webappmain.py

from flask import Flask, flash, redirect, render_template, request, session, abort, url_for, escape
import os
import psycopg2
import sys

app = Flask(__name__)


@app.route('/', methods = ['GET', 'POST'])
def home():
	if not session.get('logged_in'):
		return render_template('login.html')
	else:	
		portal_info = prepare_portal()
		return render_template('portal.html', condition = portal_info[0], friendlist = portal_info[1],
								suggestionlist = portal_info[2])

def prepare_portal():
	con = psycopg2.connect("host='localhost' dbname='supportGroupConnect' user='postgres' password='password'")
	cur = con.cursor()
	cur.execute("SELECT condition  FROM condition WHERE condition.id = '" +session['user_id']+"'")
	q_condition = cur.fetchone()

	cur.execute("SELECT username FROM users INNER JOIN friends ON users.id = friends.second_id WHERE first_id='"
					+ session['user_id'] + "'")
	friendlist = []
	row = cur.fetchone()
	while row != None:
		friendlist += row
		row = cur.fetchone()
		
	cur.execute("SELECT username FROM users INNER JOIN condition ON users.id = condition.id WHERE condition.id !=" 
					+ session['user_id'] + " AND condition = '" + session['condition'] + "'")
	suggestionlist = []
	row = cur.fetchone()
	while row != None:
		suggestionlist += row
		row = cur.fetchone()

	con.close()
	return (q_condition, friendlist, suggestionlist)
							
@app.route('/login', methods=['POST'])
def do_admin_login():

	con = psycopg2.connect("host='localhost' dbname='supportGroupConnect' user='postgres' password='password'")   
	cur = con.cursor()
	
	cur.execute("SELECT password  FROM users WHERE users.username = '" + request.form['username']+ "'")
	password = cur.fetchone()
	
	if password is not None and request.form['password'] == password[0]:
		cur.execute("SELECT id  FROM users WHERE users.username = '" + request.form['username']+ "'")
		user_id = cur.fetchone()
	
		cur.execute("SELECT condition FROM condition INNER JOIN users ON " + str(user_id[0]) +" = condition.id")
		condition = cur.fetchone()
	
		session['username'] = request.form['username']
		session['logged_in'] = True
		session['condition'] = condition[0]
		session['user_id'] = str(user_id[0])
	else:
		flash('Invalid username/password; please try again.')

	con.close()
	return home()

@app.route('/createaccount')
def loadcreateaccount():
	return render_template('createaccount.html', createaccountforreal = createaccountforreal)
	
@app.route('/createaccountforreal', methods = ['POST'])
def createaccountforreal():
	con = psycopg2.connect("host='localhost' dbname='supportGroupConnect' user='postgres' password='password'")   
	cur = con.cursor()
	cur.execute("INSERT INTO Users (username, password, bio) VALUES ('" + request.form['username'] + "', '" + request.form['password'] + "', '')")
	con.commit()
	cur.execute("SELECT ID FROM users WHERE users.username = '" + request.form['username']+ "'")
		
	ID = cur.fetchone()[0]
	
	cur.execute("INSERT INTO Condition (id,condition) VALUES (" + str(ID) + ",'" + request.form['condition'] + "')")
	con.commit()
	con.close()
	return render_template('login.html')

@app.route('/login/chatroomcancer')
def chatroomcancer():
	return render_template('chatroomcancer.html', name = session['username'])

@app.route('/addfriend', methods=['POST'])
def addfriend():
	con = psycopg2.connect("host='localhost' dbname='supportGroupConnect' user='postgres' password='password'")   
	cur = con.cursor()
	cur.execute("SELECT id FROM users WHERE users.username = '" + request.form['friendname'] + "'")
	friend_id = cur.fetchone()
	if friend_id != None:
		cur.execute("INSERT INTO friends (first_id, second_id) VALUES ('" + str(session['user_id']) + "', '" + str(friend_id[0]) + "')")
		con.commit()
	else:
		#print error message if user does not exist
		pass
	con.close()
	portal_info = prepare_portal()
	return render_template('portal.html', condition = portal_info[0], friendlist = portal_info[1],
								suggestionlist = portal_info[2])
	#return redirect(url_for('home'))
	#return render_template('portal.html')
	
@app.route('/logout')
def logout():
    session['logged_in'] = False
    session.pop('username', None)
    return redirect(url_for('home'))

if __name__ == "__main__":
    app.secret_key = os.urandom(12)
    app.run(debug=True, host='0.0.0.0', port=4000) #use "localhost:4000" as the url