412 lines
16 KiB
Python
412 lines
16 KiB
Python
from flask import Flask, request, flash, url_for, redirect, render_template
|
|
from flask_sqlalchemy import SQLAlchemy
|
|
from flask import *
|
|
import sqlite3, hashlib, os
|
|
from werkzeug.utils import secure_filename
|
|
|
|
app = Flask(__name__)
|
|
app.secret_key = 'random string'
|
|
UPLOAD_FOLDER = 'static/uploads'
|
|
ALLOWED_EXTENSIONS = set(['jpeg', 'jpg', 'png', 'gif'])
|
|
app.config['UPLOAD_FOLDER'] = UPLOAD_FOLDER
|
|
app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///C:\\Users\\Sławek\\Scripts\\Flask\\pracownia programowania1.1\\database.db'
|
|
app.config['SECRET_KEY'] = "random string"
|
|
|
|
db = SQLAlchemy(app)
|
|
|
|
class komentarze(db.Model):
|
|
nick = db.Column(db.String(100), primary_key = True)
|
|
produkt = db.Column(db.String(50))
|
|
koment = db.Column(db.String(200))
|
|
|
|
def __init__(self, nick, produkt, koment):
|
|
self.nick = nick
|
|
self.produkt = produkt
|
|
self.koment = koment
|
|
|
|
|
|
def getLoginDetails():
|
|
with sqlite3.connect('database.db') as conn:
|
|
cur = conn.cursor()
|
|
if 'email' not in session:
|
|
loggedIn = False
|
|
firstName = ''
|
|
noOfItems = 0
|
|
else:
|
|
loggedIn = True
|
|
cur.execute("SELECT userId, firstName FROM users WHERE email = ?", (session['email'], ))
|
|
userId, firstName = cur.fetchone()
|
|
cur.execute("SELECT count(productId) FROM kart WHERE userId = ?", (userId, ))
|
|
noOfItems = cur.fetchone()[0]
|
|
conn.close()
|
|
return (loggedIn, firstName, noOfItems)
|
|
|
|
@app.route("/")
|
|
def root():
|
|
loggedIn, firstName, noOfItems = getLoginDetails()
|
|
with sqlite3.connect('database.db') as conn:
|
|
cur = conn.cursor()
|
|
cur.execute('SELECT productId, name, price, description, image, stock FROM products')
|
|
itemData = cur.fetchall()
|
|
cur.execute('SELECT categoryId, name FROM categories')
|
|
categoryData = cur.fetchall()
|
|
itemData = parse(itemData)
|
|
return render_template('home.html', itemData=itemData, loggedIn=loggedIn, firstName=firstName, noOfItems=noOfItems, categoryData=categoryData)
|
|
|
|
@app.route("/add")
|
|
def admin():
|
|
with sqlite3.connect('database.db') as conn:
|
|
cur = conn.cursor()
|
|
cur.execute("SELECT categoryId, name FROM categories")
|
|
categories = cur.fetchall()
|
|
conn.close()
|
|
return render_template('add.html', categories=categories)
|
|
|
|
@app.route("/addItem", methods=["GET", "POST"])
|
|
def addItem():
|
|
if request.method == "POST":
|
|
name = request.form['name']
|
|
price = float(request.form['price'])
|
|
description = request.form['description']
|
|
stock = int(request.form['stock'])
|
|
categoryId = int(request.form['category'])
|
|
|
|
#Uploading image procedure
|
|
image = request.files['image']
|
|
if image and allowed_file(image.filename):
|
|
filename = secure_filename(image.filename)
|
|
image.save(os.path.join(app.config['UPLOAD_FOLDER'], filename))
|
|
imagename = filename
|
|
with sqlite3.connect('database.db') as conn:
|
|
try:
|
|
cur = conn.cursor()
|
|
cur.execute('''INSERT INTO products (name, price, description, image, stock, categoryId) VALUES (?, ?, ?, ?, ?, ?)''', (name, price, description, imagename, stock, categoryId))
|
|
conn.commit()
|
|
msg="added successfully"
|
|
except:
|
|
msg="error occured"
|
|
conn.rollback()
|
|
conn.close()
|
|
print(msg)
|
|
return redirect(url_for('root'))
|
|
|
|
@app.route("/delete")
|
|
def delete():
|
|
with sqlite3.connect('database.db') as conn:
|
|
cur = conn.cursor()
|
|
cur.execute('SELECT productId, name, price, description, image, stock FROM products')
|
|
data = cur.fetchall()
|
|
conn.close()
|
|
return render_template('delete.html', data=data)
|
|
|
|
@app.route("/deleteItem")
|
|
def deleteItem():
|
|
productId = request.args.get('productId')
|
|
with sqlite3.connect('database.db') as conn:
|
|
try:
|
|
cur = conn.cursor()
|
|
cur.execute('DELETE FROM products WHERE productID = ?', (productId, ))
|
|
conn.commit()
|
|
msg = "Deleted successsfully"
|
|
except:
|
|
conn.rollback()
|
|
msg = "Error occured"
|
|
conn.close()
|
|
print(msg)
|
|
return redirect(url_for('root'))
|
|
|
|
@app.route("/update")
|
|
def update():
|
|
with sqlite3.connect('database.db') as conn:
|
|
cur = conn.cursor()
|
|
cur.execute('SELECT productId, name, price, description, image, stock FROM products')
|
|
data = cur.fetchall()
|
|
conn.close()
|
|
return render_template('update.html', data=data)
|
|
|
|
@app.route("/updateItem", methods=["GET", "POST"])
|
|
def updateItem():
|
|
if request.method == "POST":
|
|
price = float(request.form['price'])
|
|
name = request.form['name']
|
|
with sqlite3.connect('database.db') as conn:
|
|
try:
|
|
cur = conn.cursor()
|
|
cur.execute('UPDATE products SET price = ? where name = ?', (price, name, ))
|
|
conn.commit()
|
|
msg = "upload successsfully"
|
|
except:
|
|
conn.rollback()
|
|
msg = "Error occured"
|
|
conn.close()
|
|
print(msg)
|
|
return redirect(url_for('update'))
|
|
|
|
@app.route("/displayCategory")
|
|
def displayCategory():
|
|
loggedIn, firstName, noOfItems = getLoginDetails()
|
|
categoryId = request.args.get("categoryId")
|
|
with sqlite3.connect('database.db') as conn:
|
|
cur = conn.cursor()
|
|
cur.execute("SELECT products.productId, products.name, products.price, products.image, categories.name FROM products, categories WHERE products.categoryId = categories.categoryId AND categories.categoryId = ?", (categoryId, ))
|
|
data = cur.fetchall()
|
|
conn.close()
|
|
categoryName = data[0][4]
|
|
data = parse(data)
|
|
return render_template('displayCategory.html', data=data, loggedIn=loggedIn, firstName=firstName, noOfItems=noOfItems, categoryName=categoryName)
|
|
|
|
@app.route("/account/profile")
|
|
def profileHome():
|
|
if 'email' not in session:
|
|
return redirect(url_for('root'))
|
|
loggedIn, firstName, noOfItems = getLoginDetails()
|
|
return render_template("profileHome.html", loggedIn=loggedIn, firstName=firstName, noOfItems=noOfItems)
|
|
|
|
@app.route("/account/profile/edit")
|
|
def editProfile():
|
|
if 'email' not in session:
|
|
return redirect(url_for('root'))
|
|
loggedIn, firstName, noOfItems = getLoginDetails()
|
|
with sqlite3.connect('database.db') as conn:
|
|
cur = conn.cursor()
|
|
cur.execute("SELECT userId, email, firstName, lastName, address1, address2, zipcode, city, state, country, phone FROM users WHERE email = ?", (session['email'], ))
|
|
profileData = cur.fetchone()
|
|
conn.close()
|
|
return render_template("editProfile.html", profileData=profileData, loggedIn=loggedIn, firstName=firstName, noOfItems=noOfItems)
|
|
|
|
@app.route("/account/profile/changePassword", methods=["GET", "POST"])
|
|
def changePassword():
|
|
if 'email' not in session:
|
|
return redirect(url_for('loginForm'))
|
|
if request.method == "POST":
|
|
oldPassword = request.form['oldpassword']
|
|
oldPassword = hashlib.md5(oldPassword.encode()).hexdigest()
|
|
newPassword = request.form['newpassword']
|
|
newPassword = hashlib.md5(newPassword.encode()).hexdigest()
|
|
with sqlite3.connect('database.db') as conn:
|
|
cur = conn.cursor()
|
|
cur.execute("SELECT userId, password FROM users WHERE email = ?", (session['email'], ))
|
|
userId, password = cur.fetchone()
|
|
if (password == oldPassword):
|
|
try:
|
|
cur.execute("UPDATE users SET password = ? WHERE userId = ?", (newPassword, userId))
|
|
conn.commit()
|
|
msg="Changed successfully"
|
|
except:
|
|
conn.rollback()
|
|
msg = "Failed"
|
|
return render_template("changePassword.html", msg=msg)
|
|
else:
|
|
msg = "Wrong password"
|
|
conn.close()
|
|
return render_template("changePassword.html", msg=msg)
|
|
else:
|
|
return render_template("changePassword.html")
|
|
|
|
@app.route("/updateProfile", methods=["GET", "POST"])
|
|
def updateProfile():
|
|
if request.method == 'POST':
|
|
email = request.form['email']
|
|
firstName = request.form['firstName']
|
|
lastName = request.form['lastName']
|
|
address1 = request.form['address1']
|
|
address2 = request.form['address2']
|
|
zipcode = request.form['zipcode']
|
|
city = request.form['city']
|
|
state = request.form['state']
|
|
country = request.form['country']
|
|
phone = request.form['phone']
|
|
with sqlite3.connect('database.db') as con:
|
|
try:
|
|
cur = con.cursor()
|
|
cur.execute('UPDATE users SET firstName = ?, lastName = ?, address1 = ?, address2 = ?, zipcode = ?, city = ?, state = ?, country = ?, phone = ? WHERE email = ?', (firstName, lastName, address1, address2, zipcode, city, state, country, phone, email))
|
|
|
|
con.commit()
|
|
msg = "Saved Successfully"
|
|
except:
|
|
con.rollback()
|
|
msg = "Error occured"
|
|
con.close()
|
|
return redirect(url_for('editProfile'))
|
|
|
|
@app.route("/loginForm")
|
|
def loginForm():
|
|
if 'email' in session:
|
|
return redirect(url_for('root'))
|
|
else:
|
|
return render_template('login.html', error='')
|
|
|
|
@app.route("/login", methods = ['POST', 'GET'])
|
|
def login():
|
|
if request.method == 'POST':
|
|
email = request.form['email']
|
|
password = request.form['password']
|
|
if is_valid(email, password):
|
|
session['email'] = email
|
|
return redirect(url_for('root'))
|
|
else:
|
|
error = 'Invalid UserId / Password'
|
|
return render_template('login.html', error=error)
|
|
|
|
@app.route("/productDescription")
|
|
def productDescription():
|
|
loggedIn, firstName, noOfItems = getLoginDetails()
|
|
productId = request.args.get('productId')
|
|
with sqlite3.connect('database.db') as conn:
|
|
cur = conn.cursor()
|
|
cur.execute('SELECT productId, name, price, description, image, stock FROM products WHERE productId = ?', (productId, ))
|
|
productData = cur.fetchone()
|
|
conn.close()
|
|
return render_template("productDescription.html", data=productData, loggedIn = loggedIn, firstName = firstName, noOfItems = noOfItems)
|
|
|
|
@app.route("/addTokoszyk")
|
|
def addTokoszyk():
|
|
if 'email' not in session:
|
|
return redirect(url_for('loginForm'))
|
|
else:
|
|
productId = int(request.args.get('productId'))
|
|
with sqlite3.connect('database.db') as conn:
|
|
cur = conn.cursor()
|
|
cur.execute("SELECT userId FROM users WHERE email = ?", (session['email'], ))
|
|
userId = cur.fetchone()[0]
|
|
try:
|
|
cur.execute("INSERT INTO kart (userId, productId) VALUES (?, ?)", (userId, productId))
|
|
conn.commit()
|
|
msg = "Added successfully"
|
|
except:
|
|
conn.rollback()
|
|
msg = "Error occured"
|
|
conn.close()
|
|
return redirect(url_for('root'))
|
|
|
|
@app.route("/koszyk")
|
|
def koszyk():
|
|
if 'email' not in session:
|
|
return redirect(url_for('loginForm'))
|
|
loggedIn, firstName, noOfItems = getLoginDetails()
|
|
email = session['email']
|
|
with sqlite3.connect('database.db') as conn:
|
|
cur = conn.cursor()
|
|
cur.execute("SELECT userId FROM users WHERE email = ?", (email, ))
|
|
userId = cur.fetchone()[0]
|
|
cur.execute("SELECT products.productId, products.name, products.price, products.image FROM products, kart WHERE products.productId = kart.productId AND kart.userId = ?", (userId, ))
|
|
products = cur.fetchall()
|
|
totalPrice = 0
|
|
for row in products:
|
|
totalPrice += row[2]
|
|
return render_template("koszyk.html", products = products, totalPrice=totalPrice, loggedIn=loggedIn, firstName=firstName, noOfItems=noOfItems)
|
|
|
|
@app.route("/removeFromkoszyk")
|
|
def removeFromkoszyk():
|
|
if 'email' not in session:
|
|
return redirect(url_for('loginForm'))
|
|
email = session['email']
|
|
productId = int(request.args.get('productId'))
|
|
with sqlite3.connect('database.db') as conn:
|
|
cur = conn.cursor()
|
|
cur.execute("SELECT userId FROM users WHERE email = ?", (email, ))
|
|
userId = cur.fetchone()[0]
|
|
try:
|
|
cur.execute("DELETE FROM kart WHERE userId = ? AND productId = ?", (userId, productId))
|
|
conn.commit()
|
|
msg = "removed successfully"
|
|
except:
|
|
conn.rollback()
|
|
msg = "error occured"
|
|
conn.close()
|
|
return redirect(url_for('root'))
|
|
|
|
@app.route("/logout")
|
|
def logout():
|
|
session.pop('email', None)
|
|
return redirect(url_for('root'))
|
|
|
|
def is_valid(email, password):
|
|
con = sqlite3.connect('database.db')
|
|
cur = con.cursor()
|
|
cur.execute('SELECT email, password FROM users')
|
|
data = cur.fetchall()
|
|
for row in data:
|
|
if row[0] == email and row[1] == hashlib.md5(password.encode()).hexdigest():
|
|
return True
|
|
return False
|
|
|
|
@app.route("/register", methods = ['GET', 'POST'])
|
|
def register():
|
|
if request.method == 'POST':
|
|
#Parse form data
|
|
password = request.form['password']
|
|
email = request.form['email']
|
|
firstName = request.form['firstName']
|
|
lastName = request.form['lastName']
|
|
address1 = request.form['address1']
|
|
address2 = request.form['address2']
|
|
zipcode = request.form['zipcode']
|
|
city = request.form['city']
|
|
state = request.form['state']
|
|
country = request.form['country']
|
|
phone = request.form['phone']
|
|
|
|
with sqlite3.connect('database.db') as con:
|
|
try:
|
|
cur = con.cursor()
|
|
cur.execute('INSERT INTO users (password, email, firstName, lastName, address1, address2, zipcode, city, state, country, phone) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)', (hashlib.md5(password.encode()).hexdigest(), email, firstName, lastName, address1, address2, zipcode, city, state, country, phone))
|
|
|
|
con.commit()
|
|
|
|
msg = "Registered Successfully"
|
|
except:
|
|
con.rollback()
|
|
msg = "Error occured"
|
|
con.close()
|
|
return render_template("login.html", error=msg)
|
|
|
|
@app.route("/registerationForm")
|
|
def registrationForm():
|
|
return render_template("register.html")
|
|
|
|
def allowed_file(filename):
|
|
return '.' in filename and \
|
|
filename.rsplit('.', 1)[1] in ALLOWED_EXTENSIONS
|
|
|
|
def parse(data):
|
|
ans = []
|
|
i = 0
|
|
while i < len(data):
|
|
curr = []
|
|
for j in range(7):
|
|
if i >= len(data):
|
|
break
|
|
curr.append(data[i])
|
|
i += 1
|
|
ans.append(curr)
|
|
return ans
|
|
|
|
@app.route('/show')
|
|
def show():
|
|
return render_template('show.html', komentarze = komentarze.query.all() )
|
|
|
|
@app.route('/new', methods = ['GET', 'POST'])
|
|
def new():
|
|
if request.method == 'POST':
|
|
if not request.form['nick'] or not request.form['produkt'] or not request.form['koment']:
|
|
flash('Please enter all the fields', 'error')
|
|
else:
|
|
komentarz = komentarze(nick=request.form['nick'], produkt=request.form['produkt'], koment=request.form['koment'])
|
|
db.session.add(komentarz)
|
|
db.session.commit()
|
|
flash('Record was successfully added')
|
|
return redirect(url_for('show'))
|
|
return render_template('new.html')
|
|
|
|
@app.errorhandler(404)
|
|
def page_not_found(e):
|
|
return render_template("404.html")
|
|
|
|
@app.errorhandler(500)
|
|
def internal_server_error(e):
|
|
return render_template("500.html")
|
|
|
|
|
|
if __name__ == '__main__':
|
|
app.run(debug=True) |