add addmin controller

[cyberpo9t]

@CodiumAI-Agent /review

[QodoAI-Agent]

PR Review 🔍

⏱️ Estimated effort to review [1-5]	4, because the PR introduces a large amount of new code (195 lines) across various functionalities including login, CRUD operations, and file handling. The complexity of integrating multiple components such as database interactions, session management, and exception handling requires a thorough review to ensure security, performance, and maintainability.
🧪 Relevant tests	No
⚡ Possible issues	Possible Bug: The method adminMapper.getUserByUsername(checkAdmin) seems to expect a username but receives an Admin object. This might cause an error unless the method is explicitly designed to handle this object.
	Security Concern: Storing unhashed passwords and comparing them directly can lead to security vulnerabilities. It is recommended to use a hashing algorithm.
	Performance Issue: The method getRandomString uses a Random instance which is recreated every time the method is called. This is inefficient and could be improved by using a single static instance.
🔒 Security concerns	- Sensitive Information Exposure: The application might be vulnerable to sensitive information exposure as it handles file uploads and user authentication. Proper validation and sanitization are required to prevent potential security risks.

Code feedback:

---

relevant file	src/main/java/com/book/springboot/web/AdminController.java
suggestion	Consider using a more secure way to handle passwords, such as hashing with a salt, to enhance security. [important]
relevant line	if (admin.getPassword().equals(checkAdmin.getPassword())) {

---

relevant file	src/main/java/com/book/springboot/web/AdminController.java
suggestion	Use a static Random instance for generating random strings to improve performance. [medium]
relevant line	Random random=new Random();

---

relevant file	src/main/java/com/book/springboot/web/AdminController.java
suggestion	Ensure that file uploads are properly validated and sanitized to prevent arbitrary file upload vulnerabilities. [important]
relevant line	String fileName = file.getOriginalFilename();

---

relevant file	src/main/java/com/book/springboot/web/AdminController.java
suggestion	Use parameterized queries or ORM methods to prevent SQL injection vulnerabilities when interacting with the database. [important]
relevant line	Admin admin = adminMapper.getUserByUsername(checkAdmin);

---