def changesettings():
if "isloggedin" in session and session["userid"]:
if request.args:
if request.args["newdisplayname"]:
msg = update_user(session["username"], "displayname",
request.args["newdisplayname"])
if request.args["newpassword"]:
try:
assert request.args[
"currentpassword"], "Enter Your Current Password"
assert request.args["newpassword"] == request.args[
"confirm"], "Mismatched New Passwords"
msg = update_auth(session["username"],
request.args["currentpassword"],
request.args["newpassword"])
except AssertionError as ae:
return render_template("settings.html",
msg=str(ae.args[0]))
return render_template(
"settings.html",
displayname=get("users", "displayname", "WHERE userid = '%s'" %
session["userid"])[0][0],
msg=msg)
return render_template(
"settings.html",
displayname=get("users", "displayname",
"WHERE userid = '%s'" % session["userid"])[0][0])
return redirect("/") # not logged in
def update(userid, blogid = "new"):
if "isloggedin" in session:
try:
assert request.args["newTitle"], "No Title Entered"
title = request.args["newTitle"]
author = get("users", "displayname",
"WHERE username = '******'" % session["username"])[0][0]
content = request.args["newContent"]
if blogid == "new": # if it's a new post
assert not get("blogs", "title", "WHERE title = '%s'" % title), "Duplicate Title"
blogid = create_post(userid, author, title, content)
else: # otherwise
update_post(blogid, content, title)
return redirect( # return to page for the specific post
url_for(
"post",
userid = userid,
blogid = blogid
)
)
except AssertionError as ae:
return render_template(
"edit.html",
error = str(ae.args[0]),
userid = userid,
blogid = blogid,
title = "",
content = request.args["newContent"]
)
return redirect("/") # not logged in
def post(userid, blogid):
if "isloggedin" in session: # SQLite queries to display content
author = get("blogs", "author", "WHERE blogid = '%s'" % blogid)[0][0]
title = get("blogs", "title", "WHERE blogid = '%s'" % blogid)[0][0]
content = get("blogs", "content", "WHERE blogid = '%s'" % blogid)[0][0]
lastupdated = get("blogs", "lastupdated", "WHERE blogid = '%s'" % blogid)[0][0]
if userid != session["userid"]: # not own post, so cannot edit
return render_template("post.html",
canedit = False,
title = title,
content = content,
author = author,
lastupdated = lastupdated
)
return render_template(
"post.html",
canedit = True,
userid = userid,
blogid = blogid,
content = content,
author = author,
title = title,
lastupdated = lastupdated
)
return redirect("/") # not logged in
def signup():
if "creds" in g:
try:
assert g.username, "No Username Entered"
assert not get("users", "username", "WHERE username = '******'" % g.username), "Username Already Used"
assert g.password, "No Password Entered"
assert g.password == request.args["confirm"], "Password Does Not Match"
if register(g.username, g.password, request.args["displayname"]):
session["isloggedin"] = True
session["username"] = g.username
session["userid"] = str(get(
"users", "userid", "WHERE username = '******'" % g.username)[0][0])
return redirect(
url_for("home")
)
return render_template(
"signup.html",
error = "Registration Failed"
)
except AssertionError as ae:
return render_template(
"signup.html",
error = str(ae.args[0])
)
return render_template("signup.html")
def home():
if "isloggedin" in session: # display all the blogs if logged in
collection = get("users", "userid, displayname")
return render_template(
"home.html",
collection = collection
)
return redirect("/") # if not logged in, go to login page
def user(userid):
if "isloggedin" in session: # SQLite queries to display posts
selected_user = get("users", "displayname",
"WHERE userid = '%s'" % userid)[0][0]
collection = get("blogs", "title, blogid",
"WHERE userid = '%s'" % userid)
if userid != session["userid"]: # not My Blog, so cannot edit
return render_template("blog.html",
canedit=False,
userid=userid,
user=selected_user,
collection=collection)
return render_template("blog.html",
canedit=True,
userid=userid,
user=selected_user,
collection=collection)
return redirect("/") # not logged in
def search():
if "isloggedin" in session: # SQLite query to display results
collection = get("blogs", "title, blogid, userid",
"WHERE title LIKE '%s'" % request.args["query"])
return render_template(
"results.html",
collection = collection
)
return redirect("/")
def login():
if "isloggedin" in session: # if already logged in
return redirect(url_for("home")) # go to home
if "creds" in g:
try:
assert g.username, "No Username Entered"
assert g.password, "No Password Entered"
if auth(g.username, g.password): # successful login
session["isloggedin"] = True
session["username"] = g.username
session["userid"] = str(
get("users", "userid",
"WHERE username = '******'" % g.username)[0][0])
return redirect(url_for("home"))
return render_template( # unsuccessful login
"login.html",
error="Invalid Credentials")
except AssertionError as ae:
return render_template("login.html", error=str(ae.args[0]))
return render_template("login.html")
from utl.edit import create_post, delete_post, update_post, update_user
# Initialize Flask app that stores a reference to a database file and the salt
app = Flask(__name__)
app.secret_key = urandom(32)
if not path.exists("data/database.db"):
with open("data/database.db", "w+") as f:
f.close()
app.config.from_mapping(DATABASE="data/database.db")
# Initialize the database
with app.app_context():
conn()
with app.open_resource("schema.sql") as f:
g.db.executescript(f.read().decode("utf8"))
existing_salt = get("storedsalt", "salt", "WHERE id = 0")
if not existing_salt:
salt = str(uuid4())
insert("storedsalt", [0, salt])
app.config.from_mapping(SALT=salt)
else:
app.config.from_mapping(SALT=existing_salt[0][0])
close()
# Invoke database connection before each request is processed
@app.before_request
def database_connection():
conn()
try:
g.username = request.args["username"]