Personal blog written from scratch using Node.js, Bootstrap, and MySQL.
https://jrtechs.net
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
268 lines
7.7 KiB
268 lines
7.7 KiB
const mysql = require('mysql');
|
|
|
|
const sanitizer = require('sanitizer');
|
|
|
|
const Promise = require('promise');
|
|
|
|
const crypto = require('crypto');
|
|
|
|
const qs = require('querystring');
|
|
|
|
const utils = require('../utils/utils.js');
|
|
|
|
var con = mysql.createConnection({
|
|
host: "localhost",
|
|
user: "blog_user",
|
|
password: utils.getFileLine('../sql_secret'),
|
|
database: "jrtechs_blog"
|
|
});
|
|
|
|
|
|
con.connect(function(err) {
|
|
if (err) throw err;
|
|
});
|
|
|
|
/**
|
|
* Function used to query the database for records
|
|
*
|
|
* @param sqlStatement
|
|
* @returns {Array}
|
|
*/
|
|
var fetch = function(sqlStatement)
|
|
{
|
|
return new Promise(function(resolve, reject)
|
|
{
|
|
con.query(sqlStatement, function (err, result)
|
|
{
|
|
if(err)
|
|
{
|
|
reject();
|
|
}
|
|
resolve(result);
|
|
});
|
|
});
|
|
};
|
|
|
|
module.exports=
|
|
{
|
|
/**
|
|
* Function used to use insert statements into the database
|
|
*
|
|
* Don't worry, the input gets sanitized
|
|
*
|
|
* @param sqlStatement
|
|
* @return the id of the new record - if there is one
|
|
*/
|
|
insert : function(sqlStatement)
|
|
{
|
|
return new Promise(function(resolve, reject)
|
|
{
|
|
con.query(sanitizer.sanitize(sqlStatement), function (err, result)
|
|
{
|
|
if (err)
|
|
{
|
|
console.log(err);
|
|
resolve(0);
|
|
}
|
|
resolve(result.insertId);
|
|
});
|
|
})
|
|
},
|
|
|
|
/**
|
|
* Not to be mistaken for getPostData() in @file utils/utils.js,
|
|
* this function extracts a post entry from the sql server
|
|
*
|
|
* @param requestURL url user used to request blog post
|
|
* @return {*} the entry found in the data base -- if any
|
|
*/
|
|
getPost : function(requestURL)
|
|
{
|
|
return new Promise(function(resolve, reject)
|
|
{
|
|
var splitURL = requestURL.split("/")
|
|
var q = "select * from categories where url='" + splitURL[1] + "'";
|
|
|
|
fetch(q).then(function (result_category)
|
|
{
|
|
if(result_category.length != 0)
|
|
{
|
|
|
|
var q2 = "select * from posts where category_id='" + result_category[0].category_id +
|
|
"' and url='" + splitURL[2] + "'";
|
|
|
|
fetch(q2).then(function (result_posts)
|
|
{
|
|
if(result_posts != 0)
|
|
{
|
|
resolve(result_posts[0]);
|
|
}
|
|
else
|
|
{
|
|
resolve(0);
|
|
}
|
|
});
|
|
}
|
|
else
|
|
{
|
|
resolve(0);
|
|
}
|
|
|
|
});
|
|
|
|
});
|
|
},
|
|
/**
|
|
* Function used to retrieve all categories when making the sidebar
|
|
*
|
|
* @return {Promise<Response> | * | Array}
|
|
*/
|
|
getCategories : function()
|
|
{
|
|
var q = "select * from categories";
|
|
return fetch(q);
|
|
},
|
|
|
|
/**
|
|
* Function which currently returns all posts of a particular category from the database
|
|
* @param requestURL
|
|
* @return {*|Promise}
|
|
*/
|
|
getPostsFromCategory: function(requestURL)
|
|
{
|
|
return new Promise(function(resolve, reject)
|
|
{
|
|
var q = "select * from categories where name ='" + requestURL + "' limit 1";
|
|
fetch(q).then(function(categories)
|
|
{
|
|
if(categories.length != 0)
|
|
{
|
|
var qPosts = "select * from posts where category_id='" + categories[0].category_id + "'";
|
|
resolve(fetch(qPosts));
|
|
}
|
|
else
|
|
{
|
|
resolve([]);
|
|
}
|
|
});
|
|
});
|
|
},
|
|
|
|
/**
|
|
* Helper method which returns a list of objects which contains the url and name of thee ten most recent posts
|
|
*
|
|
* {[name: , url: ],[name: , url: ],[name: , url: ],...}
|
|
*
|
|
* @return {*|Promise}
|
|
*/
|
|
getRecentPosts: function()
|
|
{
|
|
return new Promise(function(resolve, reject)
|
|
{
|
|
var q = "select name,url, category_id from posts order by post_id desc limit 10";
|
|
fetch(q).then(function(sqlPosts)
|
|
{
|
|
var promises = [];
|
|
sqlPosts.forEach(function(post)
|
|
{
|
|
promises.push(new Promise(function(res, rej)
|
|
{
|
|
var getCategory = "select url from categories where category_id='" + post.category_id + "'";
|
|
fetch(getCategory).then(function(urls)
|
|
{
|
|
var obj = new Object();
|
|
obj.name = post.name;
|
|
obj.url = post.url;
|
|
obj.category = urls[0].url;
|
|
res(obj);
|
|
});
|
|
}));
|
|
});
|
|
Promise.all(promises).then(function(goodies)
|
|
{
|
|
resolve(goodies);
|
|
});
|
|
});
|
|
});
|
|
},
|
|
getPopularPosts: function()
|
|
{
|
|
return new Promise(function(resolve, reject)
|
|
{
|
|
var q = "select * from popular_posts";
|
|
fetch(q).then(function(sqlPosts)
|
|
{
|
|
|
|
});
|
|
});
|
|
},
|
|
/**
|
|
* Function which checks to see if a user successfully logged in based on
|
|
* the post data which they sent
|
|
*
|
|
* @param postData the post data
|
|
* @return {*|Promise} a json object with {pass: , user: }
|
|
* the pass is whether or not they logged in successfully and the user is
|
|
* the username they successfully logged in with
|
|
*/
|
|
checkLogin: function(postData)
|
|
{
|
|
var post = qs.parse(postData);
|
|
return new Promise(function(resolve, reject)
|
|
{
|
|
var result = Object();
|
|
result.pass = false;
|
|
|
|
if(post.username && post.password)
|
|
{
|
|
var cleanName = sanitizer.sanitize(post.username);
|
|
var cleanPassword = sanitizer.sanitize(post.password);
|
|
|
|
var getSalt = "select * from users where user_name='" + cleanName + "'";
|
|
fetch(getSalt).then(function(saltResult)
|
|
{
|
|
if(saltResult.length == 1)
|
|
{
|
|
var hashedPassword = crypto.createHash('sha256')
|
|
.update(cleanPassword + saltResult[0].salt)
|
|
.digest('hex');
|
|
if(saltResult[0].password === hashedPassword)
|
|
{
|
|
//yay!
|
|
result.pass = true;
|
|
result.user = cleanName;
|
|
resolve(result);
|
|
}
|
|
else
|
|
{
|
|
//wrong password
|
|
resolve(result)
|
|
}
|
|
}
|
|
else
|
|
{
|
|
//incorrect username
|
|
resolve(result);
|
|
}
|
|
})
|
|
}
|
|
else
|
|
{
|
|
//no login attempts were made
|
|
resolve(result);
|
|
}
|
|
});
|
|
},
|
|
|
|
getCategory: function(categoryId)
|
|
{
|
|
return fetch("select * from categories where category_id='" + categoryId + "'");
|
|
},
|
|
|
|
getDownload: function(downloadURL)
|
|
{
|
|
var cleanD = sanitizer.sanitize(downloadURL);
|
|
var q = "select * from downloads where url='" + cleanD + "' limit 1";
|
|
return fetch(q);
|
|
}
|
|
};
|