｌ縺ｾ縺吶?
030     * 縺薙?繧ｿ繧ｰ縺御ｽｿ逕ｨ縺輔ｌ繧九こ繝ｼ繧ｹ縺ｮ莉｣陦ｨ縺ｯ縲ヾQL縺ｧ縺ｮ order by 蜿･縺ｧ縺吶?荳?握縺ｮ繝ｪ繧ｯ繧ｨ繧ｹ繝域凾縺ｫ縺ｯ縲?
031     * order by 蜿･繧偵Μ繧ｯ繧ｨ繧ｹ繝医〒險ｭ螳壹＠縺ｦ縲√Θ繝ｼ繧ｶ繝ｼ縺梧､懃ｴ｢縺吶ｋ譎ゅ↓縲∝?繧頑崛縺医′縺ｧ縺阪ｋ繧医≧縺ｫ
032     * 縺励∪縺吶?蛻･逕ｻ髱｢縺九ｉ縲√Μ繝ｳ繧ｯ遲峨〒逕ｻ髱｢繧貞他縺ｳ蜃ｺ縺吝?蜷医?縲??蟶ｸ order by 蜿･縺ｮ譚｡莉ｶ縺ｾ縺ｧ縲?
033     * 謖?ｮ壹＠縺ｾ縺帙ｓ縲ゅ◎縺ｮ繧医≧縺ｪ蝣ｴ蜷医↓蛯吶∴縺ｦ縲｛g:appear 繧ｿ繧ｰ縺ｧdefaultVal 蛟､繧定ｨｭ螳壹＠縺ｦ縺翫″縲?
034     * 譛ｪ謖?ｮ壽凾縺ｮ讀懃ｴ｢鬆?ｒ莠医ａ謖?ｮ壹＠縺ｦ縺翫″縺ｾ縺吶?
035     *
036     * @og.formSample
037     * 笳丞ｽ｢蠑擾ｼ?lt;og:appear startKey="[order by|窶ｦ]" value="窶ｦ" defaultVal="[窶ｦ]" /&gt;
038     * 笳獣ody?壹↑縺?
039     *
040     * 笳週ag螳夂ｾｩ
041     *   &lt;og:appear
042     *       startKey           縲慎AG縲鷹幕蟋区枚蟄怜?繧定ｨｭ螳壹＠縺ｾ縺?蛻晄悄蛟､:"")
043     *       value            笳九?TAG縲大?繧偵そ繝?ヨ縺励∪縺?謖?ｮ壹＆繧後◆蛟､縺?險ｭ螳壹＆繧後※縺?ｋ蝣ｴ蜷医?縺ｿ菴ｿ逕ｨ縺輔ｌ縺ｾ縺?(蠢??)
044     *       defaultVal         縲慎AG縲大?譛溷?繧定ｨｭ螳壹＠縺ｾ縺?value蛟､縺君ULL縺ｮ蝣ｴ蜷医↓縲√％縺ｮ蛻晄悄蛟､縺瑚｡ｨ遉ｺ)
045     *       quotCheck          縲慎AG縲代Μ繧ｯ繧ｨ繧ｹ繝域ュ蝣ｱ縺ｮ 繧ｯ繧ｩ繝ｼ繝?ぅ繧ｷ繝ｧ繝ｳ(') 蟄伜惠繝√ぉ繝?け繧貞ｮ滓命縺吶ｋ縺九←縺?°[true/false]繧定ｨｭ螳壹＠縺ｾ縺?(蛻晄悄蛟､:USE_SQL_INJECTION_CHECK[=true])
046     *       xssCheck           縲慎AG縲代Μ繧ｯ繧ｨ繧ｹ繝域ュ蝣ｱ縺ｮ HTMLTag髢句ｧ?邨ゆｺ?枚蟄?&gt;&lt;) 蟄伜惠繝√ぉ繝?け繧貞ｮ滓命縺吶ｋ縺九←縺?°[true/false]繧定ｨｭ螳壹＠縺ｾ縺?(蛻晄悄蛟､:USE_XSS_CHECK[=true])
047     *       debug              縲慎AG縲代ョ繝舌ャ繧ｰ諠??繧貞?蜉帙☆繧九°縺ｩ縺?°[true/false]繧呈欠螳壹＠縺ｾ縺?蛻晄悄蛟､:false)
048     *   /&gt;
049     *
050     * 笳丈ｽｿ逕ｨ萓?
051     * &lt;!-- DB讀懃ｴ｢ SQL譁?ｨ倩ｿｰ debug=&quot;true&quot; 縺ｧSQL譁?ｒ遒ｺ隱阪〒縺阪∪縺吶?--&gt;
052     * &lt;og:query command=&quot;{&#064;command}&quot; debug=&quot;{&#064;debug}&quot; maxRowCount=&quot;{&#064;maxRowCount}&quot;&gt;
053     *         select CLM,NAME_JA,LABEL_NAME,URL,KBSAKU,
054     *                 SYSTEM_ID,LANG,FGJ,(CASE WHEN URL IS NULL THEN 0 ELSE 1 END) AS ONMARK
055     *         from GF41
056     *     &lt;!-- 讀懃ｴ｢譚｡莉ｶ縺ｧWhereTag繧剃ｽｿ逕ｨ縺吶ｌ縺ｰ{&#064;xxxx}縺君ULL縺ｮ蝣ｴ蜷医?縺昴?譚｡莉ｶ縺ｯ辟｡隕悶＆繧後∪縺吶? --&gt;
057     *     &lt;og:where&gt;
058     *         &lt;og:and value = &quot;FGJ        in  (&#39;0&#39;,&#39;1&#39;)&quot;      /&gt;
059     *         &lt;og:and value = &quot;SYSTEM_ID  =  &#39;{&#064;SYSTEM_ID}&#39;&quot;     /&gt;
060     *         &lt;og:and value = &quot;LANG       =  &#39;{&#064;LANG}&#39;&quot;          /&gt;
061     *         &lt;og:and value = &quot;CLM        like &#39;{&#064;CLM}%&#39;&quot;        /&gt;
062     *         &lt;og:and value = &quot;NAME_JA    like &#39;{&#064;NAME_JA}%&#39;&quot;    /&gt;
063     *         &lt;og:and value = &quot;LABEL_NAME like &#39;{&#064;LABEL_NAME}%&#39;&quot; /&gt;
064     *         &lt;og:and value = &quot;KBSAKU     =    &#39;{&#064;KBSAKU}&#39;&quot;      /&gt;
065     *     &lt;/og:where&gt;
066     *     &lt;!-- ORDER BY蜿･縺ｧAppearTag繧剃ｽｿ逕ｨ縺吶ｌ縺ｰ{&#064;ORDER_BY}縺君ULL縺ｮ蝣ｴ蜷医?ORDER BY蜿･縺ｯ辟｡隕悶＆繧後∪縺吶? --&gt;
067     *     &lt;!-- 縺ｾ縺溘?{&#064;ORDER_BY}縺君ULL縺ｮ蝣ｴ蜷医↓縲‥efaultVal螻樊?繧呈欠螳壹☆繧後?縲√◎縺ｮ蛟､縺ｧORDER BY陦ｨ遉ｺ縺輔ｌ縺ｾ縺吶? --&gt;
068     *     &lt;og:appear startKey = &quot;order by&quot; value = &quot;{&#064;ORDER_BY}&quot;
069     *                 defaultVal = &quot;SYSTEM_ID,CLM,LANG&quot; /&gt;
070     * &lt;/og:query&gt;
071     *
072     * @og.group 逕ｻ髱｢驛ｨ蜩?
073     *
074     * @version  4.0
075     * @author      Kazuhiko Hasegawa
076     * @since    JDK5.0,
077     */
078    public class AppearTag extends CommonTagSupport {
079            //* 縺薙?繝励Ο繧ｰ繝ｩ繝??VERSION譁?ｭ怜?繧定ｨｭ螳壹＠縺ｾ縺吶?       {@value} */
080            private static final String VERSION = "5.7.8.1 (2014/07/18)" ;
081    
082            private static final long serialVersionUID = 578120140718L ;
083    
084            private String  startKey        = "";
085            private String  value           = null;
086            private String  defaultVal      = null;
087            private boolean quotCheck       = HybsSystem.sysBool( "USE_SQL_INJECTION_CHECK" );      // 5.7.8.1 (2014/07/18)
088            private boolean xssCheck        = HybsSystem.sysBool( "USE_XSS_CHECK" );                        // 5.7.8.1 (2014/07/18)
089    
090            /**
091             * Taglib縺ｮ邨ゆｺ?ち繧ｰ縺瑚ｦ九▽縺九▲縺溘→縺阪↓蜃ｦ逅?☆繧?doEndTag() 繧?繧ｪ繝ｼ繝舌?繝ｩ繧､繝峨＠縺ｾ縺吶?
092             *
093             * @og.rev 3.1.1.2 (2003/04/04) Tomcat4.1 蟇ｾ蠢懊?release2() 繧?doEndTag()縺ｧ蜻ｼ縺ｶ縲?
094             * @og.rev 5.7.8.1 (2014/07/18) quotCheck,xssCheck 霑ｽ蜉?
095             *
096             * @return      蠕檎ｶ壼?逅??謖?､ｺ(EVAL_PAGE)
097             */
098            @Override
099            public int doEndTag() {
100                    debugPrint();           // 4.0.0 (2005/02/28)
101    
102                    // 5.7.8.1 (2014/07/18) quotCheck,xssCheck 霑ｽ蜉?
103                    useQuotCheck( quotCheck );
104                    useXssCheck( xssCheck );
105    
106                    String output = getRequestParameter( value );
107                    if( isNull() ) {
108                            output = defaultVal;
109                    }
110    
111                    if( output != null ) {
112                            jspPrint( startKey + " " + output );
113                    }
114    
115                    return EVAL_PAGE ;
116            }
117    
118            /**
119             * 繧ｿ繧ｰ繝ｪ繝悶が繝悶ず繧ｧ繧ｯ繝医ｒ繝ｪ繝ｪ繝ｼ繧ｹ縺励∪縺吶?
120             *
121             * 繧ｭ繝｣繝?す繝･縺輔ｌ縺ｦ蜀榊茜逕ｨ縺輔ｌ繧九?縺ｧ縲√ヵ繧｣繝ｼ繝ｫ繝峨?蛻晄悄險ｭ螳壹ｒ陦後＞縺ｾ縺吶?
122             *
123             * @og.rev 2.0.0.4 (2002/09/27) 繧ｫ繧ｹ繧ｿ繝?ち繧ｰ縺ｮ release() 繝｡繧ｽ繝?ラ繧偵?霑ｽ蜉?
124             * @og.rev 3.1.1.2 (2003/04/04) Tomcat4.1 蟇ｾ蠢懊?release2() 繧?doEndTag()縺ｧ蜻ｼ縺ｶ縲?
125             * @og.rev 5.7.8.1 (2014/07/18) quotCheck , xssCheck 霑ｽ蜉?
126             *
127             */
128            @Override
129            protected void release2() {
130                    super.release2();
131                    startKey    = "";
132                    value       = null;
133                    defaultVal  = null;
134                    quotCheck       = HybsSystem.sysBool( "USE_SQL_INJECTION_CHECK" );      // 5.7.8.1 (2014/07/18)
135                    xssCheck        = HybsSystem.sysBool( "USE_XSS_CHECK" );                        // 5.7.8.1 (2014/07/18)
136            }
137    
138            /**
139             * 縲慎AG縲鷹幕蟋区枚蟄怜?繧定ｨｭ螳壹＠縺ｾ縺?蛻晄悄蛟､:"")縲?
140             *
141             * @og.tag
142             * 縺薙?繧ｭ繝ｼ縺ｯ縲√ヰ繝ｪ繝･繝ｼ縺ｨ謗･邯壹＆繧後ｋ蝣ｴ蜷医↓遨ｺ逋ｽ譁?ｭ励ｒ荳?▽謖ｿ蜈･縺励∪縺吶?
143             *
144             * @param       val 髢句ｧ区枚蟄怜?(萓具ｼ嘖tartKey="order by")
145             */
146            public void setStartKey( final String val ) {
147                    startKey = nval( getRequestParameter( val ),startKey );
148            }
149    
150            /**
151             * 縲慎AG縲大?繧偵そ繝?ヨ縺励∪縺?謖?ｮ壹＆繧後◆蛟､縺?險ｭ螳壹＆繧後※縺?ｋ蝣ｴ蜷医?縺ｿ菴ｿ逕ｨ縺輔ｌ縺ｾ縺?縲?
152             *
153             * @og.tag
154             * 謖?ｮ壹＆繧後◆蛟､縺?險ｭ螳壹＆繧後※縺?ｋ蝣ｴ蜷医?縺ｿ縲?幕蟋区枚蟄怜?(startKey)縺ｨ邨?∩蜷医ｏ縺帙ｌ縺ｦ縲∽ｽｿ逕ｨ縺輔ｌ縺ｾ縺吶?
155             * 縺薙ｌ縺ｯ縲∽ｸ?握縺ｫvalue蛟､縺悟､牙虚縺吶ｋ蝣ｴ蜷医↓縲‥efaultVal 遲峨↓驥崎､?☆繧句?繧?
156             * 險ｭ螳壹＠縺溘￥縺ｪ縺??蜷医↓菴ｿ逕ｨ縺励∪縺吶?{&#064;XXXX}譁?ｭ励′菴ｿ逕ｨ縺ｧ縺阪∪縺吶?
157             *
158             * @param       val 蛟､
159             */
160            public void setValue( final String val ) {
161                    value = val;
162            }
163    
164            /**
165             * 縲慎AG縲大?譛溷?繧定ｨｭ螳壹＠縺ｾ縺?value蛟､縺君ULL縺ｮ蝣ｴ蜷医↓縲√％縺ｮ蛻晄悄蛟､縺瑚｡ｨ遉ｺ)縲?
166             *
167             * @og.tag
168             * value蛟､縺君ULL(謖?ｮ壹＆繧後↑縺?縺ｮ蝣ｴ蜷医↓縲√％縺ｮ蛻晄悄蛟､縺悟?縺ｨ縺励※菴ｿ逕ｨ縺輔ｌ縺ｾ縺吶?
169             *
170             * @param       val 蛻晄悄蛟､
171             */
172            public void setDefaultVal( final String val ) {
173                    defaultVal = nval( getRequestParameter( val ),defaultVal );
174            }
175    
176            /**
177             * 縲慎AG縲代Μ繧ｯ繧ｨ繧ｹ繝域ュ蝣ｱ縺ｮ 繧ｯ繧ｩ繝ｼ繝?ぅ繧ｷ繝ｧ繝ｳ(') 蟄伜惠繝√ぉ繝?け繧貞ｮ滓命縺吶ｋ縺九←縺?°[true/false]繧定ｨｭ螳壹＠縺ｾ縺?
178             *              (蛻晄悄蛟､:USE_SQL_INJECTION_CHECK[={@og.value org.opengion.hayabusa.common.SystemData#USE_SQL_INJECTION_CHECK}])縲?
179             *
180             * @og.tag
181             * ?ｳ?ｱ?ｬ繧､繝ｳ繧ｸ繧ｧ繧ｯ繧ｷ繝ｧ繝ｳ蟇ｾ遲悶?荳?▽縺ｨ縺励※縲∵圻螳夂噪縺ｧ縺ｯ縺ゅｊ縺ｾ縺吶′縲ヾQL縺ｮ繝代Λ繝｡繝ｼ繧ｿ縺ｫ
182             * 貂｡縺呎枚蟄怜?縺ｫ繧ｯ繧ｩ繝ｼ繝?ぅ繧ｷ繝ｧ繝ｳ(') 繧定ｨｱ縺輔↑縺?ｨｭ螳壹↓縺吶ｌ縺ｰ縲√≠繧狗ｨ句ｺｦ縺ｯ髦ｲ豁｢縺ｧ縺阪∪縺吶?
183             * 謨ｰ蟄励ち繧､繝励?蠑墓焚縺ｫ縺ｯ縲?or 5=5 縺ｪ縺ｩ縺ｮ繧ｯ繧ｩ繝ｼ繝?ぅ繧ｷ繝ｧ繝ｳ繧剃ｽｿ逕ｨ縺励↑縺?さ繝ｼ繝峨ｒ蝓九ａ縺ｦ繧ゅ?
184             * 謨ｰ蟄励メ繧ｧ繝?け縺ｧ讀懷?蜿ｯ閭ｽ縺ｧ縺吶?譁?ｭ励ち繧､繝励?蝣ｴ蜷医?縲∝ｿ?★ (')繧偵?縺壹＠縺ｦ縲?
185             * ' or 'A' like 'A 縺ｮ繧医≧縺ｪ蠖｢蠑上↓縺ｪ繧狗ぜ縲?')繝√ぉ繝?け縺?￠縺ｧ繧よ怏蜉ｹ縺ｧ縺吶?
186             * (') 縺悟性縺ｾ繧後※縺?◆繧ｨ繝ｩ繝ｼ縺ｫ縺吶ｋ(true)?上°繝弱?繝√ぉ繝?け縺?false)繧呈欠螳壹＠縺ｾ縺吶?
187             * (蛻晄悄蛟､:繧ｷ繧ｹ繝?Β螳壽焚縺ｮUSE_SQL_INJECTION_CHECK[={@og.value org.opengion.hayabusa.common.SystemData#USE_SQL_INJECTION_CHECK}])縲?
188             *
189             * @og.rev 4.0.0.0 (2005/08/31) 譁ｰ隕剰ｿｽ蜉?
190             *
191             * @param   flag 繧ｯ繧ｩ繝ｼ繝?ぅ繧ｷ繝ｧ繝ｳ繝√ぉ繝?け [true:縺吶ｋ/縺昴ｌ莉･螟?縺励↑縺Ь
192             * @see         org.opengion.hayabusa.common.SystemData#USE_SQL_INJECTION_CHECK
193             */
194            public void setQuotCheck( final String flag ) {
195                    quotCheck = nval( getRequestParameter( flag ),quotCheck );
196            }
197    
198            /**
199             * 縲慎AG縲代Μ繧ｯ繧ｨ繧ｹ繝域ュ蝣ｱ縺ｮ HTMLTag髢句ｧ?邨ゆｺ?枚蟄?&gt;&lt;) 蟄伜惠繝√ぉ繝?け繧貞ｮ滓命縺吶ｋ縺九←縺?°[true/false]繧定ｨｭ螳壹＠縺ｾ縺?
200             *              (蛻晄悄蛟､:USE_XSS_CHECK[={@og.value org.opengion.hayabusa.common.SystemData#USE_XSS_CHECK}])縲?
201             *
202             * @og.tag
203             * 繧ｯ繝ｭ繧ｹ繧ｵ繧､繝医せ繧ｯ繝ｪ繝励ユ繧｣繝ｳ繧ｰ(XSS)蟇ｾ遲悶?荳?腸縺ｨ縺励※less/greater than sign縺ｫ縺､縺?※縺ｮ繝√ぉ繝?け繧定｡後＞縺ｾ縺吶?
204             * (&gt;&lt;) 縺悟性縺ｾ繧後※縺?◆繧ｨ繝ｩ繝ｼ縺ｫ縺吶ｋ(true)?上°繝弱?繝√ぉ繝?け縺?false)繧呈欠螳壹＠縺ｾ縺吶?
205             * (蛻晄悄蛟､:繧ｷ繧ｹ繝?Β螳壽焚縺ｮUSE_XSS_CHECK[={@og.value org.opengion.hayabusa.common.SystemData#USE_XSS_CHECK}])縲?
206             *
207             * @og.rev 5.0.0.2 (2009/09/15) 譁ｰ隕剰ｿｽ蜉?
208             *
209             * @param       flag    XSS繝√ぉ繝?け [true:縺吶ｋ/false:縺励↑縺Ь
210             * @see         org.opengion.hayabusa.common.SystemData#USE_XSS_CHECK
211             */
212            public void setXssCheck( final String flag ) {
213                    xssCheck = nval( getRequestParameter( flag ),xssCheck );
214            }
215    
216            /**
217             * 縺薙?繧ｪ繝悶ず繧ｧ繧ｯ繝医?譁?ｭ怜?陦ｨ迴ｾ繧定ｿ斐＠縺ｾ縺吶?
218             * 蝓ｺ譛ｬ逧?↓繝?ヰ繝?げ逶ｮ逧?↓菴ｿ逕ｨ縺励∪縺吶?
219             *
220             * @return 縺薙?繧ｯ繝ｩ繧ｹ縺ｮ譁?ｭ怜?陦ｨ迴ｾ
221             */
222            @Override
223            public String toString() {
224                    return org.opengion.fukurou.util.ToString.title( this.getClass().getName() )
225                                    .println( "VERSION"             ,VERSION        )
226                                    .println( "startKey"    ,startKey       )
227                                    .println( "value"               ,value          )
228                                    .println( "defaultVal"  ,defaultVal     )
229                                    .println( "Other..."    ,getAttributes().getAttribute() )
230                                    .fixForm().toString() ;
231            }
232    }