Metacat

/**

 *  '$RCSfile$'

 *    Purpose: A Class that implements a metadata catalog as a java Servlet

 *  Copyright: 2000 Regents of the University of California and the

 *             National Center for Ecological Analysis and Synthesis

 *    Authors: Matt Jones, Dan Higgins, Jivka Bojilova, Chad Berkley

 *    Release: @release@

 *

 *   '$Author: bojilova $'

 *     '$Date: 2000-09-12 10:37:07 -0700 (Tue, 12 Sep 2000) $'

 * '$Revision: 441 $'

 */

package edu.ucsb.nceas.metacat;

import java.io.PrintWriter;

import java.io.IOException;

import java.io.Reader;

import java.io.StringReader;

import java.io.BufferedReader;

import java.io.File;

import java.io.FileInputStream;

import java.util.Enumeration;

import java.util.Hashtable;

import java.util.ResourceBundle; 

import java.util.PropertyResourceBundle;

import java.net.URL;

import java.net.MalformedURLException;

import java.sql.PreparedStatement;

import java.sql.ResultSet;

import java.sql.Connection;

import java.sql.SQLException;

import java.lang.reflect.*;

import javax.servlet.ServletConfig;

import javax.servlet.ServletContext;

import javax.servlet.ServletException;

import javax.servlet.ServletInputStream;

import javax.servlet.http.HttpServlet;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import javax.servlet.http.HttpSession;

import javax.servlet.http.HttpUtils;

import oracle.xml.parser.v2.XSLStylesheet;

import oracle.xml.parser.v2.XSLException;

import oracle.xml.parser.v2.XMLDocumentFragment;

import oracle.xml.parser.v2.XSLProcessor;

import org.xml.sax.SAXException;

/**

 * A metadata catalog server implemented as a Java Servlet

 *

 * <p>Valid parameters are:<br>

 * action=query -- query the values of all elements and attributes

 *                     and return a result set of nodes<br>

 * action=squery -- structured query (see pathquery.dtd)<br>

 * action=insert -- insert an XML document into the database store<br>

 * action=update -- update an XML document that is in the database store<br>

 * action=delete --  delete an XML document from the database store<br>

 * action=validate -- vallidate the xml contained in valtext<br>

 * action=getdocument -- display an XML document in XML or HTML<br>

 * doctype -- document type list returned by the query (publicID)<br>

 * qformat=xml -- display resultset from query in XML<br>

 * qformat=html -- display resultset from query in HTML<br>

 * docid=34 -- display the document with the document ID number 34<br>

 * doctext -- XML text of the document to load into the database<br>

 * query -- actual query text (to go with 'action=query' or 'action=squery')<br>

 * valtext -- XML text to be validated<br>

 * action=getdatadoc -- retreive a stored datadocument<br>

 * action=getdoctypes -- retreive all doctypes (publicID)<br>

 * action=getdataguide -- retreive a Data Guide<br>

 * datadoc -- data document name (id)<br>

 * <p>

 * The particular combination of parameters that are valid for each 

 * particular action value is quite specific.  This documentation

 * will be reorganized to reflect this information.

 */

public class MetaCatServlet extends HttpServlet {

  private ServletConfig config = null;

  private ServletContext context = null;

  private Hashtable connectionPool = new Hashtable();

  private String resultStyleURL = null;

  private String xmlcatalogfile = null;

  private String saxparser = null;

  private String defaultdatapath = null; 

  private String servletpath = null; 

  private PropertyResourceBundle options = null;

  private MetaCatUtil util = null;

  // path to directory where data files 

  // that can be downloaded will be stored

  private String htmlpath = null; 

  // script to get data file and put it 

  // in defaultdocpath dir

  private String executescript  = null;  

  /**

   * Initialize the servlet by creating appropriate database connections

   */

  public void init( ServletConfig config ) throws ServletException {

    try {

      super.init( config );

      this.config = config;

      this.context = config.getServletContext(); 

      System.out.println("MetaCatServlet Initialize");

      util = new MetaCatUtil();

      // Get the configuration file information

      resultStyleURL = util.getOption("resultStyleURL");

      xmlcatalogfile = util.getOption("xmlcatalogfile");

      saxparser = util.getOption("saxparser");

      defaultdatapath = util.getOption("defaultdatapath");

      executescript = util.getOption("executescript");

      servletpath = util.getOption("servletpath");

      htmlpath = util.getOption("htmlpath");

      try {

        // Open a pool of db connections

        connectionPool = util.getConnectionPool();

      } catch (Exception e) {

        System.err.println("Error creating pool of database connections");

        System.err.println(e.getMessage());

      }

    } catch ( ServletException ex ) {

      throw ex;

    }

  }

  /**

   * Close all db connections from the pool

   */

  public void destroy() {

    if (util != null) {

        util.closeConnections();

    }

  }

  /** Handle "GET" method requests from HTTP clients */

  public void doGet (HttpServletRequest request, HttpServletResponse response)

    throws ServletException, IOException {

    // Process the data and send back the response

    handleGetOrPost(request, response);

  }

  /** Handle "POST" method requests from HTTP clients */

  public void doPost( HttpServletRequest request, HttpServletResponse response)

    throws ServletException, IOException {

    // Process the data and send back the response

    handleGetOrPost(request, response);

  }

  /**

   * Control servlet response depending on the action parameter specified

   */

  private void handleGetOrPost(HttpServletRequest request, 

    HttpServletResponse response) 

    throws ServletException, IOException 

 {

    if ( util == null ) {

        util = new MetaCatUtil(); 

    }

    if ( connectionPool == null ) {

      try {

        // Open a pool of db connections

        connectionPool = util.getConnectionPool();

      } catch (Exception e) {

        System.err.println("Error creating pool of database connections");

        System.err.println(e.getMessage());

      }

    }    

    // Get a handle to the output stream back to the client

    PrintWriter out = response.getWriter();

    //response.setContentType("text/html");

    String name = null;

    String[] value = null;

    String[] docid = new String[3];

    Hashtable params = new Hashtable();

    Enumeration paramlist = request.getParameterNames();

    while (paramlist.hasMoreElements()) {

      name = (String)paramlist.nextElement();

      value = request.getParameterValues(name);

      // Decode the docid and mouse click information

      if (name.endsWith(".y")) {

        docid[0] = name.substring(0,name.length()-2);

        //out.println("docid => " + docid[0]);

        params.put("docid", docid);

        name = "ypos";

      }

      if (name.endsWith(".x")) {

        name = "xpos";

      } 

      //out.println(name + " => " + value[0]);

      params.put(name,value); 

    }  

    //if the user clicked on the input images, decode which image

    //was clicked then set the action.

    String action = decodeMouseAction(params);

    if(action.equals("error"))

    {

      action = ((String[])params.get("action"))[0];  

    }

    // This block handles session management for the servlet

    // by looking up the current session information for all actions

    // other than "Login" and "Logout"

    // handle login action

    String username = null;

    String groupname = null;

    if (action.equals("Login") || action.equals("Login Client")) {

      handleLoginAction(out, params, request, response);

    // handle logout action  

    } else if (action.equals("Logout") || action.equals("Logout Client")) {

      HttpSession sess = request.getSession(false);

      if (sess != null) { sess.invalidate();  }    

      if (action.equals("Logout Client")) {

        out.println("<?xml version=\"1.0\"?>");

        out.println("<success>");

        out.println("User logout.");

        out.println("</success>");

        return;

      }    

      response.sendRedirect(htmlpath + "/index.html"); 

    // aware of session expiration on every request  

    } else {   

      HttpSession sess = request.getSession(true);

      if (sess.isNew()) { 

        // session expired or has not been stored b/w user requests

        // redirect to default page for query only access

        //  response.sendRedirect(htmlpath + "/sexpire.html");

        username = "public";

      } else {

        username = (String)sess.getAttribute("username");

        groupname = (String)sess.getAttribute("groupname");

      }  

    }    

    // Now that we know the session is valid, we can delegate the request

    // to a particular action handler

    if(action.equals("query"))

    {

      handleQuery(out, params, response, username, groupname); 

    } 

    else if(action.equals("squery"))

    {

      if(params.containsKey("query"))

      {

        handleSQuery(out, params, response, username, groupname); 

      }

      else

      {

        out.println("Illegal action squery without \"query\" parameter");

      }

    }

    else if (action.equals("getdocument")) {

      try {

        handleGetDocumentAction(out, params, response);

      } catch (ClassNotFoundException e) {

        out.println(e.getMessage());

      } catch (SQLException se) {

        out.println(se.getMessage());

      }

    } else if (action.equals("insert") || action.equals("update")) {

      if ( !username.equals("public") && (username != null) ) {

        handleInsertOrUpdateAction(out, params, response, username, groupname);

      } else {  

        out.println("Permission denied for " + action);

      }  

    } else if (action.equals("delete")) {

      if ( !username.equals("public") && (username != null) ) {

        handleDeleteAction(out, params, response, username, groupname);

      } else {  

        out.println("Permission denied for " + action);

      }  

    } else if (action.equals("validate")) {

      handleValidateAction(out, params, response); 

    } else if (action.equals("getabstract")) {

      try{

        handleViewAbstractAction(out, params, response);

      }

      catch(Exception e)

      {

        out.println("error viewing abstract: " + e.getMessage());

      }

    } else if (action.equals("getdatadoc")) {

      handleGetDataDocumentAction(out, params, response);  

    } else if (action.equals("getdoctypes")) {

      handleGetDoctypesAction(out, params, response);  

    } else if (action.equals("getdataguide")) {

      handleGetDataGuideAction(out, params, response);  

    } else if (action.equals("Login") || action.equals("Login Client")) {

    } else {

      out.println("Error: action not registered.  Please report this error.");

    }

    // Close the stream to the client

    out.close();

  }

  /**

   * decodes the mouse click information coming from the client.

   * This function may be overwritten to provide specific functionality

   * for different applications.

   * @param params the parameters from the CGI

   * @return action the action to be performed or "error" if an error was

   * generated

   */

  protected String decodeMouseAction(Hashtable params)

  {

    // Determine what type of request the user made

    // if the action parameter is set, use it as a default

    // but if the ypos param is set, calculate the action needed

    String action=null;

    long ypos = 0;

    try {

      ypos = (new Long(((String[])params.get("ypos"))[0]).longValue());

      //out.println("<P>YPOS IS " + ypos);

      if (ypos <= 13) {

        action = "getdocument";

      } else if (ypos > 13 && ypos <= 27) {

        action = "validate";

      } else if (ypos > 27) {

        action = "transform";

      }

      return action;

    } catch (Exception npe) {

      //

      // MBJ -- NOTE that this should be handled more gracefully with

      //        the new exception infrastructure -- this "error" return

      //        value is inappropriate

      //out.println("<P>Caught exception looking for Y value.");

      return "error";

    }  

  }

  /** 

   * Handle the Login request. Create a new session object.

   * Make a user authentication through SRB RMI Connection.

   */

  private void handleLoginAction(PrintWriter out, Hashtable params, 

               HttpServletRequest request, HttpServletResponse response) {

    MetaCatSession sess = null;

    String un = ((String[])params.get("username"))[0];

    String pw = ((String[])params.get("password"))[0];

    String action = ((String[])params.get("action"))[0];

    try {

        sess = new MetaCatSession(request, un, pw);

    } catch (Exception e) {

      out.println(e.getMessage());

    }

    String output = null;

    output = sess.userLogin(response, un, pw, action, htmlpath);

    out.println(output);

  }    

  /**      

   * Retreive the squery xml, execute it and display it

   *

   * @param out the output stream to the client

   * @param params the Hashtable of parameters that should be included

   * in the squery.

   * @param response the response object linked to the client

   * @param conn the database connection 

   */

  protected void handleSQuery(PrintWriter out, Hashtable params, 

                 HttpServletResponse response, String user, String group)

  { 

    String xmlquery = ((String[])params.get("query"))[0];

    String qformat = ((String[])params.get("qformat"))[0];

    Hashtable doclist = runQuery(xmlquery, user, group);

    String resultdoc = createResultDocument(doclist, xmlquery);

    //format and transform the results                                        

    if(qformat.equals("html")) {

      transformResultset(resultdoc, response, out);

    } else if(qformat.equals("xml")) {

      response.setContentType("text/xml");

      out.println(resultdoc);

    } else {

      out.println("invalid qformat: " + qformat); 

    }

  }

   /**

    * Create the xml query, execute it and display the results.

    *

    * @param out the output stream to the client

    * @param params the Hashtable of parameters that should be included

    * in the squery.

    * @param response the response object linked to the client

    */ 

  protected void handleQuery(PrintWriter out, Hashtable params, 

                 HttpServletResponse response, String user, String group)

  {

    //create the query and run it

    String xmlquery = DBQuery.createSQuery(params);

    Hashtable doclist = runQuery(xmlquery, user, group);

    String qformat = ((String[])params.get("qformat"))[0]; 

    String resultdoc = createResultDocument(doclist, transformQuery(params));

    //format and transform the results                                        

    if(qformat.equals("html")) {

      transformResultset(resultdoc, response, out);

    } else if(qformat.equals("xml")) {

      response.setContentType("text/xml");

      out.println(resultdoc);

    } else {

      out.println("invalid qformat: " + qformat); 

    }

  }

  /**

   * Removes the <?xml version="x"?> tag from the beginning of xmlquery

   * so it can properly be placed in the <query> tag of the resultset.

   * This method is overwritable so that other applications can customize

   * the structure of what is in the <query> tag.

   * 

   * @param xmlquery is the query to remove the <?xml version="x"?> tag from.

   */

  protected String transformQuery(Hashtable params)

  {

    //DBQuery.createSQuery is a re-calling of a previously called 

    //function but it is necessary

    //so that overriding methods have access to the params hashtable

    String xmlquery = DBQuery.createSQuery(params);

    //the <?xml version="1.0"?> tag is the first 22 characters of the

    xmlquery = xmlquery.trim();

    int index = xmlquery.indexOf("?>");

    return xmlquery.substring(index + 2, xmlquery.length());

  }

  /**

   * Run the query and return a hashtable of results.

   *

   * @param xmlquery the query to run

   */

  private Hashtable runQuery(String xmlquery, String user, String group)

  {

    Hashtable doclist=null;

    Connection conn = null;

    try

    {

      conn = util.getConnection();

      DBQuery queryobj = new DBQuery(conn, saxparser);

      doclist = queryobj.findDocuments(new StringReader(xmlquery),user,group);

      util.returnConnection(conn);

      return doclist;

    } 

    catch (Exception e) 

    {

      util.returnConnection(conn); 

      util.debugMessage("Error in runQuery: " + e.getMessage());

      doclist = null;

      return doclist;

    }    

  }

  /**

   * Transorms an xml resultset document to html and sends it to the browser

   *

   * @param resultdoc the string representation of the document that needs

   * to be transformed.

   * @param response the HttpServletResponse object bound to the client.

   * @param out the output stream to the client

   */ 

  protected void transformResultset(String resultdoc, 

                                    HttpServletResponse response,

                                    PrintWriter out)

  {

    Connection conn = null;

    try {

      conn = util.getConnection();

      DBTransform trans = new DBTransform(conn);

      response.setContentType("text/html");

      trans.transformXMLDocument(resultdoc, "-//NCEAS//resultset//EN", 

                                 "-//W3C//HTML//EN", out);

      util.returnConnection(conn); 

    }

    catch(Exception e)

    {

      util.returnConnection(conn); 

    } 

  }

  /**

   * Transforms a hashtable of documents to an xml or html result.

   *

   * @param doclist- the hashtable to transform

   * @param xmlquery- the query that returned the dolist result

   */

  protected String createResultDocument(Hashtable doclist, String xmlquery)

  {

    // Create a buffer to hold the xml result

    StringBuffer resultset = new StringBuffer();

    // Print the resulting root nodes 

    String docid = null;

    String document = null;

    resultset.append("<?xml version=\"1.0\"?>\n");

    resultset.append("<resultset>\n");

    //the following should work but it doesn't because the parser doesn't 

    //like the <?xml?> tag inside the <query> tag.  This is supposed to be

    //the way that the query itself is sent back to the client.

    resultset.append("  <query>" + xmlquery + "</query>");   

    Enumeration doclistkeys = doclist.keys(); 

    while (doclistkeys.hasMoreElements()) 

    {

      docid = (String)doclistkeys.nextElement();

      document = (String)doclist.get(docid);

      resultset.append("  <document>" + document + "</document>");

    } 

    resultset.append("</resultset>");

    return resultset.toString();

  }

  /**

   * Handle the request to view the abstract of a document.

   */

  private void handleViewAbstractAction(PrintWriter out, Hashtable params,

               HttpServletResponse response) throws IOException, SQLException

  {

    String abstractpath = null;

    String docid = null;

    Connection conn = null;

    response.setContentType("text/html");

    try

    {

      docid = ((String[])params.get("docid"))[0];

      if(params.containsKey("abstractpath"))

      {

        abstractpath = ((String[])params.get("abstractpath"))[0];

      }

      else

      {

        out.println("error: no abstractpath parameter"); 

      }

      conn = util.getConnection();

      Object[] abstracts = DBQuery.getNodeContent(abstractpath, docid, conn);

      out.println("<html><head><title>Abstract</title></head><body>");

      out.println("<h1>Abstract</h1>");

      for(int i=0; i<abstracts.length; i++)

      {

        out.println("<p>" + (String)abstracts[i] + "</p>");

      }

      out.println("</body></html>");

    }

    catch (IOException ioe)

    {

       System.out.println(ioe.getMessage());

    }

    catch(SQLException sqle)

    {

      System.out.println(sqle.getMessage()); 

    }

    catch(Exception e)

    {

      System.out.println(e.getMessage());

    }

    util.returnConnection(conn);

  }

  /** 

   * Handle the database getdocument request and return a XML document, 

   * possibly transformed from XML into HTML

   */

  private void handleGetDocumentAction(PrintWriter out, Hashtable params, 

               HttpServletResponse response) 

               throws ClassNotFoundException, IOException, SQLException {

    String docidstr = null;

    String docid = null;

    String doc = null;

    Connection conn = null;

    try {

      // Find the document id number

      docidstr = ((String[])params.get("docid"))[0]; 

      docid = docidstr;

      conn = util.getConnection();

      DocumentImpl xmldoc = new DocumentImpl(conn, docid);

      // Get the document indicated from the db

      //doc = docreader.readXMLDocument(docid);

      // Return the document in XML or HTML format

      String qformat=null;

      if(params.containsKey("qformat"))

      {

        qformat = ((String[])params.get("qformat"))[0];

      }

      else

      {

        qformat = "html";        

      }

      if (qformat.equals("xml")) { 

        // set content type and other response header fields first

        response.setContentType("text/xml");

        xmldoc.toXml(out);

        //out.println(xmldoc);

      } else if (qformat.equals("html")) {

        response.setContentType("text/html");

        // Look up the document type

        String sourcetype = xmldoc.getDoctype();

        // Transform the document to the new doctype

        DBTransform dbt = new DBTransform(conn);

        dbt.transformXMLDocument(xmldoc.toString(), sourcetype, 

                                 "-//W3C//HTML//EN", out);

      }

    } catch (McdbException e) {

      response.setContentType("text/xml");

      e.toXml(out);

    } catch (Throwable t) {

      response.setContentType("text/html");

      out.println(t.getMessage());

    } finally {

      util.returnConnection(conn);

    }    

  }

  /** 

   * Handle the database putdocument request and write an XML document 

   * to the database connection

   */

  private void handleInsertOrUpdateAction(PrintWriter out, Hashtable params, 

               HttpServletResponse response, String user, String group) {

    Connection conn = null;

    try {

      // Get the document indicated

      String[] doctext = (String[])params.get("doctext");

      StringReader xml = null;

      try {

        xml = new StringReader(doctext[0]);

        String[] action = (String[])params.get("action");

        String[] docid = (String[])params.get("docid");

        String newdocid = null;

        String doAction = null;

        if (action[0].equals("insert")) {

          doAction = "INSERT";

        } else if (action[0].equals("update")) {

          doAction = "UPDATE";

        }

        try {

            // get a connection from the pool

            conn = util.getConnection();

            // write the document to the database

            try {

                String accNumber = docid[0];

                if (accNumber.equals("")) {

                    accNumber = null;

                }

                newdocid = DocumentImpl.write(conn, xml, doAction, accNumber, 

                                                                  user, group);

            } catch (NullPointerException npe) {

              newdocid = DocumentImpl.write(conn,xml,doAction,null,user,group);

            }

        } catch (Exception e) {

          response.setContentType("text/html");

          out.println(e.getMessage());

        } finally {

          util.returnConnection(conn);

        }    

        // set content type and other response header fields first

        response.setContentType("text/xml");

        out.println("<?xml version=\"1.0\"?>");

        out.println("<success>");

        out.println("<docid>" + newdocid + "</docid>"); 

        out.println("</success>");

      } catch (NullPointerException npe) {

        response.setContentType("text/xml");

        out.println("<?xml version=\"1.0\"?>");

        out.println("<error>");

        out.println(npe.getMessage()); 

        out.println("</error>");

      }

    } catch (Exception e) {

      response.setContentType("text/xml");

      out.println("<?xml version=\"1.0\"?>");

      out.println("<error>");

      out.println(e.getMessage()); 

      if (e instanceof SAXException) {

        Exception e2 = ((SAXException)e).getException();

        out.println("<error>");

        out.println(e2.getMessage()); 

        out.println("</error>");

      }

      //e.printStackTrace(out);

      out.println("</error>");

    }

  }

  /** 

   * Handle the database delete request and delete an XML document 

   * from the database connection

   */

  private void handleDeleteAction(PrintWriter out, Hashtable params, 

               HttpServletResponse response, String user, String group) {

    String[] docid = (String[])params.get("docid");

    Connection conn = null;

    // delete the document from the database

    try {

      // get a connection from the pool

      conn = util.getConnection();

                                      // NOTE -- NEED TO TEST HERE

                                      // FOR EXISTENCE OF DOCID PARAM

                                      // BEFORE ACCESSING ARRAY

      try { 

        DocumentImpl.delete(conn, docid[0], user, group);

        response.setContentType("text/xml");

        out.println("<?xml version=\"1.0\"?>");

        out.println("<success>");

        out.println("Document deleted."); 

        out.println("</success>");

      } catch (AccessionNumberException ane) {

        response.setContentType("text/xml");

        out.println("<?xml version=\"1.0\"?>");

        out.println("<error>");

        out.println("Error deleting document!!!");

        out.println(ane.getMessage()); 

        out.println("</error>");

      }

    } catch (Exception e) {

      response.setContentType("text/xml");

      out.println("<?xml version=\"1.0\"?>");

      out.println("<error>");

      out.println(e.getMessage()); 

      out.println("</error>");

    } finally {

      util.returnConnection(conn);

    }  

  }

  /** 

   * Handle the validation request and return the results to the requestor

   */

  private void handleValidateAction(PrintWriter out, Hashtable params, 

               HttpServletResponse response) {

    // Get the document indicated

    String valtext = null;

    try {

      valtext = ((String[])params.get("valtext"))[0];

    } catch (Exception nullpe) {

      Connection conn = null;

      String docid = null;

      try {

        // Find the document id number

        docid = ((String[])params.get("docid"))[0]; 

        // get a connection from the pool

        conn = util.getConnection();

        // Get the document indicated from the db

        DocumentImpl xmldoc = new DocumentImpl(conn, docid);

        valtext = xmldoc.toString();

      } catch (NullPointerException npe) {

        response.setContentType("text/xml");

        out.println("<error>Error getting document ID: " + docid + "</error>");

        if ( conn != null ) { util.returnConnection(conn); }

        return;

      } catch (Exception e) {

        response.setContentType("text/html");

        out.println(e.getMessage()); 

      } finally {

        util.returnConnection(conn);

      }  

    }

    Connection conn = null;

    try {

      // get a connection from the pool

      conn = util.getConnection();

      DBValidate valobj = new DBValidate(saxparser,conn);

      boolean valid = valobj.validateString(valtext);

      // set content type and other response header fields first

      response.setContentType("text/xml");

      out.println(valobj.returnErrors());

    } catch (NullPointerException npe2) {

      // set content type and other response header fields first

      response.setContentType("text/xml");

      out.println("<error>Error validating document.</error>"); 

    } catch (Exception e) {

      response.setContentType("text/html");

      out.println(e.getMessage()); 

    } finally {

      util.returnConnection(conn);

    }  

  }

  /** 

   * Handle the document request and return the results to the requestor

   */

  private void handleGetDataDocumentAction(PrintWriter out, Hashtable params, 

               HttpServletResponse response) {

      boolean error_flag = false;

      String error_message = "";

      // Get the document indicated

      String[] datadoc = (String[])params.get("datadoc");

      // defaultdatapath = "C:\\Temp\\";    // for testing only!!!

      // executescript = "test.bat";        // for testing only!!!

      // set content type and other response header fields first

      response.setContentType("application/octet-stream");

      if (defaultdatapath!=null) {

        if(!defaultdatapath.endsWith(System.getProperty("file.separator"))) {

          defaultdatapath=defaultdatapath+System.getProperty("file.separator");

        }

        System.out.println("Path= "+defaultdatapath+datadoc[0]);

        if (executescript!=null) {

          String command = null;

          File scriptfile = new File(executescript);

          if (scriptfile.exists()) {

            command=executescript+" "+datadoc[0]; // script includes path

        } else {     // look in defaultdatapath

            // on Win98 one MUST include the .bat extender

            command = defaultdatapath+executescript+" "+datadoc[0];  

        }

      System.out.println(command);

      try {

      Process proc = Runtime.getRuntime().exec(command);

      proc.waitFor();

      }

      catch (Exception eee) {