def manageOrder(id):
order = SQL_handler.get_order(id)
if user_handler.get_user() is None or user_handler.get_user().clearance > 1 or order is None:
abort(404)
if request.method == 'POST':
if request.form["type"] == "orderitem":
if request.form["submit"] == "+":
SQL_handler.updateorder_amount(order, SQL_handler.getProductFromDatabase(request.form["productId"]), 1)
elif request.form["submit"] == "-":
SQL_handler.updateorder_amount(order, SQL_handler.getProductFromDatabase(request.form["productId"]), -1)
elif request.form["type"] == "delete":
SQL_handler.delete_order(order.id)
return redirect(url_for('manager'))
elif request.form["type"] == "order":
try:
order.payed = request.form.get("payed") == 'on'
order.processed = request.form.get("processed") == 'on'
order.orderdate = datetime.strptime(request.form.get("orderdate"), "%Y-%m-%d")
SQL_handler.updateorder(order)
except:
pass
productsInOrder = []
price = 0
for orderitem in SQL_handler.get_orderitems_by_id(id):
productsInOrder.append(SQL_handler.getProductFromDatabase(orderitem.productId))
productsInOrder[-1].amount = orderitem.amount
price += orderitem.price * orderitem.amount
return render_template('manageOrder.html', args={'user': user_handler.get_user(), 'orderUser': SQL_handler.getUserById(order.userId), 'order': order, 'orderitems': SQL_handler.get_orderitems_by_id(id), 'price': price})
def product(id):
# Tries to pull the product from the database if it exists
try:
product = SQL_handler.getProductFromDatabase(id)
# Checks if the user is logged in. Pulls the users review if it is
if user_handler.get_user() != None:
try:
userReview = SQL_handler.getReveiw(user_handler.get_user(), product)
except:
userReview = None
if request.method == 'POST':
# Ads a product to the cart if a form is specified to order
if request.form["submit"] == 'Order':
SQL_handler.add_to_cart(user_handler.get_user(), product)
# Sets the review for the user if a form is specified for the review
elif request.form["submit"] == 'Review':
userReview = Review({'userId': user_handler.get_user().id, 'productId': product.id, 'rating': request.form["rating"], 'review': request.form["review"]})
SQL_handler.setReview(userReview)
else:
userReview = None
# Pulls all reviews and appends a user to it
reviews = SQL_handler.getReviewByProduct(product)
for review in reviews:
review.user = SQL_handler.getUserById(review.userId)
return render_template('product.html', args={'product': product, 'user': user_handler.get_user(), 'reviews': reviews, 'userReview': userReview})
except NotInDatabase:
abort(404)
def manageProduct(id):
productToManage = SQL_handler.getProductFromDatabase(id)
if user_handler.get_user() is None or user_handler.get_user().clearance > 1 or SQL_handler.getProductFromDatabase(id) is None:
abort(404)
if request.method == 'POST':
try:
if request.form['button'] == 'delete':
SQL_handler.delete_product(id)
return redirect(url_for('.manager'))
int(request.form['price'])
productToManage.name = request.form['name']
productToManage.price = request.form['price']
productToManage.description = request.form['description']
productToManage.category = request.form['category']
SQL_handler.updateProductIntoDatabase(productToManage)
except Exception as e:
print(e)
return render_template('manageProduct.html', args={'users': SQL_handler.getAllUsers(), 'categories': SQL_handler.getCategories(), 'user': user_handler.get_user(), 'productToManage': productToManage})
def addProduct():
if user_handler.get_user() is None or user_handler.get_user().clearance > 1:
abort(404)
productBuffer = {
'name': '',
'price': '',
'description': '',
'category': '',
'imageUrl': 'None',
'id': SQL_handler.generate_productId()
}
if request.method == 'POST':
productBuffer['name'] = request.form['name']
productBuffer['price'] = request.form['price']
productBuffer['description'] = request.form['description']
productBuffer['category'] = request.form['category']
if not '' in (productBuffer['name'], productBuffer['price'], productBuffer['description'], productBuffer['category']):
try:
SQL_handler.insertProductIntoDatabase(Product(productBuffer))
flash("Added product")
return redirect(url_for('.manager'))
except:
flash("Could not add product")
else:
flash("Empty fields")
return render_template('addProduct.html', args={'user': user_handler.get_user(), 'categories': SQL_handler.getCategories(), 'productBuffer': productBuffer})
def manageUser(id):
if user_handler.get_user() is None or user_handler.get_user().clearance > 1:
abort(404)
userToManage = SQL_handler.getUserById(id)
if request.method == 'POST':
if request.form['formtype'] == 'userconfig':
userToManage.alias = request.form['alias']
if request.form["submit"] == "update":
if user_handler.get_user().clearance == 0:
userToManage.clearance = request.form['clearance']
if request.form['password'] != "":
user_handler.update_password(userToManage, request.form['password'])
SQL_handler.update_user(userToManage)
elif request.form["submit"] == "delete":
SQL_handler.delete_user(userToManage)
return redirect(url_for('.manager'))
else:
if request.form["submit"] == "+":
SQL_handler.updatecart_amount(userToManage, SQL_handler.getProductFromDatabase(request.form["productId"]), 1)
elif request.form["submit"] == "-":
SQL_handler.updatecart_amount(userToManage, SQL_handler.getProductFromDatabase(request.form["productId"]), -1)
return render_template('manageUser.html', args={'users': SQL_handler.getAllUsers(), 'user': user_handler.get_user(), 'userToManage': userToManage, 'userToManageCart': SQL_handler.get_cart(userToManage)})
def login():
if request.method == 'POST':
if user_handler.login_parse(request.form['username'], request.form['password']):
flash('Welcome %s' % user_handler.get_user().alias)
return redirect('/')
else:
flash('Invalid username or password')
return render_template('login.html', args={'user': user_handler.get_user()})
def manageCategory(name):
if user_handler.get_user() is None or user_handler.get_user().clearance > 0 or not name in SQL_handler.getCategories():
abort(404)
if request.method == 'POST':
if request.form["submit"] == "Delete":
SQL_handler.deleteCategory(name)
return redirect('/manager')
else:
SQL_handler.updateCategory(oldname=name, newname=request.form["name"])
return redirect(f'/manageCategory/{request.form["name"]}')
return render_template('manageCategory.html', args={'user': user_handler.get_user(), 'category': name})
def addCategory():
if user_handler.get_user() is None or user_handler.get_user().clearance > 0:
abort(404)
if request.method == 'POST':
name = request.form["name"]
try:
SQL_handler.addCategory(request.form["name"])
return redirect('/manager')
except:
flash("Cant add Category")
else:
name = ""
return render_template('/addCategory.html', args={'user': user_handler.get_user(), 'category': name})
def store_subjects_from_GAExport(export, username):
"""Stores subjects from GA CSV export."""
old_count = Subjects.objects.count()
switch = False
dates = []
terms = []
old = "**********"
user = user_handler.get_user(username)
for line in export.readlines():
if switch:
try:
items = re.search("(.*?),(\d+),", line)
term, count = items.group(1).strip("\""), items.group(2)
except Exception, e:
pass
term = term.strip(" ")
if term != "":
if term == old:
switch = False
else:
terms.append((term, count))
old = term
elif "Vyhledávací dotaz," in line or "Search Term," in line:
switch = True
def logout():
if user_handler.get_user() is None:
abort(404)
user_handler.logout_parse()
flash("You've been logged out")
return redirect('/')
def cart():
if user_handler.get_user() is None:
abort(404)
currentUser = user_handler.get_user()
if currentUser is None:
abort(404)
if request.method == 'POST':
if request.form["submit"] == "Delete":
SQL_handler.clear_cart(currentUser)
elif request.form["submit"] == "+":
SQL_handler.updatecart_amount(currentUser, SQL_handler.getProductFromDatabase(request.form["productId"]), 1)
elif request.form["submit"] == "-":
SQL_handler.updatecart_amount(currentUser, SQL_handler.getProductFromDatabase(request.form["productId"]), -1)
else:
SQL_handler.place_order(currentUser)
flash('Your order is placed.')
return render_template('cart.html', args={'user': currentUser, 'products': SQL_handler.get_cart(currentUser), 'price': sum([product.price * product.amount for product in SQL_handler.get_cart(currentUser)])})
def data_edit(request):
"""Returns view on current data ordered by count"""
user = user_handler.get_user(request.user)
edit_form = EditForm()
filter_form = FilterForm()
subjects = query_to_dicts("""SELECT log_subjects.subject,
acquisition,
processed,
note,
category_id,
subjectcategory_id,
count,
date
FROM log_subjects
LEFT JOIN log_category on log_category.categoryid = log_subjects.category_id
LEFT JOIN log_subjectcategory on log_subjectcategory.subjectcategoryid = log_subjects.subjectcategory_id
RIGHT JOIN log_subjectcount on log_subjectcount.subject_id = log_subjects.subjectid
WHERE log_subjectcount.user_id = '%s'"""%(user.id))
subjects = list(subjects)
for i in xrange(len(subjects)):
subjects[i]["subject"] = subjects[i]["subject"]
subjects[i]["note"] = subjects[i]["note"]
subjects.sort(key=lambda x: (x["subject"], x["date"]), reverse=True)
page_interval = 150
subjects, filters = filter_data(subjects, dict(request.GET), page_interval)
subjects = merge_subjects(subjects)
next, previous, page_count = get_pagination(len(subjects), page_interval, filters["page"])
graph_data = False
if "graph" in filters.keys():
graph_data = get_graph_data(subjects, filters)
if next == "inactive":
subjects = subjects[page_interval*filters["page"]:]
else:
subjects = subjects[page_interval*filters["page"]:page_interval*filters["page"]+page_interval]
return render_to_response("data_edit.html", {'subjects': subjects, "edit_form": edit_form, "filter_form": filter_form, "filters":filters, "next": next, "previous":previous, "page_count":page_count, "graph_data": graph_data}, context_instance=RequestContext(request))
def category(id):
return render_template('categories.html', args={'products': SQL_handler.getProductsByCategoryFromDatabase(id), 'user': user_handler.get_user()})
def home():
return render_template('home.html', args={'categories': SQL_handler.getCategories(), 'user': user_handler.get_user()})
def search():
searchString = request.url.split('=')[1]
return render_template('search.html', args={'user': user_handler.get_user(), 'searchString': searchString, 'result': SQL_handler.searchProduct(searchString)})
def manager():
if user_handler.get_user() is None or user_handler.get_user().clearance > 1:
abort(404)
return render_template('manager.html', args={'users': SQL_handler.getAllUsers(), 'user': user_handler.get_user(), 'products': SQL_handler.getAllProducts(), 'orders': SQL_handler.get_orders(), 'categories': SQL_handler.getCategories()})