package edu.rice.rubis.beans;
import java.rmi.RemoteException;
import javax.ejb.SessionBean;
import javax.ejb.SessionContext;
import javax.ejb.FinderException;
import javax.ejb.ObjectNotFoundException;
import javax.ejb.CreateException;
import javax.ejb.RemoveException;
import javax.ejb.EJBException;
import javax.naming.Context;
import javax.naming.InitialContext;
import javax.rmi.PortableRemoteObject;
import javax.sql.DataSource;
import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.io.Serializable;
/**
* This is a stateless session bean used to build the html form to buy an item.
*
* @author Emmanuel Cecchet and Julie Marguerite
* @version 1.1
*/
public class SB_BuyNowBean implements SessionBean
{
protected SessionContext sessionContext;
protected Context initialContext = null;
protected DataSource dataSource = null;
/**
* Authenticate the user and get the information to build the html form.
*
* @return a string in html format
* @since 1.1
*/
public String getBuyNowForm(Integer itemId, String username, String password) throws RemoteException
{
int userId = -1;
StringBuffer html = new StringBuffer();
PreparedStatement stmt = null;
ResultSet rs = null;
Connection conn = null;
// Authenticate the user who want to comment
if ((username != null && !username.equals("")) || (password != null && !password.equals("")))
{
SB_AuthHome authHome = null;
SB_Auth auth = null;
try
{
authHome = (SB_AuthHome)PortableRemoteObject.narrow(initialContext.lookup("java:comp/env/ejb/SB_Auth"), SB_AuthHome.class);
auth = authHome.create();
}
catch (Exception e)
{
throw new RemoteException("Cannot lookup SB_Auth: " +e);
}
try
{
userId = auth.authenticate(username, password);
}
catch (Exception e)
{
throw new RemoteException("Authentication failed: " +e);
}
if (userId == -1)
{
html.append(" You don't have an account on RUBiS!
You have to register first.
");
return html.toString();
}
}
// Try to find the Item corresponding to the Item ID
String itemName = null, description = null;
String startDate = null, endDate = null, sellerName = null;
int quantity = 0, sellerId = -1;
float buyNow = 0;
try
{
conn = dataSource.getConnection();
stmt = conn.prepareStatement("SELECT * FROM items WHERE id=?");
stmt.setInt(1, itemId.intValue());
rs = stmt.executeQuery();
if (rs.first())
{
itemName = rs.getString("name");
description = rs.getString("description");
startDate = rs.getString("start_date");
endDate = rs.getString("end_date");
buyNow = rs.getFloat("buy_now");
quantity = rs.getInt("quantity");
sellerId = rs.getInt("seller");
}
stmt.close();
}
catch (Exception e)
{
try
{
if (stmt != null) stmt.close();
if (conn != null) conn.close();
}
catch (Exception ignore)
{
}
throw new RemoteException("Failed to execute Query for item: " +e);
}
try
{
stmt = conn.prepareStatement("SELECT nickname FROM users WHERE id=?");
stmt.setInt(1, sellerId);
ResultSet srs = stmt.executeQuery();
if (srs.first())
{
sellerName = srs.getString("nickname");
}
stmt.close();
conn.close();
}
catch (SQLException s)
{
try
{
if (stmt != null) stmt.close();
if (conn != null) conn.close();
}
catch (Exception ignore)
{
}
throw new RemoteException("Failed to execute Query for seller: " +s);
}
// Display the form for buying the item
html.append("\n| You are ready to buy this item: "+itemName+" |
\n
\n");
try
{
html.append(printItemDescriptionToBuyNow(itemId.intValue(), itemName, description, buyNow, quantity, sellerId, sellerName, startDate, endDate, userId));
}
catch (Exception e)
{
throw new RemoteException("Unable to print Item description: " +e);
}
return html.toString();
}
/**
* Display item information for the Buy Now servlet
*
* @return a String containing HTML code
* @exception RemoteException if an error occurs
* @since 1.0
*/
public String printItemDescriptionToBuyNow(int itemId, String itemName, String description, float buyNow, int quantity, int sellerId, String sellerName, String startDate, String endDate, int userId) throws RemoteException
{
StringBuffer result = new StringBuffer("
"+
"\n"+
"| Item description |
\n"+
"
\n"+description+"
\n"+
"
\n"+
"