Compare commits
6 Commits
7f3a9ea135
...
9df4b173fb
| Author | SHA1 | Date | |
|---|---|---|---|
| 9df4b173fb | |||
| c736b95c50 | |||
| 06a7296285 | |||
| 8dc4f61089 | |||
| eae4561e1f | |||
| 41ce9a3dd0 |
@@ -2,63 +2,145 @@ package handlers
|
||||
|
||||
import (
|
||||
"database/sql"
|
||||
"fmt"
|
||||
"html/template"
|
||||
"io"
|
||||
"log"
|
||||
"net/http"
|
||||
"os"
|
||||
"strconv"
|
||||
"synlotto-website/helpers"
|
||||
"synlotto-website/models"
|
||||
"synlotto-website/storage"
|
||||
"time"
|
||||
|
||||
"github.com/gorilla/csrf"
|
||||
)
|
||||
|
||||
func NewTicket(db *sql.DB) http.HandlerFunc {
|
||||
return func(w http.ResponseWriter, r *http.Request) {
|
||||
log.Println("➡️ New ticket form opened")
|
||||
func AddTicket(db *sql.DB) http.HandlerFunc {
|
||||
return helpers.AuthMiddleware(func(w http.ResponseWriter, r *http.Request) {
|
||||
rows, err := db.Query(`
|
||||
SELECT DISTINCT draw_date
|
||||
FROM results_thunderball
|
||||
ORDER BY draw_date DESC
|
||||
`)
|
||||
if err != nil {
|
||||
log.Println("❌ Failed to load draw dates:", err)
|
||||
http.Error(w, "Unable to load draw dates", http.StatusInternalServerError)
|
||||
return
|
||||
}
|
||||
defer rows.Close()
|
||||
|
||||
tmpl := template.Must(template.ParseFiles(
|
||||
var drawDates []string
|
||||
for rows.Next() {
|
||||
var date string
|
||||
if err := rows.Scan(&date); err == nil {
|
||||
drawDates = append(drawDates, date)
|
||||
}
|
||||
}
|
||||
|
||||
context := helpers.TemplateContext(w, r)
|
||||
context["csrfField"] = csrf.TemplateField(r)
|
||||
context["DrawDates"] = drawDates
|
||||
|
||||
tmpl := template.Must(template.New("").Funcs(helpers.TemplateFuncs()).ParseFiles(
|
||||
"templates/layout.html",
|
||||
"templates/new_ticket.html",
|
||||
"templates/account/tickets/add_ticket.html",
|
||||
))
|
||||
|
||||
err := tmpl.ExecuteTemplate(w, "layout", map[string]interface{}{
|
||||
"csrfField": csrf.TemplateField(r),
|
||||
"Page": "new_ticket",
|
||||
"Data": nil,
|
||||
})
|
||||
err = tmpl.ExecuteTemplate(w, "layout", context)
|
||||
if err != nil {
|
||||
log.Println("❌ Template error:", err)
|
||||
log.Println("❌ Template render error:", err)
|
||||
http.Error(w, "Error rendering form", http.StatusInternalServerError)
|
||||
}
|
||||
}
|
||||
})
|
||||
}
|
||||
|
||||
func SubmitTicket(db *sql.DB) http.HandlerFunc {
|
||||
return func(w http.ResponseWriter, r *http.Request) {
|
||||
if _, ok := helpers.GetCurrentUserID(r); !ok {
|
||||
return helpers.AuthMiddleware(func(w http.ResponseWriter, r *http.Request) {
|
||||
err := r.ParseMultipartForm(10 << 20)
|
||||
if err != nil {
|
||||
http.Error(w, "Invalid form", http.StatusBadRequest)
|
||||
return
|
||||
}
|
||||
|
||||
userID, ok := helpers.GetCurrentUserID(r)
|
||||
if !ok {
|
||||
http.Redirect(w, r, "/login", http.StatusSeeOther)
|
||||
return
|
||||
}
|
||||
ticket := models.MyTicket{
|
||||
GameType: r.FormValue("game_type"),
|
||||
DrawDate: r.FormValue("draw_date"),
|
||||
Ball1: helpers.Atoi(r.FormValue("ball1")),
|
||||
Ball2: helpers.Atoi(r.FormValue("ball2")),
|
||||
Ball3: helpers.Atoi(r.FormValue("ball3")),
|
||||
Ball4: helpers.Atoi(r.FormValue("ball4")),
|
||||
Ball5: helpers.Atoi(r.FormValue("ball5")),
|
||||
Bonus1: helpers.Nullable(helpers.Atoi(r.FormValue("bonus1"))),
|
||||
Bonus2: helpers.Nullable(helpers.Atoi(r.FormValue("bonus2"))),
|
||||
|
||||
game := r.FormValue("game_type")
|
||||
drawDate := r.FormValue("draw_date")
|
||||
purchaseMethod := r.FormValue("purchase_method")
|
||||
purchaseDate := r.FormValue("purchase_date")
|
||||
purchaseTime := r.FormValue("purchase_time")
|
||||
|
||||
if purchaseTime != "" {
|
||||
purchaseDate += "T" + purchaseTime
|
||||
}
|
||||
|
||||
if err := storage.InsertTicket(db, ticket); err != nil {
|
||||
log.Println("❌ Failed to insert ticket:", err)
|
||||
http.Error(w, "Error storing ticket", http.StatusInternalServerError)
|
||||
return
|
||||
imagePath := ""
|
||||
file, handler, err := r.FormFile("ticket_image")
|
||||
if err == nil && handler != nil {
|
||||
defer file.Close()
|
||||
filename := fmt.Sprintf("uploads/ticket_%d_%s", time.Now().UnixNano(), handler.Filename)
|
||||
out, err := os.Create(filename)
|
||||
if err == nil {
|
||||
defer out.Close()
|
||||
io.Copy(out, file)
|
||||
imagePath = filename
|
||||
}
|
||||
}
|
||||
|
||||
http.Redirect(w, r, "/", http.StatusSeeOther)
|
||||
ballCount := 6
|
||||
bonusCount := 2
|
||||
|
||||
balls := make([][]int, ballCount)
|
||||
bonuses := make([][]int, bonusCount)
|
||||
|
||||
for i := 1; i <= ballCount; i++ {
|
||||
balls[i-1] = helpers.ParseIntSlice(r.Form["ball"+strconv.Itoa(i)])
|
||||
}
|
||||
for i := 1; i <= bonusCount; i++ {
|
||||
bonuses[i-1] = helpers.ParseIntSlice(r.Form["bonus"+strconv.Itoa(i)])
|
||||
}
|
||||
|
||||
lineCount := len(balls[0])
|
||||
for i := 0; i < lineCount; i++ {
|
||||
var b [6]int
|
||||
var bo [2]int
|
||||
|
||||
for j := 0; j < ballCount; j++ {
|
||||
if j < len(balls) && i < len(balls[j]) {
|
||||
b[j] = balls[j][i]
|
||||
}
|
||||
}
|
||||
for j := 0; j < bonusCount; j++ {
|
||||
if j < len(bonuses) && i < len(bonuses[j]) {
|
||||
bo[j] = bonuses[j][i]
|
||||
}
|
||||
}
|
||||
|
||||
_, err := db.Exec(`
|
||||
INSERT INTO my_tickets (
|
||||
user_id, game_type, draw_date,
|
||||
ball1, ball2, ball3, ball4, ball5, ball6,
|
||||
bonus1, bonus2,
|
||||
purchase_method, purchase_date, image_path
|
||||
) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
|
||||
`,
|
||||
userID, game, drawDate,
|
||||
b[0], b[1], b[2], b[3], b[4], b[5],
|
||||
bo[0], bo[1],
|
||||
purchaseMethod, purchaseDate, imagePath,
|
||||
)
|
||||
if err != nil {
|
||||
log.Println("❌ Insert failed:", err)
|
||||
}
|
||||
}
|
||||
|
||||
http.Redirect(w, r, "/tickets", http.StatusSeeOther)
|
||||
})
|
||||
}
|
||||
|
||||
func ListTickets(db *sql.DB) http.HandlerFunc {
|
||||
|
||||
14
helpers/parse.go
Normal file
14
helpers/parse.go
Normal file
@@ -0,0 +1,14 @@
|
||||
package helpers
|
||||
|
||||
import "strconv"
|
||||
|
||||
func ParseIntSlice(input []string) []int {
|
||||
var out []int
|
||||
for _, s := range input {
|
||||
n, err := strconv.Atoi(s)
|
||||
if err == nil {
|
||||
out = append(out, n)
|
||||
}
|
||||
}
|
||||
return out
|
||||
}
|
||||
@@ -2,7 +2,6 @@ package helpers
|
||||
|
||||
import (
|
||||
"html/template"
|
||||
"log"
|
||||
"net/http"
|
||||
"synlotto-website/models"
|
||||
)
|
||||
@@ -48,8 +47,6 @@ func TemplateContext(w http.ResponseWriter, r *http.Request) map[string]interfac
|
||||
currentUser = nil
|
||||
}
|
||||
|
||||
log.Printf("🧪 TemplateContext user: %#v", currentUser)
|
||||
|
||||
return map[string]interface{}{
|
||||
"Flash": flash,
|
||||
"User": currentUser,
|
||||
|
||||
10
main.go
10
main.go
@@ -27,17 +27,15 @@ func main() {
|
||||
mux.HandleFunc("/", handlers.Home(db))
|
||||
mux.HandleFunc("/new", handlers.NewDraw) // ToDo: needs to be wrapped in admin auth
|
||||
mux.HandleFunc("/submit", handlers.Submit)
|
||||
//mux.HandleFunc("/tickets", middleware.Auth(true)(handlers.ListTickets(db)))
|
||||
//mux.HandleFunc("/submit-ticket", helpers.AuthMiddleware(handlers.SubmitTicket(db)))
|
||||
mux.HandleFunc("/login", middleware.Auth(false)(handlers.Login))
|
||||
mux.HandleFunc("/logout", handlers.Logout)
|
||||
mux.HandleFunc("/signup", middleware.Auth(false)(handlers.Signup))
|
||||
|
||||
// Result pages
|
||||
mux.HandleFunc("/results/thunderball", handlers.ResultsThunderball(db))
|
||||
|
||||
// Account Pages
|
||||
mux.HandleFunc("account/ticket/add_ticket", middleware.Auth(true)(handlers.NewTicket(db)))
|
||||
mux.HandleFunc("/login", middleware.Auth(false)(handlers.Login))
|
||||
mux.HandleFunc("/logout", handlers.Logout)
|
||||
mux.HandleFunc("/signup", middleware.Auth(false)(handlers.Signup))
|
||||
mux.HandleFunc("/account/tickets/add_ticket", middleware.Auth(true)(handlers.AddTicket(db)))
|
||||
|
||||
log.Println("🌐 Running on http://localhost:8080")
|
||||
http.ListenAndServe(":8080", helpers.RateLimit(csrfMiddleware(mux)))
|
||||
|
||||
@@ -20,6 +20,7 @@ func SetDB(database *sql.DB) {
|
||||
|
||||
func CreateUser(username, passwordHash string) error {
|
||||
_, err := db.Exec("INSERT INTO users (username, password_hash) VALUES (?, ?)", username, passwordHash)
|
||||
|
||||
return err
|
||||
}
|
||||
|
||||
@@ -34,6 +35,7 @@ func GetUserByUsername(username string) *User {
|
||||
}
|
||||
return nil
|
||||
}
|
||||
|
||||
return &user
|
||||
}
|
||||
|
||||
@@ -48,7 +50,7 @@ func GetUserByID(id int) *User {
|
||||
}
|
||||
return nil
|
||||
}
|
||||
log.Printf("📦 Looking up user ID %d", id)
|
||||
|
||||
return &user
|
||||
}
|
||||
|
||||
@@ -62,7 +64,9 @@ func LogLoginAttempt(username string, success bool) {
|
||||
|
||||
func boolToInt(b bool) int {
|
||||
if b {
|
||||
|
||||
return 1
|
||||
}
|
||||
|
||||
return 0
|
||||
}
|
||||
|
||||
@@ -34,6 +34,7 @@ func InitDB(filepath string) *sql.DB {
|
||||
createMyTicketsTable := `
|
||||
CREATE TABLE IF NOT EXISTS my_tickets (
|
||||
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
||||
userId INTEGER NOT NULL,
|
||||
game_type TEXT NOT NULL,
|
||||
draw_date TEXT NOT NULL,
|
||||
ball1 INTEGER,
|
||||
@@ -44,7 +45,10 @@ func InitDB(filepath string) *sql.DB {
|
||||
bonus1 INTEGER,
|
||||
bonus2 INTEGER,
|
||||
duplicate BOOLEAN DEFAULT 0,
|
||||
created_at DATETIME DEFAULT CURRENT_TIMESTAMP
|
||||
purchased_date TEXT,
|
||||
purchased_location TEXT,
|
||||
created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
|
||||
FOREIGN KEY (userId) REFERENCES users(id)
|
||||
);`
|
||||
|
||||
if _, err := db.Exec(createMyTicketsTable); err != nil {
|
||||
|
||||
Reference in New Issue
Block a user