app.py

from flask import Flask, render_template, request, redirect, make_response, send_from_directory
from ticket import Ticket, Constant, cookiePool, initChecker, InputValidator, passwordChecker, extCommand
import os

rootUsername = 'insider_admin'
rootPassword = 'insider_admin'
rootMailAddr = 'insider_admin@ticket.system'


app = Flask(__name__)
ticket = Ticket('./backend')
ini = initChecker('inited.txt')
validator = InputValidator()
pswdCheck = passwordChecker()
ext = extCommand(ticket, 'users.txt', 'trains.txt', rootUsername)

userPool = cookiePool()

def initRoot(): # root cannot login in web frontend.
    tmp = ticket.login(rootUsername, rootPassword)
    if not tmp:
        tmp = ticket.add_user('-1', rootUsername, rootPassword, rootUsername, rootMailAddr, '10')
        if not tmp:
            print('Internal Sever Error!')
            exit(0)
        ticket.login(rootUsername, rootPassword)

def logoutRoot():
    ticket.logout(rootUsername)

def checkCookie():
    userID = request.cookies.get('id')
    return userPool.check(userID)

def preCheck():
    return ini.check() and checkCookie()

@app.route('/down')
def down():
    if not ini.down():
        return redirect('/')
    return 'SERVER IS DOWN!'

@app.route('/login', methods=("GET", "POST"))
def login():
    if ini.down():
        return redirect('/down')
    if not ini.check():
        return redirect('/')
    if checkCookie():
        return redirect('/')

    if request.method == "GET":
        return render_template('form.html', flag = True, form = Constant.login_form, form_path = '/login', title = 'User Login')

    form = request.form.to_dict()
    if not validator.check_Normal(form):
        return render_template('form.html', flag = True, message = 'Illegal Input!', form = Constant.login_form, form_path = '/login', title = 'User Login')

    print()
    if pswdCheck.check(form['username'], form['password']): # re-login and password is correct.
        ticket.logout(form['username'])

    check = ticket.login(form['username'], form['password'])
    if not check:
        return render_template('form.html', flag = True, message = 'Failed', form = Constant.login_form, form_path = '/login', title = 'User Login')
    else:
        ret = make_response(redirect('/'))
        tmp = ticket.query_profile(form['username'], form['username'])
        ret.set_cookie('id', userPool.push(form['username'], (tmp[1], tmp[3])))
        pswdCheck.push(form['username'], form['password'])
        return ret

@app.route('/logout')
def logout():
    if ini.down():
        return redirect('/down')
    if not preCheck():
        return redirect('/')
    userID = request.cookies.get('id')
    name = userPool.query(userID)
    ticket.logout(name[0])
    userPool.erase(userID)
    return redirect('/')


def getUsername():
    userID = request.cookies.get('id')
    return userPool.query(userID)[0]

def getFriendlyname():
    userID = request.cookies.get('id')
    return userPool.query(userID)[1]

def checkPrivilege(): # users with privilege level >= 1 are administrators.
    userID = request.cookies.get('id')
    return int(userPool.query(userID)[2]) > 1

@app.route('/init', methods=("GET", "POST"))
def init():
    if ini.down():
        return redirect('/down')
    if request.method == "GET":
        return render_template('form.html', flag = True, form = Constant.init_form, form_path = '/init', title = 'System Initialization')

    form = request.form.to_dict()
    if not validator.check_Normal(form):
        return render_template('form.html', message = 'Illegal Input!', flag = True, form = Constant.init_form, form_path = '/init', title = 'System Initialization')

    if form['password'] != form['password2']:
        return render_template('form.html', message = 'Failed', flag = True, form = Constant.init_form, form_path = '/init', title = 'System Initialization')

    ret = ticket.add_user(rootUsername, form['username'], form['password'], form['name'], form['mailAddr'], '9') # privilege of 9
    if ret:
        ext.add_user(form['username'])
        ini.fil()
    else:
        return render_template('form.html', message = 'Failed', flag = True, form = Constant.init_form, form_path = '/init', title = 'System Initialization')
    return redirect('/')


@app.route('/')
def root():
    if ini.down():
        return redirect('/down')
    if not ini.check():
        return redirect('/init')
    if not checkCookie():
        return render_template('root.html', flag = 1)
    return render_template('root.html', privilege = checkPrivilege(), username = getFriendlyname())



@app.route('/add_user', methods=("GET", "POST"))
def add_user():
    if ini.down():
        return redirect('/down')
    if not preCheck() or not checkPrivilege():
        return redirect('/')
    if request.method == "GET":
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), form = Constant.add_user_form, form_path = '/add_user', title = 'Add User')

    form = request.form.to_dict()
    if not validator.check_Normal(form):
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Illegal Input!', form = Constant.add_user_form, form_path = '/add_user', title = 'Add User')

    ret = ticket.add_user(getUsername(), form['username'], form['password'], form['name'], form['mailAddr'], form['privilege'])
    if ret:
        ext.add_user(form['username'])
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Succeed!', form = Constant.add_user_form, form_path = '/add_user', title = 'Add User')
    else:
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Failed!', form = Constant.add_user_form, form_path = '/add_user', title = 'Add User')

@app.route('/query_profile', methods=("GET", "POST"))
def query_profile():
    if ini.down():
        return redirect('/down')
    if not preCheck():
        return redirect('/')
    if request.method == "GET":
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), form = Constant.query_profile_form, form_path = '/query_profile', title = 'Query Profile')

    form = request.form.to_dict()
    if not validator.check_Normal(form):
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Illegal Input!', form = Constant.query_profile_form, form_path = '/query_profile', title = 'Query Profile')

    ret = ticket.query_profile(getUsername(), form['username'])
    if ret == -1:
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Failed!', form = Constant.query_profile_form, form_path = '/query_profile', title = 'Query Profile')
    return render_template('query_profile.html', privilege = checkPrivilege(), username = getFriendlyname(), ret = ret)


@app.route('/modify_profile', methods=("GET", "POST"))
def modify_profile():
    if ini.down():
        return redirect('/down')
    if not preCheck():
        return redirect('/')
    if request.method == "GET":
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), form = Constant.modify_profile_form, form_path = '/modify_profile', title = 'Modify Profile')

    form = request.form.to_dict()
    print('form got', form)
    if not validator.check_modifyProfile(form):
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Illegal Input!', form = Constant.modify_profile_form, form_path = '/modify_profile', title = 'Modify Profile')

    if form['password'] != form['password2']:
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Failed!', form = Constant.modify_profile_form, form_path = '/modify_profile', title = 'Modify Profile')

    ret = ticket.modify_profile(getUsername(), form['username'], form['password'], form['name'], form['mailAddr'], form['privilege'])

    def force_logout_user(username):
        if userPool.erase2(username):
            ticket.logout(username) # who cares failure?

    if form['username'] != getUsername():
        force_logout_user(form['username'])
    if ret:
        pswd = pswdCheck.getPass(form['username'])
        if form['password']:
            pswd = form['password']
        username = getUsername() # flush friendly name
        tmp = ticket.query_profile(username, username)
        ret2 = make_response(render_template('form.html', privilege = checkPrivilege(), username = tmp[1], message = 'Succeed!', form = Constant.modify_profile_form, form_path = '/modify_profile', title = 'Modify Profile'))
        ret2.set_cookie('id', userPool.push(form['username'], (tmp[1], tmp[3])))
        pswdCheck.push(form['username'], pswd) # pasword management
        return ret2
    else:
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Failed!', form = Constant.modify_profile_form, form_path = '/modify_profile', title = 'Modify Profile')

@app.route('/add_train', methods=("GET", "POST"))
def add_train():
    if ini.down():
        return redirect('/down')
    if not preCheck() or not checkPrivilege():
        return redirect('/')
    if request.method == "GET":
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), form = Constant.add_train_form, form_path = '/add_train', title = 'Add Train')

    form = request.form.to_dict()
    if not validator.check_addTrain(form, len(form['stations'].split('|'))):
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Illegal Input!', form = Constant.add_train_form, form_path = '/add_train', title = 'Add Train')

    ret = ticket.add_train(form['trainID'], len(form['stations'].split('|')), form['seatNum'], form['stations'],
                           form['prices'], form['startTime'], form['travelTimes'], form['stopoverTimes'], form['saleDate'], form['type'])
    if ret:
        ext.add_train(form['trainID'], form['seatNum'], form['stations'],
                      form['prices'], form['startTime'], form['travelTimes'], form['stopoverTimes'], form['saleDate'], form['type'])
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Succeed!', form = Constant.add_train_form, form_path = '/add_train', title = 'Add Train')
    else:
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Failed!', form = Constant.add_train_form, form_path = '/add_train', title = 'Add Train')

@app.route('/release_train', methods=("GET", "POST"))
def release_train():
    if ini.down():
        return redirect('/down')
    if not preCheck() or not checkPrivilege():
        return redirect('/')
    if request.method == "GET":
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), form = Constant.release_train_form, form_path = '/release_train', title = 'Release Train')

    form = request.form.to_dict()
    if not validator.check_Normal(form):
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Illegal Input!', form = Constant.release_train_form, form_path = '/release_train', title = 'Release Train')

    ret = ticket.release_train(form['trainID'])
    if ret:
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Succeed!', form = Constant.release_train_form, form_path = '/release_train', title = 'Release Train')
    else:
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Failed!', form = Constant.release_train_form, form_path = '/release_train', title = 'Release Train')

@app.route('/query_train', methods=("GET", "POST"))
def query_train():
    if ini.down():
        return redirect('/down')
    if not preCheck():
        return redirect('/')
    if request.method == "GET":
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), form = Constant.query_train_form, form_path = '/query_train', title = 'Query Train')

    form = request.form.to_dict()
    if not validator.check_Normal(form):
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Illegal Input!', form = Constant.query_train_form, form_path = '/query_train', title = 'Query Train')

    ret = ticket.query_train(form['trainID'], form['date'])
    if ret == -1:
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Failed!', form = Constant.query_train_form, form_path = '/query_train', title = 'Query Train')
    return render_template('table.html', privilege = checkPrivilege(), username = getFriendlyname(), title = 'Train', ret = ret, ret_len = len(ret), table_head = Constant.query_train_table_head, col_list = Constant.query_train_list)

@app.route('/delete_train', methods=("GET", "POST"))
def delete_train():
    if ini.down():
        return redirect('/down')
    if not preCheck() or not checkPrivilege():
        return redirect('/')
    if request.method == "GET":
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), form = Constant.delete_train_form, form_path = '/delete_train', title = 'Delete Train')

    form = request.form.to_dict()
    if not validator.check_Normal(form):
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Illegal Input!', form = Constant.delete_train_form, form_path = '/delete_train', title = 'Delete Train')

    ret = ticket.delete_train(form['trainID'])
    if ret:
        ext.delete_train(form['trainID'])
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Succeed!', form = Constant.delete_train_form, form_path = '/delete_train', title = 'Delete Train')
    else:
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Failed!', form = Constant.delete_train_form, form_path = '/delete_train', title = 'Delete Train')

@app.route('/query_ticket', methods=("GET", "POST"))
def query_ticket():
    if ini.down():
        return redirect('/down')
    if not preCheck():
        return redirect('/')
    if request.method == "GET":
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), form = Constant.query_ticket_form, form_path = '/query_ticket', title = 'Query Ticket')

    form = request.form.to_dict()
    if not validator.check_Normal(form):
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Illegal Input', form = Constant.query_ticket_form, form_path = '/query_ticket', title = 'Query Ticket')


    ret = ticket.query_ticket(form['time'], form['start'], form['end'], form['sort_param'])
    if ret == -1:
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Failed!', form = Constant.query_ticket_form, form_path = '/query_ticket', title = 'Query Ticket')
    return render_template('table.html', privilege = checkPrivilege(), username = getFriendlyname(), title = 'Ticket', ret = ret, ret_len = len(ret), table_head = Constant.query_ticket_table_head, col_list = Constant.query_ticket_list)

@app.route('/query_transfer', methods=("GET", "POST"))
def query_transfer():
    if ini.down():
        return redirect('/down')
    if not preCheck():
        return redirect('/')
    if request.method == "GET":
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), form = Constant.query_transfer_form, form_path = '/query_transfer', title = 'Query Transfer')

    form = request.form.to_dict()
    if not validator.check_Normal(form):
        render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Illegal Input!', form = Constant.query_transfer_form, form_path = '/query_ticket', title = 'Query Transfer')

    ret = ticket.query_transfer(form['time'], form['start'], form['end'], form['sort_param'])
    if ret == -1:
        render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Failed!', form = Constant.query_transfer_form, form_path = '/query_ticket', title = 'Query Transfer')
    return render_template('table.html', privilege = checkPrivilege(), username = getFriendlyname(), title = 'Transfer', ret = ret, ret_len = len(ret), table_head = Constant.query_transfer_table_head, col_list = Constant.query_transfer_list)


@app.route('/buy_ticket', methods=("GET", "POST"))
def buy_ticket():
    if ini.down():
        return redirect('/down')
    if not preCheck():
        return redirect('/')
    if request.method == "GET":
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), form = Constant.buy_ticket_form, form_path = '/buy_ticket', title = 'Buy Ticket')

    form = request.form.to_dict()
    if not validator.check_Normal(form):
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Illegal Input', form = Constant.buy_ticket_form, form_path = '/buy_ticket', title = 'Buy Ticket')

    que = '1' if 'que' in form else '0'
    ret = ticket.buy_ticket(getUsername(), form['trainID'], form['day'], form['ffrom'], form['to'], form['number'], que)
    if ret == '-1':
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Failed!', form = Constant.buy_ticket_form, form_path = '/buy_ticket', title = 'Buy Ticket')
    elif ret == 'queue':
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Queuing', form = Constant.buy_ticket_form, form_path = '/buy_ticket', title = 'Buy Ticket')
    else:
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = ('Total Cost: ' + str(ret)), form = Constant.buy_ticket_form, form_path = '/buy_ticket', title = 'Buy Ticket')

@app.route('/query_order')
def query_order():
    if ini.down():
        return redirect('/down')
    if not preCheck():
        return redirect('/')
    ret = ticket.query_order(getUsername()) # it can never be -1
    return render_template('table.html', privilege = checkPrivilege(), username = getFriendlyname(), title = 'Order', ret = ret, ret_len = len(ret), table_head = Constant.query_order_table_head, col_list = Constant.query_order_list)


@app.route('/refund_ticket', methods=("GET", "POST"))
def refund_ticket():
    if ini.down():
        return redirect('/down')
    if not preCheck():
        return redirect('/')
    if request.method == "GET":
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), form = Constant.refund_ticket_form, form_path = '/refund_ticket', title = 'Refund Ticket')

    form = request.form.to_dict()
    flag = 0
    if 'flag' in form:
        flag = 1
        form.pop('flag')
    if not validator.check_Normal(form):
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Illegam Input!', form = Constant.refund_ticket_form, form_path = '/refund_ticket', title = 'Refund Ticket')

    ret = ticket.refund_ticket(getUsername(), form['num'])
    if ret:
        if flag:
            return redirect('/query_order')
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Succeed!', form = Constant.refund_ticket_form, form_path = '/refund_ticket', title = 'Refund Ticket')
    else:
        if flag:
            return redirect('/query_order')
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Failed!', form = Constant.refund_ticket_form, form_path = '/refund_ticket', title = 'Refund Ticket')

@app.route('/clean', methods=("GET", "POST"))
def clean():
    if ini.down():
        return redirect('/down')
    if not preCheck() or not checkPrivilege():
        return redirect('/')
    if request.method == "GET":
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), warning = 'Are You Sure to Clear All Data?', form = Constant.clean_form, form_path = '/clean', title = 'Clear Data')

    form = request.form.to_dict()

    if form['username'] == getUsername():
        logoutRoot()
        ticket.clean()
        userPool.clean()
        ini.reset()
        initRoot()
        return redirect('/')
    else:
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Failed!', warning = 'Are You Sure to Clear All Data?', form = Constant.clean_form, form_path = '/clean', title = 'Clear Data')

@app.route('/shutdown', methods=("GET", "POST"))
def shutdown():
    if ini.down():
        return redirect('/down')
    if not preCheck() or not checkPrivilege():
        return redirect('/')
    if request.method == "GET":
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), warning = 'Are You Sure to Shutdown the System?', form = Constant.shutdown_form, form_path = '/shutdown', title = 'Shutdown System')
    form = request.form.to_dict()
    if form['username'] == getUsername():
        logoutRoot()
        ticket.exit()
        ini.shutdown()
        return redirect('/')
    else:
        return render_template('form.html', privilege = checkPrivilege(), username = getFriendlyname(), message = 'Failed!', warning = 'Are You Sure to Shutdown the System?', form = Constant.shutdown_form, form_path = '/shutdown', title = 'Shutdown System')

@app.route('/buy_ticket2', methods=("GET", "POST"))
def buy_ticket2():
    if ini.down():
        return redirect('/down')
    if not preCheck():
        return redirect('/')
    if request.method == "GET": # unable to be accessed by get
        return redirect('/')
    form = request.form.to_dict()

    if not ('number' in form):
        return render_template('buy_ticket2.html', privilege = checkPrivilege(), username = getFriendlyname(), trainID = form['trainID'], day = form['day'], ffrom = form['ffrom'], to = form['to'])
    else:
        if not validator.check_Normal(form):
            return render_template('buy_ticket2.html', message = 'Illegal Input!', privilege = checkPrivilege(), username = getFriendlyname(), trainID = form['trainID'], day = form['day'], ffrom = form['ffrom'], to = form['to'])

        que = '1' if 'que' in form else '0'
        ret = ticket.buy_ticket(getUsername(), form['trainID'], form['day'], form['ffrom'], form['to'], form['number'], que)
        if ret == '-1':
            return render_template('buy_ticket2.html', message = 'Failed', privilege = checkPrivilege(), username = getFriendlyname(), trainID = form['trainID'], day = form['day'], ffrom = form['ffrom'], to = form['to'])
        elif ret == 'queue':
            return render_template('buy_ticket2.html', message = 'Queue', privilege = checkPrivilege(), username = getFriendlyname(), trainID = form['trainID'], day = form['day'], ffrom = form['ffrom'], to = form['to'])
        else:
            return render_template('buy_ticket2.html', message = ('Total Cost: ' + str(ret)), privilege = checkPrivilege(), username = getFriendlyname(), trainID = form['trainID'], day = form['day'], ffrom = form['ffrom'], to = form['to'])

@app.route('/register', methods=("GET", "POST"))
def register():
    if ini.down():
        return redirect('/down')
    if not ini.check():
        return redirect('/')
    if request.method == "GET":
        return render_template('form.html', flag = True, form = Constant.register_form, form_path = '/register', title = 'User Registration')

    form = request.form.to_dict()
    if not validator.check_Normal(form):
        return render_template('form.html', flag = True, message = 'Illegal Input!', form = Constant.register_form, form_path = '/register', title = 'User Registration')

    if form['password'] != form['password2']:
        return render_template('form.html', flag = True, message = 'Failed', form = Constant.register_form, form_path = '/register', title = 'User Registration')

    ret = ticket.add_user(rootUsername, form['username'], form['password'], form['name'], form['mailAddr'], '1')

    if ret:
        ext.add_user(form['username'])
        return redirect('/login')
    else:
        return render_template('form.html', flag = True, message = 'Failed', form = Constant.register_form, form_path = '/register', title = 'User Registration')

@app.route('/user_profile')
def getProfile():
    if ini.down():
        return redirect('/down')
    if not preCheck():
        return redirect('/')
    ret = ticket.query_profile(getUsername(), getUsername())
    return render_template('query_profile.html', privilege = checkPrivilege(), username = getFriendlyname(), ret = ret)

@app.route('/list_user')
def list_user():
    if ini.down():
        return redirect('/down')
    if not preCheck() or not checkPrivilege():
        return redirect('/')

    ret = ext.list_user()
    return render_template('table.html', privilege = checkPrivilege(), username = getFriendlyname(), title = 'User List', ret = ret, ret_len = len(ret), table_head = Constant.list_user_table_head, col_list = Constant.list_user_list)

@app.route('/list_train')
def list_train():
    if ini.down():
        return redirect('/down')
    if not preCheck() or not checkPrivilege():
        return redirect('/')

    ret = ext.list_train()
    return render_template('table.html', privilege = checkPrivilege(), username = getFriendlyname(), title = 'Train List', ret = ret, ret_len = len(ret), table_head = Constant.list_train_table_head, col_list = Constant.list_train_list)

@app.route('/favicon.ico')
def favicon():
    return send_from_directory(os.path.join(app.root_path, 'static'), 'favicon.ico', mimetype='image/vnd.microsoft.icon')

@app.route('/help.pdf')
def help():
    return send_from_directory(os.path.join(app.root_path, 'static'), 'help.pdf')

initRoot()

if __name__ == '__main__':
    # app.run(debug = True)
    app.run(host = '0.0.0.0' ,port = 5000, debug = 'True')