Weblabor

/**
 * Module dependencies.
 */
var express = require('express'),
    app = module.exports = express.createServer(),
    sqlite = require('sqlite'),
    crypto = require('crypto'),
    db = new sqlite.Database()

function hashPassword(password) {
  return crypto.createHmac('sha1', 'salt').update(password).digest('base64');
}
db.open('myapp.db', function (err) {
  if (err) {
    throw err;
  }
});
db.execute(
  'CREATE TABLE IF NOT EXISTS users (' +
    'uid INTEGER PRIMARY KEY ASC,' +
    'username TEXT UNIQUE,' +
    'email TEXT,' +
    'kep TEXT,' +
    'password TEXT' +
    ')',
  function (error) {
    if (!error) {
      db.execute(
        'INSERT INTO users (username, password, email, kep) VALUES ($username, $password, $email, $kep)',
        {$username: 'admin', $password: hashPassword('admin'), $email: 'admin##kukac##example.com', $kep: ''},
        function () {}
      );
    }
  }
);


// Configuration
app.configure(function(){
  app.set('views', __dirname + '/views');
  app.set('view engine', 'jade');
  app.use(express.bodyParser());
  app.use(express.methodOverride());
  app.use(express.cookieParser());
  app.use(express.session({ secret: hashPassword('pepper') }));
  app.use(app.router);
  app.use(express.static(__dirname + '/public'));
});
app.configure('development', function(){
  app.use(express.errorHandler({ dumpExceptions: true, showStack: true }));
});
app.configure('production', function(){
  app.use(express.errorHandler());
});

// Routes
app.get('/', function (req, res) {
  var blocks = {};
  if (!req.session.user) {
    blocks = {'login': {'name': ''}, 'register': {'name': '', 'email': ''}};
  }
  else {
    blocks = {'profile': {user: req.session.user}};
  }
  res.render('index', {
    title: 'Express',
    flash: req.flash(),
    blocks: blocks
  });
});
app.get('/login', function (req, res) {
  res.redirect('/');
});
app.post('/login', function (req, res) {
  var body = req.body, session = req.session;

  db.execute(
    'SELECT * FROM users WHERE username = $username AND password = $password',
    {$username: body.username || '', $password: hashPassword(body.password || '')},
    function (error, rows) {
      if (rows && rows.length && rows[0].username) {
        session.user = rows[0];
        res.redirect('/');
      }
      else {
        req.flash('error', 'Helytelen felhasználónév vagy jelszó.');
        res.render('index', {
          title: 'Express',
          flash: req.flash(),
          blocks: {'login': {'name': body.username || ''}}
        });
      }
    }
  );
});
app.get('/register', function (req, res) {
  res.redirect('/');
});
app.post('/register', function (req, res) {
  var body = req.body, session = req.session;

  db.execute(
    'SELECT * FROM users WHERE username = $username',
    {$username: body.username || ''},
    function (error, rows) {
      if ((rows && rows.length && rows[0].username) || !body.username) {
        req.flash('error', 'Felhasználónév már foglalt.');
        res.render('index', {
          title: 'Express',
          flash: req.flash(),
          blocks: {'register': {'name': body.username, 'email': body.email}}
        });
      }
      else {
        db.execute(
          'INSERT INTO users (username, password, email, kep) VALUES ($username, $password, $email, $kep)',
          {$username: body.username, $password: hashPassword(body.password), $email: body.email, $kep: ''},
          function () {
            req.flash('success', 'Sikeres regisztráció.');
            res.redirect('/');
          }
        );
      }
    }
  );
});
app.get('/profile', function (req, res) {
  res.redirect('/');
});
app.post('/profile', function (req, res) {
  var body = req.body, session = req.session, user = session.user;
  if (body.password || body.newpassword || body.renewpassword) {
    if (hashPassword(body.password) !== user.password) {
      req.flash('error', 'A megadott jelszó nem egyezik az aktuális jelszóval..');
      res.redirect('/');
    }
    else if (body.newpassword !== body.renewpassword) {
      req.flash('error', 'Az új jelszavak nem egyeznek.');
      res.redirect('/');
    }
    else {
      db.execute(
        'UPDATE users SET password = $newpassword, email = $email, kep = $kep WHERE uid = $uid AND password=$password',
        {$uid: user.uid, $password: user.password, $newpassword: hashPassword(body.newpassword), $email: body.email, $kep: body.kep},
        function (error, row) {
          if (!error) {
            user.password = hashPassword(body.newpassword)
            user.email = body.email;
            user.kep = body.kep;
            req.flash('success', 'Felhasználói adatok sikeresen frissítve.');
          }
          else {
            req.flash('error', error.message);
          }
          res.redirect('/');
        }
      );
    }
  }
  else {
    db.execute(
      'UPDATE users SET email = $email, kep = $kep WHERE uid = $uid',
      {$uid: user.uid, $email: body.email, $kep: body.kep},
      function (error, row) {
        if (!error) {
          user.email = body.email;
          user.kep = body.kep;
          req.flash('success', 'Felhasználói adatok sikeresen frissítve.');
        }
        else {
          req.flash('error', error.message);
        }
        res.redirect('/');
      }
    );
  }
});

// Only listen on $ node app.js
if (!module.parent) {
  app.listen(3000);
  console.log("Express server listening on port %d", app.address().port);
}