Meishin/LoginSystem
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Pass args through PreparedStatement

Browse Source
This commit is contained in:
Xephi 2015-12-30 12:03:48 +01:00
parent f7010f1d3b
commit 14e130eaee
2 changed files with 47 additions and 36 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

55
src/main/java/fr/xephi/authme/datasource/MySQL.java
View File

@ -919,18 +919,18 @@ public class MySQL implements DataSource {
public synchronized List<String> getAllAuthsByName(PlayerAuth auth) { public synchronized List<String> getAllAuthsByName(PlayerAuth auth) {
List<String> result = new ArrayList<>(); List<String> result = new ArrayList<>();
try (Connection con = getConnection()) { try (Connection con = getConnection()) {
PreparedStatement pst = con.prepareStatement(new Query(this) PreparedStatement pst = getConnection().prepareStatement(new Query(this)
.select(columnName) .select(columnName)
.from(tableName) .from(tableName)
.addWhere(columnIp + "='" + auth.getIp() + "'", null) .addWhere(columnIp + "=?", null)
.build() .build()
.getQuery()); .getQuery());
pst.setString(1, auth.getIp());
ResultSet rs = pst.executeQuery(); ResultSet rs = pst.executeQuery();
while (rs.next()) { while (rs.next()) {
result.add(rs.getString(columnName)); result.add(rs.getString(columnName));
} }
rs.close(); rs.close();
pst.close();
} catch (SQLException ex) { } catch (SQLException ex) {
ConsoleLogger.showError(ex.getMessage()); ConsoleLogger.showError(ex.getMessage());
ConsoleLogger.writeStackTrace(ex); ConsoleLogger.writeStackTrace(ex);
@ -950,19 +950,19 @@ public class MySQL implements DataSource {
@Override @Override
public synchronized List<String> getAllAuthsByIp(String ip) { public synchronized List<String> getAllAuthsByIp(String ip) {
List<String> result = new ArrayList<>(); List<String> result = new ArrayList<>();
try (Connection con = getConnection()) { try {
PreparedStatement pst = con.prepareStatement(new Query(this) PreparedStatement pst = getConnection().prepareStatement(new Query(this)
.select(columnName) .select(columnName)
.from(tableName) .from(tableName)
.addWhere(columnIp + "='" + ip + "'", null) .addWhere(columnIp + "=?", null)
.build() .build()
.getQuery()); .getQuery());
pst.setString(1, ip);
ResultSet rs = pst.executeQuery(); ResultSet rs = pst.executeQuery();
while (rs.next()) { while (rs.next()) {
result.add(rs.getString(columnName)); result.add(rs.getString(columnName));
} }
rs.close(); rs.close();
pst.close();
} catch (SQLException ex) { } catch (SQLException ex) {
ConsoleLogger.showError(ex.getMessage()); ConsoleLogger.showError(ex.getMessage());
ConsoleLogger.writeStackTrace(ex); ConsoleLogger.writeStackTrace(ex);
@ -982,19 +982,19 @@ public class MySQL implements DataSource {
@Override @Override
public synchronized List<String> getAllAuthsByEmail(String email){ public synchronized List<String> getAllAuthsByEmail(String email){
List<String> countEmail = new ArrayList<>(); List<String> countEmail = new ArrayList<>();
try (Connection con = getConnection()) { try {
PreparedStatement pst = con.prepareStatement(new Query(this) PreparedStatement pst = getConnection().prepareStatement(new Query(this)
.select(columnName) .select(columnName)
.from(tableName) .from(tableName)
.addWhere(columnEmail + "='" + email + "'", null) .addWhere(columnEmail + "=?", null)
.build() .build()
.getQuery()); .getQuery());
pst.setString(1, email);
ResultSet rs = pst.executeQuery(); ResultSet rs = pst.executeQuery();
while (rs.next()) { while (rs.next()) {
countEmail.add(rs.getString(columnName)); countEmail.add(rs.getString(columnName));
} }
rs.close(); rs.close();
pst.close();
} catch (SQLException ex) { } catch (SQLException ex) {
ConsoleLogger.showError(ex.getMessage()); ConsoleLogger.showError(ex.getMessage());
ConsoleLogger.writeStackTrace(ex); ConsoleLogger.writeStackTrace(ex);
@ -1049,13 +1049,14 @@ public class MySQL implements DataSource {
@Override @Override
public boolean isLogged(String user) { public boolean isLogged(String user) {
boolean isLogged = false; boolean isLogged = false;
try (Connection con = getConnection()) { try {
PreparedStatement pst = con.prepareStatement(new Query(this) PreparedStatement pst = getConnection().prepareStatement(new Query(this)
.select(columnLogged) .select(columnLogged)
.from(tableName) .from(tableName)
.addWhere(columnName + "='" + user + "'", null) .addWhere(columnName + "=?", null)
.build() .build()
.getQuery()); .getQuery());
pst.setString(1, user);
ResultSet rs = pst.executeQuery(); ResultSet rs = pst.executeQuery();
isLogged = rs.next() && (rs.getInt(columnLogged) == 1); isLogged = rs.next() && (rs.getInt(columnLogged) == 1);
} catch (SQLException ex) { } catch (SQLException ex) {
@ -1074,16 +1075,16 @@ public class MySQL implements DataSource {
*/ */
@Override @Override
public void setLogged(String user) { public void setLogged(String user) {
try (Connection con = getConnection()) { try {
PreparedStatement pst = con.prepareStatement(new Query(this) PreparedStatement pst = getConnection().prepareStatement(new Query(this)
.update() .update()
.from(tableName) .from(tableName)
.addUpdateSet(columnLogged + "=" + 1) .addUpdateSet(columnLogged + "='1'")
.addWhere(columnName + "='" + user.toLowerCase() + "'", null) .addWhere(columnName + "=?", null)
.build() .build()
.getQuery()); .getQuery());
pst.setString(1, user.toLowerCase());
pst.executeUpdate(); pst.executeUpdate();
pst.close();
} catch (SQLException ex) { } catch (SQLException ex) {
ConsoleLogger.showError(ex.getMessage()); ConsoleLogger.showError(ex.getMessage());
ConsoleLogger.writeStackTrace(ex); ConsoleLogger.writeStackTrace(ex);
@ -1099,16 +1100,16 @@ public class MySQL implements DataSource {
*/ */
@Override @Override
public void setUnlogged(String user) { public void setUnlogged(String user) {
try (Connection con = getConnection()) { try {
PreparedStatement pst = con.prepareStatement(new Query(this) PreparedStatement pst = getConnection().prepareStatement(new Query(this)
.update() .update()
.from(tableName) .from(tableName)
.addUpdateSet(columnLogged + "=" + 0) .addUpdateSet(columnLogged + "='0'")
.addWhere(columnName + "='" + user.toLowerCase() + "'", null) .addWhere(columnName + "=?", null)
.build() .build()
.getQuery()); .getQuery());
pst.setString(1, user.toLowerCase());
pst.executeUpdate(); pst.executeUpdate();
pst.close();
} catch (SQLException ex) { } catch (SQLException ex) {
ConsoleLogger.showError(ex.getMessage()); ConsoleLogger.showError(ex.getMessage());
ConsoleLogger.writeStackTrace(ex); ConsoleLogger.writeStackTrace(ex);
@ -1182,10 +1183,12 @@ public class MySQL implements DataSource {
con.prepareStatement(new Query(this) con.prepareStatement(new Query(this)
.update() .update()
.from(tableName) .from(tableName)
.addUpdateSet(columnName + "='" + newOne + "'") .addUpdateSet(columnName + "=?")
.addWhere(columnName + "='" + oldOne + "'", null) .addWhere(columnName + "=?", null)
.build() .build()
.getQuery()); .getQuery());
pst.setString(1, newOne);
pst.setString(2, oldOne);
pst.executeUpdate(); pst.executeUpdate();
pst.close(); pst.close();
} catch (Exception ex) { } catch (Exception ex) {

28
src/main/java/fr/xephi/authme/datasource/SQLite.java
View File

@ -612,9 +612,10 @@ public class SQLite implements DataSource {
PreparedStatement pst = getConnection().prepareStatement(new Query(this) PreparedStatement pst = getConnection().prepareStatement(new Query(this)
.select(columnName) .select(columnName)
.from(tableName) .from(tableName)
.addWhere(columnIp + "='" + auth.getIp() + "'", null) .addWhere(columnIp + "=?", null)
.build() .build()
.getQuery()); .getQuery());
pst.setString(1, auth.getIp());
ResultSet rs = pst.executeQuery(); ResultSet rs = pst.executeQuery();
while (rs.next()) { while (rs.next()) {
result.add(rs.getString(columnName)); result.add(rs.getString(columnName));
@ -643,9 +644,10 @@ public class SQLite implements DataSource {
PreparedStatement pst = getConnection().prepareStatement(new Query(this) PreparedStatement pst = getConnection().prepareStatement(new Query(this)
.select(columnName) .select(columnName)
.from(tableName) .from(tableName)
.addWhere(columnIp + "='" + ip + "'", null) .addWhere(columnIp + "=?", null)
.build() .build()
.getQuery()); .getQuery());
pst.setString(1, ip);
ResultSet rs = pst.executeQuery(); ResultSet rs = pst.executeQuery();
while (rs.next()) { while (rs.next()) {
result.add(rs.getString(columnName)); result.add(rs.getString(columnName));
@ -674,9 +676,10 @@ public class SQLite implements DataSource {
PreparedStatement pst = getConnection().prepareStatement(new Query(this) PreparedStatement pst = getConnection().prepareStatement(new Query(this)
.select(columnName) .select(columnName)
.from(tableName) .from(tableName)
.addWhere(columnEmail + "='" + email + "'", null) .addWhere(columnEmail + "=?", null)
.build() .build()
.getQuery()); .getQuery());
pst.setString(1, email);
ResultSet rs = pst.executeQuery(); ResultSet rs = pst.executeQuery();
while (rs.next()) { while (rs.next()) {
countEmail.add(rs.getString(columnName)); countEmail.add(rs.getString(columnName));
@ -739,9 +742,10 @@ public class SQLite implements DataSource {
PreparedStatement pst = getConnection().prepareStatement(new Query(this) PreparedStatement pst = getConnection().prepareStatement(new Query(this)
.select(columnLogged) .select(columnLogged)
.from(tableName) .from(tableName)
.addWhere(columnName + "='" + user + "'", null) .addWhere(columnName + "=?", null)
.build() .build()
.getQuery()); .getQuery());
pst.setString(1, user);
ResultSet rs = pst.executeQuery(); ResultSet rs = pst.executeQuery();
isLogged = rs.next() && (rs.getInt(columnLogged) == 1); isLogged = rs.next() && (rs.getInt(columnLogged) == 1);
} catch (SQLException ex) { } catch (SQLException ex) {
@ -765,9 +769,10 @@ public class SQLite implements DataSource {
.update() .update()
.from(tableName) .from(tableName)
.addUpdateSet(columnLogged + "='1'") .addUpdateSet(columnLogged + "='1'")
.addWhere(columnName + "='" + user.toLowerCase() + "'", null) .addWhere(columnName + "=?", null)
.build() .build()
.getQuery()); .getQuery());
pst.setString(1, user.toLowerCase());
pst.executeUpdate(); pst.executeUpdate();
} catch (SQLException ex) { } catch (SQLException ex) {
ConsoleLogger.showError(ex.getMessage()); ConsoleLogger.showError(ex.getMessage());
@ -789,9 +794,10 @@ public class SQLite implements DataSource {
.update() .update()
.from(tableName) .from(tableName)
.addUpdateSet(columnLogged + "='0'") .addUpdateSet(columnLogged + "='0'")
.addWhere(columnName + "='" + user.toLowerCase() + "'", null) .addWhere(columnName + "=?", null)
.build() .build()
.getQuery()); .getQuery());
pst.setString(1, user.toLowerCase());
pst.executeUpdate(); pst.executeUpdate();
} catch (SQLException ex) { } catch (SQLException ex) {
ConsoleLogger.showError(ex.getMessage()); ConsoleLogger.showError(ex.getMessage());
@ -859,15 +865,17 @@ public class SQLite implements DataSource {
*/ */
@Override @Override
public void updateName(String oldOne, String newOne) { public void updateName(String oldOne, String newOne) {
try { try (Connection con = getConnection()) {
PreparedStatement pst = PreparedStatement pst =
getConnection().prepareStatement(new Query(this) con.prepareStatement(new Query(this)
.update() .update()
.from(tableName) .from(tableName)
.addUpdateSet(columnName + "='" + newOne + "'") .addUpdateSet(columnName + "=?")
.addWhere(columnName + "='" + oldOne + "'", null) .addWhere(columnName + "=?", null)
.build() .build()
.getQuery()); .getQuery());
pst.setString(1, newOne);
pst.setString(2, oldOne);
pst.executeUpdate(); pst.executeUpdate();
} catch (Exception ex) { } catch (Exception ex) {
ConsoleLogger.showError(ex.getMessage()); ConsoleLogger.showError(ex.getMessage());