MicroCMS.pl

#!/usr/bin/env perl

package Model;

use ORLite {
    file    => 'Micro-CMS.db',
    cleanup => 'VACUUM',
    create  => sub {
        my $dbh = shift;
        $dbh->do(
            'CREATE TABLE user 
				(email   TEXT NOT NULL UNIQUE PRIMARY KEY,
				password TEXT NOT NULL,
				token TEXT,
				role     TEXT);'
        );
        $dbh->do(
            'CREATE TABLE entries 
				(id INTEGER NOT NULL PRIMARY KEY
				ASC AUTOINCREMENT, 
				email TEXT NOT NULL, 
				content TEXT NOT NULL,
                message_format TEXT NOT NULL,
                page_title TEXT NOT NULL,
				date TEXT NOT NULL);'
        );

        $dbh->do(
            'CREATE TABLE page
                ( id INTEGER NOT NULL PRIMARY KEY ASC AUTOINCREMENT,
                title TEXT NOT NULL,
                content TEXT NOT NULL,
                user_email TEXT NOT NULL,
                created_at TEXT NOT NULL,
                can_show INTEGER NOT NULL DEFAULT 0,
                role INTEGER NOT NULL DEFAULT 0
                ); '
        );

        # insert user demo data
        $dbh->do(
            'INSERT INTO user (email, password,  token, role) 
        VALUES("admin@myproject.com","21232f297a57a5a743894a0e4a801fc3", "","3");'
        );
        $dbh->do(
            'INSERT INTO user (email, password,  token, role) 
        VALUES("bal@bal.com","ff9c63f843b11f9c3666fe46caaddea8", "","1");'
        );

        # insert page demo data
        $dbh->do('INSERT INTO page (title, content, user_email, created_at, can_show, role ) 
        VALUES("Test", "Can be a long long long text content here", "admin@myproject.com", "2017-07-30 18:20", 1, 3 );'
        );
        $dbh->do('INSERT INTO page (title, content, user_email, created_at, can_show, role ) 
        VALUES("Bal Test", "bal user can see this page", "bal@bal.com", "2017-07-30 18:20", 1, 0 );'
        );
    }
};


sub get_users {
    return Model->selectall_arrayref( 'SELECT * from user', { Slice => {} }, );
}

sub get_user {
    return Model->selectrow_hashref( 'SELECT * from user where email = ?', 
    { Slice => {} }, $_[0] );
}

sub update_user {
    my $data = shift;
    my $user = Model::get_user( $data->{email} );
    return unless $user;

    Model->do( 'UPDATE user SET password = ?,  token = ?, role = ? WHERE email = ?', 
    {}, $data->{password}, $data->{token}, $data->{role}, $data->{email} );
}

sub get_messages {
    return Model->selectall_arrayref( 'SELECT * from entries', { Slice => {} } );
}

sub get_pages {
    return Model->selectall_arrayref( 'SELECT * from page', { Slice => {} }, );
}

sub get_pages_can_show {
    my $role = shift || 0;
    my $pages = Model->selectall_arrayref( 'SELECT id, title FROM page WHERE can_show = ? and role <= ? ', undef, 1, $role );
    my @return;
    map { push @return, { id => $_->[0], title => $_->[1] } } @$pages;
    return \@return;
}

sub get_page {
    return Model->selectrow_hashref( 'SELECT * from page WHERE id = ?', { Slice => {} }, $_[0] );
}

sub update_page {
    my $data = shift;
    my $page = Model::get_page( $data->{id} );
    return unless $page;
    Model->do( 'UPDATE page SET title = ?, content = ?, user_email = ?, 
                created_at = ?, can_show = ?, role = ?  WHERE  id = ?', 
                {}, $data->{title}, $data->{content}, $data->{user_email}, $data->{created_at}, 
                $data->{can_show}, $data->{role}, $data->{id} );
}

sub create_page {
    my $data = shift;
    Model->do( 'INSERT INTO page (title, content, user_email, created_at, can_show, role ) 
    VALUES (?, ?, ?, ?, ?, ?)', {}, $data->{title}, $data->{content}, $data->{user_email}, 
    $data->{created_at}, $data->{can_show}, $data->{role} );
}

sub delete_page {
    my $id = shift;
    return unless $id;
    Model->do( 'DELETE FROM page WHERE id = ?', {}, $id );
}

package main;

use Mojolicious::Lite;
use Mojo::ByteStream 'b';
use Mojo::Date;
use Capture::Tiny 'capture_stdout';


helper do_auth_login_fail => sub {
    my ( $self, $user ) = @_;
    $self->flash( user           => $user );
    $self->flash( failed_message => 'Wrong auth codes!' );
    return $self->redirect_to('/login/auth');
};

helper do_login_success => sub {
    my ( $self, $user ) = @_;
    return 0 unless $user;
    $self->session( role  => $user->{role} );
    $self->session( email => $user->{email} );
    return 1;
};

helper auth => sub {
    my $self     = shift;
    my $email    = $self->param('email');
    my $password = b( $self->param('password') )->md5_sum;
    if ( Model::User->count( 'WHERE email=? AND password=?', $email, $password ) == 1 ) {
        my $user = Model::get_user($email);
        return unless $user;
        if ( $user->{token} && length( $user->{token} ) > 1 ) {
            $self->session( user => $user );
            $self->flash( sucess_message => 'Need Google Authenticator TBOT Abstractio' );
            $self->redirect_to('/login/auth');
            return 0;
        }
        else {
            return $self->do_login_success($user);
        }
    }
    else {
        $self->flash( failed_message => 'Wrong email or password!' );
        $self->redirect_to('/');
        return;
    }
};

helper check_token => sub {
    my $self       = shift;
    my $validation = $self->validation;
    return $self->render( text => 'Bad CSRF token!', status => 403 )
        if $validation->csrf_protect->has_error('csrf_token');
};

hook before_render => sub {
    my $self = shift;
    my $pages = Model::get_pages_can_show( $self->session('role') );
    $self->stash( nav_pages => $pages );
};

get '/' => sub {
    my $self    = shift;
    my $mesages = Model::get_messages();
    $self->stash( mesages => $mesages );
} => 'index';

get '/help' => 'help';

get '/logout' => sub {
    my $self = shift;
    $self->session( expires => 1 );
    $self->redirect_to('/');
};

get '/page/*id' => sub {
    my $self = shift;
    my $id   = $self->stash('id');
    my $page = Model::get_page($id);
    my $mesages = Model::get_messages();
    $self->stash( page => $page, mesages => $mesages );
} => 'page';

get '/login/auth'  => 'auth';

post '/login/auth' => sub {
    my $self = shift;
    return $self->redirect_to('/login/auth') if $self->check_token;
    my $user = $self->session('user');
    return $self->redirect_to('/') unless $user;
    my $codes = $self->param('codes');
    $self->do_auth_fail($user) unless $codes;
    return $self->redirect_to('/')   if $self->do_login_success($user);
};

post '/login' => sub {
    my $self = shift;
    return if $self->check_token;
    return unless $self->auth;
    $self->flash( sucess_message => 'Wellcome!' );
    $self->redirect_to('/');
};

under sub {
    my $self = shift;
    return 1 if $self->session("email");
    $self->flash( failed_message => 'Access Denied!' );
    $self->redirect_to('/');
};


get '/user/setting' => sub {
    my $self  = shift;
    my $email = $self->session('email');
    $self->stash( user => Model::get_user($email) );
} => 'pwsafe';


post '/user/setting/edit/*email' => sub {
    my $self            = shift;
    my $email           = $self->stash('email');
    my $password_old    = $self->param('password_old');
    my $password_new    = $self->param('password_new');
    my $password_retype = $self->param('password_retype');

    unless ( $email eq $self->session('email') ) {
        $self->flash( failed_message => 'Only can change user self password' );
        return $self->redirect_to('/user/setting');
    }

    unless ( length($password_new) > 0 && $password_new eq $password_retype ) {
        $self->flash( failed_message => 'New password can\'t be null or Retype password not match' );
        return $self->redirect_to('/user/setting');
    }

    my $user = Model::get_user($email);
    unless ($user) {
        $self->flash( failed_message => 'User not found' );
        return $self->redirect_to('/user/setting');
    }

    my $password = b($password_old)->md5_sum;
    unless ( $user->{password} eq $password ) {
        $self->flash( failed_message => 'Old password not match' );
        return $self->redirect_to('/user/setting');
    }

    $user->{password} = b($password_new)->md5_sum;
    Model::update_user($user);
    $self->flash( sucess_message => 'Update password success!' );
    return $self->redirect_to('/user/setting');
} => 'update_password';

get '/message' => sub {
    my $self    = shift;
    my $mesages = Model::get_messages();
    $self->stash( mesages => $mesages );
} => 'message';

get '/message/addmessage' => sub {
    my $self = shift;
    my $date = Mojo::Date->new(time);
    my $pages = Model::get_pages();
    my @titles;
    for my $item (@$pages) {
         push(@titles, $item->{'title'}); 
    } 
    $self->stash( titles => \@titles, date => $date );
} => 'addmessage';

post '/message/addmessage' => sub {
    my $self = shift;
    return if $self->check_token;

    Model::Entries->create(
        email   => $self->param('email'),
        content => $self->param('message'),
        message_format => $self->param('message_format'),
        page_title => $self->param('page_title'),
        date    => $self->param('date'),
    );
    $self->flash( sucess_message => 'Create message sucessfull!' );
    $self->redirect_to('/message');
};

post '/message/delete/*id' => => sub {
    my $self = shift;
    return if $self->check_token;
    my $id = $self->stash('id');
    Model::Entries->delete_where( 'id=?', $id );
    my $mesages = Model::get_messages();
    $self->stash( mesages => $mesages );
    $self->flash( sucess_message => "Message sucessfull deleted!" );
    $self->redirect_to('/message');
};

under sub {
    my $self = shift;
    return 1 if $self->session("role") == 3;
    $self->flash( failed_message => 'Permission denied!' );
    return $self->redirect_to('/');
};

get '/admin/users' => sub {
    my $self  = shift;
    my $users = Model::get_users();
    $self->stash( users => $users );
};
get '/admin/user/edit/*email' => sub {
    my $self  = shift;
    my $email = $self->stash('email');
    my $user  = Model::get_user($email);
    unless ($user) {
        $self->flash( failed_message => sprintf 'User: %s not found', $email );
        return $self->redirect_to('/admin/users');
    }
    $self->stash( user => $user );
} => 'edituser';

post '/admin/user/edit/*email_org' => sub {
    my $self      = shift;
    my $email_org = $self->param('email_org');
    my $email     = $self->param('email');
    return $self->redirect_to('/admin/users') unless $email_org eq $email;

    my $user = Model::get_user($email);
    unless ($user) {
        $self->flash( failed_message => 'User not found' );
        return $self->redirect_to('/admin/users');
    }

    my $password = b( $self->param('password') )->md5_sum;
    my $role     = $self->param('role');
    my $token    = $self->param('token');


    Model::update_user(
        {   email    => $email,
            password => $password,
            role     => $role,
            token    => $token,
        }
    );
    return $self->redirect_to('/admin/users');
};

get '/admin/adduser' => sub {
    shift->stash( user => {} );
} => 'adduser';

any ['get', 'post']  => '/admin/user/delete/*email' => => sub {
    my $self = shift;
    my $email = $self->stash('email');
    Model::User->delete_where( 'email=?', $email );
    my $users = Model::get_users();
    $self->stash( users => $users );
    $self->flash( sucess_message => "User with the mail $email sucessfull deleted!" );
    $self->redirect_to('/admin/users');
};

post '/admin/adduser' => sub {
    my $self = shift;
    return if $self->check_token;

    if ( Model::User->count( 'WHERE email=?', $self->param('email') ) == 1 ) {
        $self->flash( failed_message => 'Duplicate email found! Can not create user!' );
        $self->redirect_to('/admin/users');
        return;
    }
    Model::User->create(
        email    => $self->param('email'),
        password => b( $self->param('password') )->md5_sum,
        token    => $self->param('token') || '',
        role     => $self->param('role'),
    );
    $self->flash( sucess_message => 'Create user sucessfull!' );
    $self->redirect_to('/admin/users');
};

get '/admin/pages' => sub {
    my $self  = shift;
    my $pages = Model::get_pages();
    my $mesages = Model::get_messages();
    $self->stash( pages => $pages, mesages => $mesages );
} => 'pages';

any ['get', 'post'] => '/admin/page/create' => sub {
    my $self = shift;

    if ( lc( $self->req->method ) eq 'get' ) {
        $self->stash( page => {} );
    }
    else {
        my $title = $self->param('title');
        unless ($title) {
            $self->flash( failed_message => 'Title must input' );
            return $self->redirect_to('/admin/page/create');
        }

        Model::create_page(
            {   title      => $title,
                content    => $self->param('content'),
                user_email => $self->param('user_email'),
                can_show   => $self->param('can_show') || 0,
                created_at => $self->param('created_at'),
                role       => $self->param('role') || 0,
            }
        );

        $self->flash( sucess_message => 'Create page success' );
        return $self->redirect_to('/admin/pages');
    }
} => 'page_create';

any ['get', 'post'] => '/admin/page/edit/*id' => sub {
    my $self = shift;
    my $id   = $self->stash('id');
    my $page = Model::get_page($id);

    unless ($page) {
        $self->flash( failed_message => 'Page Not found' );
        return $self->redirect_to('/admin/pages');
    }
    if ( lc( $self->req->method ) eq 'post' ) {
        my $title = $self->param('title');
        unless ($title) {
            $self->flash( failed_message => 'Title must input' );
            return $self->redirect_to("/admin/page/edit/$id");
        }

        Model::update_page(
            {   id         => $id,
                title      => $title,
                content    => $self->param('content'),
                user_email => $self->param('user_email'),
                can_show   => $self->param('can_show') || 0,
                created_at => $self->param('created_at'),
                role       => $self->param('role') || 0,
            }
        );

        $self->flash( sucess_message => 'Edit page success' );
        return $self->redirect_to('/admin/pages');
    }
    $self->stash( page => $page );
} => 'page_edit';

get '/admin/page/delete/*id' => sub {
    my $self = shift;
    my $id   = $self->stash('id');
    $self->flash( failed_message => 'page not found' ) unless $id;

    Model::delete_page($id);

    $self->flash( sucess_message => 'page not found' ) unless $id;
    return $self->redirect_to('/admin/pages');
} => 'page_delete';

app->start;

__DATA__
@@ layouts/default.html.ep

<!DOCTYPE html>
<html lang="en">
%= t header => begin
  %= t meta => charset => 'utf-8'
  %= t meta => name => 'viewport'  => content=>'width=device-width, initial-scale=1.0'
  %= t meta => name => 'description' => content=>''
  %= t meta => name=> 'author' => content=>''
%end
%= stylesheet '//netdna.bootstrapcdn.com/bootstrap/3.0.3/css/bootstrap.min.css'
%= stylesheet 'https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datepicker/1.4.1/css/bootstrap-datepicker3.css'
%= javascript '//ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js'
%= javascript 'https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datepicker/1.4.1/js/bootstrap-datepicker.min.js'
%= stylesheet begin
body {
  padding-top: 50px;
  padding-bottom: 20px;
}
%end

<body>
%= t div => class => 'navbar navbar-inverse navbar-fixed-top' => role =>'navigation' => begin
  %= t div => class => 'container' => begin
    %= t div => class => 'navbar-header test111' => begin
	    %= t button => type=>'button' => class=> 'navbar-toggle' => 'data-toggle' => 'collapse' => 'data-target' => '.navbar-collapse' => begin
	      %= t span => class => 'sr-only' => 'Toggle navigation'
	      %= t span => class => 'icon-bar'
      %end

      %= link_to 'MicroCMS' => '/' => class => 'navbar-brand'
    %end
  
    %= t div => class => 'navbar-collapse collapse' => begin	  
  	  % if (!session 'email') {
  	    %= form_for '/login' => (method => 'post') => class =>'navbar-form navbar-right' => role => 'form'=> begin 
  	      %= csrf_field
  	      %= t div => class => 'form-group' => begin
  		      %= text_field 'email', name => 'email', class => 'form-control', placeholder =>'email'
  	      %end
  	      %= t div => class => 'form-group' => begin
  		      %= password_field 'password', name => 'password', class => 'form-control', placeholder =>'password'
  	      %end 
          %= submit_button 'Login', class => 'btn btn-success'
        %end
  	 % } else {
        %= t ul => class => 'nav navbar-nav' => begin
  	      % current_route eq 'index' ?  $self->stash( class => 'active') :  $self->stash( class => '');
  		    <li class="<%= stash 'class' %>" ><a href="/">Home</a></li>
  
          % if ( (session 'role') > 2 ) {
  	        % current_route eq 'adminusers' ? $self->stash( class => 'active') : $self->stash( class => '');
  		      <li class="<%= stash 'class' %>" ><a href="/admin/users">Users</a></li>
  	      %}
  	  
          % current_route eq 'message' ? $self->stash( class => 'active') : $self->stash( class => '');
  		  <li class="<%= stash 'class' %>" ><a href="/message">Message</a></li>
         
          % if ( (session 'role') > 2 ) {
            % current_route eq 'pages' ? $self->stash( class => 'active') : $self->stash( class => '');
  		    <li class="<%= stash 'class' %>" ><a href="/admin/pages">Pages</a></li>
          % }
          
          % if ( @$nav_pages > 0 ) {
            %= t li => class => 'dropdown' => begin
                <a href='#' class='dropdown-toggle' data-toggle='dropdown'>UserPages <b class="caret"></b></a>
                %= t ul => class => 'dropdown-menu' => begin
                    % foreach my $page ( @$nav_pages ) {
                        %= t li => begin
                            %= link_to "$page->{title}" => "/page/$page->{id}"
                        % end
                    % }
                % end
            % end
          % }
  	
        % if ( session 'email' ) {
           % current_route eq 'pwsafe' ? $self->stash( class => 'active') : $self->stash( class => '');
  	       <li class="<%= stash 'class' %>" ><a href="/user/setting">UserSetting</a></li>
        % }
        %end

        %= form_for '/logout' => method => 'get' => class =>'navbar-form navbar-right' => begin
          % my $text = 'Logout ' . session 'email'; 
          %= submit_button $text => class => 'btn btn-success'
  		  %end
  	 %}
    %end
  %end
%end


%= t div => class => 'container' => begin
  % if ( flash 'failed_message' || stash 'failed_message' ) {
  %= t div => class=> 'alert alert-danger' => begin
	  %= flash 'failed_message'
	  %= stash 'failed_message'
  %end
  %}

  % if ( flash 'sucess_message' || flash 'sucess_message' ) {
  %= t div => class=>'alert alert-success' => begin
	  %= flash 'sucess_message'
	  %= stash 'sucess_message'
  %end
  %}
  
  %= t div => class => '' => style => 'margin-top: 20px' => content 
%end

%= stylesheet begin
.footer {
  bottom: 0;
  width: 100%;
  background-color: #000000;
  height: 50px;
% end

%= t footer => id => 'footer' => class => 'footer navbar-fixed-bottom' => begin
  %= t div => class => 'container' => begin
    <br>
    %= t p => class => 'text-muted' => begin
      % use DateTime qw(); my $date = DateTime->now->strftime('%Y');
      %= $date;
      %= link_to 'Project GitHub' => 'https://github.com/ovntatar/MicroCMS'
    %end
  %end
%end

%= javascript '//netdna.bootstrapcdn.com/bootstrap/3.3.0/js/bootstrap.min.js'
</body>
</html>

@@ index.html.ep
% layout 'default';

%= t h1 => 'MicroCMS'

%= t div => class => 'panel panel-default' => begin
  %= t div => class => 'panel-heading' => 'Broadcast'
  %= t div => class => 'panel-body' => begin
    %= t ul => begin
      % for my $item (@$mesages) {
        % my $item_str = sprintf( '%s - %s', $item->{content}, $item->{email} );
          % my $class= sprintf( '%s-%s', 'text', $item->{message_format} );
	      %= t li => class => $class  => begin
          % if ( $item_str =~ /^eval/)  {
          % (my $new_item_str= $item->{content} ) =~ s/eval//g;
          % use Capture::Tiny 'capture_stdout';
          % my $t = capture_stdout { eval "$new_item_str" } ;
          %= $t;
          % } else {
          %= $item_str
          % }
          %= tag 'br'
        % end
	    %} 
    % end
  % end
% end

@@ adminusers.html.ep
% layout 'default';

%= link_to 'Add new user' => 'adduser' => class => 'btn btn-sm btn-primary'

<hr>

%= t table => class => 'table table-striped' => begin
  %= t thead => begin
	  %= t tr => begin
	  %= t th => 'Email'
      %= t th => 'Password'
	  %= t th => 'role'
	  %= t th => 'Action'
    % end
  % end

  %= t tbody => begin
  	% for my $items (@$users) {
  	  %= t tr => begin
  	    %= t td => $items->{email}
  	    %= t td => $items->{password}
  	    %= t td => $items->{role}
        %= t td => begin
  	      %= link_to 'Edit' => "/admin/user/edit/$items->{email}" => class => 'btn btn-xs btn-primary' 
          %= link_to 'Delete' => "/admin/user/delete/$items->{email}" => class => 'btn btn-xs btn-danger'
        % end
      % end
  	%}
  % end
% end

@@ edituser.html.ep
% layout 'default';

%= t h3 => 'Edit User'
<hr>
%= form_for "/admin/user/edit/$user->{email}" => method => 'post' => class =>'form-horizontal' => role => 'form'=> begin
%= include '_user_form'
%= t div => class => 'form-group' => begin 
    %= t div => class => 'col-sm-offset-2 col-sm-10' => begin
      %= submit_button 'Update' => class => 'btn btn-default btn-primary'
  % end
% end
%end

@@ message.html.ep
% layout 'default';

%= link_to 'Add new message' => '/message/addmessage' => class => 'btn btn-primary btn-sm'
<hr>

% if ( $mesages ) {
%= t table => class => 'table table-striped' => begin
  %= t thead => begin
	  %= t tr => begin
	    %= t th => 'email'
	    %= t th => 'content'
	    %= t th => 'date'
        %= t th => 'message_format'
	    %= t th => 'Action'
    % end
  % end
  
  %= t tbody => begin
	  % for my $item (@$mesages) {
	    %= t tr => begin
	      %= t td => $item->{email}
	      %= t td => $item->{content}
	      %= t td => $item->{date}
          %= t td => $item->{message_format}
	      %= t td => begin
	        %= form_for "/message/delete/$item->{id}" => method => 'post' => begin
	          %= csrf_field
              % if ( session->{role} < 3 ){
                %= submit_button 'Delete' => class => 'btn btn-primary btn-sm' => disabled => 'disabled'
              % } else {
                %= submit_button 'Delete' => class => 'btn btn-primary btn-sm'
              % }
          % end
	      % end 
	    % end 
	  %}
	% end 
% end
% }

@@ adduser.html.ep
% layout 'default';

%= t h3 => 'Add User'
<hr>
%= form_for '/admin/adduser' => method => 'post' => class =>'form-horizontal' => role => 'form'=> begin
%= include '_user_form'

%= t div => class => 'form-group' => begin 
    %= t div => class => 'col-sm-offset-2 col-sm-10' => begin
      %= submit_button 'Add User' => class => 'btn btn-default'
  % end
% end
%end

@@ _user_form.html.ep
%= csrf_field
%= t div => class => 'form-group' => begin
    %= label_for 'inputEmail3' => 'Email' => class => 'col-sm-2 control-label'
    %= t div => class => 'col-sm-10' => begin
      %= input_tag 'email', type => 'email', class => 'form-control', id => 'inputEmail3',  placeholder => 'Email', value => "$user->{email}"
  % end
% end

%= t div => class => 'form-group' => begin
    %= label_for 'inputPassword3' => 'Password' => class => 'col-sm-2 control-label'
    %= t div => class => 'col-sm-10' => begin
      %= input_tag 'password', type => 'password', class => 'form-control', id => 'inputPassword3', placeholder => 'Password', value => "$user->{password}"
  % end
% end

%= t div => class => 'form-group' => begin
    %= label_for 'inputNumber' => 'role' => class => 'col-sm-2 control-label'
    %= t div => class => 'col-sm-10' => begin
      %= input_tag 'role', type => 'number', class => 'form-control', id => 'inputNumber', placeholder => 'Add acl role 1 guest 2 user 3 admin ', value => "$user->{role}"
  % end
% end


@@ addmessage.html.ep
% layout 'default';

%= t h3 => 'Add Message'

%= form_for '/message/addmessage' => method => 'post' => class =>'form-horizontal' => role => 'form'=> begin
  %= csrf_field
  %= t div => class => "form-group" => begin
	  %= label_for 'inputEmail3' => 'Email' => class => 'col-sm-2 control-label'
	  %= t div => class => 'col-sm-10' => begin
      %= input_tag 'email' => session->{email}, type => 'email', class => 'form-control', id => 'inputEmail3', placeholder => 'Email'
    % end
  % end


  %= t div => class => 'form-group' => begin
	  %= label_for 'inputTxt' => 'Message_format' => class => 'col-sm-2 control-label'
	  %= t div => class => 'col-sm-10' => begin
        %= select_field message_format => [[info => 'info', selected => 'selected'], 'warning', 'danger'] => class => 'form-control'
    % end
  % end

  %= t div => class => 'form-group' => begin
	  %= label_for 'inputTxt' => 'Pages' => class => 'col-sm-2 control-label'
	  %= t div => class => 'col-sm-10' => begin
        %= select_field page_title  => [   @{ stash('titles') }  ] => class => 'form-control'
    % end
  % end

  %= t div => class => 'form-group' => begin
	  %= label_for 'inputTxt' => 'Message' => class => 'col-sm-2 control-label'
	  %= t div => class => 'col-sm-10' => begin
	    %= text_area 'message', type => 'text', class => 'form-control', id => 'inputTxt', placeholder => 'Message'
    % end
  % end
	
  %= t div => class=> 'form-group' => begin
	  %= label_for 'inputDatetime' => 'Datetime' => class => 'col-sm-2 control-label'
	  %= t div => class => 'col-sm-10' => begin
	    %= input_tag 'date' => stash->{date}, type => "text",  class => 'form-control', id => 'inputDatetime', placeholder => 'Datetime'
    % end
  % end

  %= t div => class => 'form-group' => begin
	  %= t div => class => 'col-sm-offset-2 col-sm-10' => begin
      %= submit_button 'Add Message' => class => 'btn btn-default'
    % end
  % end 
%end

@@ pages.html.ep
% layout 'default';

%= t h3 => 'Pages List'
%= link_to 'Create Page' => '/admin/page/create' => class => 'btn btn-primary'
<hr>
% if ( @$pages > 0 ) {
%= t table => class => 'table table-hover table-condensed' => begin
  %= t thead => begin
    %= t tr => begin
      %= t th => 'Title'
      %= t th => 'Content'
      %= t th => 'Author'
      %= t th => 'Date'
      %= t th => 'ShowNav'
      %= t th => 'Action'
    % end
  % end

  %= t tbody => begin
    % foreach my $page ( @$pages ) {
      %= t tr => begin
        %= t td => $page->{title}
        %= t td => $page->{content}
        %= t td => $page->{user_email}
        %= t td => $page->{created_at}
        %= t td => begin 
            % if ( $page->{can_show} && $page->{can_show} == 1 ) {
                %= t span => class => 'label label-success' => 'YES'
            % } else {
                %= t span => class => 'label label-default' => 'NO'
            %}
        % end
        %= t td => begin 
            %= link_to 'Edit' => "/admin/page/edit/$page->{id}" => class => 'btn btn-xs btn-primary'
            %= link_to 'Delete' => "/admin/page/delete/$page->{id}" => class => 'btn btn-xs btn-danger'
        % end
      % end
    % }
  % end
% end
% } else {
  %= t div => class => 'alert alert-warning' => 'No pages data!'
% }

@@ page_create.html.ep
% layout 'default';

%= t h3 => 'Create Page'
<hr>
%= form_for '/admin/page/create' => method => 'post' => class =>'form-horizontal' => role => 'form'=> begin
    %= include '_page_form'
    %= t div => class => 'form-group' => begin 
        %= t div => class => 'col-sm-offset-2 col-sm-10' => begin
            %= submit_button 'Create Page' => class => 'btn btn-primary'
        % end
    % end
% end

@@ page_edit.html.ep
% layout 'default';

%= t h3 => 'Edit Page'
<hr>
%= form_for "/admin/page/edit/$page->{id}" => method => 'post' => class =>'form-horizontal' => role => 'form'=> begin
    %= include '_page_form'
    
    %= t div => class => 'form-group' => begin 
        %= t div => class => 'col-sm-offset-2 col-sm-10' => begin
            %= submit_button 'Save Page' => class => 'btn btn-primary'
        % end
    % end
% end

@@ _page_form.html.ep 
%= csrf_field
%= t div => class => 'form-group' => begin
    %= label_for 'input_title' => 'Title' => class => 'col-sm-2 control-label'
    %= t div => class => 'col-sm-10' => begin
      %= input_tag 'title' => "$page->{title}", type => 'text', class => 'form-control', id => 'input_title',  placeholder => 'Page title'
  % end
% end

%= t div => class => 'form-group' => begin
    %= label_for 'input_content' => 'Content' => class => 'col-sm-2 control-label'
    %= t div => class => 'col-sm-10' => begin
      %= input_tag 'content' => class => 'col-sm-12' => placeholder => 'Please add message in the message area and assign it to the pages' 
        %= $page->{content}
  % end
% end

%= t div => class => 'form-group' => begin
    %= label_for 'input_user_email' => 'Author' => class => 'col-sm-2 control-label'
    %= t div => class => 'col-sm-4' => begin
        %= input_tag 'user_email', type => 'text', class => 'form-control', id => 'input_user_email',  value =>  "$page->{user_email}"
    % end
% end

%= t div => class => 'form-group' => begin
    %= label_for 'input_created_at' => 'Create Date' => class => 'col-sm-2 control-label'
    %= t div => class => 'col-sm-4' => begin
        %= input_tag created_at => "$page->{created_at}", type => 'text', class => 'form-control datepicker', id => 'input_created_at'
  % end
% end

%= t div => class => 'form-group' => begin
    %= label_for 'input_can_show' => 'Show On Nav' => class => 'col-sm-2 control-label'
    %= t div => class => 'col-sm-4' => begin
        % if ( exists $page->{can_show} && $page->{can_show} > 0 ) {
            %= label_for '', class => 'radio-inline' => begin
                %= radio_button can_show => '1', checked => 'checked'
                Enabled
            % end

            %= label_for '', class => 'radio-inline' => begin
                %= radio_button can_show => '0'
                Disable
            % end
        % } else {
            %= label_for '', class => 'radio-inline' => begin
                %= radio_button can_show => '1'
                Enabled
            % end
            
            %= label_for '', class => 'radio-inline' => begin
                %= radio_button can_show => '0', checked => 'checked'
                Disable
            % end
        % }
  % end
% end

%= t div => class => 'form-group' => begin
    %= label_for 'input_role' => 'role' => class => 'col-sm-2 control-label'
    %= t div => class => 'col-sm-4' => begin
        %= input_tag role => "$page->{role}", type => 'number', class => 'form-control', id => 'input_role', placeholder => 'ACL level can be: 0 ~ 10'
    % end
% end


%= javascript begin
$(document).ready( function(){
    $('.datepicker').datepicker( {
        format: 'yyyy-mm-dd',
        todayHighlight: true,
        autoclose: true
    });
});
% end

@@ page.html.ep
% layout 'default';

%= t h2 => $page->{title}
<hr>
%= t div => class => 'well' => begin
            
  %= t div => class => 'panel-heading' => 'Broadcast'
  %= t div => class => 'panel-body' => begin
    %= t ul => begin
      % for my $item (@$mesages) {
        % if ( $page->{title} eq $item->{page_title} ) {
        % my $item_str = sprintf( '%s - %s', $item->{content}, $item->{email} );
          % my $class= sprintf( '%s-%s', 'text', $item->{message_format} );
	      %= t li => class => $class  => begin
          % if ( $page->{title} eq $item->{page_title} ) {
            % if ( $item_str =~ /^eval/)  {
                % (my $new_item_str= $item->{content} ) =~ s/eval//g;
                % use Capture::Tiny 'capture_stdout';
                % my $t = capture_stdout { eval "$new_item_str" } ;
                %= $t;
            % } else {
                %= $item_str
            % }
           % }
          %= tag 'br'
        % end
        % }
	    %} 
    % end
  % end


% end
<hr>
%= t p => begin
    %= t span => begin
        %= 'Author: ' .  $page->{user_email}
    % end

    %= t span => begin
        %= 'Date: ' . $page->{created_at }
    % end
% end

@@ pwsafe.html.ep
% layout 'default';

%=t h3 => 'Update user password'
<hr>
%= form_for "/user/setting/edit/$user->{email}" => method => 'post' => class =>'form-horizontal' => role => 'form'=> begin
    %= csrf_field

    %= t div => class => 'form-group' => begin
        %= label_for 'input_password_old' => 'Old Password' => class => 'col-sm-2 control-label'
        %= t div => class => 'col-sm-4' => begin
            %= input_tag 'password_old', type => 'password', class => 'form-control', id => 'input_password_old', placeholder => 'Old password'
        % end
    % end
    %= t div => class => 'form-group' => begin
        %= label_for 'input_password_new' => 'New Password' => class => 'col-sm-2 control-label'
        %= t div => class => 'col-sm-4' => begin
            %= input_tag 'password_new', type => 'password', class => 'form-control', id => 'input_password_new', placeholder => 'New password'
        % end
    % end
    %= t div => class => 'form-group' => begin
        %= label_for 'input_password_retype' => 'Retype Password' => class => 'col-sm-2 control-label'
        %= t div => class => 'col-sm-4' => begin
            %= input_tag 'password_retype', type => 'password', class => 'form-control', id => 'input_password_retype', placeholder => 'Retype new password'
         % end
    % end
    %= t div => class => 'form-group' => begin 
        %= t div => class => 'col-sm-offset-2 col-sm-10' => begin
            %= submit_button 'Update password' => class => 'btn btn-default btn-primary'
         % end
    % end
% end