Please deploy your application on CS3, and upload all source files to CSNS. The source files should include all the source code, documentation (optional), and an HTML file hw2.html which contains a hyperlink to your application on the CS3 server. Note that file uploading will be disabled automatically after 11:59PM of the due date, so please turn in your work on time.

[MiniGOG] 

In this assignment you are going to continue to work on the application MiniGOG. All features described in Homework 1 must work properly; otherwise you will not receive any credit.

1. (60pt) Game Review

Allow users to review games. Specifically:

On the Games page, display the average rating of each game. For example:

The reviews of a game are displayed on the Game page. For example:

Baldur's Gate 2 Complete Will you resist the evil within you and forge a legend of heroic proportions? Or will you embrace your monstrous inner nature and carve a swath of destruction across the Realms? Your story begins anew in the exotic southern kingdom of Amn, amidst the opulence of the sinister capital city of Athkatla. Journey through the fierce, unforgiving wilderness of Amn in your quest for artifacts of awesome power and treasure of unfathomable wealth... Even challenge dragons, if you dare. Such is the life of a legend. Genre(s): Adventure, RPG Price: $9.99

Edit | Review | All Games

Reviews   The Big One Posted by cysun at 2013-03-01 10:31PM More or less the pinnacle of mainstream RPG, this game packs everything your average gamer loves.   Excellence! Posted by cs320stu31 at 2012-12-10 08:05PM I don't know what deal GoG made with Atari, but it is putting serious pressure on my free time! Baldur's Gate II is the gold standard to which other RPGs hold themselves up to.

Note that a review includes a 1-5 rating, a title, and some text. The application also needs to keep track of the author and the time of each review. The rating of a review is displayed using the number of stars, and the time of a review should be displayed in the format shown in the example above.

A user may click on the Review link to enter a review of the game. For example:

Note that each user may only review a game once.

2. (40pt) Security.

Implement security so that all users can view the games, but only authenticated users (i.e. users who have already logged in) can add, edit, and review games. In particular, your implementation must meet the following requirements:

• A Login/logout link should be shown on each page. The link should show Login if the user has not logged in yet, and Logout if the user is already logged in.
• After a user logs in (or logs out), the user should be redirected to the Games page.
• Whenever a user tries to add, edit, or review a game, the application should first check whether the user is already logged in. If not, the user should be redirected to a login page where they must provide a valid username and the corresponding password.
• User authentication must happen on the server side, i.e. you cannot use JavaScript to validate username/password on the client side.
• Once a user is authenticated, a session is created so the user won't be asked for username and password repeatedly. A user may choose to log out, in which case the session should be terminated. For session tracking, you must use Servlet Session Tracking API.
• Two user accounts should be pre-created for testing purposes:
• Username cysun and password abcd
• Userrname cs320stu31 with password abcd