From 357cf53608f32f0126ee368dd2ea502c23bf31e7 Mon Sep 17 00:00:00 2001
From: Sola <loli@sola.love>
Date: Mon, 14 Dec 2015 22:53:53 +0800
Subject: [PATCH] invalidate session appropriately

---
 src/main/java/love/sola/netsupport/api/Register.java     | 2 +-
 src/main/java/love/sola/netsupport/api/TicketSubmit.java | 5 +++--
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/src/main/java/love/sola/netsupport/api/Register.java b/src/main/java/love/sola/netsupport/api/Register.java
index 83a0d5c..55e60b8 100644
--- a/src/main/java/love/sola/netsupport/api/Register.java
+++ b/src/main/java/love/sola/netsupport/api/Register.java
@@ -65,7 +65,7 @@ public class Register extends HttpServlet {
 		);
 		boolean isSuccess = result.equals("Register_Success");
 		if (isSuccess) {
-			request.getSession().invalidate();
+			session.invalidate();
 			out.println(ParseUtil.parseJsonP(request, gson.toJson(new Response(Response.ResponseCode.OK, result))));
 		} else {
 			out.println(ParseUtil.parseJsonP(request, gson.toJson(new Response(Response.ResponseCode.REQUEST_FAILED, result))));
diff --git a/src/main/java/love/sola/netsupport/api/TicketSubmit.java b/src/main/java/love/sola/netsupport/api/TicketSubmit.java
index d144d63..192e16d 100644
--- a/src/main/java/love/sola/netsupport/api/TicketSubmit.java
+++ b/src/main/java/love/sola/netsupport/api/TicketSubmit.java
@@ -48,7 +48,7 @@ public class TicketSubmit extends HttpServlet {
 
 	private Response submit(HttpServletRequest request) {
 		String desc = request.getParameter("desc");
-		if (desc == null) {
+		if (desc == null || desc.isEmpty()) {
 			return new Response(Response.ResponseCode.PARAMETER_REQUIRED);
 		}
 
@@ -62,6 +62,7 @@ public class TicketSubmit extends HttpServlet {
 			if (u == null) return new Response(Response.ResponseCode.UNAUTHORIZED);
 
 			if (TableTicket.hasOpen(u)) {
+				session.invalidate();
 				return new Response(Response.ResponseCode.ALREADY_SUBMITTED);
 			}
 
@@ -72,7 +73,7 @@ public class TicketSubmit extends HttpServlet {
 			s.beginTransaction();
 			s.save(t);
 			s.getTransaction().commit();
-			request.getSession().invalidate();
+			session.invalidate();
 			return new Response(Response.ResponseCode.OK, t);
 		} catch (NumberFormatException e) {
 			return new Response(Response.ResponseCode.ILLEGAL_PARAMETER);