def deleteBaseMenuItem(cuisine_id, baseMenuItem_id):
'''Serve form to delete a base menu item
'''
client_login_session = getClientLoginSession()
baseMenuItem = DataManager.\
getBaseMenuItem(baseMenuItem_id=baseMenuItem_id)
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
cuisine = DataManager.getCuisine(cuisine_id=cuisine_id)
restaurantMenuItems = DataManager.\
getRestaurantMenuItems(baseMenuItem_id=baseMenuItem_id)
baseForNoCuisine = DataManager.\
getBaseMenuItem(baseMenuItem_id=-1)
DataManager.deleteBaseMenuItem(baseMenuItem_id=baseMenuItem_id)
flash("reassigned " + str(len(restaurantMenuItems)) + \
" restaurant menu items' base to '" +\
baseForNoCuisine.name + "'")
flash("deleted " + baseMenuItem.name + " from " +\
cuisine.name + "'s base menu and from the database")
return redirect(url_for('cuisine',cuisine_id=cuisine_id))
else:
return render_template("DeleteBaseMenuItem.html",
baseMenuItem=baseMenuItem,
cuisine_id=cuisine_id,
hiddenToken=login_session['state'],
client_login_session=client_login_session)
def editCuisine(cuisine_id):
'''Serve form to edit a cuisine
'''
client_login_session = getClientLoginSession()
cuisine = DataManager.getCuisine(cuisine_id=cuisine_id)
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
oldName = cuisine.name
newName = validateUserInput(request.form['name'],
'name', 'edit', 'cuisine', maxlength=80, unique=True,
oldInput=oldName, tableName='Cuisine')
DataManager.editCuisine(cuisine_id, newName=newName)
if newName is not None:
flash("Changed cuisine's name from '" + oldName +\
"' to '" + newName + "'")
return redirect(url_for('cuisine',
cuisine_id=cuisine_id))
else:
return render_template("EditCuisine.html",
cuisine=cuisine,
hiddenToken=login_session['state'],
client_login_session=client_login_session)
def deleteRestaurant(restaurant_id):
'''Serve form to delete a restaurant
'''
restaurant = DataManager.getRestaurant(restaurant_id)
if restaurant.user_id != login_session['user_id']:
flash("You do not have permission to delete this restaurant")
return redirect(url_for('restaurant', restaurant_id=restaurant.id))
client_login_session = getClientLoginSession()
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
restaurantMenuItems = DataManager.\
getRestaurantMenuItems(restaurant_id=restaurant_id)
DataManager.deleteRestaurant(restaurant_id)
flash("deleted " + str(len(restaurantMenuItems)) + \
" restaurant menu items from the database")
flash("deleted restaurant " + str(restaurant.id) + " (" + \
restaurant.name + ") from the database")
return redirect(url_for('restaurants'))
else:
return render_template('DeleteRestaurant.html',
restaurant=restaurant,
hiddenToken=login_session['state'],
client_login_session=client_login_session)
def addCuisine():
'''Serve form for adding a cuisine to the database
'''
client_login_session = getClientLoginSession()
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
name = validateUserInput(request.form['name'],
'name', 'create', 'cuisine', maxlength=80,
required=True, unique=True)
if name is None:
return redirect(url_for('cuisines'))
DataManager.addCuisine(name)
flash("Added cuisine '" + name + "' to the database!")
return redirect(url_for('cuisines'))
else:
return render_template('AddCuisine.html',
hiddenToken=login_session['state'],
client_login_session=client_login_session)
def baseMenuItem(cuisine_id, baseMenuItem_id):
'''Serve a base menu item
'''
client_login_session = getClientLoginSession()
baseMenuItem = DataManager.\
getBaseMenuItem(baseMenuItem_id=baseMenuItem_id)
baseMenuItem.price = Decimal(baseMenuItem.price).\
quantize(Decimal('0.01'))
cuisine = DataManager.\
getCuisine(cuisine_id=baseMenuItem.cuisine_id)
restaurantMenuItems = DataManager.\
getRestaurantMenuItems(baseMenuItem_id=baseMenuItem.id)
picture = DataManager.getPicture(baseMenuItem.picture_id)
menuSection = DataManager.\
getMenuSection(menuSection_id=baseMenuItem.menuSection_id)
timesOrdered = 0
return render_template("BaseMenuItem.html",
baseMenuItem=baseMenuItem,
restaurantMenuItems=restaurantMenuItems,
cuisine=cuisine,
timesOrdered=timesOrdered,
picture=picture,
menuSection=menuSection,
client_login_session=client_login_session)
def cuisines():
''' Display all cuisines
'''
cuisines = DataManager.getCuisines()
client_login_session = getClientLoginSession()
return render_template("Cuisines.html", cuisines=cuisines,
client_login_session=client_login_session)
def users():
'''Serve information about all users
'''
client_login_session = getClientLoginSession()
users = DataManager.getUsers()
return render_template('Users.html', users=users,
client_login_session=client_login_session)
def deleteCuisine(cuisine_id):
'''Serve form to delete a cuisine
'''
client_login_session = getClientLoginSession()
cuisine = DataManager.getCuisine(cuisine_id=cuisine_id)
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
# all of this is for flash messaging
cuisineName = cuisine.name
cuisineID = cuisine.id
restaurantMenuItems = DataManager.\
getRestaurantMenuItems(cuisine_id=cuisine_id)
numItemsReassigned = len(restaurantMenuItems)
restaurants = DataManager.\
getRestaurants(cuisine_id=cuisine_id)
numRestaurantsReassigned = len(restaurants)
baseMenuItems = DataManager.\
getBaseMenuItems(cuisine_id=cuisine_id)
numItemsDeleted = len(baseMenuItems)
itemBaseForNoCuisine = DataManager.\
getBaseMenuItem(baseMenuItem_id=-1)
# here is the logic
restaurantBaseForNoCuisine = DataManager.\
getCuisine(cuisine_id=-1)
DataManager.deleteCuisine(cuisine_id)
flash("reassigned " + str(numItemsReassigned) + \
" restaurant menu items' base item to '" + \
itemBaseForNoCuisine.name + "'")
flash("reassigned " + str(numRestaurantsReassigned) + \
" restaurants' cuisine to '" + \
restaurantBaseForNoCuisine.name + "'")
flash("deleted " + str(numItemsDeleted) + \
" base menu items from the database")
flash("deleted cuisine " + str(cuisineID) + " (" + \
cuisineName + ") from the database")
return redirect(url_for('cuisines'))
else:
return render_template("DeleteCuisine.html",
cuisine=cuisine,
hiddenToken=login_session['state'],
client_login_session=client_login_session)
def restaurantMenuItem(restaurant_id, restaurantMenuItem_id):
'''Serve a restaurant menu item
'''
restaurant = DataManager.getRestaurant(restaurant_id)
if restaurant.user_id != login_session['user_id']:
flash("You do not have permission to view this item's details")
return redirect(url_for('restaurantMenu',
restaurant_id=restaurant.id))
client_login_session = getClientLoginSession()
restaurantMenuItem = DataManager.\
getRestaurantMenuItem(restaurantMenuItem_id)
restaurantMenuItem.price = Decimal(restaurantMenuItem.price).\
quantize(Decimal('0.01'))
restaurantCuisineObj = DataManager.\
getCuisine(cuisine_id=restaurant.cuisine_id)
restaurantCuisine = restaurantCuisineObj.name
restaurantMenuItemSection = DataManager.\
getMenuSection(menuSection_id=restaurantMenuItem.menuSection_id)
baseMenuItem = DataManager.\
getBaseMenuItem(baseMenuItem_id=restaurantMenuItem.baseMenuItem_id)
baseMenuItem.price = Decimal(baseMenuItem.price).quantize(Decimal('0.01'))
baseMenuItemCuisineObj = DataManager.\
getCuisine(cuisine_id=baseMenuItem.cuisine_id)
baseMenuItemCuisine = baseMenuItemCuisineObj.name
baseMenuItemSection = DataManager.\
getMenuSection(menuSection_id=baseMenuItem.menuSection_id)
picture = DataManager.getPicture(restaurantMenuItem.picture_id)
timesOrdered = 0
return render_template("RestaurantMenuItem.html",
restaurantMenuItem=restaurantMenuItem,
restaurant=restaurant,
restaurantCuisine=restaurantCuisine,
baseMenuItem=baseMenuItem,
baseMenuItemCuisine=baseMenuItemCuisine,
timesOrdered=timesOrdered,
picture=picture,
restaurantMenuItemSection=restaurantMenuItemSection,
baseMenuItemSection=baseMenuItemSection,
client_login_session=client_login_session)
def restaurantMenuItem(restaurant_id, restaurantMenuItem_id):
'''Serve a restaurant menu item
'''
restaurant = DataManager.getRestaurant(restaurant_id)
if restaurant.user_id != login_session['user_id']:
flash("You do not have permission to view this item's details")
return redirect(url_for('restaurantMenu', restaurant_id=restaurant.id))
client_login_session = getClientLoginSession()
restaurantMenuItem = DataManager.\
getRestaurantMenuItem(restaurantMenuItem_id)
restaurantMenuItem.price = Decimal(restaurantMenuItem.price).\
quantize(Decimal('0.01'))
restaurantCuisineObj = DataManager.\
getCuisine(cuisine_id=restaurant.cuisine_id)
restaurantCuisine = restaurantCuisineObj.name
restaurantMenuItemSection = DataManager.\
getMenuSection(menuSection_id=restaurantMenuItem.menuSection_id)
baseMenuItem = DataManager.\
getBaseMenuItem(baseMenuItem_id=restaurantMenuItem.baseMenuItem_id)
baseMenuItem.price = Decimal(baseMenuItem.price).quantize(Decimal('0.01'))
baseMenuItemCuisineObj = DataManager.\
getCuisine(cuisine_id=baseMenuItem.cuisine_id)
baseMenuItemCuisine = baseMenuItemCuisineObj.name
baseMenuItemSection = DataManager.\
getMenuSection(menuSection_id=baseMenuItem.menuSection_id)
picture = DataManager.getPicture(restaurantMenuItem.picture_id)
timesOrdered = 0
return render_template("RestaurantMenuItem.html",
restaurantMenuItem=restaurantMenuItem,
restaurant=restaurant,
restaurantCuisine=restaurantCuisine,
baseMenuItem=baseMenuItem,
baseMenuItemCuisine=baseMenuItemCuisine,
timesOrdered=timesOrdered,
picture=picture,
restaurantMenuItemSection=restaurantMenuItemSection,
baseMenuItemSection=baseMenuItemSection,
client_login_session=client_login_session)
def restaurantManagerIndex():
'''Serve the homepage
'''
# create a state token to prevent CSRF
# store it in the session for later validation
state = ''.join(random.choice(string.ascii_uppercase + \
string.ascii_lowercase + string.digits) for x in xrange(32))
login_session['state'] = state
client_login_session = getClientLoginSession()
# for writing all existing db data to .json
#writeTablesToJSON('initial_data/')
return render_template("index.html", state=state,
client_login_session=client_login_session)
def restaurantManagerIndex():
'''Serve the homepage
'''
# create a state token to prevent CSRF
# store it in the session for later validation
state = ''.join(random.choice(string.ascii_uppercase + \
string.ascii_lowercase + string.digits) for x in xrange(32))
login_session['state'] = state
client_login_session = getClientLoginSession()
# for writing all existing db data to .json
#writeTablesToJSON('initial_data/')
return render_template("index.html",
state=state,
client_login_session=client_login_session)
def deleteUser(user_id):
'''Serve a form to delete a user
'''
user = DataManager.getUser(user_id)
if user.id != login_session['user_id']:
flash("You do not have permission to delete this profile")
return redirect(url_for('user', user_id=user.id))
client_login_session = getClientLoginSession()
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
DataManager.deleteUser(user.id)
flash("deleted " + user.name + " from " +\
"the database")
# this is messy but needed because even though disconnect() -- which
# deletes all of this information (confirmed with print statements) --
# has already run on "onsubmit" with submission of this form,
# the login_session mysteriously still has all of this information
del login_session['credentials']
del login_session['user_id']
del login_session['username']
del login_session['picture']
del login_session['email']
del login_session['picture_serve_type']
if 'gplus_id' in login_session:
del login_session['gplus_id']
elif 'facebook_id' in login_session:
del login_session['facebook_id']
return redirect(url_for('users'))
return render_template('DeleteUser.html',
user=user,
hiddenToken=login_session['state'],
client_login_session=client_login_session)
def restaurants():
'''Serve info about all of the restaurants
'''
client_login_session = getClientLoginSession()
cuisines = DataManager.getCuisines()
numRestaurants = 0
# get restaurants labeled with user or non-user
# sectioned by cuisine
cuisineToRestaurantsDict = {}
for cuisine in cuisines:
cuisineToRestaurantsDict[cuisine.id] = {}
cuisineToRestaurantsDict[cuisine.id]['cuisine'] = cuisine
restaurants = DataManager.\
getRestaurants(cuisine_id=cuisine.id)
restaurantDicts = {}
for restaurant in restaurants:
numRestaurants += 1
restaurantDict = {}
restaurantDict['restaurant'] = restaurant
if (isLoggedIn() and
restaurant.user_id == login_session['user_id']):
restaurantDict['ownership'] = 'user'
else:
restaurantDict['ownership'] = 'non-user'
restaurantDicts[restaurant.id] = restaurantDict
cuisineToRestaurantsDict[cuisine.id]['restaurants'] = \
restaurantDicts
return render_template("Restaurants.html",
cuisineToRestaurantsDict=cuisineToRestaurantsDict,
numRestaurants=numRestaurants,
client_login_session=client_login_session)
def restaurants():
'''Serve info about all of the restaurants
'''
client_login_session = getClientLoginSession()
cuisines = DataManager.getCuisines()
numRestaurants = 0
# get restaurants labeled with user or non-user
# sectioned by cuisine
cuisineToRestaurantsDict = {}
for cuisine in cuisines:
cuisineToRestaurantsDict[cuisine.id] = {}
cuisineToRestaurantsDict[cuisine.id]['cuisine'] = cuisine
restaurants = DataManager.\
getRestaurants(cuisine_id=cuisine.id)
restaurantDicts = {}
for restaurant in restaurants:
numRestaurants += 1
restaurantDict = {}
restaurantDict['restaurant'] = restaurant
if (isLoggedIn()
and restaurant.user_id == login_session['user_id']):
restaurantDict['ownership'] = 'user'
else:
restaurantDict['ownership'] = 'non-user'
restaurantDicts[restaurant.id] = restaurantDict
cuisineToRestaurantsDict[cuisine.id]['restaurants'] = \
restaurantDicts
return render_template("Restaurants.html",
cuisineToRestaurantsDict=cuisineToRestaurantsDict,
numRestaurants=numRestaurants,
client_login_session=client_login_session)
def restaurant(restaurant_id):
'''Serve info about a restaurant
'''
client_login_session = getClientLoginSession()
restaurant = DataManager.getRestaurant(restaurant_id)
owner = DataManager.getUser(restaurant.user_id)
restaurantMenuItems = DataManager.\
getRestaurantMenuItems(restaurant_id=restaurant_id)
cuisine = DataManager.getCuisine(cuisine_id=restaurant.cuisine_id)
picture = DataManager.getPicture(restaurant.picture_id)
numMenuItems = len(restaurantMenuItems)
if numMenuItems > 0:
mostExpensiveItem = restaurantMenuItems[0]
for item in restaurantMenuItems:
if item.price > mostExpensiveItem.price:
mostExpensiveItem = item
mostExpensiveItem.price =\
Decimal(mostExpensiveItem.price).\
quantize(Decimal('0.01'))
mostExpensiveItem.price =\
Decimal(mostExpensiveItem.price).\
quantize(Decimal('0.01'))
else:
mostExpensiveItem = DataManager.\
getBaseMenuItem(baseMenuItem_id=-1)
mostExpensiveItem.name = 'N/A'
mostExpensiveItem.price = 'N/A'
return render_template('Restaurant.html',
restaurant=restaurant,
numMenuItems=numMenuItems,
mostExpensiveItem=mostExpensiveItem,
cuisine=cuisine,
picture=picture,
owner=owner,
client_login_session=client_login_session)
def deleteRestaurantMenuItem(restaurant_id, restaurantMenuItem_id):
'''Serve a form to delete a restaurant menu item
'''
restaurant = DataManager.getRestaurant(restaurant_id)
if restaurant.user_id != login_session['user_id']:
flash("You do not have permission to delete this item")
return redirect(url_for('restaurantMenu',
restaurant_id=restaurant.id))
client_login_session = getClientLoginSession()
restaurantMenuItem = DataManager.\
getRestaurantMenuItem(restaurantMenuItem_id)
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
restaurantMenuItemName = restaurantMenuItem.name
DataManager.\
deleteRestaurantMenuItem(restaurantMenuItem_id=\
restaurantMenuItem_id)
flash("removed item " + str(restaurantMenuItem_id) + " (" + \
restaurantMenuItemName + ") from the menu and database")
return redirect(url_for('restaurantMenu',
restaurant_id=restaurant_id))
else:
return render_template('DeleteRestaurantMenuItem.html',
restaurant=restaurant,
restaurantMenuItem=restaurantMenuItem,
hiddenToken=login_session['state'],
client_login_session=client_login_session)
def restaurant(restaurant_id):
'''Serve info about a restaurant
'''
client_login_session = getClientLoginSession()
restaurant = DataManager.getRestaurant(restaurant_id)
owner = DataManager.getUser(restaurant.user_id)
restaurantMenuItems = DataManager.\
getRestaurantMenuItems(restaurant_id=restaurant_id)
cuisine = DataManager.getCuisine(cuisine_id=restaurant.cuisine_id)
picture = DataManager.getPicture(restaurant.picture_id)
numMenuItems = len(restaurantMenuItems)
if numMenuItems > 0:
mostExpensiveItem = restaurantMenuItems[0]
for item in restaurantMenuItems:
if item.price > mostExpensiveItem.price:
mostExpensiveItem = item
mostExpensiveItem.price =\
Decimal(mostExpensiveItem.price).\
quantize(Decimal('0.01'))
mostExpensiveItem.price =\
Decimal(mostExpensiveItem.price).\
quantize(Decimal('0.01'))
else:
mostExpensiveItem = DataManager.\
getBaseMenuItem(baseMenuItem_id=-1)
mostExpensiveItem.name = 'N/A'
mostExpensiveItem.price = 'N/A'
return render_template('Restaurant.html', restaurant=restaurant,
numMenuItems=numMenuItems,
mostExpensiveItem=mostExpensiveItem,
cuisine=cuisine, picture=picture, owner=owner,
client_login_session=client_login_session)
def deleteRestaurant(restaurant_id):
'''Serve form to delete a restaurant
'''
restaurant = DataManager.getRestaurant(restaurant_id)
if restaurant.user_id != login_session['user_id']:
flash("You do not have permission to delete this restaurant")
return redirect(url_for('restaurant',
restaurant_id=restaurant.id))
client_login_session = getClientLoginSession()
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
restaurantMenuItems = DataManager.\
getRestaurantMenuItems(restaurant_id=restaurant_id)
DataManager.deleteRestaurant(restaurant_id)
flash("deleted " + str(len(restaurantMenuItems)) + \
" restaurant menu items from the database")
flash("deleted restaurant " + str(restaurant.id) + " (" + \
restaurant.name + ") from the database")
return redirect(url_for('restaurants'))
else:
return render_template('DeleteRestaurant.html',
restaurant=restaurant,
hiddenToken=login_session['state'],
client_login_session=client_login_session)
def deleteRestaurantMenuItem(restaurant_id, restaurantMenuItem_id):
'''Serve a form to delete a restaurant menu item
'''
restaurant = DataManager.getRestaurant(restaurant_id)
if restaurant.user_id != login_session['user_id']:
flash("You do not have permission to delete this item")
return redirect(url_for('restaurantMenu', restaurant_id=restaurant.id))
client_login_session = getClientLoginSession()
restaurantMenuItem = DataManager.\
getRestaurantMenuItem(restaurantMenuItem_id)
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
restaurantMenuItemName = restaurantMenuItem.name
DataManager.\
deleteRestaurantMenuItem(restaurantMenuItem_id=\
restaurantMenuItem_id)
flash("removed item " + str(restaurantMenuItem_id) + " (" + \
restaurantMenuItemName + ") from the menu and database")
return redirect(url_for('restaurantMenu', restaurant_id=restaurant_id))
else:
return render_template('DeleteRestaurantMenuItem.html',
restaurant=restaurant,
restaurantMenuItem=restaurantMenuItem,
hiddenToken=login_session['state'],
client_login_session=client_login_session)
def addBaseMenuItem(cuisine_id):
'''Serve form to add a base menu item
'''
client_login_session = getClientLoginSession()
cuisine = DataManager.getCuisine(cuisine_id=cuisine_id)
menuSections = DataManager.getMenuSections()
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
name = validateUserInput(request.form['name'],
'name', 'create', 'base menu item', maxlength=80,
required=True, unique=True, tableName='BaseMenuItem')
if name is None:
return redirect(url_for('cuisine', cuisine_id=cuisine.id))
description = \
validateUserInput(request.form['description'],
'description', 'create', 'base menu item',
maxlength=250, required=True)
if description is None:
return redirect(url_for('cuisine', cuisine_id=cuisine.id))
price = validateUserInput(request.form['price'],
'price', 'create', 'base menu item', maxlength=20,
required=True, priceFormat=True)
if price is None:
return redirect(url_for('cuisine', cuisine_id=cuisine.id))
validMenuSectionIDs = {}
for menuSection in menuSections:
validMenuSectionIDs[str(menuSection.id)] = True
menuSection_id = validateUserInput(request.form['menuSection'],
'menuSection_id', 'create', 'base menu item',
columnNameForMsg='menu section', required=True,
validInputs=validMenuSectionIDs)
if menuSection_id is None:
return redirect(url_for('cuisine', cuisine_id=cuisine.id))
providedPic = validateUserPicture('create', 'base menu item',
file=request.files['pictureFile'],
link=request.form['pictureLink'],
maxlength=300, required=True)
if providedPic is None:
return redirect(url_for('cuisine', cuisine_id=cuisine.id))
picture_id = DataManager.addPicture(text=providedPic['text'],
serve_type=providedPic['serve_type'])
baseMenuItem_id = DataManager.\
addBaseMenuItem(name, cuisine_id, description=description,
price=price, menuSection_id=menuSection_id,
picture_id=picture_id)
# if pic was uploaded, now that we know item id,
# save actual file for serving and set the name in the database
if providedPic['serve_type'] == 'upload':
picfilename = 'baseMenuItem' + str(baseMenuItem_id)
request.files['pictureFile'].save(os.path.\
join(app.config['UPLOAD_FOLDER'], picfilename))
DataManager.editPicture(picture_id=picture_id,
newText=picfilename)
flash("added '" + name + "' to " + cuisine.name + \
"'s base menu")
return redirect(url_for('cuisine', cuisine_id=cuisine.id))
else:
return render_template('AddBaseMenuItem.html',
cuisine=cuisine,
menuSections=menuSections,
hiddenToken=login_session['state'],
client_login_session=client_login_session)
def editRestaurantMenuItem(restaurant_id, restaurantMenuItem_id):
'''Serve a form to edit a restaurant menu item
'''
restaurant = DataManager.getRestaurant(restaurant_id)
if restaurant.user_id != login_session['user_id']:
flash("You do not have permission to edit this item")
return redirect(url_for('restaurantMenu', restaurant_id=restaurant.id))
client_login_session = getClientLoginSession()
user_id = restaurant.user_id
restaurantMenuItem = DataManager.\
getRestaurantMenuItem(restaurantMenuItem_id)
restaurantMenuItem.price = Decimal(restaurantMenuItem.price).\
quantize(Decimal('0.01'))
picture = DataManager.getPicture(restaurantMenuItem.picture_id)
menuSections = DataManager.getMenuSections()
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
oldName = restaurantMenuItem.name
oldDescription = restaurantMenuItem.description
oldPrice = restaurantMenuItem.price
oldMenuSection_id = restaurantMenuItem.menuSection_id
oldPicture = picture
newName = validateUserInput(request.form['name'],
'name',
'edit',
'restaurant menu item',
maxlength=80,
oldInput=oldName)
newDescription = validateUserInput(request.form['description'],
'description',
'edit',
'restaurant menu item',
maxlength=250,
oldInput=oldDescription)
newPrice = validateUserInput(request.form['price'],
'price',
'edit',
'restaurant menu item',
maxlength=20,
oldInput=oldPrice,
priceFormat=True)
validMenuSectionIDs = {}
for menuSection in menuSections:
validMenuSectionIDs[str(menuSection.id)] = True
# for 'do not change'
validMenuSectionIDs['-1'] = True
newMenuSection_id = validateUserInput(request.form['menuSection'],
'menuSection_id',
'edit',
'restaurant menu item',
columnNameForMsg='menu section',
oldInput=str(oldMenuSection_id),
validInputs=validMenuSectionIDs)
if newMenuSection_id == '-1':
newMenuSection_id = None
providedPic = validateUserPicture('edit',
'restaurant menu item',
file=request.files['pictureFile'],
link=request.form['pictureLink'],
maxlength=300)
if providedPic is not None:
# delete the old pic if it was an upload and new is a link
# or save the new pic if it was an upload
if (providedPic['serve_type'] == 'link'
and oldPicture.serve_type == 'upload'):
path = app.config['UPLOAD_FOLDER'] + '/' + oldPicture.text
os.remove(path)
flash("deleted old uploaded pic")
elif providedPic['serve_type'] == 'upload':
picfilename = 'restaurantMenuItem' + \
str(restaurantMenuItem_id)
request.files['pictureFile'].save(os.path.\
join(app.config['UPLOAD_FOLDER'], picfilename))
providedPic['text'] = picfilename
# edit the pic
DataManager.editPicture(restaurantMenuItem.picture_id,
newText=providedPic['text'],
newServe_Type=providedPic['serve_type'])
flash("updated restaurant menu item picture")
# we edited the pic directly, no need to include here
DataManager.editRestaurantMenuItem(restaurantMenuItem.id,
newName=newName,
newDescription=newDescription,
newPrice=newPrice,
newMenuSection_id=newMenuSection_id)
if newName is not None:
flash("changed restaurant menu item " + \
str(restaurantMenuItem.id) + \
"'s name from '" + oldName + "' to '" + newName + "'")
if newDescription is not None:
flash("changed restaurant menu item " + \
str(restaurantMenuItem.id) + \
"'s description from '"+ oldDescription + "' to '" + \
newDescription + "'")
if newPrice is not None:
flash("changed restaurant menu item " + \
str(restaurantMenuItem.id) + \
"'s price from '" + str(oldPrice) + "' to '" + \
str(newPrice) + "'")
if newMenuSection_id is not None:
flash("changed the restaurant menu item's menu section")
return redirect(url_for('restaurantMenu', restaurant_id=restaurant_id))
else:
return render_template('EditRestaurantMenuItem.html',
restaurant=restaurant,
restaurantMenuItem=restaurantMenuItem,
menuSections=menuSections,
hiddenToken=login_session['state'],
picture=picture,
client_login_session=client_login_session)
def addRestaurant():
'''Serve form to add a restaurant
'''
client_login_session = getClientLoginSession()
cuisines = DataManager.getCuisines()
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
validCuisineIDs = {}
for cuisine in cuisines:
validCuisineIDs[str(cuisine.id)] = True
cuisine_id = validateUserInput(request.form['cuisineID'],
'cuisine_id',
'create',
'restaurant',
columnNameForMsg='cuisine',
required=True,
validInputs=validCuisineIDs)
if cuisine_id is None:
return redirect(url_for('restaurants'))
name = validateUserInput(request.form['name'],
'name',
'create',
'restaurant',
maxlength=100,
required=True)
if name is None:
return redirect(url_for('restaurants'))
providedPic = validateUserPicture('create',
'restaurant',
file=request.files['pictureFile'],
link=request.form['pictureLink'],
maxlength=300,
required=True)
if providedPic is None:
return redirect(url_for('restaurants'))
picture_id = DataManager.addPicture(
text=providedPic['text'], serve_type=providedPic['serve_type'])
restaurant_id = DataManager.addRestaurant(
name=name,
cuisine_id=cuisine_id,
user_id=login_session['user_id'],
picture_id=picture_id)
# if pic was uploaded, now that we know item id,
# save actual file for serving and set the name in the database
if providedPic['serve_type'] == 'upload':
picfilename = 'restaurant' + str(restaurant_id)
request.files['pictureFile'].save(os.path.\
join(app.config['UPLOAD_FOLDER'], picfilename))
DataManager.editPicture(picture_id=picture_id, newText=picfilename)
DataManager.populateMenuWithBaseItems(restaurant_id)
flash("restaurant '" + name + "' added to the database!")
return redirect(url_for('restaurants'))
else:
return render_template('AddRestaurant.html',
cuisines=cuisines,
hiddenToken=login_session['state'],
client_login_session=client_login_session)
def addRestaurantMenuItem(restaurant_id):
'''Serve form to add a restaurant menu item to a restaurant's menu
'''
restaurant = DataManager.getRestaurant(restaurant_id)
if restaurant.user_id != login_session['user_id']:
flash("You do not have permission to add an item to "+\
" this restaurant's menu")
return redirect(url_for('restaurantMenu', restaurant_id=restaurant.id))
client_login_session = getClientLoginSession()
baseMenuItems = DataManager.getBaseMenuItems()
for item in baseMenuItems:
pic = DataManager.getPicture(item.picture_id)
item.picText = pic.text
item.picServeType = pic.serve_type
menuSections = DataManager.getMenuSections()
# display nicely
for item in baseMenuItems:
item.price = Decimal(item.price).quantize(Decimal('0.01'))
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
validBaseMenuItemIDs = {}
for item in baseMenuItems:
validBaseMenuItemIDs[str(item.id)] = True
baseMenuItem_id = validateUserInput(request.form['baseMenuItemID'],
'baseMenuItem_id',
'create',
'restaurant menu item',
columnNameForMsg='base menu item',
validInputs=validBaseMenuItemIDs,
required=True)
if baseMenuItem_id is None:
return redirect(
url_for('restaurantMenu', restaurant_id=restaurant_id))
baseMenuItem = DataManager.\
getBaseMenuItem(baseMenuItem_id=baseMenuItem_id)
# if a field is provided, use it, else use the base menu item's attr
if request.form['name']:
name = validateUserInput(request.form['name'],
'name',
'create',
'restaurant menu item',
maxlength=80,
required=True)
if name is None:
return redirect(
url_for('restaurantMenu', restaurant_id=restaurant_id))
else:
name = baseMenuItem.name
if request.form['description']:
description = validateUserInput(request.form['description'],
'description',
'create',
'restaurant menu item',
maxlength=250,
required=True)
if description is None:
return redirect(
url_for('restaurantMenu', restaurant_id=restaurant_id))
else:
description = baseMenuItem.description
if request.form['price']:
price = validateUserInput(request.form['price'],
'price',
'create',
'restaurant menu item',
maxlength=20,
required=True,
priceFormat=True)
if price is None:
return redirect(
url_for('restaurantMenu', restaurant_id=restaurant_id))
else:
price = baseMenuItem.price
if request.files['pictureFile'] or request.form['pictureLink']:
providedPic = validateUserPicture(
'create',
'restaurant menu item',
file=request.files['pictureFile'],
link=request.form['pictureLink'],
maxlength=300,
required=True)
if providedPic is None:
return redirect(
url_for('restaurantMenu', restaurant_id=restaurant_id))
else:
picture_id = DataManager.\
addPicture(text=providedPic['text'],
serve_type=providedPic['serve_type'])
else:
picture_id = baseMenuItem.picture_id
validMenuSectionIDs = {}
for menuSection in menuSections:
validMenuSectionIDs[str(menuSection.id)] = True
# if this is somehow None,
# the add function defaults to base item's attr
menuSection_id = validateUserInput(request.form['menuSectionID'],
'menuSection_id',
'create',
'restaurant menu item',
columnNameForMsg='menu section',
validInputs=validMenuSectionIDs,
required=True)
restaurantMenuItem_id = DataManager.\
addRestaurantMenuItem(name=name, restaurant_id=restaurant_id,
description=description, price=price,
baseMenuItem_id=baseMenuItem_id, picture_id=picture_id,
menuSection_id=menuSection_id)
# if pic was uploaded, now that we know item id,
# save actual file for serving and set the name in the database
if (request.files['pictureFile']
and providedPic['serve_type'] == 'upload'):
picfilename = 'restaurantMenuItem' + str(restaurantMenuItem_id)
request.files['pictureFile'].save(os.path.\
join(app.config['UPLOAD_FOLDER'], picfilename))
DataManager.editPicture(picture_id=picture_id, newText=picfilename)
flash("menu item '" + name + "' added to the menu!")
return redirect(url_for('restaurantMenu', restaurant_id=restaurant_id))
else:
return render_template('AddRestaurantMenuItem.html',
restaurant=restaurant,
baseMenuItems=baseMenuItems,
menuSections=menuSections,
hiddenToken=login_session['state'],
client_login_session=client_login_session)
def editRestaurant(restaurant_id):
'''Serve form to add a restaurant menu item to a restaurant's menu
'''
restaurant = DataManager.getRestaurant(restaurant_id)
if restaurant.user_id != login_session['user_id']:
flash("You do not have permission to edit this restaurant")
return redirect(url_for('restaurant',
restaurant_id=restaurant.id))
client_login_session = getClientLoginSession()
restaurant = DataManager.getRestaurant(restaurant_id)
cuisines = DataManager.getCuisines()
picture = DataManager.getPicture(restaurant.picture_id)
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
oldName = restaurant.name
oldCuisine = DataManager.\
getCuisine(cuisine_id=restaurant.cuisine_id)
oldPicture = DataManager.getPicture(restaurant.picture_id)
newName = validateUserInput(request.form['name'], 'name',
'edit', 'restaurant', maxlength=100)
validCuisineIDs = {}
for cuisine in cuisines:
validCuisineIDs[str(cuisine.id)] = True
# for 'do not change'
validCuisineIDs['-2'] = True
newCuisine_id = validateUserInput(request.form['cuisineID'],
'cuisine_id', 'edit', 'restaurant',
columnNameForMsg='cuisine', oldInput=str(oldCuisine.id),
validInputs=validCuisineIDs)
if newCuisine_id == '-2':
newCuisine_id = None
providedPic = validateUserPicture('edit', 'restaurant',
file=request.files['pictureFile'],
link=request.form['pictureLink'], maxlength=300)
if providedPic is not None:
# delete the old pic if it was an upload and new is a link
# or save the new pic if it was an upload
if (providedPic['serve_type'] == 'link' and
oldPicture.serve_type == 'upload'):
path = app.config['UPLOAD_FOLDER']+'/'+oldPicture.text
os.remove(path)
flash("deleted old uploaded pic")
elif providedPic['serve_type'] == 'upload':
picfilename = 'restaurant' + str(restaurant_id)
request.files['pictureFile'].save(os.path.\
join(app.config['UPLOAD_FOLDER'], picfilename))
providedPic['text'] = picfilename
# edit the pic
DataManager.editPicture(restaurant.picture_id,
newText=providedPic['text'],
newServe_Type=providedPic['serve_type'])
flash("updated base menu item picture")
# we edited the pic directly, no need to include here
DataManager.editRestaurant(restaurant.id,
newName=newName, newCuisine_id=newCuisine_id)
restaurant = DataManager.getRestaurant(restaurant_id)
if newName is not None:
flash("changed " + restaurant.name + "'s (ID " + \
str(restaurant.id) + ") name from '" + oldName + \
"' to '" + newName + "'")
if newCuisine_id is not None:
flash("changed " + restaurant.name + "'s (ID " + \
str(restaurant.id) + ") cuisine")
return redirect(url_for('restaurant',
restaurant_id=restaurant_id))
else:
return render_template('EditRestaurant.html',
restaurant=restaurant,
cuisines=cuisines,
hiddenToken=login_session['state'],
picture=picture,
client_login_session=client_login_session)
def addRestaurant():
'''Serve form to add a restaurant
'''
client_login_session = getClientLoginSession()
cuisines = DataManager.getCuisines()
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
validCuisineIDs = {}
for cuisine in cuisines:
validCuisineIDs[str(cuisine.id)] = True
cuisine_id = validateUserInput(request.form['cuisineID'],
'cuisine_id', 'create', 'restaurant',
columnNameForMsg='cuisine', required=True,
validInputs=validCuisineIDs)
if cuisine_id is None:
return redirect(url_for('restaurants'))
name = validateUserInput(request.form['name'], 'name', 'create',
'restaurant', maxlength=100, required=True)
if name is None:
return redirect(url_for('restaurants'))
providedPic = validateUserPicture('create', 'restaurant',
file=request.files['pictureFile'],
link=request.form['pictureLink'],
maxlength=300, required=True)
if providedPic is None:
return redirect(url_for('restaurants'))
picture_id = DataManager.addPicture(text=providedPic['text'],
serve_type=providedPic['serve_type'])
restaurant_id = DataManager.addRestaurant(
name=name,
cuisine_id=cuisine_id,
user_id=login_session['user_id'],
picture_id=picture_id
)
# if pic was uploaded, now that we know item id,
# save actual file for serving and set the name in the database
if providedPic['serve_type'] == 'upload':
picfilename = 'restaurant' + str(restaurant_id)
request.files['pictureFile'].save(os.path.\
join(app.config['UPLOAD_FOLDER'], picfilename))
DataManager.editPicture(picture_id=picture_id,
newText=picfilename)
DataManager.populateMenuWithBaseItems(restaurant_id)
flash("restaurant '" + name + "' added to the database!")
return redirect(url_for('restaurants'))
else:
return render_template('AddRestaurant.html',
cuisines=cuisines,
hiddenToken=login_session['state'],
client_login_session=client_login_session)
def addRestaurantMenuItem(restaurant_id):
'''Serve form to add a restaurant menu item to a restaurant's menu
'''
restaurant = DataManager.getRestaurant(restaurant_id)
if restaurant.user_id != login_session['user_id']:
flash("You do not have permission to add an item to "+\
" this restaurant's menu")
return redirect(url_for('restaurantMenu',
restaurant_id=restaurant.id))
client_login_session = getClientLoginSession()
baseMenuItems = DataManager.getBaseMenuItems()
for item in baseMenuItems:
pic = DataManager.getPicture(item.picture_id)
item.picText = pic.text
item.picServeType = pic.serve_type
menuSections = DataManager.getMenuSections()
# display nicely
for item in baseMenuItems:
item.price = Decimal(item.price).quantize(Decimal('0.01'))
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
validBaseMenuItemIDs = {}
for item in baseMenuItems:
validBaseMenuItemIDs[str(item.id)] = True
baseMenuItem_id = validateUserInput(request.form['baseMenuItemID'],
'baseMenuItem_id', 'create', 'restaurant menu item',
columnNameForMsg='base menu item',
validInputs=validBaseMenuItemIDs, required=True)
if baseMenuItem_id is None:
return redirect(url_for('restaurantMenu',
restaurant_id=restaurant_id))
baseMenuItem = DataManager.\
getBaseMenuItem(baseMenuItem_id=baseMenuItem_id)
# if a field is provided, use it, else use the base menu item's attr
if request.form['name']:
name = validateUserInput(request.form['name'], 'name', 'create',
'restaurant menu item', maxlength=80, required=True)
if name is None:
return redirect(url_for('restaurantMenu',
restaurant_id=restaurant_id))
else:
name = baseMenuItem.name
if request.form['description']:
description = validateUserInput(request.form['description'],
'description', 'create', 'restaurant menu item',
maxlength=250, required=True)
if description is None:
return redirect(url_for('restaurantMenu',
restaurant_id=restaurant_id))
else:
description = baseMenuItem.description
if request.form['price']:
price = validateUserInput(request.form['price'], 'price',
'create', 'restaurant menu item', maxlength=20,
required=True, priceFormat=True)
if price is None:
return redirect(url_for('restaurantMenu',
restaurant_id=restaurant_id))
else:
price = baseMenuItem.price
if request.files['pictureFile'] or request.form['pictureLink']:
providedPic = validateUserPicture('create', 'restaurant menu item',
file=request.files['pictureFile'],
link=request.form['pictureLink'],
maxlength=300, required=True)
if providedPic is None:
return redirect(url_for('restaurantMenu',
restaurant_id=restaurant_id))
else:
picture_id = DataManager.\
addPicture(text=providedPic['text'],
serve_type=providedPic['serve_type'])
else:
picture_id = baseMenuItem.picture_id
validMenuSectionIDs = {}
for menuSection in menuSections:
validMenuSectionIDs[str(menuSection.id)] = True
# if this is somehow None,
# the add function defaults to base item's attr
menuSection_id = validateUserInput(request.form['menuSectionID'],
'menuSection_id', 'create', 'restaurant menu item',
columnNameForMsg='menu section',
validInputs=validMenuSectionIDs, required=True)
restaurantMenuItem_id = DataManager.\
addRestaurantMenuItem(name=name, restaurant_id=restaurant_id,
description=description, price=price,
baseMenuItem_id=baseMenuItem_id, picture_id=picture_id,
menuSection_id=menuSection_id)
# if pic was uploaded, now that we know item id,
# save actual file for serving and set the name in the database
if (request.files['pictureFile'] and
providedPic['serve_type'] == 'upload'):
picfilename = 'restaurantMenuItem' + str(restaurantMenuItem_id)
request.files['pictureFile'].save(os.path.\
join(app.config['UPLOAD_FOLDER'], picfilename))
DataManager.editPicture(picture_id=picture_id,
newText=picfilename)
flash("menu item '" + name + "' added to the menu!")
return redirect(url_for('restaurantMenu',
restaurant_id=restaurant_id))
else:
return render_template('AddRestaurantMenuItem.html',
restaurant=restaurant,
baseMenuItems=baseMenuItems,
menuSections=menuSections,
hiddenToken=login_session['state'],
client_login_session=client_login_session)
def editRestaurant(restaurant_id):
'''Serve form to add a restaurant menu item to a restaurant's menu
'''
restaurant = DataManager.getRestaurant(restaurant_id)
if restaurant.user_id != login_session['user_id']:
flash("You do not have permission to edit this restaurant")
return redirect(url_for('restaurant', restaurant_id=restaurant.id))
client_login_session = getClientLoginSession()
restaurant = DataManager.getRestaurant(restaurant_id)
cuisines = DataManager.getCuisines()
picture = DataManager.getPicture(restaurant.picture_id)
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
oldName = restaurant.name
oldCuisine = DataManager.\
getCuisine(cuisine_id=restaurant.cuisine_id)
oldPicture = DataManager.getPicture(restaurant.picture_id)
newName = validateUserInput(request.form['name'],
'name',
'edit',
'restaurant',
maxlength=100)
validCuisineIDs = {}
for cuisine in cuisines:
validCuisineIDs[str(cuisine.id)] = True
# for 'do not change'
validCuisineIDs['-2'] = True
newCuisine_id = validateUserInput(request.form['cuisineID'],
'cuisine_id',
'edit',
'restaurant',
columnNameForMsg='cuisine',
oldInput=str(oldCuisine.id),
validInputs=validCuisineIDs)
if newCuisine_id == '-2':
newCuisine_id = None
providedPic = validateUserPicture('edit',
'restaurant',
file=request.files['pictureFile'],
link=request.form['pictureLink'],
maxlength=300)
if providedPic is not None:
# delete the old pic if it was an upload and new is a link
# or save the new pic if it was an upload
if (providedPic['serve_type'] == 'link'
and oldPicture.serve_type == 'upload'):
path = app.config['UPLOAD_FOLDER'] + '/' + oldPicture.text
os.remove(path)
flash("deleted old uploaded pic")
elif providedPic['serve_type'] == 'upload':
picfilename = 'restaurant' + str(restaurant_id)
request.files['pictureFile'].save(os.path.\
join(app.config['UPLOAD_FOLDER'], picfilename))
providedPic['text'] = picfilename
# edit the pic
DataManager.editPicture(restaurant.picture_id,
newText=providedPic['text'],
newServe_Type=providedPic['serve_type'])
flash("updated base menu item picture")
# we edited the pic directly, no need to include here
DataManager.editRestaurant(restaurant.id,
newName=newName,
newCuisine_id=newCuisine_id)
restaurant = DataManager.getRestaurant(restaurant_id)
if newName is not None:
flash("changed " + restaurant.name + "'s (ID " + \
str(restaurant.id) + ") name from '" + oldName + \
"' to '" + newName + "'")
if newCuisine_id is not None:
flash("changed " + restaurant.name + "'s (ID " + \
str(restaurant.id) + ") cuisine")
return redirect(url_for('restaurant', restaurant_id=restaurant_id))
else:
return render_template('EditRestaurant.html',
restaurant=restaurant,
cuisines=cuisines,
hiddenToken=login_session['state'],
picture=picture,
client_login_session=client_login_session)
def editUser(user_id):
'''Serve a form to edit a user
'''
user = DataManager.getUser(user_id)
if user.id != login_session['user_id']:
flash("You do not have permission to edit this profile")
return redirect(url_for('user', user_id=user.id))
client_login_session = getClientLoginSession()
picture = DataManager.getPicture(user.picture_id)
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
oldName = user.name
oldPicture = picture
newName = validateUserInput(request.form['name'], 'name',
'edit', 'user', maxlength=30, oldInput=oldName,
usernameFormat=True)
providedPic = validateUserPicture('edit', 'user',
file=request.files['pictureFile'],
link=request.form['pictureLink'], maxlength=300)
if providedPic is not None:
# delete the old pic if it was an upload and new is a link
# or save the new pic if it was an upload
if (providedPic['serve_type'] == 'link' and
oldPicture.serve_type == 'upload'):
path = app.config['UPLOAD_FOLDER']+'/'+oldPicture.text
os.remove(path)
flash("deleted old uploaded pic")
elif providedPic['serve_type'] == 'upload':
picfilename = 'user' + str(user_id)
request.files['pictureFile'].save(os.path.\
join(app.config['UPLOAD_FOLDER'], picfilename))
providedPic['text'] = picfilename
# edit the pic
DataManager.editPicture(user.picture_id,
newText=providedPic['text'],
newServe_Type=providedPic['serve_type'])
picture = DataManager.getPicture(user.picture_id)
login_session['picture'] = picture.text
login_session['picture_serve_type'] = picture.serve_type
flash("updated your picture!")
# we edited the pic directly, no need to include here
DataManager.editUser(user.id, newName=newName)
if newName is not None:
login_session['username'] = newName
flash("changed your username from '" + oldName +\
"' to '"+newName+"'")
return redirect(url_for('user', user_id=user.id))
else:
return render_template('EditUser.html',
user=user,
picture=picture,
hiddenToken=login_session['state'],
client_login_session=client_login_session)
def user(user_id):
'''Serve a user's profile
'''
client_login_session = getClientLoginSession()
user = DataManager.getUser(user_id=user_id)
picture = DataManager.getPicture(user.picture_id)
userThings = DataManager.getUserThings(user.id)
# calculate some stats to show
loggedInStats = {}
numRestaurants = 0
mostExpensiveRest = None
mostExpensiveRestAvgPrice = None
leastExpensiveRest = None
leastExpensiveRestAvgPrice = None
numMenuItems = 0
mostExpensiveMenuItem = None
leastExpensiveMenuItem = None
for restaurantID in userThings:
numRestaurants = numRestaurants + 1
numItemsThisRestaurant = 0
totalRestaurantPrices = 0
thisRestaurantAvgItemPrice = None
for menuSectionName in userThings[restaurantID]['items']:
for item in userThings[restaurantID]['items'][menuSectionName]:
item.price = Decimal(item.price).\
quantize(Decimal('0.01'))
numMenuItems = numMenuItems + 1
numItemsThisRestaurant = numItemsThisRestaurant + 1
if mostExpensiveMenuItem is None:
mostExpensiveMenuItem = item
elif item.price > mostExpensiveMenuItem.price:
mostExpensiveMenuItem = item
elif (leastExpensiveMenuItem is None and
numMenuItems > 1):
leastExpensiveMenuItem = item
elif (item.price < leastExpensiveMenuItem.price and
numMenuItems > 1):
leastExpensiveMenuItem = item
totalRestaurantPrices = totalRestaurantPrices + item.price
if numItemsThisRestaurant > 0:
thisRestaurantAvgItemPrice = \
totalRestaurantPrices/numItemsThisRestaurant
else:
thisRestaurantAvgItemPrice = None
if (mostExpensiveRest is None and
numItemsThisRestaurant > 0):
mostExpensiveRest = \
userThings[restaurantID]['restaurant']
mostExpensiveRestAvgPrice = thisRestaurantAvgItemPrice
elif thisRestaurantAvgItemPrice > mostExpensiveRestAvgPrice:
mostExpensiveRest = \
userThings[restaurantID]['restaurant']
mostExpensiveRestAvgPrice = thisRestaurantAvgItemPrice
elif (leastExpensiveRest is None and
numRestaurants > 1 and
numItemsThisRestaurant > 0):
leastExpensiveRest = \
userThings[restaurantID]['restaurant']
leastExpensiveRestAvgPrice = thisRestaurantAvgItemPrice
elif (thisRestaurantAvgItemPrice < \
leastExpensiveRestAvgPrice and
numRestaurants > 1):
leastExpensiveRest = \
userThings[restaurantID]['restaurant']
leastExpensiveRestAvgPrice = thisRestaurantAvgItemPrice
if mostExpensiveRestAvgPrice:
mostExpensiveRestAvgPrice = \
Decimal(mostExpensiveRestAvgPrice).\
quantize(Decimal('0.01'))
if leastExpensiveRestAvgPrice:
leastExpensiveRestAvgPrice = \
Decimal(leastExpensiveRestAvgPrice).\
quantize(Decimal('0.01'))
if (isLoggedIn() and
login_session['user_id'] == user.id):
# could put stats in a loginStats dictionary
return render_template('PrivateUserProfile.html',
user=user, picture=picture, userThings=userThings,
numRestaurants=numRestaurants, numMenuItems=numMenuItems,
mostExpensiveRest=mostExpensiveRest,
mostExpensiveRestAvgPrice=mostExpensiveRestAvgPrice,
leastExpensiveRest=leastExpensiveRest,
leastExpensiveRestAvgPrice=leastExpensiveRestAvgPrice,
mostExpensiveMenuItem=mostExpensiveMenuItem,
leastExpensiveMenuItem=leastExpensiveMenuItem,
client_login_session=client_login_session)
else:
return render_template('PublicUserProfile.html',
user=user, picture=picture, userThings=userThings,
numRestaurants=numRestaurants, numMenuItems=numMenuItems,
client_login_session=client_login_session)
def cuisine(cuisine_id):
'''Serve cuisine info page
'''
cuisine = DataManager.getCuisine(cuisine_id=cuisine_id)
restaurants = DataManager.\
getRestaurants(cuisine_id=cuisine_id)
baseMenuItems = DataManager.\
getBaseMenuItems(cuisine_id=cuisine_id)
restaurantMenuItems = DataManager.\
getRestaurantMenuItems(cuisine_id=cuisine_id)
sectionedBaseMenuItems = DataManager.\
getBaseMenuItems(cuisine_id=cuisine_id,
byMenuSection=True)
client_login_session = getClientLoginSession()
# get restaurants labeled with user or non-user
restaurantDicts = {}
for restaurant in restaurants:
restaurantDict = {}
restaurantDict = {'restaurant': restaurant}
if (isLoggedIn() and
restaurant.user_id == login_session['user_id']):
restaurantDict['ownership'] = 'user'
else:
restaurantDict['ownership'] = 'non-user'
restaurantDicts[restaurant.id] = restaurantDict
# get the base items with their children
# in format that plays nice with jinja
# and labels things user or non-user
# and also calculate some data about the items
mostExpensiveBaseMenuItem = DataManager.\
getBaseMenuItem(baseMenuItem_id=-1)
mostExpensiveRestaurantMenuItem = DataManager.\
getBaseMenuItem(baseMenuItem_id=-1)
sectionedBaseItemsWithChildren = {}
for section, baseItemList in sectionedBaseMenuItems.iteritems():
sectionedBaseItemsWithChildren[section] = {}
for baseItem in baseItemList:
baseItemID = baseItem.id
if baseItem.price > mostExpensiveBaseMenuItem.price:
mostExpensiveBaseMenuItem = baseItem
childrenItems = DataManager.\
getRestaurantMenuItems(baseMenuItem_id=baseItem.id)
children = {}
for item in childrenItems:
if item.price > mostExpensiveRestaurantMenuItem.price:
mostExpensiveRestaurantMenuItem = item
itemRestaurant = DataManager.\
getRestaurant(item.restaurant_id)
itemUserID = itemRestaurant.user_id
child = {}
child['item'] = item
if (isLoggedIn() and
itemUserID == login_session['user_id']):
child['ownership'] = 'user'
else:
child['ownership'] = 'non-user'
children[item.id] = child
itemWithChildren = {'item':baseItem, 'children':children}
sectionedBaseItemsWithChildren[section][baseItem.id] = \
itemWithChildren
# this means there were no items, so display N/A
if mostExpensiveRestaurantMenuItem.id == -1:
mostExpensiveRestaurantMenuItem.name = "N/A"
mostExpensiveRestaurantMenuItem.price = "N/A"
mostExpensiveRestaurantMenuItem.restaurant_id = "N/A"
else:
# display nicely
mostExpensiveRestaurantMenuItem.price = \
Decimal(mostExpensiveRestaurantMenuItem.price).\
quantize(Decimal('0.01'))
if mostExpensiveBaseMenuItem.id == -1:
mostExpensiveBaseMenuItem.name = "N/A"
mostExpensiveBaseMenuItem.price = "N/A"
else:
mostExpensiveBaseMenuItem.price = \
Decimal(mostExpensiveBaseMenuItem.price).\
quantize(Decimal('0.01'))
return render_template("Cuisine.html",
cuisine=cuisine,
mostExpensiveBaseMenuItem=mostExpensiveBaseMenuItem,
mostExpensiveRestaurantMenuItem=mostExpensiveRestaurantMenuItem,
restaurantDicts=restaurantDicts,
sectionedBaseItemsWithChildren=sectionedBaseItemsWithChildren,
client_login_session=client_login_session)
def editBaseMenuItem(cuisine_id, baseMenuItem_id):
'''Serve form to edit a base menu item
'''
client_login_session = getClientLoginSession()
baseMenuItem = DataManager.\
getBaseMenuItem(baseMenuItem_id=baseMenuItem_id)
cuisine = DataManager.getCuisine(cuisine_id=cuisine_id)
baseMenuItem.price = Decimal(baseMenuItem.price).quantize(Decimal('0.01'))
picture = DataManager.getPicture(baseMenuItem.picture_id)
menuSections = DataManager.getMenuSections()
if request.method == 'POST':
if isCSRFAttack(request.form['hiddenToken']):
return redirect(url_for('restaurantManagerIndex'))
oldName = baseMenuItem.name
oldDescription = baseMenuItem.description
oldPrice = baseMenuItem.price
oldPicture = picture
oldMenuSection_id = baseMenuItem.menuSection_id
newName = validateUserInput(request.form['name'], 'name',
'edit', 'base menu item', maxlength=80,
unique=True, oldInput=oldName)
newDescription = validateUserInput(request.form['description'],
'description', 'edit', 'base menu item', maxlength=250,
oldInput=oldDescription)
newPrice = validateUserInput(request.form['price'], 'price',
'edit', 'base menu item', maxlength=20,
priceFormat=True, oldInput=str(oldPrice))
validMenuSectionIDs = {}
for menuSection in menuSections:
validMenuSectionIDs[str(menuSection.id)] = True
# for 'do not change'
validMenuSectionIDs['-1'] = True
newMenuSection_id = validateUserInput(request.form['menuSection'],
'menuSection_id', 'edit', 'base menu item',
columnNameForMsg='menu section',
oldInput=str(oldMenuSection_id),
validInputs=validMenuSectionIDs)
if newMenuSection_id == '-1':
newMenuSection_id = None
providedPic = validateUserPicture('edit', 'base menu item',
file=request.files['pictureFile'],
link=request.form['pictureLink'], maxlength=300)
if providedPic is not None:
# delete the old pic if it was an upload and new is a link
# or save the new pic if it was an upload
if (providedPic['serve_type'] == 'link' and
oldPicture.serve_type == 'upload'):
path = app.config['UPLOAD_FOLDER']+'/'+oldPicture.text
os.remove(path)
flash("deleted old uploaded pic")
elif providedPic['serve_type'] == 'upload':
picfilename = 'baseMenuItem' + str(baseMenuItem_id)
request.files['pictureFile'].save(os.path.\
join(app.config['UPLOAD_FOLDER'], picfilename))
providedPic['text'] = picfilename
# edit the pic
DataManager.editPicture(baseMenuItem.picture_id,
newText=providedPic['text'],
newServe_Type=providedPic['serve_type'])
flash("updated base menu item picture")
# we edited the pic directly, no need to include here
DataManager.editBaseMenuItem(baseMenuItem.id,
newName=newName, newDescription=newDescription,
newPrice=newPrice, newMenuSection_id=newMenuSection_id)
if newName is not None:
flash("changed name from '"+oldName+"' to '"+newName+"'")
if newDescription is not None:
flash("changed description from '"+ oldDescription + "' to '" + \
newDescription + "'")
if newPrice is not None:
flash("changed price from '" + str(oldPrice) + "' to '" + \
str(newPrice) + "'")
if newMenuSection_id is not None:
flash("changed menu section")
return redirect(url_for('baseMenuItem',
cuisine_id=cuisine_id,
baseMenuItem_id=baseMenuItem_id))
else:
return render_template("EditBaseMenuItem.html",
baseMenuItem=baseMenuItem,
cuisine=cuisine,
hiddenToken=login_session['state'],
picture=picture,
menuSections=menuSections,
client_login_session=client_login_session)
