main.jsp | searchcode

/webgoat/src/main/webapp/main.jsp

http://webgoat.googlecode.com/
JavaServer Pages | 300 lines | 279 code | 19 blank | 2 comment | 26 complexity | 20028447337d1a1d0e9de959efe4d9fc MD5 | raw file

<%@ page contentType="text/html; charset=ISO-8859-1" language="java" 

	import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.Category, org.owasp.webgoat.lessons.AbstractLesson, org.owasp.webgoat.util.*, java.util.*" 

	errorPage=""  %>

<%

Course course = ((Course)session.getAttribute("course"));

WebSession webSession = ((WebSession)session.getAttribute("websession"));

AbstractLesson currentLesson = webSession.getCurrentLesson();

%>



<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<%@page import="org.owasp.webgoat.lessons.RandomLessonAdapter"%>

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />

<title><%=currentLesson.getTitle()%></title>

<link rel="stylesheet" href="css/webgoat.css" type="text/css" />

<link rel="stylesheet" href="css/lesson.css" type="text/css" />

<link rel="stylesheet" href="css/menu.css" type="text/css" />

<link rel="stylesheet" href="css/layers.css" type="text/css" />

<script language="JavaScript1.2" src="javascript/javascript.js" type="text/javascript"></script>

<script language="JavaScript1.2" src="javascript/menu_system.js" type="text/javascript"></script>

<script language="JavaScript1.2" src="javascript/lessonNav.js" type="text/javascript"></script>

<script language="JavaScript1.2" src="javascript/makeWindow.js" type="text/javascript"></script>

<script language="JavaScript1.2" src="javascript/toggle.js" type="text/javascript"></script>

</head>

<%

final String menuPrefix = WebSession.MENU;

final String submenuPrefix = "submenu";

final String mbutPrefix = "mbut";

String printHint = "";

String printParameters = "";

String printCookies = "";

String lessonComplete = "<img src=\"images/buttons/lessonComplete.jpg\">";



List categories = course.getCategories();



StringBuffer buildList = new StringBuffer();



	Iterator iter1 = categories.iterator();

    while(iter1.hasNext())

    {

        Category category = (Category)iter1.next();

        

        buildList.append("'");

        buildList.append(menuPrefix);

        buildList.append(category.getRanking());

        buildList.append("','");

        buildList.append(submenuPrefix);

        buildList.append(category.getRanking());

        buildList.append("','");

        buildList.append(mbutPrefix);

        buildList.append(category.getRanking());

        buildList.append("'");

        

        if (iter1.hasNext())

        		buildList.append(",");

    }%>

<body class="page" onload="setMenuMagic1(10,40,10,'menubottom',<%=buildList%>);trigMM1url('<%= menuPrefix %>',1);MM_preloadImages('images/buttons/hintLeftOver.jpg','images/buttons/hintOver.jpg','images/buttons/hintRightOver.jpg','images/buttons/paramsOver.jpg','images/buttons/htmlOver.jpg','images/buttons/cookiesOver.jpg','images/buttons/javaOver.jpg','images/buttons/plansOver.jpg','images/buttons/logout.jpg','images/buttons/helpOver.jpg'); initIframe();">



	<div id="wrap">

	<%

	int topCord = 140;

	int zIndex = 105;

	

		Iterator iter2 = categories.iterator();

		while(iter2.hasNext())

		{

		    Category category = (Category)iter2.next();

		%>

		<div id="<%=menuPrefix + category.getRanking()%>" style="position:absolute; left:30px; top:<%=topCord%>px; width:160px; z-index:<%=zIndex%>"><a href="javascript:;" onclick="trigMenuMagic1('<%=menuPrefix + category.getRanking()%>',1);return false" onfocus="if(this.blur)this.blur()"><img src="images/menu_images/1x1.gif" width="1" height=1"20" name="mbut<%=category.getRanking()%>" border="0" alt=""/><%=category.getName()%></a></div>

		<%

		topCord=topCord + 30;

		zIndex=zIndex + 1;

		}

		

			int topSubMenu = 72;

		

			Iterator iter3 = categories.iterator();

			while(iter3.hasNext())

			{		    

			    	Category category = (Category)iter3.next();

				List lessons = webSession.getLessons(category);

			    Iterator iter4 = lessons.iterator();

			%>    

		<div id="submenu<%=category.getRanking()%>" class="pviimenudiv" style="position:absolute; left:200px; top:<%=topSubMenu%>px; width:150px; visibility: hidden; z-index:<%=zIndex%>">

	  		<table width="150" border="0" cellspacing="6" cellpadding="0"><%



	  		topSubMenu=topSubMenu+30;

			zIndex=zIndex + 1;

			

		  	while(iter4.hasNext())

			{		  	    

		    		AbstractLesson lesson = (AbstractLesson)iter4.next();

		    

			%><tr>

	      		<td><%=(lesson.isCompleted(webSession) ? lessonComplete : "")%><a href="<%=lesson.getLink()%>"><%=lesson.getTitle()%></a></td>

	    		</tr>

	    		<% if (lesson instanceof RandomLessonAdapter) {

					RandomLessonAdapter rla = (RandomLessonAdapter) lesson;

					String[] stages = rla.getStages();

					if (stages != null)

					for (int i=0; i<stages.length; i++) {

	    		%>

			    		<tr><td class="pviimenudivstage"><%=(rla.isStageComplete(webSession, stages[i]) ? lessonComplete : "")%><a href="<%=lesson.getLink() + "&stage=" + (i+1) %>">Stage <%=i+1%>: <%=stages[i] %></a>

						</td></tr>

				<% 

					}

				}

				%>

			<%

			}

			%>

	  		</table>

		</div><%

			}%>

		<div id="top"></div>

		<div id="topLeft">

		<div align="left">

		<% if (currentLesson.getAvailableLanguages().size() != 0 ) 

		{

		%>

		<form method="get" action="attack" style="display: inline;">

		Choose another language: <select name="language" size="1"

			onChange="changeLanguage();">

			<%

					  			for(String lang: currentLesson.getAvailableLanguages()){

					  				%>

			<option value="<%=lang%>"

				<% if(webSession.getCurrrentLanguage().equals(lang)) out.println("selected" );%>><%=lang%>

			</option>

			<%

					  					

					  			}

			%>

		</select></form>

		<%

		} else {

		%>

			Internationalization is not available for this lesson

		<%

		}

		%>

		</div></div>

		<div align="right" id="topRight">

		<a href="attack?action=Logout" onmouseout="MM_swapImgRestore()"

			onmouseover="MM_swapImage('logout','','images/buttons/logoutOver.jpg',1)"><img

			src="images/buttons/logout.jpg" alt="LogOut" name="logout" width="45"

			height="22" border="0" id="logout" /></a> <a href="#getFAQ()"

			onmouseout="MM_swapImgRestore()"

			onmouseover="MM_swapImage('help','','images/buttons/helpOver.jpg',1)"><img

			src="images/buttons/help.jpg" alt="Help" name="help" width="22"

			height="22" border="0" id="help" /></a>

		</div>

<div id="lessonTitle" align="right"><%=currentLesson.getTitle()%></div>

			<div id="hMenuBar">

				<% 

				if (webSession.isAuthorizedInLesson(webSession.getRole(), WebSession.SHOWHINTS))

				{

				%>

				<a href="<%= webSession.getCurrentLesson().getLink() %>&show=PreviousHint" target="_top" onclick="MM_nbGroup('down','group1','hintLeft','',1)" 

				onmouseover="MM_nbGroup('over','hintLeft','images/buttons/hintLeftOver.jpg','',1)" 

				onmouseout="MM_nbGroup('out')">

				<img src="images/buttons/hintLeft.jpg" alt="Previous Hint" name="hintLeft" width="20" height="20" border="0" id="hintLeft"/>

				</a>

				<a href="<%= webSession.getCurrentLesson().getLink() %>&show=NextHint" target="_top" onclick="MM_nbGroup('down','group1','hint','',1)" 

				onmouseover="MM_nbGroup('over','hint','images/buttons/hintOver.jpg','',1)" 

				onmouseout="MM_nbGroup('out')">

				<img src="images/buttons/hint.jpg" alt="Hints" name="hint" width="35" height="20" border="0" id="hint"/>

				</a>

				<a href="<%= webSession.getCurrentLesson().getLink() %>&show=NextHint" target="_top" onclick="MM_nbGroup('down','group1','hintRight','',1)" 

				onmouseover="MM_nbGroup('over','hintRight','images/buttons/hintRightOver.jpg','',1)" 

				onmouseout="MM_nbGroup('out')">

				<img src="images/buttons/hintRight.jpg" alt="Next Hint" name="hintRight" width="20" height="20" border="0" id="hintRight"/>

				</a>

				<%}%>

				<a href="<%= webSession.getCurrentLesson().getLink() %>&show=Params" target="_top" onclick="MM_nbGroup('down','group1','params','',1)" 

				onmouseover="MM_nbGroup('over','params','images/buttons/paramsOver.jpg','',1)" 

				onmouseout="MM_nbGroup('out')">

				<img src="images/buttons/params.jpg" alt="Show Params" name="<%= webSession.getCurrentLesson().getLink() %>&show=Params" width="87" height="20" border="0" id="params"/>

				</a>

				<a href="<%= webSession.getCurrentLesson().getLink() %>&show=Cookies" target="_top" onclick="MM_nbGroup('down','group1','cookies','',1)" 

				onmouseover="MM_nbGroup('over','cookies','images/buttons/cookiesOver.jpg','',1)" 

				onmouseout="MM_nbGroup('out')">

				<img src="images/buttons/cookies.jpg" alt="Show Cookies" name="cookies" width="99" height="20" border="0" id="cookies"/>

				</a>

				<a href="javascript:toggle('lessonPlans')" target="_top" onclick="MM_nbGroup('down','group1','plans','',1)" 

				onmouseover="MM_nbGroup('over','plans','images/buttons/plansOver.jpg','',1)" 

				onmouseout="MM_nbGroup('out')">

				<img src="images/buttons/plans.jpg" alt="Lesson Plans" width="89" height="20" border="0" id="plans"/>

				</a>

				<% 

				if (webSession.isAuthorizedInLesson(webSession.getRole(), WebSession.SHOWSOURCE))

				{

				%>

				<a href="source" onclick="makeWindow(this.href+ '?source=true', 'Java Source');return false;" target="javaWin"

				onmouseover="MM_nbGroup('over','java','images/buttons/javaOver.jpg','',1)" 

				onmouseout="MM_nbGroup('out')">

				<img src="images/buttons/java.jpg" alt="Show Java" name="java" width="75" height="20" border="0" id="java"/>

				</a>

				<a href="source" onclick="makeWindow(this.href + '?solution=true', 'Java Solution');return false;" target="javaWin"

				onmouseover="MM_nbGroup('over','solutions','images/buttons/solutionsOver.jpg','',1)" 

				onmouseout="MM_nbGroup('out')">

				<img src="images/buttons/solutions.jpg" alt="Show Solution" name="solutions" width="73" height="20" border="0" id="solutions"/>

				</a>

				<%}%>

								

			</div>

			<div id="twoCol">

	 	 	<div id="menuSpacer"></div>

	 	 	<div id="lessonAreaTop">

	 	 	<%

			    if (currentLesson != null)

			    {

			    	%>

			    	<div id="training_wrap">

			    	<div id="training" class="info"><a href="http://yehg.net/lab/pr0js/training/webgoat.php" target="_blank"><%=WebGoatI18N.get("SolutionVideos")%></a></div>

			    	<div id="reset" class="info"><a href="<%=webSession.getRestartLink()%>"><%=WebGoatI18N.get("RestartLesson")%></a></div>

			    	</div>

	    			<%

	    		}

	 	 	%>

	 	 	</div>

	 	 	<div id="lessonArea">

	 	 	<%

				if (webSession.getHint() != null)

				{

					printHint = "<div id=\"hint\" class=\"info\">" + webSession.getHint() + "</div><br>";

					out.println(printHint);

				}

				

				if (webSession.getParams() != null)

				{

					Iterator i = webSession.getParams().iterator();

					while (i.hasNext())

					{

						Parameter p = (Parameter) i.next();

						printParameters = "<div id=\"parameter\" class=\"info\">" + p.getName() + "=" + p.getValue() + "</div><br>";

						out.println(printParameters);

					}

				}

				

				if (webSession.getCookies() != null)

				{

					Iterator i = webSession.getCookies().iterator();

					while (i.hasNext())

					{

						Cookie c = (Cookie) i.next();

						printCookies = "<div id=\"cookie\" class=\"info\">" + c.getName() + " <img src=\"images/icons/rightArrow.jpg\" alt=\"\"> " + c.getValue() + "</div><br>";

						out.println(printCookies);

					}

				}%>

				<div id="lessonPlans" style="visibility:hidden; height:1px; position:absolute; left:260px; top:130px; width:425px; z-index:105;"><%=currentLesson.getLessonPlan(webSession) %>

				<br/>

				<br/>

				<a href="javascript:toggle('lessonPlans')" target="_top" onclick="MM_nbGroup('down','group1','plans','',1)">Close this Window</a>

				</div>

				<div id="lessonContent">

		    		<% 

		    		AbstractLesson lesson = webSession.getCurrentLesson();

		    		if (lesson instanceof RandomLessonAdapter) {

					RandomLessonAdapter rla = (RandomLessonAdapter) lesson;

	    		%>

			    		<div class="info">Stage <%= rla.getLessonTracker(webSession).getStageNumber(rla.getStage(webSession)) + 1 %></div>

				<% 

					}

				%>

				<%=webSession.getInstructions()%></div>

				<div id="message" class="info"><%=webSession.getMessage()%></div>

	

			<%

			if (currentLesson.getTemplatePage(webSession) != null)

			{

				//System.out.println("Main.jsp - current lesson: " + currentLesson.getName() );

				//System.out.println("         - template Page: " + currentLesson.getTemplatePage(webSession));

			%>

			<jsp:include page="<%=currentLesson.getTemplatePage(webSession)%>" />

			<%

			}

			else

			{

			%>

			<div id="lessonContent"><%=currentLesson.getContent()%></div>

			<%

			}

			%>

				<div id="credits">

		  		<% out.println(currentLesson.getCredits());%>

		  		</div>

			</div>

	  	</div>



		<div id="bottom">

			<div align="center"><a href="http://www.owasp.org">OWASP Foundation</a> | 

								<a href="http://www.owasp.org/index.php/OWASP_WebGoat_Project">Project WebGoat</a> | 

								<a href="reportBug.jsp">Report Bug</a>

			</div>

	  	</div>

	</div>

</body>

</html>