from flask import Flask, url_for, redirect, render_template, request, session, Response from pymongo import MongoClient from datetime import datetime from bson.objectid import ObjectId from werkzeug.security import generate_password_hash, check_password_hash app = Flask(__name__) app.secret_key = 'secret_key' #initialize the database client = MongoClient('localhost', 27017) db = client.flask_db posts_collection = db.posts_collection users_collection = db.users_collection #app routes @app.route('/', methods=['GET']) def index(): return render_template('index.html') @app.route('/board/', methods=['GET']) def board(board_name): links = [ {'name': 'b', 'display_name': '/b/ - random'}, {'name': 'g', 'display_name': '/g/ - technology'}, {'name': 'a', 'display_name': '/a/ - anime'}, {'name': 'v', 'display_name': '/v/ - video games'}, {'name': 'w', 'display_name': '/w/ - wallpapers'}, {'name': 'x', 'display_name': '/x/ - paranormal'}, {'name': 't', 'display_name': '/t/ - test'}, {'name': 's', 'display_name': '/s/ - soyjaks'}, {'name': 'pol', 'display_name': '/pol/ - politically incorrect'} ] posts = posts_collection.find({'board_name': board_name}).sort('timestamp', -1) display_name = next((link['display_name'] for link in links if link['name'] == board_name), board_name) return render_template('board.html', title=board_name, header=display_name, links=links, posts=posts) @app.route('/post', methods=['POST']) def post(): board_name = request.form['board_name'] content = request.form['content'] image = request.files['image'] timestamp = datetime.now() if 'user_id' not in session: username = 'Anonymous' else: username = session['username'] #insert the post into MongoDB post_data = { 'board_name': board_name, 'content': content, 'timestamp': timestamp, 'username' : username } if image: post_data['image'] = image.read() posts_collection.insert_one(post_data) return redirect(url_for('board', board_name=board_name)) @app.route('/image/') def image(post_id): post = posts_collection.find_one({'_id': ObjectId(post_id)}) if post and 'image' in post: return Response(post['image'], mimetype='image/jpeg') else: return 'Image not found', 404 @app.route('/login', methods=['GET']) def login(): return render_template('login.html') @app.route('/login', methods=['POST']) def login_post(): username = request.form['username'] password = request.form['password'] user = users_collection.find_one({'username': username}) if user and check_password_hash(user['password'], password): session['user_id'] = str(user['_id']) session['username'] = username return redirect(url_for('index')) elif user == 'admin' and check_password_hash(user['password'], password): session['user_id'] = str(user['_id']) session['username'] = username return redirect(url_for('admin')) else: return redirect(url_for('login')) @app.route('/register', methods=['GET']) def register(): regalert = request.args.get('regalert', '') return render_template('register.html', regalert=regalert) @app.route('/register', methods=['POST']) def register_post(): username = request.form['username'] password = request.form['password'] hashed_password = generate_password_hash(password, method='pbkdf2:sha256') regalert = '' if users_collection.find_one({'username': username}): regalert = 'username already exists!' return redirect(url_for('register', regalert=regalert)) else: # Insert the user into MongoDB users_collection.insert_one({ 'username': username, 'password': hashed_password }) return redirect(url_for('login')) @app.route('/admin', methods=['GET']) def admin(): admin_user = users_collection.find_one({'username': 'admin'}) success = request.args.get('success', '') if admin_user or session['user_id'] != str(admin_user['_id']): return render_template('admin.html', success=success) else: return url_for('index') @app.route('/deletepost', methods=['POST']) def deletepost(): admin_user = users_collection.find_one({'username': 'admin'}) if not admin_user or session['user_id'] != str(admin_user['_id']): return redirect(url_for('index')) else: post_id = request.form['post_id'] posts_collection.delete_one({'_id': ObjectId(post_id)}) success = 'post deleted!' return redirect(url_for('admin', success=success)) @app.route('/logout') def logout(): session.pop('user_id', None) return redirect(url_for('index')) if __name__ == '__main__': app.run(debug=True)