예제 #1
0
def register():
    if request.method == 'POST':
        username = request.form['username']
        password = request.form['password']
        db = get_db()
        error = None

        if not username:
            error = 'Username is required.'
        elif not password:
            error = 'Password is required.'
        elif db.execute(
                'SELECT id FROM user WHERE username = ?', (username,)
                ).fetchone() is not None:
            error = 'User {} is already registered.'.format(username)

        if error is None:
            db.execute(
                'INSERT INTO user (username, password) VALUES (?, ?)',
                (username, generate_password_hash(password))
            )
            db.commit()
            return redirect(url_for('auth.login'))

        flash(error)
    return render_template('auth/register.html')
예제 #2
0
def index():
    db = get_db()
    stories = db.execute(
        'SELECT s.id, title, facts, analysis, created, news_date, '
        ' author_id, username'
        ' FROM story s JOIN user u ON s.author_id = u.id'
        ' ORDER BY created DESC').fetchall()
    return render_template('news/index.html', stories=stories)
예제 #3
0
def load_logged_in_user():
    user_id = session.get('user_id')

    if user_id is None:
        g.user = None
    else:
        g.user = get_db().execute(
                'SELECT * FROM user WHERE id = ?', (user_id,)
                ).fetchone()
예제 #4
0
def get_story(id, check_author=True):
    story = get_db().execute(
        'SELECT s.id, title, facts, analysis, news_date,'
        ' created, author_id, username'
        ' FROM story s JOIN user u ON s.author_id = u.id'
        ' WHERE s.id = ?', (id, )).fetchone()

    if story is None:
        abort(404, "Post if {0} doesn't exist.".format(id))

    if check_author and story['author_id'] != g.user['id']:
        abort(403)

    return story
예제 #5
0
def login():
    if request.method == 'POST':
        username = request.form['username']
        password = request.form['password']
        db = get_db()
        error = None
        user = db.execute(
                'SELECT * FROM user WHERE username = ?', (username,)
                ).fetchone()

        if user is None:
            error = 'Incorrect username.'
        elif not check_password_hash(user['password'], password):
            error = 'Incorrect password.'

        if error is None:
            session.clear()
            session['user_id'] = user['id']
            return redirect(url_for('index'))

        flash(error)

    return render_template('auth/login.html')
예제 #6
0
def create():
    if request.method == 'POST':
        title = request.form['title']
        facts = request.form['facts']
        analysis = request.form['analysis']
        news_date = request.form['news_date']
        error = None

        if not title:
            error = 'Title is required.'
        if error is not None:
            flash(error)
        else:
            db = get_db()
            db.execute(
                'INSERT INTO story (title, facts, analysis, '
                ' news_date, author_id)'
                ' VALUES (?, ?, ?, ?, ?)',
                (title, facts, analysis, news_date, g.user['id']))
            db.commit()
            return redirect(url_for('news.index'))

    return render_template('news/create.html')
예제 #7
0
def update(id):
    story = get_story(id)

    if request.method == 'POST':
        title = request.form['title']
        facts = request.form['facts']
        analysis = request.form['analysis']
        news_date = request.form['news_date']
        error = None

        if not title:
            error = 'Title is required.'

        if error is not None:
            flash(error)
        else:
            db = get_db()
            db.execute(
                'UPDATE story SET title = ?, facts = ?, analysis = ?,'
                ' news_date = ?'
                ' WHERE id = ?', (title, facts, analysis, news_date, id))
            db.commit()
            return redirect(url_for('news.index'))
    return render_template('news/update.html', story=story)
예제 #8
0
def delete(id):
    get_story(id)
    db = get_db()
    db.execute('DELETE FROM story WHERE id = ?', (id, ))
    db.commit()
    return redirect(url_for('news.index'))