Create newweb.py

newweb.py

@@ -0,0 +1,262 @@
+from flask import Flask, render_template, request, redirect, url_for, flash, jsonify
+from flask_login import UserMixin, LoginManager, login_user, login_required, logout_user, current_user
+from flask_wtf.csrf import generate_csrf
+from werkzeug.security import generate_password_hash, check_password_hash
+from werkzeug.utils import secure_filename
+from datetime import datetime
+import sqlite3
+import uuid
+import os
+import asyncio
+from telethon import TelegramClient, events
+from FastTelethonhelper import fast_download, fast_upload
+
+# Configuration
+app_id = os.getenv("APP_ID")
+api_hash = os.getenv("API_HASH")
+btoken = os.getenv("BOT")
+chnl = os.getenv("CHN")
+
+api_id = int(app_id)
+bot_token = str(btoken)
+channel = int(chnl)
+
+app = Flask("Simplz")
+app.config['SECRET_KEY'] = 'your_secret_key'
+app.config['UPLOAD_FOLDER'] = 'static/users/uploaded_images'
+app.config['ALLOWED_EXTENSIONS'] = {'png', 'jpg', 'jpeg', 'gif'}
+
+login_manager = LoginManager(app)
+login_manager.login_view = 'login'
+
+# Database functions
+def get_db():
+    conn = sqlite3.connect('instance/database.db')
+    conn.row_factory = sqlite3.Row
+    return conn
+
+def close_db(conn):
+    conn.close()
+
+# User model
+class User(UserMixin):
+    def __init__(self, id, username, email, password):
+        self.id = id
+        self.username = username
+        self.email = email
+        self.password = password
+
+@login_manager.user_loader
+def load_user(user_id):
+    conn = get_db()
+    user_data = conn.execute('SELECT * FROM user WHERE id = ?', (user_id,)).fetchone()
+    close_db(conn)
+    if user_data:
+        return User(user_data['id'], user_data['username'], user_data['email'], user_data['password'])
+    return None
+
+@app.route('/')
+@login_required
+def index():
+    conn = get_db()
+    posts = conn.execute('''
+        SELECT * FROM post WHERE user_id = ? 
+        UNION ALL 
+        SELECT * FROM post 
+        WHERE user_id IN (SELECT followed_id FROM followers WHERE follower_id = ?) 
+        ORDER BY created_at DESC
+    ''', (current_user.id, current_user.id)).fetchall()
+    close_db(conn)
+    
+    csrf_token = request.environ.get('HTTP_X_CSRFTOKEN')
+    return render_template('index.html', posts=posts, csrf_token=csrf_token)
+
+@app.route('/register', methods=['GET', 'POST'])
+def register():
+    if request.method == 'POST':
+        email = request.form['email']
+        username = request.form['username']
+        password = request.form['password']
+        password2 = request.form['password2']
+
+        if password != password2:
+            flash('Passwords do not match. Please try again.', 'error')
+            return render_template('register.html')
+
+        conn = get_db()
+        existing_user_with_username = conn.execute('SELECT * FROM user WHERE username = ?', (username,)).fetchone()
+        existing_user_with_email = conn.execute('SELECT * FROM user WHERE email = ?', (email,)).fetchone()
+
+        if existing_user_with_username:
+            flash('Username already exists. Please choose a different username.', 'error')
+            return render_template('register.html')
+
+        if existing_user_with_email:
+            flash('Email address already registered. Please use a different email.', 'error')
+            return render_template('register.html')
+
+        hashed_password = generate_password_hash(password, method='scrypt')
+        conn.execute('INSERT INTO user (username, email, password) VALUES (?, ?, ?)', (username, email, hashed_password))
+        conn.commit()
+        close_db(conn)
+
+        flash('Account created successfully! Please log in.', 'success')
+        return redirect(url_for('login'))
+
+    return render_template('register.html')
+
+@app.route('/login', methods=['GET', 'POST'])
+def login():
+    if request.method == 'POST':
+        username = request.form['username']
+        password = request.form['password']
+        conn = get_db()
+        user_data = conn.execute('SELECT * FROM user WHERE username = ?', (username,)).fetchone()
+        close_db(conn)
+
+        if user_data and check_password_hash(user_data['password'], password):
+            user = User(user_data['id'], user_data['username'], user_data['email'], user_data['password'])
+            login_user(user)
+            return redirect(url_for('index'))
+        else:
+            flash('Invalid username or password. Fields are case sensitive.', 'error')
+    return render_template('login.html')
+
+@app.route('/logout')
+@login_required
+def logout():
+    logout_user()
+    return redirect(url_for('index'))
+
+@app.route('/create_post', methods=['POST'])
+@login_required
+def create_post():
+    content = request.form['content']
+    image = request.files['image']
+
+    if image and allowed_file(image.filename):
+        filename = str(uuid.uuid4()) + secure_filename(image.filename)
+        image.save(os.path.join(app.config['UPLOAD_FOLDER'], filename))
+    else:
+        filename = None
+
+    conn = get_db()
+    conn.execute('INSERT INTO post (content, user_id, filename) VALUES (?, ?, ?)', (content, current_user.id, filename))
+    conn.commit()
+    close_db(conn)
+    return redirect(url_for('index'))
+
+@app.route('/delete_post/<int:post_id>', methods=['POST'])
+@login_required
+def delete_post(post_id):
+    conn = get_db()
+    post = conn.execute('SELECT * FROM post WHERE id = ?', (post_id,)).fetchone()
+
+    if post and post['user_id'] == current_user.id:
+        if post['filename']:
+            try:
+                os.remove(os.path.join(app.config['UPLOAD_FOLDER'], post['filename']))
+            except Exception as e:
+                flash(f"Error deleting image file: {str(e)}", "error")
+
+        conn.execute('DELETE FROM post WHERE id = ?', (post_id,))
+        conn.execute('DELETE FROM like WHERE post_id = ?', (post_id,))
+        conn.commit()
+    close_db(conn)
+    return redirect(url_for('index'))
+
+@app.route('/follow/<int:user_id>', methods=['POST'])
+@login_required
+def follow(user_id):
+    conn = get_db()
+    user_to_follow = conn.execute('SELECT * FROM user WHERE id = ?', (user_id,)).fetchone()
+
+    if user_to_follow is None:
+        flash('User not found.', 'error')
+        return redirect(url_for('explore'))
+
+    if current_user.is_following(user_to_follow):
+        flash('You are already following this user.', 'info')
+        return redirect(url_for('view_profile', user_id=user_id))
+
+    try:
+        conn.execute('INSERT INTO followers (follower_id, followed_id) VALUES (?, ?)', (current_user.id, user_id))
+        conn.commit()
+    except Exception as e:
+        flash('Failed to follow the user. Please try again.', 'error')
+        print(f"Error: {str(e)}")
+        return redirect(url_for('view_profile', user_id=user_id))
+
+    flash(f"You are now following {user_to_follow['username']}.", 'success')
+    close_db(conn)
+    return redirect(url_for('view_profile', user_id=user_id))
+
+@app.route('/unfollow/<int:user_id>', methods=['POST'])
+@login_required
+def unfollow(user_id):
+    conn = get_db()
+    user_to_unfollow = conn.execute('SELECT * FROM user WHERE id = ?', (user_id,)).fetchone()
+
+    if user_to_unfollow is None:
+        flash('User not found.', 'danger')
+        return redirect(url_for('index'))
+
+    if current_user.is_following(user_to_unfollow):
+        conn.execute('DELETE FROM followers WHERE follower_id = ? AND followed_id = ?', (current_user.id, user_id))
+        conn.commit()
+        flash('You have unfollowed {}.'.format(user_to_unfollow['username']), 'success')
+    else:
+        flash('You are not following this user.', 'info')
+
+    close_db(conn)
+    return redirect(url_for('view_profile', user_id=user_id))
+
+@app.route('/search_user', methods=['GET'])
+def search_user():
+    search_query = request.args.get('search_query', '')
+    conn = get_db()
+    users = conn.execute('''
+        SELECT * FROM user 
+        WHERE username LIKE ? OR first_name LIKE ? OR last_name LIKE ?
+    ''', (f'%{search_query}%', f'%{search_query}%', f'%{search_query}%')).fetchall()
+    close_db(conn)
+
+    csrf_token = generate_csrf()
+    return render_template('search_results.html', users=users, csrf_token=csrf_token, searchq=search_query)
+
+# Other routes and functions remain mostly unchanged
+
+def start_flask_app():
+    with app.app_context():
+        # Ensure database and tables exist
+        conn = get_db()
+        conn.execute('''CREATE TABLE IF NOT EXISTS user (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            username TEXT UNIQUE,
+            email TEXT UNIQUE,
+            password TEXT
+        )''')
+
+        conn.execute('''CREATE TABLE IF NOT EXISTS post (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            content TEXT,
+            created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+            user_id INTEGER,
+            filename TEXT,
+            FOREIGN KEY (user_id) REFERENCES user (id)
+        )''')
+
+        conn.execute('''CREATE TABLE IF NOT EXISTS followers (
+            follower_id INTEGER,
+            followed_id INTEGER,
+            PRIMARY KEY (follower_id, followed_id),
+            FOREIGN KEY (follower_id) REFERENCES user (id),
+            FOREIGN KEY (followed_id) REFERENCES user (id)
+        )''')
+        
+        close_db(conn)
+    
+    app.run(debug=True)
+
+if __name__ == '__main__':
+    start_flask_app()