H3ALY
e3428911b9
- Implemented `/account/messages/archive` route for soft-archiving messages - Added `is_archived` flag to `users_messages` schema and model - Topbar dropdown now reflects accurate unread message count - Fixed missing route registration for archive handler - Improved message visibility checks to prevent access violations - Placeholder for rate-limit (429) error page rendering identified
75 lines
1.8 KiB
Go
75 lines
1.8 KiB
Go
package handlers
|
|
|
|
import (
|
|
"database/sql"
|
|
"log"
|
|
"net/http"
|
|
|
|
"synlotto-website/helpers"
|
|
"synlotto-website/storage"
|
|
)
|
|
|
|
func MessagesInboxHandler(db *sql.DB) http.HandlerFunc {
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
|
data := BuildTemplateData(db, w, r)
|
|
context := helpers.TemplateContext(w, r, data)
|
|
|
|
tmpl := helpers.LoadTemplateFiles("messages.html", "templates/account/messages/index.html")
|
|
|
|
err := tmpl.ExecuteTemplate(w, "layout", context)
|
|
if err != nil {
|
|
helpers.RenderError(w, r, 500)
|
|
}
|
|
}
|
|
}
|
|
|
|
func ReadMessageHandler(db *sql.DB) http.HandlerFunc {
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
|
idStr := r.URL.Query().Get("id")
|
|
messageID := helpers.Atoi(idStr)
|
|
|
|
session, _ := helpers.GetSession(w, r)
|
|
userID, ok := session.Values["user_id"].(int)
|
|
if !ok {
|
|
helpers.RenderError(w, r, 403)
|
|
return
|
|
}
|
|
|
|
message, err := storage.GetMessageByID(db, userID, messageID)
|
|
if err != nil {
|
|
log.Printf("❌ Message not found: %v", err)
|
|
message = nil
|
|
} else if !message.IsRead {
|
|
_ = storage.MarkMessageAsRead(db, messageID, userID)
|
|
}
|
|
|
|
data := BuildTemplateData(db, w, r)
|
|
context := helpers.TemplateContext(w, r, data)
|
|
context["Message"] = message
|
|
|
|
tmpl := helpers.LoadTemplateFiles("read-message.html", "templates/account/messages/read.html")
|
|
|
|
tmpl.ExecuteTemplate(w, "layout", context)
|
|
}
|
|
}
|
|
|
|
func ArchiveMessageHandler(db *sql.DB) http.HandlerFunc {
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
|
id := helpers.Atoi(r.URL.Query().Get("id"))
|
|
userID, ok := helpers.GetCurrentUserID(r)
|
|
if !ok {
|
|
helpers.RenderError(w, r, 403)
|
|
return
|
|
}
|
|
|
|
err := storage.ArchiveMessage(db, userID, id)
|
|
if err != nil {
|
|
helpers.SetFlash(w, r, "Failed to archive message.")
|
|
} else {
|
|
helpers.SetFlash(w, r, "Message archived.")
|
|
}
|
|
|
|
http.Redirect(w, r, "/account/messages", http.StatusSeeOther)
|
|
}
|
|
}
|