Remove debug trace
[vchess.git] / routes / all.js
CommitLineData
da06a6eb
BA
1let express = require('express');
2let router = express.Router();
3const createError = require('http-errors');
4const sqlite3 = require('sqlite3');//.verbose();
5const db = new sqlite3.Database('db/vchess.sqlite');
6const sanitizeHtml = require('sanitize-html');
1d184b4c
BA
7
8// Home
9router.get('/', function(req, res, next) {
da06a6eb
BA
10 db.serialize(function() {
11 db.all("SELECT * FROM Variants", (err,variants) => {
12 if (!!err)
13 return next(err);
14 res.render('index', {
15 title: 'club',
16 variantArray: variants, //JSON.stringify(variants)
17 });
18 });
1d184b4c
BA
19 });
20});
21
22// Variant
15c1295a 23router.get("/:vname([a-zA-Z0-9]+)", (req,res,next) => {
1d184b4c 24 const vname = req.params["vname"];
da06a6eb
BA
25 db.serialize(function() {
26 db.all("SELECT * FROM Variants WHERE name='" + vname + "'", (err,variant) => {
27 if (!!err)
28 return next(err);
29 if (!variant || variant.length==0)
30 return next(createError(404));
7931e479 31 // TODO (later...) get only n=100(?) most recent problems
da06a6eb
BA
32 db.all("SELECT * FROM Problems WHERE variant='" + vname + "'",
33 (err2,problems) => {
34 if (!!err2)
35 return next(err2);
36 res.render('variant', {
37 title: vname + ' Variant',
38 variant: vname,
39 problemArray: problems,
40 });
41 }
42 );
43 });
1d184b4c
BA
44 });
45});
46
47// Load a rules page (AJAX)
48router.get("/rules/:variant([a-zA-Z0-9]+)", (req,res) => {
da06a6eb
BA
49 if (!req.xhr)
50 return res.json({errmsg: "Unauthorized access"});
51 res.render("rules/" + req.params["variant"]);
52});
53
54// Fetch 10 previous or next problems (AJAX)
55router.get("/problems/:variant([a-zA-Z0-9]+)", (req,res) => {
56 if (!req.xhr)
57 return res.json({errmsg: "Unauthorized access"});
58 // TODO: next or previous: in params + timedate (of current oldest or newest)
7931e479
BA
59 db.serialize(function() {
60 //TODO
61 });
1d184b4c
BA
62});
63
da06a6eb
BA
64// Upload a problem (AJAX)
65router.post("/problems/:variant([a-zA-Z0-9]+)", (req,res) => {
66 if (!req.xhr)
67 return res.json({errmsg: "Unauthorized access"});
68 const vname = req.params["variant"];
7931e479
BA
69 const timestamp = Date.now();
70 // Sanitize them
71 const fen = req.body["fen"];
b5fb8e69 72 if (!fen.match(/^[a-zA-Z0-9, /-]*$/))
7931e479
BA
73 return res.json({errmsg: "Bad characters in FEN string"});
74 const instructions = sanitizeHtml(req.body["instructions"]);
75 const solution = sanitizeHtml(req.body["solution"]);
da06a6eb 76 db.serialize(function() {
3a609580
BA
77 let stmt = db.prepare("INSERT INTO Problems " +
78 "(added,variant,fen,instructions,solution) VALUES (?,?,?,?,?)");
da06a6eb
BA
79 stmt.run(timestamp, vname, fen, instructions, solution);
80 stmt.finalize();
81 });
82 res.json({});
83});
84
1d184b4c 85module.exports = router;