app.py

from flask import Flask, render_template, json, request, redirect, url_for, session
from flask_sqlalchemy import SQLAlchemy
from flask_mail import Mail, Message
# from config import *
from app import db, app
from app.models import Project
from app.models import Tags
from app.models import Admin
from PIL import Image

from flask_debugtoolbar import DebugToolbarExtension
app.debug = True

app.config['SECRET_KEY'] = 'asldfkajsdlfk'

toolbar = DebugToolbarExtension(app)

# app.debug = True
app.secret_key = 'bunnies'

app = Flask(__name__)
app.config.from_object('config')

mail = Mail(app)
db = SQLAlchemy(app)

app.secret_key = 'secret-key'

CONFIRMATION_MAIL_SUBJECT = 'ScriptEd Project Submission Confirmation'
CONFIRMATION_MAIL_SENDER = 'cyntzhou@gmail.com'
CONFIRMATION_MAIL_BODY = """
    This is to confirm that you've submitted
    a project for ScriptEd. We will email you if your project has
    been approved.
"""

FEEDBACK_MAIL_SUBJECT = 'Project Submission Feedback'
FEEDBACK_MAIL_SENDER = 'melaniensawyer@gmail.com'

NUM_TAGS = 9
MAX_NUM_FEATURED = 3

@app.route("/")
def gallery():
    query = "SELECT name, id, description, developers, screenshot, is_featured from project WHERE status='approved' AND isDeleted='false';"
    result = db.session.execute(query)

    allTags = "SELECT DISTINCT tag,color from tags"
    tagsResult = db.session.execute(allTags)
    allItems = []
    featuredProjects = []
    sortBy = request.args.get('sortBy')
    for item in result:
        d = dict(item.items())
        currID = item['id']
        tagsQuery = "SELECT tag,color from tags WHERE projectID = "+str(currID)+";"
        result2 = db.session.execute(tagsQuery)
        d['tags'] = []
        for it in result2:
            d['tags'].append(it)
        allItems.append(d)
        if (item['is_featured'] == 'true'):
            featuredProjects.append(d)
    if sortBy == 'projectName':
        allItems.sort(key = lambda project: project['name'].lower())
    elif sortBy == 'leastRecent':
        allItems.sort(key = lambda project: project['id'])
    else:  # Most recent by default
        allItems.sort(key = lambda project: project['id'], reverse=True)
    return render_template('gallery.html', data=allItems, tags=tagsResult, \
        featuredProjects=featuredProjects[-MAX_NUM_FEATURED:])
        # Get most recent MAX_NUM_FEATURED featured projects

@app.route("/submit", methods=['GET', 'POST'])
def submit():
    if request.method == 'POST':
        print (request.form)
        name = request.form['name']
        screenshot = ''
        if 'screenshot' in request.files:
            f = request.files['screenshot']
            img = Image.open(f)
            path = "static/img/" + f.filename
            img.save(path)
            screenshot = "static/img/" + f.filename
        num_developers = request.form['num_developers']
        developers = ''
        for i in range(int(num_developers)):
            developers += request.form['developers' + str(i)]
            if not (i==int(num_developers)-1):
                developers += ','
        github_usernames = request.form['github_usernames']
        description = request.form['description']
        link = request.form['link']
        github_repo = request.form['github_repo']
        long_description = request.form['long_description']
        tags = request.form['tags']
        program_attended = request.form['program_attended']
        email = request.form['email']
        # for i in range (1, NUM_TAGS):
            # tag was selected
            # print("HI")
            #if(request.form['tag-'+str(i)]=="true"):
                #db.session.add(Tags(tag="Python", projID=1,color='#FF00FF'))
                #db.session.commit()
                #db.session.close()
        if name and screenshot and num_developers and developers and \
            description and long_description and program_attended and email:
            print (request.form)
            try:
                db.session.add(Project(name=name,
                                       screenshot=screenshot,
                                       num_developers=num_developers,
                                       developers=developers,
                                       github_usernames=github_usernames,
                                       description=description,
                                       link=link,
                                       github_repo=github_repo,
                                       long_description=long_description,
                                       program_attended=program_attended,
                                       email=email,
                                       status="pending",
                                       isDeleted='false',
                                       is_featured='false'
                                       ))
                db.session.commit()
                db.session.close()

                query = "SELECT max(id) FROM project;"
                projectID_row = db.session.execute(query)
                for row in projectID_row:
                    projectID = row[0]

                tags_separated = tags.split(',')
                for tag in tags_separated:
                    query_color = "SELECT DISTINCT color FROM tags WHERE tag='" + tag + "';"
                    color_rows = db.session.execute(query_color)
                    for row in color_rows:
                        color = row[0]
                    db.session.add(Tags(tag=tag, color=color, projectID=projectID))

                db.session.commit()
                db.session.close()

                email = Message(subject=CONFIRMATION_MAIL_SUBJECT,
                                body=CONFIRMATION_MAIL_BODY,
                                sender=CONFIRMATION_MAIL_SENDER,
                                # recipients=[request.form['email']])
                                recipients=['melanie.sawyer@columbia.edu'])
                mail.send(email)
                return json.dumps({'html':'<span>Project Added</span>'})
            except Exception as e:
                db.session.rollback()
                print("angery")
                print(str(e))
                return json.dumps({'error':str(e)})
        else:
            return json.dumps({'html':'<span>Enter the required fields</span>'})
    else:
        allTags = "SELECT DISTINCT tag,color from tags"
        tagsResult = db.session.execute(allTags)
        return render_template('form.html', tags=tagsResult)

# Database functions

# Admin panel function
# POST request if admin is approving, denying, or deleting a project.
@app.route("/admin", methods=['GET', 'POST'])
def admin():
    if request.method == "POST":
        feedbacktext = request.form['myform']
        # feedback was submitted
        if (feedbacktext):
            print("RECEIEVED")
            feedbackToSend = request.form['feedbackform']
            msg = Message(FEEDBACK_MAIL_SUBJECT,
                          sender=FEEDBACK_MAIL_SENDER,
                          recipients=['melaniensawyer@gmail.com'])
            msg.body = feedbackToSend
            mail.send(msg)

        reject = request.args.getlist('reject')
        delete = request.args.getlist('delete')
        approve = request.args.getlist('approve')

    if 'user' in session:
        query = "SELECT * FROM project WHERE isDeleted='false';"
        result = db.session.execute(query)
        if 'error_message' in request.args:
            errorMessage = request.args['error_message']
            return render_template('adminView.html', data=result, errorMessage=errorMessage)
        else:
            return render_template('adminView.html', data=result)
    else:
        return redirect(url_for('login'))

@app.route("/admin/tags", methods=['GET', 'POST'])
def tags():
    if request.method == 'GET':
        # query = "SELECT DISTINCT tag,color FROM tags GROUP BY tag"
        query = "SELECT tag, COUNT(*), color FROM tags GROUP BY tag"
        result = db.session.execute(query)
        return render_template('tags.html', data=result)
    elif request.method == 'POST':
        print (request.form)
        tag = request.form['tag']
        projectID = -1
        color = request.form['color']

        if tag and color:
            db.session.add(Tags(tag=tag,
                                projectID=projectID,
                                color=color
                                ))
            db.session.commit()
            db.session.close()
            return json.dumps({'html':'<span>Tag Added</span>'})
        else:
            return json.dumps({'html':'<span>Enter the required fields</span>'})

@app.route('/delete_tag', methods=["POST"])
def delete_tag():
    tag = request.form['tag_to_delete']
    query = "DELETE FROM tags WHERE tag='" + tag + "'"
    db.session.execute(query)
    db.session.commit()
    db.session.close()
    return(redirect(url_for('tags')))

# Route for handling the login page logic
@app.route('/login', methods=['GET', 'POST'])
def login():
    error = None
    print(session)
    if request.method == 'POST':
        username = request.form['username']
        password = request.form['password']
        user = db.session.query(Admin).filter(Admin.username==username, Admin.password==password).first()
        if user is None:
            error = 'Invalid Credentials. Please try again.'
        else:
            session['user'] = username
            return redirect(url_for('admin'))
    return render_template('login.html', error=error)

@app.route('/logout', methods=['GET', 'POST'])
def logout():
    session.clear()
    return redirect(url_for('login'))

@app.route('/admin/settings', methods=['GET', 'POST'])
def account_settings():
    error = None
    success = None
    if request.method == 'POST':
        print(request.form)
        old_username = request.form['old_username']
        old_password = request.form['old_password']
        user = db.session.query(Admin).filter(Admin.username==old_username, Admin.password==old_password).first()
        if user is None:
            error = 'Invalid Credentials. Please try again.'
        else:
            new_username = request.form['new_username']
            new_password = request.form['new_password']
            if new_username == '' and new_password == '':
                success = 'No changes made.'
                return render_template('accountSettings.html', success=success)
            db.session.query(Admin).filter(Admin.username==old_username, Admin.password==old_password).update({'username': new_username, 'password': new_password})
            db.session.commit()
            db.session.close()
            success = 'Successfully updated account information.'
            return render_template('accountSettings.html', success=success)
    return render_template('adminSettings.html', error=error)

@app.route('/delete', methods=["POST"])
def delete():
    myID = request.form['id_to_delete']
    db.session.query(Project).filter(Project.id==myID).update({'isDeleted': 'true'})
    db.session.commit()
    db.session.close()
    return(redirect(url_for('admin')))

@app.route('/approve', methods=['POST', 'GET'])
def approve():
    if request.method == 'GET':
        myID = request.args.get('id')
    else:
        myID = request.form['id_to_approve']
    db.session.query(Project).filter(Project.id==myID).update({'status':'approved'})
    db.session.commit()
    db.session.close()
    return(redirect(url_for('admin')))

@app.route('/feature', methods=["POST"])
def feature():
    # Check if MAX_NUM_FEATURED featured projects has been reached
    featuredProjects = db.session.query(Project).filter(Project.is_featured=='true', Project.isDeleted=='false').all()
    if len(featuredProjects) >= MAX_NUM_FEATURED:
        return(redirect(url_for('admin', error_message='Maximum number of featured projects have already been selected.')))
    myID = request.form['id_to_feature']
    db.session.query(Project).filter(Project.id==myID).update({'is_featured': 'true'})
    db.session.commit()
    db.session.close()
    return(redirect(url_for('admin')))

@app.route('/unfeature', methods=["POST"])
def unfeature():
    myID = request.form['id_to_unfeature']
    db.session.query(Project).filter(Project.id==myID).update({'is_featured': 'false'})
    db.session.commit()
    db.session.close()
    return(redirect(url_for('admin')))

@app.route('/feedback', methods=['POST'])
def feedback():
    myID = request.form['id_to_give_feedback']
    db.session.query(Project).filter(Project.id==myID).update({'status':'feedback'})
    db.session.commit()
    db.session.close()
    print("heelo...")
    return(redirect(url_for('admin')))

@app.route('/project/<id>', methods=['GET'])
def project(id):
    query = "SELECT * FROM project WHERE id="+id+";"
    result = db.session.execute(query).first()
    d = dict(result)
    currentID = d['id']
    tagsQuery = 'SELECT tag,color from tags WHERE projectID= ' + str(currentID) + ";"
    tagsResult = db.session.execute(tagsQuery)
    d['tags']=[]
    for item in tagsResult:
        d['tags'].append(item)
    return(render_template('project2.html', data=d, isdraft="false"))

@app.errorhandler(404)
def page_not_found(e):
    # note that we set the 404 status explicitly
    return render_template('404.html'), 404

@app.route('/draft/<id>', methods=['GET'])
def draft(id):
    query = "SELECT * from project WHERE id="+id+';'
    result = db.session.execute(query).first()
    d = dict(result)
    currentID = d['id']
    tagsQuery = "SELECT tag, color FROM tags WHERE projectID= " + str(currentID) + ";"
    tagsResult = db.session.execute(tagsQuery)
    d['tags']=[]
    for item in tagsResult:
        d['tags'].append(item)
    return(render_template('project2.html', data=d, isdraft="true"))

@app.route("/test", methods=['GET'])
def test():
    return(render_template("test.html"))

if __name__ == "__main__":
    app.run(debug=True, port=8888)