/** * The MIT License (MIT) * Copyright (c) 2020 铭软科技(mingsoft.net) * Permission is hereby granted, free of charge, to any person obtaining a copy of * this software and associated documentation files (the "Software"), to deal in * the Software without restriction, including without limitation the rights to * use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of * the Software, and to permit persons to whom the Software is furnished to do so, * subject to the following conditions: * The above copyright notice and this permission notice shall be included in all * copies or substantial portions of the Software. * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER * IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. */ package net.mingsoft.cms.action.web; import cn.hutool.core.collection.CollUtil; import cn.hutool.core.collection.CollectionUtil; import cn.hutool.core.lang.Editor; import cn.hutool.core.util.ObjectUtil; import cn.hutool.core.util.PageUtil; import com.baomidou.mybatisplus.core.toolkit.Wrappers; import freemarker.core.ParseException; import freemarker.template.MalformedTemplateNameException; import freemarker.template.TemplateException; import freemarker.template.TemplateNotFoundException; import net.bytebuddy.implementation.bytecode.Throw; import net.mingsoft.base.constant.Const; import net.mingsoft.basic.exception.BusinessException; import net.mingsoft.basic.util.BasicUtil; import net.mingsoft.basic.util.StringUtil; import net.mingsoft.cms.bean.CategoryBean; import net.mingsoft.cms.bean.ContentBean; import net.mingsoft.cms.biz.ICategoryBiz; import net.mingsoft.cms.biz.IContentBiz; import net.mingsoft.cms.constant.e.CategoryTypeEnum; import net.mingsoft.cms.entity.CategoryEntity; import net.mingsoft.cms.entity.ContentEntity; import net.mingsoft.cms.util.CmsParserUtil; import net.mingsoft.mdiy.bean.PageBean; import net.mingsoft.mdiy.biz.IModelBiz; import net.mingsoft.mdiy.biz.IPageBiz; import net.mingsoft.mdiy.entity.ModelEntity; import net.mingsoft.mdiy.util.ParserUtil; import org.apache.commons.lang3.StringUtils; import org.apache.shiro.util.CollectionUtils; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.beans.factory.annotation.Value; import org.springframework.stereotype.Controller; import org.springframework.web.bind.annotation.GetMapping; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RequestMethod; import org.springframework.web.bind.annotation.ResponseBody; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import java.io.IOException; import java.io.UnsupportedEncodingException; import java.util.ArrayList; import java.util.HashMap; import java.util.List; import java.util.Map; /** * 动态生成页面，需要后台配置自定义页数据 * * @author 铭飞开源团队 * @date 2018年12月17日 */ @Controller("dynamicPageAction") @RequestMapping("/mcms") public class MCmsAction extends net.mingsoft.cms.action.BaseAction { /** * 自定义页面业务层 */ @Autowired private IPageBiz pageBiz; /** * 文章管理业务处理层 */ @Autowired private IContentBiz contentBiz; /** * 栏目业务层 */ @Autowired private ICategoryBiz categoryBiz; /** * 搜索标签; */ public static final String SEARCH = "search"; /** * 自定义模型 */ @Autowired private IModelBiz modelBiz; @Value("${ms.diy.html-dir:html}") private String htmlDir; /** * 动态列表页 */ @GetMapping("/index.do") @ResponseBody public String index(HttpServletRequest req, HttpServletResponse resp) { Map map = BasicUtil.assemblyRequestMap(); map.forEach((k, v) -> { map.put(k, v.toString().replaceAll("('|\"|\\\\)", "\\\\$1")); }); map.put(ParserUtil.URL, BasicUtil.getUrl()); //动态解析 map.put(ParserUtil.IS_DO, true); //设置动态请求的模块路径 map.put(ParserUtil.MODEL_NAME, "mcms"); map.put(ParserUtil.HTML,htmlDir); //解析后的内容 String content = ""; try { //根据模板路径，参数生成 content = ParserUtil.rendering(ParserUtil.INDEX + ParserUtil.HTM_SUFFIX, map); } catch (TemplateNotFoundException e) { e.printStackTrace(); } catch (MalformedTemplateNameException e) { e.printStackTrace(); } catch (ParseException e) { e.printStackTrace(); } catch (IOException e) { e.printStackTrace(); } return content; } /** * 动态列表页 * * @param req * @param resp */ @ResponseBody @GetMapping("/list.do") public String list(HttpServletRequest req, HttpServletResponse resp) { Map map = BasicUtil.assemblyRequestMap(); map.forEach((k, v) -> { map.put(k, v.toString().replaceAll("('|\"|\\\\)", "\\\\$1")); }); //获取栏目编号 int typeId = BasicUtil.getInt(ParserUtil.TYPE_ID, 0); int size = BasicUtil.getInt("size", 10); ContentBean contentBean = new ContentBean(); contentBean.setCategoryId(String.valueOf(typeId)); //获取文章总数 List columnArticles = contentBiz.queryIdsByCategoryIdForParser(contentBean); //判断栏目下是否有文章 if (columnArticles.size() == 0) { return ""; } //设置分页类 PageBean page = new PageBean(); page.setPageNo(BasicUtil.getPageNo()); int total = PageUtil.totalPage(columnArticles.size(), size); map.put(ParserUtil.COLUMN, columnArticles.get(0)); //获取总数 page.setTotal(total); //设置栏目编号 map.put(ParserUtil.TYPE_ID, typeId); map.put(ParserUtil.URL, BasicUtil.getUrl()); map.put(ParserUtil.PAGE, page); //动态解析 map.put(ParserUtil.IS_DO, true); //设置动态请求的模块路径 map.put(ParserUtil.MODEL_NAME, "mcms"); map.put(ParserUtil.HTML, htmlDir); //解析后的内容 String content = ""; try { //根据模板路径，参数生成 content = ParserUtil.rendering(columnArticles.get(0).getCategoryListUrl(), map); } catch (TemplateNotFoundException e) { e.printStackTrace(); } catch (MalformedTemplateNameException e) { e.printStackTrace(); } catch (ParseException e) { e.printStackTrace(); } catch (IOException e) { e.printStackTrace(); } return content; } /** * 动态详情页 */ @GetMapping("/view.do") @ResponseBody public String view(String orderby, String order, HttpServletRequest req, HttpServletResponse resp) { //参数文章编号 ContentEntity article = (ContentEntity) contentBiz.getEntity(BasicUtil.getInt(ParserUtil.ID)); if (ObjectUtil.isNull(article)) { throw new BusinessException(this.getResString("err.empty", this.getResString("id"))); } if (StringUtils.isNotBlank(order)) { //防注入 if (!order.toLowerCase().equals("asc") && !order.toLowerCase().equals("desc")) { throw new BusinessException(this.getResString("err.error", this.getResString("order"))); } } orderby = orderby.replaceAll("('|\"|\\\\)", "\\\\$1"); PageBean page = new PageBean(); //用于详情上下页获取当前文章列表对应的分类，根据文章查询只能获取自身分类 String typeId = BasicUtil.getString(ParserUtil.TYPE_ID, article.getCategoryId()); //根据文章编号查询栏目详情模版 CategoryEntity column = (CategoryEntity) categoryBiz.getEntity(Integer.parseInt(typeId)); //解析后的内容 String content = ""; Map map = BasicUtil.assemblyRequestMap(); map.forEach((k, v) -> { //sql注入过滤 map.put(k, v.toString().replaceAll("('|\"|\\\\)", "\\\\$1")); }); //动态解析 map.put(ParserUtil.IS_DO, true); //设置栏目编号 map.put(ParserUtil.TYPE_ID, typeId); //设置动态请求的模块路径 map.put(ParserUtil.MODEL_NAME, "mcms"); map.put(ParserUtil.URL, BasicUtil.getUrl()); map.put(ParserUtil.PAGE, page); map.put(ParserUtil.ID, article.getId()); map.put(ParserUtil.HTML,htmlDir); ContentBean contentBean = new ContentBean(); contentBean.setCategoryId(String.valueOf(typeId)); contentBean.setOrderBy(orderby); contentBean.setOrder(order); List articleIdList = contentBiz.queryIdsByCategoryIdForParser(contentBean); Map contentModelMap = new HashMap(); ModelEntity contentModel = null; for (int artId = 0; artId < articleIdList.size(); ) { //如果不是当前文章则跳过 if (articleIdList.get(artId).getArticleId().equals(article.getId())) { artId++; continue; } // 文章的栏目路径 String categoryParentId = articleIdList.get(artId).getId(); if (StringUtils.isNotBlank(articleIdList.get(artId).getCategoryParentIds())) { categoryParentId += ',' + articleIdList.get(artId).getCategoryParentIds(); } // 文章的栏目模型编号 Integer columnContentModelId = articleIdList.get(artId).getMdiyModelId(); Map parserParams = new HashMap(); parserParams.put(ParserUtil.COLUMN, articleIdList.get(artId)); // 判断当前栏目是否有自定义模型 if (columnContentModelId != null && columnContentModelId > 0) { // 通过当前栏目的模型编号获取，自定义模型表名 if (contentModelMap.containsKey(columnContentModelId)) { parserParams.put(ParserUtil.TABLE_NAME, contentModel.getModelTableName()); } else { // 通过栏目模型编号获取自定义模型实体 contentModel = (ModelEntity) modelBiz.getEntity(columnContentModelId); // 将自定义模型编号设置为key值 contentModelMap.put(columnContentModelId, contentModel.getModelTableName()); parserParams.put(ParserUtil.TABLE_NAME, contentModel.getModelTableName()); } } // 第一篇文章没有上一篇 if (artId > 0) { CategoryBean preCaBean = articleIdList.get(artId - 1); page.setPreId(preCaBean.getArticleId()); } // 最后一篇文章没有下一篇 if (artId + 1 < articleIdList.size()) { CategoryBean nextCaBean = articleIdList.get(artId + 1); page.setNextId(nextCaBean.getArticleId()); } break; } try { //根据模板路径，参数生成 content = ParserUtil.rendering(column.getCategoryUrl(), map); } catch (TemplateNotFoundException e) { e.printStackTrace(); } catch (MalformedTemplateNameException e) { e.printStackTrace(); } catch (ParseException e) { e.printStackTrace(); } catch (IOException e) { e.printStackTrace(); } return content; } /** * 实现前端页面的文章搜索 * * @param request 搜索id * @param response */ @RequestMapping(value = "search") @ResponseBody public String search(HttpServletRequest request, HttpServletResponse response) { //设置分页类 PageBean page = new PageBean(); page.setSize(ParserUtil.getPageSize(SEARCH + ParserUtil.HTM_SUFFIX, 20)); //参数集合，提供给解析使用 Map params = new HashMap<>(); // 读取请求字段 Map field = BasicUtil.assemblyRequestMap(); // 自定义字段集合 Map diyFieldName = new HashMap(); //记录自定义模型字段名 List filedStr = new ArrayList<>(); // 栏目对应字段的值 List fieldValueList = new ArrayList(); // 当前栏目 CategoryEntity column = null; // 栏目对应模型 ModelEntity contentModel = null; //获取栏目信息 String typeId = null; String categoryIds = BasicUtil.getString("categoryIds"); //List categoryIdList = CollectionUtil.newArrayList(); //当传递了栏目编号，但不是栏目集合 if (StringUtils.isNotBlank(categoryIds) && !categoryIds.contains(",")) { typeId = categoryIds; } // else { // //取出所有的子栏目 // String[] ids = categoryIds.split(","); // List categoryList = categoryBiz.list(Wrappers.lambdaQuery().ne(CategoryEntity::getCategoryType, CategoryTypeEnum.LINK.toString())); // // categoryIdList = CollectionUtil.newArrayList(ids); // for(CategoryEntity c:categoryList) { // if(StringUtils.isNotEmpty(c.getParentids())) { // for(String id:ids) { // if(c.getParentids().indexOf(id)>-1) { // categoryIdList.add(c.getId()); // break; // } // } // } // } // } //重新组织 ID //categoryIds = StringUtils.join(categoryIdList, ","); //根据栏目确定自定义模型 if (typeId != null) { column = (CategoryEntity) categoryBiz.getById(typeId); // 获取表单类型的id if (column != null && ObjectUtil.isNotNull(column.getMdiyModelId())) { contentModel = (ModelEntity) modelBiz.getEntity(column.getMdiyModelId()); if (contentModel != null) { // 保存自定义模型的数据 Map fieldMap = contentModel.getFieldMap(); for (String s : fieldMap.keySet()) { filedStr.add(fieldMap.get(s)); } // 设置自定义模型表名，方便解析的时候关联表查询 params.put(ParserUtil.TABLE_NAME, contentModel.getModelTableName()); } } // 设置栏目，方便解析的时候关联表查询 params.put(ParserUtil.COLUMN, column); } // 处理读取请求字段 if (field != null) { for (Map.Entry entry : field.entrySet()) { if (entry != null) { //空值不处理 if (ObjectUtil.isNull(entry.getValue())) { continue; } // 对值进行安全处理 // 处理由get方法请求中文乱码问题 String value = entry.getValue().toString().replaceAll("('|\"|\\\\)", "\\\\$1"); //Xss过滤 value = clearXss(value); // 如果是get方法需要将请求地址参数转码 if (request.getMethod().equals(RequestMethod.GET)) { try { value = new String(value.getBytes("ISO-8859-1"), Const.UTF8); } catch (UnsupportedEncodingException e) { e.printStackTrace(); } } // 保存至自定义字段集合 if (StringUtils.isNotBlank(value)) { diyFieldName.put(entry.getKey(), value); //判断请求中的是否是自定义模型中的字段 if (filedStr.contains(entry.getKey())) { //设置自定义模型字段和值 DiyModelMap diyMap = new DiyModelMap(); diyMap.setKey(entry.getKey()); diyMap.setValue(value); fieldValueList.add(diyMap); } } } } } //添加自定义模型的字段和值 if (fieldValueList.size() > 0) { params.put("diyModel", fieldValueList); } Map searchMap = field; searchMap.put("categoryIds",categoryIds); StringBuilder urlParams = new StringBuilder(); searchMap.forEach((k, v) -> { //sql注入过滤 if (v != null) { searchMap.put(k, v.toString().replaceAll("('|\"|\\\\)", "\\\\$1")); searchMap.put(k, clearXss(searchMap.get(k).toString())); if (!"size".equals(k) && !"pageNo".equals(k)) { urlParams.append(k).append("=").append(searchMap.get(k)).append("&"); } } }); //查询数量 int count = contentBiz.getSearchCount(contentModel, fieldValueList, searchMap, BasicUtil.getApp().getAppId(), categoryIds); page.setRcount(count); params.put(SEARCH, searchMap); //站点编号 if (BasicUtil.getWebsiteApp() != null) { params.put(ParserUtil.APP_DIR, BasicUtil.getWebsiteApp().getAppDir()); params.put(ParserUtil.URL, BasicUtil.getWebsiteApp().getAppHostUrl()); params.put(ParserUtil.APP_ID, BasicUtil.getWebsiteApp().getAppId()); } else { params.put(ParserUtil.URL, BasicUtil.getUrl()); params.put(ParserUtil.APP_DIR, BasicUtil.getApp().getAppDir()); } params.put(ParserUtil.PAGE, page); params.put(ParserUtil.HTML, htmlDir); //动态解析 params.put(ParserUtil.IS_DO, false); //设置动态请求的模块路径 params.put(ParserUtil.MODEL_NAME, "mcms"); searchMap.put("pageNo", 0); // ParserUtil.read(SEARCH + ParserUtil.HTM_SUFFIX, map, page); int total = PageUtil.totalPage(count, page.getSize()); int pageNo = BasicUtil.getInt("pageNo", 1); if (pageNo >= total && total != 0) { pageNo = total; } //获取总数 page.setTotal(total); page.setPageNo(pageNo); //设置分页的统一链接 String url = params.get(ParserUtil.URL).toString(); url = url + request.getServletPath() + "?" + urlParams; String pageNoStr = "size=" + page.getSize() + "&pageNo="; //下一页 String nextUrl = url + pageNoStr + ((pageNo + 1 > total) ? total : pageNo + 1); //首页 String indexUrl = url + pageNoStr + 1; //尾页 String lastUrl = url + pageNoStr + total; //上一页 当前页为1时，上一页就是1 String preUrl = url + pageNoStr + ((pageNo == 1) ? 1 : pageNo - 1); page.setIndexUrl(indexUrl); page.setNextUrl(nextUrl); page.setPreUrl(preUrl); page.setLastUrl(lastUrl); params.put(SEARCH, searchMap); if (BasicUtil.getWebsiteApp() != null) { params.put(ParserUtil.APP_DIR, BasicUtil.getWebsiteApp().getAppDir()); } params.put(ParserUtil.PAGE, page); params.put(ParserUtil.HTML, htmlDir); //动态解析 params.put(ParserUtil.IS_DO, false); //设置动态请求的模块路径 params.put(ParserUtil.MODEL_NAME, "mcms"); //解析后的内容 String content = ""; try { //根据模板路径，参数生成 content = ParserUtil.rendering(SEARCH + ParserUtil.HTM_SUFFIX, params); } catch (TemplateNotFoundException e) { e.printStackTrace(); } catch (MalformedTemplateNameException e) { e.printStackTrace(); } catch (ParseException e) { e.printStackTrace(); } catch (IOException e) { e.printStackTrace(); } return content; } // 清除路径中的转义字符 private String clearXss(String value) { if (value == null || "".equals(value)) { return value; } value = value.replaceAll("<", "<").replaceAll(">", ">"); value = value.replaceAll("\\(", "(").replace("\\)", ")"); value = value.replaceAll("'", "'"); value = value.replaceAll("eval\\((.*)\\)", ""); value = value.replaceAll("[\\\"\\\'][\\s]*javascript:(.*)[\\\"\\\']", "\"\""); value = value.replace("script", ""); return value; } /** * 存储自定义模型字段和接口参数 * * @author 铭飞开源团队 * @date 2019年3月5日 */ class DiyModelMap { String key; Object value; public String getKey() { return key; } public void setKey(String key) { this.key = key; } public Object getValue() { return value; } public void setValue(Object value) { this.value = value; } } public static void main(String[] args) { int[] a = PageUtil.rainbow(20, 30, 5); for (int _a : a) { System.out.println(_a); } } }