summaryrefslogtreecommitdiffstats
path: root/flaskr/views/blog.py
diff options
context:
space:
mode:
authorMitsuo Tokumori <[email protected]>2023-10-29 07:41:04 -0500
committerMitsuo Tokumori <[email protected]>2023-10-29 07:41:04 -0500
commit43f9d78f8c00e13732b809519f0529ac293fd5ab (patch)
treed9779a6d4b511dd27cfe80b3f8d0ad2e5ef5d7da /flaskr/views/blog.py
parentde8b3d760a37fc54645a2588b062f85963146070 (diff)
downloadustayml-43f9d78f8c00e13732b809519f0529ac293fd5ab.tar.gz
ustayml-43f9d78f8c00e13732b809519f0529ac293fd5ab.tar.bz2
ustayml-43f9d78f8c00e13732b809519f0529ac293fd5ab.zip
Rename to ustayml (u-stayML)
Diffstat (limited to 'flaskr/views/blog.py')
-rw-r--r--flaskr/views/blog.py104
1 files changed, 0 insertions, 104 deletions
diff --git a/flaskr/views/blog.py b/flaskr/views/blog.py
deleted file mode 100644
index 6f728ea..0000000
--- a/flaskr/views/blog.py
+++ /dev/null
@@ -1,104 +0,0 @@
-from flask import (
- Blueprint, flash, g, redirect, render_template, request, url_for
-)
-from werkzeug.exceptions import abort
-
-from flaskr.views.auth import login_required
-from flaskr.db import get_db
-
-# NOTE: no URL prefix
-bp = Blueprint('blog', __name__)
-
-
-def index():
- db = get_db()
- posts = db.execute(
- 'SELECT p.id, title, body, created, author_id, username'
- ' FROM post p JOIN user u ON p.author_id = u.id'
- ' ORDER BY created DESC'
- ).fetchall()
- return render_template('blog/index.html', posts=posts)
-
-
[email protected]('/create', methods=('GET', 'POST'))
-@login_required
-def create():
- if request.method == 'POST':
- title = request.form['title']
- body = request.form['body']
- error = None
-
- if not title:
- error = 'Title is required.'
-
- if error is not None:
- flash(error)
- else:
- db = get_db()
- db.execute(
- 'INSERT INTO post (title, body, author_id)'
- ' VALUES (?, ?, ?)',
- (title, body, g.user['id'])
- )
- db.commit()
- return redirect(url_for('blog.index'))
-
- return render_template('blog/create.html')
-
-
[email protected]('/<int:id>/update', methods=('GET', 'POST'))
-@login_required
-def update(id):
- post = get_post(id)
-
- if request.method == 'POST':
- title = request.form['title']
- body = request.form['body']
- error = None
-
- if not title:
- error = 'Title is required.'
-
- if error is not None:
- flash(error)
- else:
- db = get_db()
- db.execute(
- 'UPDATE post SET title = ?, body = ?'
- ' WHERE id = ?',
- (title, body, id)
- )
- db.commit()
- return redirect(url_for('blog.index'))
-
- return render_template('blog/update.html', post=post)
-
-
[email protected]('/<int:id>/delete', methods=('POST',))
-@login_required
-def delete(id):
- get_post(id)
- db = get_db()
- db.execute('DELETE FROM post WHERE id = ?', (id,))
- db.commit()
- return redirect(url_for('blog.index'))
-
-
-# Helper functions:
-
-def get_post(id, check_author=True):
- post = get_db().execute(
- 'SELECT p.id, title, body, created, author_id, username'
- ' FROM post p JOIN user u ON p.author_id = u.id'
- ' WHERE p.id = ?',
- (id,)
- ).fetchone()
-
- if post is None:
- abort(404, f"Post id {id} doesn't exist.")
-
- if check_author and post['author_id'] != g.user['id']:
- abort(403)
-
- return post