Delete server.py
This commit is contained in:
Nikiroy78
GitHub
parent
a8e06655df
commit
6fe6ed6ac3
766
server.py
766
server.py
@ -1,766 +0,0 @@
|
|||||||
from flask import Flask, render_template, request, redirect, url_for, flash, make_response
|
|
||||||
import SQLEasy, random, mailclient, traceback, json, time, socket
|
|
||||||
|
|
||||||
database = SQLEasy.database('database.db')
|
|
||||||
|
|
||||||
app = Flask(__name__)
|
|
||||||
|
|
||||||
HOST = '127.0.0.1'
|
|
||||||
HOST = socket.gethostbyname(socket.gethostname())
|
|
||||||
PORT = 8080
|
|
||||||
|
|
||||||
EMAIL = '' # Введите сюда свой адрес электронной почты
|
|
||||||
EMAIL_PASSWORD = '' # Введите сюда свой пароль от электронной почты
|
|
||||||
# Рекомендуется использовать сервера Яндекса: smtp.yandex.ru
|
|
||||||
SMTP_SERVER = 'smtp.yandex.ru' # Укажите свой SMTP сервер (смотрите по сервису, обычно SMTP сервера находятся по адресу smtp.sevise.org, например: smtp.google.com)
|
|
||||||
mailObject = mailclient.mail(EMAIL, EMAIL_PASSWORD)
|
|
||||||
mailObject.set_smtp_server(SMTP_SERVER)
|
|
||||||
|
|
||||||
file_content = '''var type = "auth";
|
|
||||||
|
|
||||||
function timeConverter(UNIX_timestamp){
|
|
||||||
var a = new Date(UNIX_timestamp * 1000);
|
|
||||||
var months = ['Jan','Feb','Mar','Apr','May','Jun','Jul','Aug','Sep','Oct','Nov','Dec'];
|
|
||||||
var year = a.getFullYear();
|
|
||||||
var month = months[a.getMonth()];
|
|
||||||
var date = a.getDate();
|
|
||||||
var hour = a.getHours();
|
|
||||||
var min = a.getMinutes();
|
|
||||||
var sec = a.getSeconds();
|
|
||||||
var time = date + ' ' + month + ' ' + year + ' ' + hour + ':' + min + ':' + sec ;
|
|
||||||
return time;
|
|
||||||
}
|
|
||||||
|
|
||||||
function buton_regAuth(){
|
|
||||||
if(type == "auth") type = "reg";
|
|
||||||
else type = "auth";
|
|
||||||
if(type == "auth") document.getElementById("authwin").innerHTML = " <form action=\"oauth/auth\">\n <center><h1>Авторизация</h1></center>\n <p>e-mail: <input type=\"email\" name=\"email\" value=\"mailbox@inbox.com\"></p>\n <p>password: <input type=\"password\" name=\"password\"></p>\n <center><p><input type=\"submit\" value=\"Войти\"></input></p></center>\n </form>\n <button onclick=\"buton_regAuth()\">Регистрация</button>"
|
|
||||||
else document.getElementById("authwin").innerHTML = " <form action=\"oauth/register\">\n <center><h1>Регистрация</h1></center>\n <p>e-mail: <input type=\"email\" name=\"email\" value=\"mailbox@inbox.com\"></p>\n <p>повторите e-mail: <input type=\"email\" name=\"fowardemail\" value=\"\"></p>\n <p>password: <input type=\"password\" name=\"password\"></p>\n <p>повторите password: <input type=\"password\" name=\"fowardpassword\"></p>\n <center><p><input type=\"submit\" value=\"Зарегистрироваться\"></input></p></center>\n </form>\n <button onclick=\"buton_regAuth()\">Авторизация</button>"
|
|
||||||
}
|
|
||||||
|
|
||||||
function confirmation_mail(mail_adress) {
|
|
||||||
var codeConfirmation = "<center>\n <form action=\"http://127.0.0.1:8080/oauth/confirmation\">\n <h1>Введите код</h1>\n <p><input type=\"text\" name=\"finish_code\"></p>\n <p><b>Если письмо не пришло</b>, то проверьте <b>папку \"Спам\"</b>, <b>проверьте ваш чёрный список</b> на наличие почтового адреса бота, <b>проверьте правильность введённых данных</b> при регистрации.</p>\n <p><input type=\"submit\" value=\"Завершить регистрацию\" style=\"margin-top: 40px;\"></input></p>\n </form>\n</center>"
|
|
||||||
|
|
||||||
var GET_Request = new XMLHttpRequest();
|
|
||||||
GET_Request.open("GET", "http://127.0.0.1:8080/api/confirmation/start?email=" + mail_adress, true);
|
|
||||||
GET_Request.onload = function (){
|
|
||||||
var content = GET_Request.responseText;
|
|
||||||
document.getElementById("authwin").innerHTML = codeConfirmation;
|
|
||||||
}
|
|
||||||
GET_Request.send(null);
|
|
||||||
}
|
|
||||||
|
|
||||||
function get_cookies(){
|
|
||||||
var cookie_f = document.cookie;
|
|
||||||
var cookies = cookie_f.split('; ');
|
|
||||||
// alert(cookie_f);
|
|
||||||
var returnCookie = {};
|
|
||||||
|
|
||||||
cookies.forEach(function(item, i, cookies) {
|
|
||||||
console.log(item);
|
|
||||||
ItemArray = item.split('=');
|
|
||||||
console.log(ItemArray);
|
|
||||||
console.log(ItemArray[0]);
|
|
||||||
console.log(ItemArray[1]);
|
|
||||||
returnCookie[ItemArray[0]] = ItemArray[1];
|
|
||||||
});
|
|
||||||
console.log(returnCookie)
|
|
||||||
|
|
||||||
return returnCookie;
|
|
||||||
}
|
|
||||||
|
|
||||||
function update(){
|
|
||||||
var cookies = get_cookies();
|
|
||||||
var xhr = new XMLHttpRequest();
|
|
||||||
|
|
||||||
xhr.open('GET', "http://127.0.0.1:8080/api/user/get_pages?autogroup=1&token=" + cookies.token, false);
|
|
||||||
// alert('ok');
|
|
||||||
|
|
||||||
xhr.send();
|
|
||||||
if (xhr.status != 200) {
|
|
||||||
var ok = 'ok';
|
|
||||||
} else {
|
|
||||||
var values = JSON.parse(xhr.responseText);
|
|
||||||
// alert(xhr.responseText);
|
|
||||||
var groups = values.response;
|
|
||||||
var retV = '';
|
|
||||||
groups.forEach(function(group, i, groups) {
|
|
||||||
var item = '';
|
|
||||||
var clocker = 0;
|
|
||||||
group.forEach(function(cellContent, i, group) {
|
|
||||||
clocker += 1;
|
|
||||||
item += `<div class="note_item" style='background-color: ${cellContent.color};' onclick="location.href='http://127.0.0.1:8080/note/id/${cellContent.ID}';"><b>${cellContent.title}</b><br/>Создано:<br/>${timeConverter(cellContent.created)}<br/>Отредактирован:<br/>${timeConverter(cellContent.edited)}</div>\n`;
|
|
||||||
});
|
|
||||||
retV += `<div class='row'>${item}</div>\n`;
|
|
||||||
});
|
|
||||||
retV += "<div class='row'><div class=\"note_item\" onclick=\"location.href='http://127.0.0.1:8080/note/add';\"><b>Добавить страницу</b></div>\n<div class=\"note_item\" style='background-color: #FF6060;' onclick=\"location.href='http://127.0.0.1:8080/logout';\"><b>Выйти</b></div></div>";
|
|
||||||
document.getElementById("field").innerHTML = retV;
|
|
||||||
}
|
|
||||||
}'''
|
|
||||||
|
|
||||||
for codePath in ('static/button.js', 'static/script.js', 'static/scripts.js', 'static/source_test_20.js', 'static/scripts/button.js'):
|
|
||||||
content = file_content
|
|
||||||
|
|
||||||
content = content.replace('127.0.0.1:8080', f"{HOST}:{PORT}")
|
|
||||||
|
|
||||||
jsCodeObj = open(codePath, 'wt', encoding='utf-8')
|
|
||||||
jsCodeObj.write(content)
|
|
||||||
jsCodeObj.close()
|
|
||||||
|
|
||||||
|
|
||||||
def formatMail(mail):
|
|
||||||
servise = mail.split('@')[-1]
|
|
||||||
domain = mail.split('@')[0]
|
|
||||||
if servise in ('ya.ru', 'yandex.ru', 'yandex.by', 'yandex.ua', 'yandex.kz'):
|
|
||||||
servise = 'yandex.ru'
|
|
||||||
elif servise in ('mail.ru', 'inbox.ru', 'internet.ru', 'bk.ru', 'list.ru'):
|
|
||||||
servise = 'mail.ru'
|
|
||||||
|
|
||||||
return f"{domain}@{servise}"
|
|
||||||
|
|
||||||
|
|
||||||
def genToken(LEN=32):
|
|
||||||
TOKEN = ''
|
|
||||||
for _ in range(LEN):
|
|
||||||
TOKEN += '0123456789abcdef'[random.randint(0, 15)]
|
|
||||||
return TOKEN
|
|
||||||
|
|
||||||
|
|
||||||
def checkToken(TOKEN):
|
|
||||||
if not(TOKEN):
|
|
||||||
return False
|
|
||||||
data = database.getBase('auths')
|
|
||||||
data = [DATA['token'] for DATA in data]
|
|
||||||
if not(TOKEN in data):
|
|
||||||
return False
|
|
||||||
|
|
||||||
data = SQLEasy.compareKey(database.getBase('auths'), 'token')[TOKEN]
|
|
||||||
return bool(data['active'])
|
|
||||||
|
|
||||||
|
|
||||||
def checkMail(MAIL):
|
|
||||||
MAIL = formatMail(MAIL)
|
|
||||||
if not(MAIL):
|
|
||||||
return False
|
|
||||||
data = database.getBase('Users')
|
|
||||||
data = [formatMail(DATA['email']) for DATA in data]
|
|
||||||
|
|
||||||
return MAIL in data
|
|
||||||
|
|
||||||
|
|
||||||
def checkPassword(PASS):
|
|
||||||
if not(PASS):
|
|
||||||
return False
|
|
||||||
data = database.getBase('Users')
|
|
||||||
data = [DATA['password'] for DATA in data]
|
|
||||||
|
|
||||||
return PASS in data
|
|
||||||
|
|
||||||
|
|
||||||
def getUserData(TOKEN):
|
|
||||||
UserID = SQLEasy.compareKey(database.getBase('auths'), 'token')[TOKEN]['UserID']
|
|
||||||
return SQLEasy.compareKey(database.getBase('Users'), 'ID', hideIndex=False)[UserID]
|
|
||||||
|
|
||||||
|
|
||||||
def validData_check(MAIL, PASSWORD):
|
|
||||||
userData = SQLEasy.compareKey(database.getBase('Users'), 'email')[MAIL]
|
|
||||||
return userData['password'] == PASSWORD
|
|
||||||
|
|
||||||
|
|
||||||
@app.route('/')
|
|
||||||
def index():
|
|
||||||
if not(checkToken(request.cookies.get('token'))):
|
|
||||||
errorCode = ''
|
|
||||||
if request.args.get('error', default=False):
|
|
||||||
errorCode = '<div class="erroralert"><b>Ошибка: %s</b></div>' % request.args.get('error')
|
|
||||||
|
|
||||||
retPage = '''<html>
|
|
||||||
<head>
|
|
||||||
<title>Блокнот онлайн</title>
|
|
||||||
<link rel="shortcut icon" href="static/sources/icon.ico" type="image/x-icon">
|
|
||||||
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
|
|
||||||
<meta name="description" content="Хранение записок и пометок онлайн.">
|
|
||||||
|
|
||||||
<script src="static/button.js"></script>
|
|
||||||
</head>
|
|
||||||
<style>
|
|
||||||
body {
|
|
||||||
background-color: #eeeeee;
|
|
||||||
}
|
|
||||||
.authwin {
|
|
||||||
margin-left: 40%;
|
|
||||||
padding-left: 1%;
|
|
||||||
padding-top: 0.05%;
|
|
||||||
margin-top: 10%;
|
|
||||||
margin-bottom: 10%;
|
|
||||||
width: 20%;
|
|
||||||
height: 35%;
|
|
||||||
background-color: #ffccaa;
|
|
||||||
border-radius: 5%;
|
|
||||||
}
|
|
||||||
.erroralert {
|
|
||||||
min-width: 3%;
|
|
||||||
min-height: 3%;
|
|
||||||
background-color: #ff7777;
|
|
||||||
}
|
|
||||||
</style>
|
|
||||||
<body>
|
|
||||||
ERROM_MSG
|
|
||||||
<div class='authwin' id='authwin'>
|
|
||||||
<form action="oauth/auth">
|
|
||||||
<center><h1>Авторизация</h1></center>
|
|
||||||
<p>e-mail: <input type="email" name="email" value="mailbox@inbox.com"></p>
|
|
||||||
<p>password: <input type="password" name="password"></p>
|
|
||||||
<center><p><input type="submit" value="Войти"></input></p></center>
|
|
||||||
</form>
|
|
||||||
<button onclick="buton_regAuth()">Регистрация</button>
|
|
||||||
</div>
|
|
||||||
</body>
|
|
||||||
</html>'''
|
|
||||||
retPage = retPage.replace('ERROM_MSG', errorCode)
|
|
||||||
return retPage
|
|
||||||
else:
|
|
||||||
return redirect("/note/menu", code=302)
|
|
||||||
|
|
||||||
|
|
||||||
@app.route('/logout')
|
|
||||||
def logout():
|
|
||||||
res = redirect("/", code=302)
|
|
||||||
res.set_cookie('token', 'NULL', max_age=1)
|
|
||||||
return res
|
|
||||||
|
|
||||||
@app.route('/note/id/<PageID>')
|
|
||||||
def pageView(PageID):
|
|
||||||
if checkToken(request.cookies.get('token')):
|
|
||||||
try:
|
|
||||||
PageID = int(PageID)
|
|
||||||
except:
|
|
||||||
return redirect("/", code=302)
|
|
||||||
pageData = SQLEasy.compareKey(database.getBase('Pages'), 'ID', hideIndex=False)[PageID]
|
|
||||||
title = pageData['title']
|
|
||||||
content = pageData['content']
|
|
||||||
|
|
||||||
if getUserData(request.cookies.get('token'))['ID'] != pageData['ownerID']:
|
|
||||||
return redirect("/?error=Отказано в доступе.", code=302)
|
|
||||||
|
|
||||||
if request.args.get('act') != 'edit':
|
|
||||||
HTMLcontent = '''<html>
|
|
||||||
<head>
|
|
||||||
<title>NOTETITLE</title>
|
|
||||||
<link rel="shortcut icon" href="http://HOSTPORTION/static/sources/icon.ico" type="image/x-icon">
|
|
||||||
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
|
|
||||||
<meta name="description" content="Хранение записок и пометок онлайн.">
|
|
||||||
</head>
|
|
||||||
<style>
|
|
||||||
body {
|
|
||||||
background-color: #eeeeee;
|
|
||||||
}
|
|
||||||
.form {
|
|
||||||
margin-left: 10%;
|
|
||||||
margin-right: 10%;
|
|
||||||
}
|
|
||||||
.textArea_myself {
|
|
||||||
width: 90%;
|
|
||||||
height: 70%;
|
|
||||||
overflow: auto;
|
|
||||||
margin: 50px auto;
|
|
||||||
padding: 4px 12px;
|
|
||||||
border: solid 1px black;
|
|
||||||
background-color: #fff;
|
|
||||||
}
|
|
||||||
.titleStyle {
|
|
||||||
width: 77.5%;
|
|
||||||
}
|
|
||||||
.textarea
|
|
||||||
</style>
|
|
||||||
<body>
|
|
||||||
<center><h1>NOTETITLE</h1></center>
|
|
||||||
<div class='form'>
|
|
||||||
<div class="textArea_myself">
|
|
||||||
NOTECONTENT
|
|
||||||
</div>
|
|
||||||
<center><p>
|
|
||||||
<button onclick="location.href='?act=edit';">Редактировать</button>
|
|
||||||
<form action="/">
|
|
||||||
<input type="submit" value="Назад"></input>
|
|
||||||
</form>
|
|
||||||
</p></center>
|
|
||||||
</div>
|
|
||||||
</body>
|
|
||||||
</html>'''
|
|
||||||
HTMLcontent = HTMLcontent.replace('HOSTPORTION', f"{HOST}:{PORT}")
|
|
||||||
HTMLcontent = HTMLcontent.replace('NOTETITLE', title)
|
|
||||||
HTMLcontent = HTMLcontent.replace('NOTECONTENT', content)
|
|
||||||
return HTMLcontent
|
|
||||||
else:
|
|
||||||
HTMLcontent = '''<html>
|
|
||||||
<head>
|
|
||||||
<title>NOTETITLE</title>
|
|
||||||
<link rel="shortcut icon" href="http://HOSTPORTION/static/sources/icon.ico" type="image/x-icon">
|
|
||||||
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
|
|
||||||
<meta name="description" content="Хранение записок и пометок онлайн.">
|
|
||||||
</head>
|
|
||||||
<style>
|
|
||||||
body {
|
|
||||||
background-color: #eeeeee;
|
|
||||||
}
|
|
||||||
.form {
|
|
||||||
margin-left: 10%;
|
|
||||||
margin-right: 10%;
|
|
||||||
}
|
|
||||||
.textArea_myself {
|
|
||||||
width: 90%;
|
|
||||||
}
|
|
||||||
.titleStyle {
|
|
||||||
width: 77.5%;
|
|
||||||
}
|
|
||||||
</style>
|
|
||||||
<body>
|
|
||||||
<center><h1>Редактирование NOTECONTENT</h1></center>
|
|
||||||
<div class='form'>
|
|
||||||
<form action="http://HOSTPORTION/file_api/edit/">
|
|
||||||
<p>Заголовок: <input class="titleStyle" type="text" name="title" value="NOTETITLE"></input>
|
|
||||||
<input type="hidden" name="id" value="PAGE_ID">
|
|
||||||
<select size="1" name="color">
|
|
||||||
<option value='77aaff'>Стандартный</option>
|
|
||||||
<option value='FF7477'>Красный</option>
|
|
||||||
<option value='77ffaa'>Зелёный</option>
|
|
||||||
<option value='FFA369'>Жёлтый</option>
|
|
||||||
<option value='FF77FF'>Фиолетовый</option>
|
|
||||||
<option value='77FFFF'>Синий</option>
|
|
||||||
</select>
|
|
||||||
</p>
|
|
||||||
<p><h3>Содержание: </h3></p>
|
|
||||||
<p><textarea class="textArea_myself" name="content" cols="40" rows="45">NOTECONTENT</textarea></p>
|
|
||||||
<p><input type="submit" value="Применить"> <input type="reset" value="Очистить"></p>
|
|
||||||
</form>
|
|
||||||
</div>
|
|
||||||
</body>
|
|
||||||
</html>'''
|
|
||||||
HTMLcontent = HTMLcontent.replace('HOSTPORTION', f"{HOST}:{PORT}")
|
|
||||||
HTMLcontent = HTMLcontent.replace('NOTETITLE', title)
|
|
||||||
HTMLcontent = HTMLcontent.replace('PAGE_ID', str(PageID))
|
|
||||||
HTMLcontent = HTMLcontent.replace('NOTECONTENT', content)
|
|
||||||
return HTMLcontent
|
|
||||||
else:
|
|
||||||
return redirect("/", code=302)
|
|
||||||
|
|
||||||
@app.route('/note/<menu_ind>')
|
|
||||||
def main_menu(menu_ind):
|
|
||||||
if not(checkToken(request.cookies.get('token'))):
|
|
||||||
return redirect("/", code=302)
|
|
||||||
|
|
||||||
if menu_ind == 'menu':
|
|
||||||
HTMLcontent = '''<html>
|
|
||||||
<head>
|
|
||||||
<title>Главная страница</title>
|
|
||||||
<link rel="shortcut icon" href="http://HOSTPORTION/static/sources/icon.ico" type="image/x-icon">
|
|
||||||
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
|
|
||||||
<meta name="description" content="Хранение записок и пометок онлайн.">
|
|
||||||
|
|
||||||
<script src="http://HOSTPORTION/static/source_test_20.js"></script>
|
|
||||||
</head>
|
|
||||||
<style>
|
|
||||||
body {
|
|
||||||
background-color: #eeeeee;
|
|
||||||
}
|
|
||||||
.authwin {
|
|
||||||
margin-left: 40%;
|
|
||||||
padding-left: 1%;
|
|
||||||
padding-top: 0.05%;
|
|
||||||
margin-top: 10%;
|
|
||||||
margin-bottom: 10%;
|
|
||||||
width: 20%;
|
|
||||||
height: 35%;
|
|
||||||
background-color: #ffccaa;
|
|
||||||
border-radius: 5%;
|
|
||||||
}
|
|
||||||
.note_item {
|
|
||||||
background-color: #77aaff;
|
|
||||||
color: #fff;
|
|
||||||
width: 165px;
|
|
||||||
height: 175px;
|
|
||||||
border-radius: 5%;
|
|
||||||
padding-top: 5px;
|
|
||||||
padding-left: 15px;
|
|
||||||
cursor: pointer;
|
|
||||||
margin: 20px;
|
|
||||||
}
|
|
||||||
.row {
|
|
||||||
white-space:nowrap
|
|
||||||
}
|
|
||||||
.row div{
|
|
||||||
display:inline-block;
|
|
||||||
}
|
|
||||||
.note_container {
|
|
||||||
overflow:hidden;
|
|
||||||
}
|
|
||||||
</style>
|
|
||||||
<body>
|
|
||||||
<h1>Ваши заметки</h1>
|
|
||||||
<div id='field' class='note_container'>
|
|
||||||
<div class='row'>
|
|
||||||
<div class="note_item" onclick="location.href='http://HOSTPORTION/note/add';">Добавить страницу</div>
|
|
||||||
</div>
|
|
||||||
</div>
|
|
||||||
<script>setInterval(update, 5000);update();</script>
|
|
||||||
</body>
|
|
||||||
</html>'''
|
|
||||||
HTMLcontent = HTMLcontent.replace('HOSTPORTION', f"{HOST}:{PORT}")
|
|
||||||
return HTMLcontent
|
|
||||||
elif menu_ind == 'add':
|
|
||||||
HTMLcontent = '''<html>
|
|
||||||
<head>
|
|
||||||
<title>Новая запись</title>
|
|
||||||
<link rel="shortcut icon" href="http://HOSTPORTION/static/sources/icon.ico" type="image/x-icon">
|
|
||||||
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
|
|
||||||
<meta name="description" content="Хранение записок и пометок онлайн.">
|
|
||||||
</head>
|
|
||||||
<style>
|
|
||||||
body {
|
|
||||||
background-color: #eeeeee;
|
|
||||||
}
|
|
||||||
.form {
|
|
||||||
margin-left: 10%;
|
|
||||||
margin-right: 10%;
|
|
||||||
}
|
|
||||||
.textArea_myself {
|
|
||||||
width: 90%;
|
|
||||||
}
|
|
||||||
.titleStyle {
|
|
||||||
width: 77.5%;
|
|
||||||
}
|
|
||||||
</style>
|
|
||||||
<body>
|
|
||||||
<center><h1>Создать заметку</h1></center>
|
|
||||||
<div class='form'>
|
|
||||||
<form action="http://HOSTPORTION/file_api/add">
|
|
||||||
<p>Заголовок: <input class="titleStyle" type="text" name="title"></input>
|
|
||||||
<select size="1" name="color">
|
|
||||||
<option value='77aaff'>Стандартный</option>
|
|
||||||
<option value='FF7477'>Красный</option>
|
|
||||||
<option value='77ffaa'>Зелёный</option>
|
|
||||||
<option value='FFA369'>Жёлтый</option>
|
|
||||||
<option value='FF77FF'>Фиолетовый</option>
|
|
||||||
<option value='77FFFF'>Синий</option>
|
|
||||||
</select>
|
|
||||||
</p>
|
|
||||||
<p><h3>Содержание: </h3></p>
|
|
||||||
<p><textarea class="textArea_myself" name="content" cols="40" rows="45"></textarea></p>
|
|
||||||
<p><input type="submit" value="Создать"> <input type="reset" value="Очистить"></p>
|
|
||||||
</form>
|
|
||||||
</div>
|
|
||||||
</body>
|
|
||||||
</html>'''
|
|
||||||
HTMLcontent = HTMLcontent.replace('HOSTPORTION', f"{HOST}:{PORT}")
|
|
||||||
return HTMLcontent
|
|
||||||
|
|
||||||
@app.route('/file_api/<method>/')
|
|
||||||
def file_api(method):
|
|
||||||
print('METHOD:', method)
|
|
||||||
|
|
||||||
if not checkToken(request.cookies.get('token')):
|
|
||||||
return redirect("/?error=Для использования файлового API нужно авторизоваться.", code=302)
|
|
||||||
|
|
||||||
if method == 'add':
|
|
||||||
userObj = SQLEasy.compareKey(database.getBase('auths'), 'token')[request.cookies.get('token')]['UserID']
|
|
||||||
userObj = SQLEasy.compareKey(database.getBase('Users'), 'ID', hideIndex=False)[userObj]
|
|
||||||
|
|
||||||
title = request.args.get('title')
|
|
||||||
if len(title) < 3:
|
|
||||||
return redirect("/note/add", code=302)
|
|
||||||
color = request.args.get('color')
|
|
||||||
if len(color) < 3:
|
|
||||||
return redirect("/note/add", code=302)
|
|
||||||
content = request.args.get('content')
|
|
||||||
if len(content) == 0:
|
|
||||||
return redirect("/note/add", code=302)
|
|
||||||
|
|
||||||
newID = SQLEasy.autoselectID_fromNew_item(database, 'Pages', 'ID')
|
|
||||||
database.add({
|
|
||||||
'ID': newID,
|
|
||||||
'ownerID': userObj['ID'],
|
|
||||||
'title': title,
|
|
||||||
'content': content,
|
|
||||||
'color': f"#{color}",
|
|
||||||
'created': int(time.time()),
|
|
||||||
'edited': int(time.time())
|
|
||||||
}, 'Pages')
|
|
||||||
return redirect("/note/id/%s" % newID, code=302)
|
|
||||||
if method == 'edit':
|
|
||||||
print('FUCK1488!!!')
|
|
||||||
try:
|
|
||||||
noteID = int(request.args.get('id'))
|
|
||||||
except:
|
|
||||||
return redirect("/", code=302)
|
|
||||||
|
|
||||||
userObj = SQLEasy.compareKey(database.getBase('auths'), 'token')[request.cookies.get('token')]['UserID']
|
|
||||||
userObj = SQLEasy.compareKey(database.getBase('Users'), 'ID', hideIndex=False)[userObj]
|
|
||||||
|
|
||||||
title = request.args.get('title')
|
|
||||||
if len(title) < 3:
|
|
||||||
return redirect("/note/id/%s" % noteID, code=302)
|
|
||||||
color = request.args.get('color')
|
|
||||||
if len(color) < 3:
|
|
||||||
return redirect("/note/id/%s" % noteID, code=302)
|
|
||||||
content = request.args.get('content')
|
|
||||||
if len(content) == 0:
|
|
||||||
return redirect("/note/id/%s" % noteID, code=302)
|
|
||||||
|
|
||||||
database.setItem(
|
|
||||||
'title',
|
|
||||||
title,
|
|
||||||
'ID',
|
|
||||||
noteID,
|
|
||||||
DatabaseName='Pages'
|
|
||||||
)
|
|
||||||
database.setItem(
|
|
||||||
'content',
|
|
||||||
content,
|
|
||||||
'ID',
|
|
||||||
noteID,
|
|
||||||
DatabaseName='Pages'
|
|
||||||
)
|
|
||||||
database.setItem(
|
|
||||||
'color',
|
|
||||||
f"#{color}",
|
|
||||||
'ID',
|
|
||||||
noteID,
|
|
||||||
DatabaseName='Pages'
|
|
||||||
)
|
|
||||||
database.setItem(
|
|
||||||
'edited',
|
|
||||||
int(time.time()),
|
|
||||||
'ID',
|
|
||||||
noteID,
|
|
||||||
DatabaseName='Pages'
|
|
||||||
)
|
|
||||||
|
|
||||||
return redirect("/note/id/%s" % noteID, code=302)
|
|
||||||
|
|
||||||
@app.route('/oauth/<method>')
|
|
||||||
def oauth(method):
|
|
||||||
if method == 'auth':
|
|
||||||
email = request.args.get('email', default=None)
|
|
||||||
if email is None:
|
|
||||||
return redirect("/?error=Не введён адрес электронной почты.", code=302)
|
|
||||||
if not checkMail(email):
|
|
||||||
return redirect("/?error=Неверный адрес электронной почты или пароль.", code=302)
|
|
||||||
email = formatMail(email)
|
|
||||||
|
|
||||||
password = request.args.get('password', default=None)
|
|
||||||
if password is None:
|
|
||||||
return redirect("/?error=Не введён пароль", code=302)
|
|
||||||
if len(password) < 8:
|
|
||||||
return redirect("/?error=Поле \"Пароль\" должно содержать не менее 8 символов!", code=302)
|
|
||||||
if not checkPassword(password):
|
|
||||||
return redirect("/?error=Неверный адрес электронной почты или пароль.", code=302)
|
|
||||||
if not validData_check(email, password):
|
|
||||||
return redirect("/?error=Неверный адрес электронной почты или пароль.", code=302)
|
|
||||||
|
|
||||||
while True:
|
|
||||||
token = genToken()
|
|
||||||
if token not in [item['token'] for item in database.getBase('auths')]:
|
|
||||||
break
|
|
||||||
|
|
||||||
database.add({
|
|
||||||
'token': token,
|
|
||||||
'UserID': SQLEasy.compareKey(database.getBase('Users'), 'email')[email]['ID'],
|
|
||||||
'active': 1
|
|
||||||
}, 'auths')
|
|
||||||
|
|
||||||
res = redirect("/", code=302)
|
|
||||||
res.set_cookie('token', token, max_age=60*60*24*365*2)
|
|
||||||
|
|
||||||
return res
|
|
||||||
elif method == 'register':
|
|
||||||
email = request.args.get('email', default=None)
|
|
||||||
if email is None:
|
|
||||||
return redirect("/?error=Не введён адрес электронной почты.", code=302)
|
|
||||||
|
|
||||||
foward_email = request.args.get('fowardemail', default=None)
|
|
||||||
if email != foward_email:
|
|
||||||
print({"foward_email": foward_email, "email": email})
|
|
||||||
return redirect("/?error=Адреса почтовых ящиков не совпадают.", code=302)
|
|
||||||
del foward_email
|
|
||||||
|
|
||||||
if email in SQLEasy.compareKey(database.getBase('Users'), 'email'):
|
|
||||||
return redirect("/?error=Этот ящик уже зарегистрирован.", code=302)
|
|
||||||
|
|
||||||
password = request.args.get('password', default=None)
|
|
||||||
if password is None:
|
|
||||||
return redirect("/?error=Не введён пароль", code=302)
|
|
||||||
if len(password) < 8:
|
|
||||||
return redirect("/?error=Поле \"Пароль\" должно содержать не менее 8 символов!", code=302)
|
|
||||||
|
|
||||||
foward_password = request.args.get('fowardpassword', default=None)
|
|
||||||
if password != foward_password:
|
|
||||||
return redirect("/?error=Пароли не совподают.", code=302)
|
|
||||||
del foward_password
|
|
||||||
|
|
||||||
database.add({
|
|
||||||
'ID': SQLEasy.autoselectID_fromNew_item(database, 'Users', 'ID'),
|
|
||||||
'email': formatMail(email),
|
|
||||||
'password': password,
|
|
||||||
'verif_code': genToken(8).upper(),
|
|
||||||
'mail_confirm': 0
|
|
||||||
}, 'Users')
|
|
||||||
return redirect("/oauth/confirmation?mail=%s" % formatMail(email), code=302)
|
|
||||||
elif method == 'confirmation':
|
|
||||||
mail = request.args.get('mail', default=None)
|
|
||||||
finish_code = request.args.get('finish_code', default=None)
|
|
||||||
if mail is None and finish_code is None:
|
|
||||||
return redirect("/?error=Не задан ни почтовый ящик, ни код подтверждения при передаче параметров oauth/confirmation", code=302)
|
|
||||||
|
|
||||||
if mail:
|
|
||||||
codeHTML = '''<html>
|
|
||||||
<head>
|
|
||||||
<title>Подтвердите почтовый адрес</title>
|
|
||||||
<link rel="shortcut icon" href="http://HOSTPORTION/static/sources/icon.ico" type="image/x-icon">
|
|
||||||
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
|
|
||||||
<meta name="description" content="Хранение записок и пометок онлайн.">
|
|
||||||
|
|
||||||
<script src="http://HOSTPORTION/static/script.js"></script>
|
|
||||||
</head>
|
|
||||||
<style>
|
|
||||||
body {
|
|
||||||
background-color: #eeeeee;
|
|
||||||
}
|
|
||||||
.authwin {
|
|
||||||
margin-left: 37%;
|
|
||||||
padding-left: 1%;
|
|
||||||
padding-top: 0.05%;
|
|
||||||
margin-top: 10%;
|
|
||||||
margin-bottom: 10%;
|
|
||||||
width: 25%;
|
|
||||||
height: 30%;
|
|
||||||
background-color: #ffccaa;
|
|
||||||
border-radius: 5%;
|
|
||||||
}
|
|
||||||
</style>
|
|
||||||
<body>
|
|
||||||
<div class='authwin' id='authwin'>
|
|
||||||
<center>
|
|
||||||
<h1>Подтвердите почтовый адрес</h1>
|
|
||||||
<p>На ваш почтовый адрес: MAIL_ADRES придёт код активации.</p>
|
|
||||||
<p>Письмо придёт от адреса: BOT_MAIL_ADRES лучше сразу добавьте его в белый список.</p>
|
|
||||||
<button onclick='confirmation_mail("MAIL_ADRES")' style="margin-top: 60px;">Продолжить</button>
|
|
||||||
</center>
|
|
||||||
</div>
|
|
||||||
</body>
|
|
||||||
</html>'''
|
|
||||||
|
|
||||||
codeHTML = codeHTML.replace('HOSTPORTION', f"{HOST}:{PORT}")
|
|
||||||
codeHTML = codeHTML.replace('BOT_MAIL_ADRES', EMAIL)
|
|
||||||
codeHTML = codeHTML.replace('MAIL_ADRES', mail)
|
|
||||||
|
|
||||||
return codeHTML
|
|
||||||
if finish_code:
|
|
||||||
finish_code = finish_code.upper()
|
|
||||||
|
|
||||||
if finish_code not in [code for code in SQLEasy.compareKey(database.getBase('Users'), 'verif_code')]:
|
|
||||||
return redirect("/?error=Неверный код подтверждения.", code=302)
|
|
||||||
else:
|
|
||||||
userObj = SQLEasy.compareKey(database.getBase('Users'), 'verif_code')[finish_code]
|
|
||||||
database.setItem(
|
|
||||||
'mail_confirm',
|
|
||||||
1,
|
|
||||||
'ID',
|
|
||||||
userObj['ID'],
|
|
||||||
DatabaseName='Users'
|
|
||||||
)
|
|
||||||
|
|
||||||
token = genToken()
|
|
||||||
database.add({
|
|
||||||
'token': token,
|
|
||||||
'UserID': userObj['ID'],
|
|
||||||
'active': 1
|
|
||||||
}, 'auths')
|
|
||||||
|
|
||||||
res = redirect("/", code=302)
|
|
||||||
res.set_cookie('token', token, max_age=60*60*24*365*2)
|
|
||||||
|
|
||||||
return res
|
|
||||||
|
|
||||||
return redirect("/?error=Неизвестный ранее метод oauth", code=302)
|
|
||||||
|
|
||||||
@app.route('/api/<method_group>/<method>')
|
|
||||||
def API(method_group, method):
|
|
||||||
if method_group == 'user':
|
|
||||||
if method == 'get_pages':
|
|
||||||
token = request.args.get('token', default=None)
|
|
||||||
autogroup = bool(request.args.get('autogroup', default=False))
|
|
||||||
if not checkToken(token):
|
|
||||||
return '{"error": "invalid token"}'
|
|
||||||
session = SQLEasy.compareKey(database.getBase('auths'), 'token')[token]
|
|
||||||
userID = session['UserID']
|
|
||||||
del session
|
|
||||||
userData = SQLEasy.compareKey(database.getBase('Users'), 'ID', hideIndex=False)[userID]
|
|
||||||
mypages = list()
|
|
||||||
|
|
||||||
for page in database.getBase('Pages'):
|
|
||||||
if page['ownerID'] == userData['ID']:
|
|
||||||
mypages.append(page)
|
|
||||||
ret_mypages = mypages.copy()
|
|
||||||
if autogroup:
|
|
||||||
ret_mypages = list()
|
|
||||||
|
|
||||||
MaxIndex = len(mypages) - 1
|
|
||||||
Index = 0
|
|
||||||
for page in mypages:
|
|
||||||
pageGr = list()
|
|
||||||
for _ in range(6):
|
|
||||||
if Index <= MaxIndex:
|
|
||||||
pageGr.append(mypages[Index])
|
|
||||||
Index += 1
|
|
||||||
ret_mypages.append(pageGr)
|
|
||||||
return json.dumps({
|
|
||||||
"response": ret_mypages
|
|
||||||
}, indent="\t", ensure_ascii=False)
|
|
||||||
|
|
||||||
if method_group == 'confirmation':
|
|
||||||
if method == 'start':
|
|
||||||
email = request.args.get('email', default=None)
|
|
||||||
code = 1
|
|
||||||
warn_text = 'null'
|
|
||||||
if email is None:
|
|
||||||
return '{"error": "email address has been missed"}'
|
|
||||||
if email not in [mail for mail in SQLEasy.compareKey(database.getBase('Users'), 'email')]:
|
|
||||||
return '{"error": "this email not founded"}'
|
|
||||||
if SQLEasy.compareKey(database.getBase('Users'), 'email')[email]['mail_confirm']:
|
|
||||||
return '{"error": "this email was been activated"}'
|
|
||||||
if SQLEasy.compareKey(database.getBase('Users'), 'email')[email]['sended']:
|
|
||||||
code = 2
|
|
||||||
warn_text = '"Message was been sended, please, check your mailbox"'
|
|
||||||
|
|
||||||
verificationCode = SQLEasy.compareKey(database.getBase('Users'), 'email')[email]['verif_code']
|
|
||||||
try:
|
|
||||||
mailObject.send('Код подтверждения', f"Код подтверждения: {verificationCode}", str(email))
|
|
||||||
print('sended to %s' % email)
|
|
||||||
database.setItem(
|
|
||||||
'sended',
|
|
||||||
1,
|
|
||||||
'email',
|
|
||||||
email,
|
|
||||||
DatabaseName='Users'
|
|
||||||
)
|
|
||||||
return '{"response": 1, "warning": %s}' % warn_text
|
|
||||||
except Exception as exc:
|
|
||||||
print('FAILED:\n %s' % traceback.format_exc())
|
|
||||||
return '{"error": "failed send message"}'
|
|
||||||
|
|
||||||
return '{"error": "unknown method"}'
|
|
||||||
return '{"error": "unknown method group"}'
|
|
||||||
|
|
||||||
@app.route('/index.<jap>')
|
|
||||||
def trueINDEX(jap):
|
|
||||||
return redirect("/", code=302)
|
|
||||||
|
|
||||||
@app.route('/index')
|
|
||||||
def trueINDEX_noRasz():
|
|
||||||
return redirect("/", code=302)
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
if __name__ == '__main__':
|
|
||||||
app.run(port=PORT, host=HOST) # Сменить хост
|
|
||||||
Loading…
Reference in New Issue
Block a user