<%@ page contentType="text/html; charset=ISO-8859-1" language="java" 
	import="org.owasp.webgoat.session.*, org.owasp.webgoat.lessons.*, java.util.*" 
	errorPage=""  %>
<%
Course course = ((Course)session.getAttribute("course"));
WebSession webSession = ((WebSession)session.getAttribute("websession"));
AbstractLesson currentLesson = webSession.getCurrentLesson();
%>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
<title><%=currentLesson.getTitle()%></title>
<link rel="stylesheet" href="css/webgoat.css" type="text/css" />
<link rel="stylesheet" href="css/lesson.css" type="text/css" />
<link rel="stylesheet" href="css/menu.css" type="text/css" />
<link rel="stylesheet" href="css/layers.css" type="text/css" />
<script language="JavaScript1.2" src="javascript/javascript.js" type="text/javascript"></script>
<script language="JavaScript1.2" src="javascript/menu_system.js" type="text/javascript"></script>
<script language="JavaScript1.2" src="javascript/lessonNav.js" type="text/javascript"></script>
<script language="JavaScript1.2" src="javascript/makeWindow.js" type="text/javascript"></script>
<script language="JavaScript1.2" src="javascript/toggle.js" type="text/javascript"></script>
</head>
<%
final String menuPrefix = "menu";
final String submenuPrefix = "submenu";
final String mbutPrefix = "mbut";
String printHint = "";
String printParameters = "";
String printCookies = "";
String lessonComplete = "<img src=\"images/buttons/lessonComplete.jpg\">";
String m = "menu";
String menu = request.getParameter(m);

List categories = course.getCategories();

StringBuffer buildList = new StringBuffer();

	Iterator iter1 = categories.iterator();
    while(iter1.hasNext())
    {
        Category category = (Category)iter1.next();
        
        buildList.append("'");
        buildList.append(menuPrefix);
        buildList.append(category.getRanking());
        buildList.append("','");
        buildList.append(submenuPrefix);
        buildList.append(category.getRanking());
        buildList.append("','");
        buildList.append(mbutPrefix);
        buildList.append(category.getRanking());
        buildList.append("'");
        
        if (iter1.hasNext())
        		buildList.append(",");
    }%>
<body class="page" onload="setMenuMagic1(10,40,10,'menubottom',<%=buildList%>);trigMM1url('menu',1);MM_preloadImages('images/buttons/hintLeftOver.jpg','images/buttons/hintOver.jpg','images/buttons/hintRightOver.jpg','images/buttons/paramsOver.jpg','images/buttons/htmlOver.jpg','images/buttons/cookiesOver.jpg','images/buttons/javaOver.jpg','images/buttons/plansOver.jpg','images/buttons/logout.jpg','images/buttons/helpOver.jpg'); initIframe();">

	<div id="wrap">
	<%
	int topCord = 140;
	int zIndex = 105;
	
		Iterator iter2 = categories.iterator();
		while(iter2.hasNext())
		{
		    Category category = (Category)iter2.next();
		%>
		<div id="<%=menuPrefix + category.getRanking()%>" style="position:absolute; left:30px; top:<%=topCord%>px; width:160px; z-index:<%=zIndex%>"><a href="javascript:;" onclick="trigMenuMagic1('<%=menuPrefix + category.getRanking()%>',1);return false" onfocus="if(this.blur)this.blur()"><img src="images/menu_images/1x1.gif" width="1" height=1"20" name="mbut<%=category.getRanking()%>" border="0" alt=""/><%=category.getName()%></a></div>
		<%
		topCord=topCord + 30;
		zIndex=zIndex + 1;
		}
		
			int topSubMenu = 72;
		
			Iterator iter3 = categories.iterator();
			while(iter3.hasNext())
			{		    
			    	Category category = (Category)iter3.next();
				List lessons = webSession.getLessons(category);
			    Iterator iter4 = lessons.iterator();
			%>    
		<div id="submenu<%=category.getRanking()%>" class="pviimenudiv" style="position:absolute; left:200px; top:<%=topSubMenu%>px; width:150px; visibility: hidden; z-index:<%=zIndex%>">
	  		<table width="150" border="0" cellspacing="6" cellpadding="0"><%

	  		topSubMenu=topSubMenu+30;
			zIndex=zIndex + 1;
			
		  	while(iter4.hasNext())
			{		  	    
		    		AbstractLesson lesson = (AbstractLesson)iter4.next();
		    
			%><tr>
	      		<td><%=(lesson.isCompleted(webSession) ? lessonComplete : "")%><a href="<%=lesson.getLink()%>&menu=<%=category.getRanking()%>"><%=lesson.getTitle()%></a></td>
	    		</tr><%
			}
			%>
	  		</table>
		</div><%
			}%>
		<div id="top"></div>
		<div id="topRight">
	  		<div align="right"><a href="attack?action=Logout" onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('logout','','images/buttons/logoutOver.jpg',1)"><img src="images/buttons/logout.jpg" alt="LogOut" name="logout" width="45" height="22" border="0" id="logout" /></a>  <a href="#getFAQ()" onmouseout="MM_swapImgRestore()" onmouseover="MM_swapImage('help','','images/buttons/helpOver.jpg',1)"><img src="images/buttons/help.jpg" alt="Help" name="help" width="22" height="22" border="0" id="help" /></a></div>
		</div>
			<div id="lessonTitle" align="right"><%=currentLesson.getTitle()%></div>
			<div id="hMenuBar">
				<% 
				if (webSession.isAuthorizedInLesson(webSession.getRole(), WebSession.SHOWHINTS))
				{
				%>
				<a href="attack?show=PreviousHint&menu=<%=menu%>" target="_top" onclick="MM_nbGroup('down','group1','hintLeft','',1)" 
				onmouseover="MM_nbGroup('over','hintLeft','images/buttons/hintLeftOver.jpg','',1)" 
				onmouseout="MM_nbGroup('out')">
				<img src="images/buttons/hintLeft.jpg" alt="Previous Hint" name="hintLeft" width="22" height="20" border="0" id="hintLeft"/>
				</a>
				<a href="attack?show=NextHint&menu=<%=menu%>" target="_top" onclick="MM_nbGroup('down','group1','hint','',1)" 
				onmouseover="MM_nbGroup('over','hint','images/buttons/hintOver.jpg','',1)" 
				onmouseout="MM_nbGroup('out')">
				<img src="images/buttons/hint.jpg" alt="Hints" name="hint" width="35" height="20" border="0" id="hint"/>
				</a>
				<a href="attack?show=NextHint&menu=<%=menu%>" target="_top" onclick="MM_nbGroup('down','group1','hintRight','',1)" 
				onmouseover="MM_nbGroup('over','hintRight','images/buttons/hintRightOver.jpg','',1)" 
				onmouseout="MM_nbGroup('out')">
				<img src="images/buttons/hintRight.jpg" alt="Next Hint" name="hintRight" width="20" height="20" border="0" id="hintRight"/>
				</a>
				<%}%>
				<a href="attack?show=Params&menu=<%=menu%>" target="_top" onclick="MM_nbGroup('down','group1','params','',1)" 
				onmouseover="MM_nbGroup('over','params','images/buttons/paramsOver.jpg','',1)" 
				onmouseout="MM_nbGroup('out')">
				<img src="images/buttons/params.jpg" alt="Show Params" name="attack?show=Params" width="92" height="20" border="0" id="params"/>
				</a>
				<a href="attack?show=Cookies&menu=<%=menu%>" target="_top" onclick="MM_nbGroup('down','group1','cookies','',1)" 
				onmouseover="MM_nbGroup('over','cookies','images/buttons/cookiesOver.jpg','',1)" 
				onmouseout="MM_nbGroup('out')">
				<img src="images/buttons/cookies.jpg" alt="Show Cookies" name="cookies" width="104" height="20" border="0" id="cookies"/>
				</a>
				<% 
				if (webSession.isAuthorizedInLesson(webSession.getRole(), WebSession.SHOWSOURCE))
				{
				%>
				<a href="source" onclick="makeWindow(this.href, 'Java Source');return false;" target="javaWin"
				onmouseover="MM_nbGroup('over','java','images/buttons/javaOver.jpg','',1)" 
				onmouseout="MM_nbGroup('out')">
				<img src="images/buttons/java.jpg" alt="Show Java" name="java" width="80" height="20" border="0" id="java"/>
				</a>
				<a href="javascript:toggle('lessonPlans')" target="_top" onclick="MM_nbGroup('down','group1','plans','',1)" 
				onmouseover="MM_nbGroup('over','plans','images/buttons/plansOver.jpg','',1)" 
				onmouseout="MM_nbGroup('out')">
				<img src="images/buttons/plans.jpg" alt="Lesson Plans" width="94" height="20" border="0" id="plans"/>
				</a>
				<%}%>
			</div>
			<div id="twoCol">
	 	 	<div id="menuSpacer"></div>
	 	 	<div id="lessonArea">
	 	 	<%
			    if (currentLesson != null)
			    {
			    	%>
			    	<div id="reset" class="info"><a href="<%=webSession.getRestartLink()%>">Restart this Lesson</a></div>
	    			<%
	    			}

				if (webSession.getHint() != null)
				{
					printHint = "<div id=\"hint\" class=\"info\">" + webSession.getHint() + "</div><br>";
					out.println(printHint);
				}
				
				if (webSession.getParams() != null)
				{
					Iterator i = webSession.getParams().iterator();
					while (i.hasNext())
					{
						Parameter p = (Parameter) i.next();
						printParameters = "<div id=\"parameter\" class=\"info\">" + p.getName() + "=" + p.getValue() + "</div><br>";
						out.println(printParameters);
					}
				}
				
				if (webSession.getCookies() != null)
				{
					Iterator i = webSession.getCookies().iterator();
					while (i.hasNext())
					{
						Cookie c = (Cookie) i.next();
						printCookies = "<div id=\"cookie\" class=\"info\">" + c.getName() + " <img src=\"images/icons/rightArrow.jpg\" alt=\"\"> " + c.getValue() + "</div><br>";
						out.println(printCookies);
					}
				}%>
				<div id="lessonPlans" style="visibility:hidden; height:1px; position:absolute; left:260px; top:130px; width:425px; z-index:105;"><%=currentLesson.getLessonPlan(webSession) %>
				<br/>
				<br/>
				<a href="javascript:toggle('lessonPlans')" target="_top" onclick="MM_nbGroup('down','group1','plans','',1)">Close this Window</a>
				</div>
				<div id="lessonContent"><%=webSession.getInstructions()%></div>
				<div id="message" class="info"><%=webSession.getMessage()%></div>
	
			<%
			if (currentLesson.getTemplatePage(webSession) != null)
			{
			%>
			<jsp:include page="<%=currentLesson.getTemplatePage(webSession)%>" />
			<%
			}
			else
			{
			%>
			<div id="lessonContent"><%=currentLesson.getContent()%></div>
			<%
			}
			%>
				<div id="credits">
		  		<% out.println(currentLesson.getCredits());%>
		  		</div>
			</div>
	  	</div>

		<div id="bottom">
			<div align="center"><a href="http://www.owasp.org">OWASP Foundation</a> | Project WebGoat</div>
	  	</div>
	</div>
</body>
</html>
