package com.jsql.model.suspendable;
   
   import com.jsql.model.InjectionModel;
   import com.jsql.model.exception.JSqlException;
   import com.jsql.model.exception.StoppedByUserSlidingException;
   import com.jsql.model.injection.vendor.model.VendorYaml;
   import com.jsql.model.suspendable.callable.CallablePageSource;
   import com.jsql.util.LogLevelUtil;
   import org.apache.commons.lang3.StringUtils;
  import org.apache.logging.log4j.LogManager;
  import org.apache.logging.log4j.Logger;
  
  import java.util.concurrent.CompletionService;
  import java.util.concurrent.ExecutionException;
  import java.util.concurrent.ExecutorCompletionService;
  import java.util.concurrent.ExecutorService;
  import java.util.regex.Pattern;
  
  /**
   * Runnable class, search the correct number of fields in the SQL query.
   * Concurrent search with stop capability
   */
  public class SuspendableGetIndexes extends AbstractSuspendable {
      
      /**
       * Log4j logger sent to view.
       */
      private static final Logger LOGGER = LogManager.getRootLogger();
      
      public SuspendableGetIndexes(InjectionModel injectionModel) {
          super(injectionModel);
      }
  
      @Override
      public String run(Object... args) throws JSqlException {
          // Concurrent search
          ExecutorService taskExecutor = this.injectionModel.getMediatorUtils().getThreadUtil().getExecutor("CallableGetIndexes");
          CompletionService<CallablePageSource> taskCompletionService = new ExecutorCompletionService<>(taskExecutor);
  
          String initialQuery = StringUtils.EMPTY;
          int nbIndex;
          
          int countUnionIndex = this.injectionModel.getMediatorUtils().getPreferencesUtil().isLimitingUnionIndex()
              ? this.injectionModel.getMediatorUtils().getPreferencesUtil().countUnionIndex()
              : 50;
  
          // SQL fields are built like 1337[index]7330+1
          // 7330+1 allows to exclude false positive when page contains injection URL
          // Search if the source contains 1337[index]7331
          for (nbIndex = 1 ; nbIndex <= countUnionIndex ; nbIndex++) {
              taskCompletionService.submit(
                  new CallablePageSource(
                      this.injectionModel.getMediatorVendor().getVendor().instance().sqlIndices(nbIndex),
                      this.injectionModel,
                      "union#" + nbIndex,
                      nbIndex
                  )
              );
          }
          
          nbIndex = 1;
          try {
              while (nbIndex <= countUnionIndex) {
                  if (this.isSuspended()) {
                      throw new StoppedByUserSlidingException();
                  }
                  CallablePageSource currentCallable = taskCompletionService.take().get();
                  nbIndex++;
                  // Found a correct mark 1337[index]7331 in the source
                  String regexAllIndexes = String.format(VendorYaml.FORMAT_INDEX, "\\d+");
                  if (Pattern.compile("(?s).*"+ regexAllIndexes +".*").matcher(currentCallable.getContent()).matches()) {
                      
                      this.injectionModel.getMediatorStrategy().getSpecificUnion().setNbIndexesFound(currentCallable.getNbIndex());
                      this.injectionModel.getMediatorStrategy().getSpecificUnion().setSourceIndexesFound(currentCallable.getContent());
                      initialQuery = currentCallable.getQuery().replace("0%2b1", "1");
                      
                      if (this.injectionModel.getMediatorUtils().getPreferencesUtil().isPerfIndexDisabled()) {
                          String regexIndexesExceptFirst = String.format(VendorYaml.FORMAT_INDEX, "(?!17331)\\d+");
                          initialQuery = initialQuery.replaceAll(regexIndexesExceptFirst, "1");
                          LOGGER.log(LogLevelUtil.CONSOLE_INFORM, "Calibrating indexes disabled, forcing to index [1]");
                      }
                      LOGGER.log(
                          LogLevelUtil.CONSOLE_INFORM,
                          "Strategy [Union] triggered by [{}]",
                          () -> currentCallable.getQuery().trim()
                          .replaceAll("1337(\\d*)7330%2b1", "$1")
                          .replaceAll("\\s+", StringUtils.SPACE)
                      );
                      break;
                  }
              }
              this.injectionModel.getMediatorUtils().getThreadUtil().shutdown(taskExecutor);
          } catch (InterruptedException e) {
              LOGGER.log(LogLevelUtil.IGNORE, e, e);
              Thread.currentThread().interrupt();
          } catch (ExecutionException e) {
              LOGGER.log(LogLevelUtil.CONSOLE_JAVA, e, e);
          }
          return initialQuery;
     }
 }