OSDN Git Service

name_hashは被る可能性があるので、primaryではなくindexを指定するようにした
[webchat/WebChat.git] / profile.js
index d93ed48..9734638 100644 (file)
@@ -128,7 +128,7 @@ function detail_proc(req, res)
                        RenderMessage(res,resource.notfound_name,req.session.items);\r
                else{\r
                        res.setHeader("X-FRAME-OPTIONS","DENY");\r
-                       res.render("profile/detail",{list:result,token:req.session._csrf,admin:req.session.items.admin});\r
+                       res.render("profile/detail",{list:result,alias:config.alias,token:req.session._csrf,admin:req.session.items.admin});\r
                }\r
        });\r
 }\r
@@ -176,7 +176,7 @@ function detail_postproc(req, res)
                                RenderMessage(res,err,req.session.items);\r
                        }else if(result != null){\r
                                res.setHeader("X-FRAME-OPTIONS","DENY");\r
-                               res.render("profile/edit",{list:result,token:req.session._csrf});\r
+                               res.render("profile/edit",{list:result,token:req.session._csrf,alias:config.alias});\r
                        }else{\r
                                RenderMessage(res,resource.unmatch_password,req.session.items);\r
                        }\r
@@ -193,12 +193,16 @@ function edit_postproc(req, res)
                RenderMessage(res,resource.invaild_parameter,req.session.items);\r
                return;\r
        }else if(typeof(req.body.edit) != "undefined"){\r
+               var validator = new Validator();\r
+               var result = validator.Validate(req.body,config.alias,true);\r
+               if(result.length > 0)\r
+               {\r
+                       RenderMessage(res,result,req.session.items);\r
+                       return;\r
+               }\r
                async.waterfall([\r
                        function(cb){\r
-                               if(req.body.updatepw == false)\r
-                                       collection.UpdatAsync(req.body.name,req.body,null,cb);\r
-                               else\r
-                                       collection.UpdatAsync(req.body.name,req.body,req.body.password,cb);\r
+                               collection.UpdatAsync(req.body.name,req.body,cb);\r
                        },\r
                ],function(err,result){\r
                        if(err != null)\r
@@ -214,6 +218,13 @@ function edit_postproc(req, res)
 function registor_postproc(req, res)\r
 {\r
        if(typeof(req.body.registor) != "undefined"){\r
+               var validator = new Validator();\r
+               var result = validator.Validate(req.body,config.alias,false);\r
+               if(result.length > 0)\r
+               {\r
+                       RenderMessage(res,result,req.session.items);\r
+                       return;\r
+               }\r
                async.waterfall([\r
                        function(cb){\r
                                collection.AddAsync(req.body,cb);\r
@@ -235,11 +246,13 @@ function registor_proc(req, res)
                req.session.items = new security.SessionInfomation(false);\r
 \r
        res.setHeader("X-FRAME-OPTIONS","DENY");\r
-       res.render("profile/registor",{token:req.session._csrf});\r
+       res.render("profile/registor",{token:req.session._csrf,alias:config.alias});\r
 }\r
 \r
 function RenderMessage(res,msg,info)\r
 {\r
+       if(typeof(msg) == "string")\r
+               msg = new Array(msg);\r
        if(typeof(info) == "undefined" || typeof(info.admin) == "undefined")\r
                res.render("profile/message",{message:msg,admin:false});\r
        else\r
@@ -251,22 +264,15 @@ function RenderMessage(res,msg,info)
 //\r
 function ProfileCollection()\r
 {\r
-       var MySQLPool = new require("./mysql_pool.js");\r
        var murmurhash = require("murmurhash");\r
-       var pool = new MySQLPool({\r
-                               host     : config.db_host,\r
-                               user     : config.db_user,\r
-                               password : config.db_password,\r
-                               port     : config.db_port,\r
-                               database : "webchat",\r
-                       });\r
+       var Profile = require("./init").GetProfileColletion;\r
        this.AuthAsync = function(name,password,cb){\r
                async.waterfall([\r
                        function(next){\r
-                               pool.query("SELECT * FROM list WHERE name_hash = ? and name = ?",[murmurhash.v3(name),name],next);\r
+                               Profile.find({name_hash:murmurhash.v3(name), name:name}).done(next);\r
                        },\r
                        function(result,next){\r
-                               if(result[0].password == md5_hex(password))\r
+                               if(result.password == md5_hex(password))\r
                                        next(null,true);\r
                                else\r
                                        next(null,false);\r
@@ -274,53 +280,38 @@ function ProfileCollection()
                ],cb);\r
        }\r
        this.GetAsync = function(name,cb){\r
-               pool.query("SELECT * FROM list WHERE name_hash = ? and name = ?",[murmurhash.v3(name),name],cb);\r
+               Profile.find({name_hash:murmurhash.v3(name), name:name}).done(cb);\r
        }\r
        this.AddAsync = function(data,cb){\r
-               var item = {\r
-                       name_hash:murmurhash.v3(data.name),\r
-                       name:data.name,\r
-                       age:data.age,\r
-                       gender:data.gender,\r
-                       height:data.height,\r
-                       weight:data.weight,\r
-                       race:data.race,\r
-                       password:md5_hex(data.password),\r
-                       lastmodified:new Date(),\r
-                       etc:data.etc\r
-               };\r
-               pool.query("INSERT INTO list SET ?",[item],cb);\r
+               newProfile = Profile.build(GetItem(data));\r
+               newProfile.save().done(cb);\r
        }\r
-       this.UpdatAsync = function(name,data,newpassword,cb){\r
-               var item = {\r
-                       name_hash:murmurhash.v3(data.name),\r
-                       name:data.name,\r
-                       age:data.age,\r
-                       gender:data.gender,\r
-                       height:data.height,\r
-                       weight:data.weight,\r
-                       race:data.race,\r
-                       lastmodified:new Date(),\r
-                       etc:data.etc\r
-               };\r
-               if(newpassword != null)\r
-                       item.password = md5_hex(newpassword);\r
-               pool.query("UPDATE list SET ? WHERE name = ?",[item,name],cb);\r
+       this.UpdatAsync = function(name,data,cb){\r
+               Profile.update(GetItem(data),{name_hash:murmurhash.v3(name), name:name}).done(cb);\r
        }\r
        this.ClearAsync = function(cb){\r
-               pool.query("TRUNCATE TABLE list",null,cb);\r
+               Profile.drop().done(cb);\r
        }\r
        this.RemoveRangeAsync = function(names,cb){\r
-               pool.query("DELETE FROM list WHERE name IN (?)",[names],cb);\r
+               Profile.destroy({where:{\r
+                               in:[names]\r
+                       }\r
+               }).done(cb);\r
        }\r
        this.RemoveAsync = function(name,cb){\r
-               pool.query("DELETE FROM list WHERE name_hash = ? and name = ?",[murmurhash.v3(name),name],cb);\r
+               Profile.destroy({name_hash:murmurhash.v3(name), name:name}).done(cb);\r
        }\r
        this.FindByNameAsync = function(pattern,start,count,cb){\r
-               pool.query("SELECT * FROM list WHERE name LIKE ? LIMIT ?,?",[pattern+"%",start,count],cb);\r
+               Profile.findAll({\r
+                       offset:start,\r
+                       limit:count,\r
+                       where:{\r
+                               like:pattern\r
+                       }\r
+               }).done(cb);\r
        }\r
        this.ToArrayAsync = function(start,count,cb){\r
-               pool.query("SELECT name,age,lastmodified FROM list LIMIT ?,?",[start,count],cb);\r
+               Profile.findAll({offset:start,limit:count}).done(cb);\r
        }\r
 \r
        var crypto = require("crypto");\r
@@ -330,5 +321,104 @@ function ProfileCollection()
                md5.update(src, 'utf8');\r
        return md5.digest('hex');\r
        }\r
+\r
+       function GetItem(data,newpw)\r
+       {\r
+               var item = {\r
+                       name_hash:murmurhash.v3(data.name),\r
+                       lastmodified:new Date(),\r
+               };\r
+               for(var key in config.alias)\r
+               {\r
+                       if(typeof(config.alias[key].nodefinetable) != "undefined" && \r
+                               config.alias[key].nodefinetable)\r
+                               continue;\r
+                       if(config.alias[key].visible_edit)\r
+                       {\r
+                               if(config.alias[key].type == "password")\r
+                               {\r
+                                       if(data[key] != "")\r
+                                               item[key] = md5_hex(data[key]);\r
+                               }\r
+                               else if(data[key] == "" && typeof(config.alias[key].defaultvalue) != "undefined")\r
+                               {\r
+                                       item[key] = config.alias[key].defaultvalue;\r
+                               }\r
+                               else\r
+                               {\r
+                                       item[key] = data[key];\r
+                               }\r
+                       }\r
+               }\r
+               return item;\r
+       }\r
 }\r
 \r
+//\r
+// Validatorクラス\r
+//\r
+function Validator()\r
+{\r
+       //\r
+       // バリテーションを行う。\r
+       // エラーがあった場合は真。そうでない場合は偽を返す\r
+       //\r
+       // @body バリテーションの対象となる連想配列\r
+       // @alias バリテーションを行う要素のリスト\r
+       // @editflag 編集時なら真\r
+       this.Validate = function(body,alias,editflag){\r
+               var result = new Array();\r
+               for(var key in alias)\r
+               {\r
+                       if(alias[key].visible_edit == false)\r
+                               continue;\r
+                       var message;\r
+                       if(typeof(alias[key].isnotempty) != "undefined" &&\r
+                               alias[key].isnotempty && body[key] == "")\r
+                                       message = resource.is_not_empty;\r
+                       else if(typeof(alias[key].isnotemptyonregistor) != "undefined" &&\r
+                               alias[key].isnotemptyonregistor && body[key] == "" &&\r
+                               !editflag)\r
+                                       message = resource.is_not_empty;\r
+                       else if(typeof(alias[key].mustmatchitem) != "undefined" &&\r
+                               body[key] != body[alias[key].mustmatchitem])\r
+                                       message = util.format(resource.must_match_item,alias[alias[key].mustmatchitem].name); \r
+                       else\r
+                               message = IsValidate(body[key],alias[key].type,alias[key].rule);\r
+                       if(message != null)\r
+                               result.push(alias[key].name + ":" + message);\r
+               }\r
+               return result;\r
+       }\r
+       function IsValidate(data,type,rule){\r
+               if(typeof(data) == "undefined")\r
+                       throw "data is undefined";\r
+               if(typeof(type) == "undefined")\r
+                       throw "type is undefined";\r
+\r
+               var result = null;\r
+\r
+               switch(type)\r
+               {\r
+                       case "text":\r
+                       case "textarea":\r
+                       case "password":\r
+                               if(typeof(data) != "string")\r
+                                       result = resource.is_not_string;\r
+                               break;\r
+                       case "number":\r
+                               if(data.match(/[^0-9]/g))\r
+                                       result = resource.is_not_number;\r
+                               break;\r
+                       case "mail":\r
+                               if(data != "" && !data.match(/^[A-Za-z0-9]+[\w\-\+]+@[\w\.-]+\.\w{2,}$/))\r
+                                       result = resource.is_not_mail;\r
+                               break;\r
+               }\r
+\r
+               if(typeof(rule) == "function")\r
+                       result = rule(data,type);\r
+\r
+               return result;\r
+       }\r
+}\r