mirror of
https://github.com/ION606/static-site-hosting.git
synced 2026-05-14 22:16:54 +00:00
initial commit
This commit is contained in:
@@ -0,0 +1,312 @@
|
||||
from flask import (
|
||||
Flask,
|
||||
render_template,
|
||||
request,
|
||||
redirect,
|
||||
url_for,
|
||||
send_from_directory,
|
||||
flash,
|
||||
abort,
|
||||
)
|
||||
from flask_sqlalchemy import SQLAlchemy
|
||||
from flask_login import (
|
||||
LoginManager,
|
||||
UserMixin,
|
||||
login_user,
|
||||
logout_user,
|
||||
login_required,
|
||||
current_user,
|
||||
)
|
||||
from flask_apscheduler import APScheduler
|
||||
from werkzeug.security import generate_password_hash, check_password_hash
|
||||
from werkzeug.exceptions import NotFound
|
||||
import os
|
||||
import shutil
|
||||
from datetime import datetime, timedelta
|
||||
|
||||
app = Flask(__name__)
|
||||
app.config["SECRET_KEY"] = "your-secret-key"
|
||||
app.config["SQLALCHEMY_DATABASE_URI"] = "sqlite:///db.sqlite"
|
||||
app.config["UPLOAD_FOLDER"] = "sites"
|
||||
db = SQLAlchemy(app)
|
||||
|
||||
|
||||
# Models
|
||||
class User(UserMixin, db.Model):
|
||||
id = db.Column(db.Integer, primary_key=True)
|
||||
email = db.Column(db.String(100), unique=True)
|
||||
password_hash = db.Column(db.String(128)) # Renamed for clarity
|
||||
|
||||
def set_password(self, password):
|
||||
self.password_hash = generate_password_hash(password)
|
||||
|
||||
def check_password(self, password):
|
||||
return check_password_hash(self.password_hash, password)
|
||||
|
||||
|
||||
class Site(db.Model):
|
||||
id = db.Column(db.Integer, primary_key=True)
|
||||
user_id = db.Column(db.Integer)
|
||||
name = db.Column(db.String(100))
|
||||
last_accessed = db.Column(db.DateTime)
|
||||
created_at = db.Column(db.DateTime, default=datetime.utcnow)
|
||||
|
||||
|
||||
# Auth setup
|
||||
login_manager = LoginManager()
|
||||
login_manager.init_app(app)
|
||||
login_manager.login_view = "login"
|
||||
|
||||
|
||||
@login_manager.user_loader
|
||||
def load_user(user_id):
|
||||
return User.query.get(int(user_id))
|
||||
|
||||
|
||||
# Scheduler for auto-deletion
|
||||
scheduler = APScheduler()
|
||||
scheduler.init_app(app)
|
||||
|
||||
|
||||
def delete_inactive_sites():
|
||||
with app.app_context():
|
||||
cutoff = datetime.utcnow() - timedelta(days=30)
|
||||
sites = Site.query.filter(Site.last_accessed < cutoff).all()
|
||||
for site in sites:
|
||||
site_dir = os.path.join(
|
||||
app.config["UPLOAD_FOLDER"], str(site.user_id), str(site.id)
|
||||
)
|
||||
if os.path.exists(site_dir):
|
||||
shutil.rmtree(site_dir)
|
||||
db.session.delete(site)
|
||||
db.session.commit()
|
||||
|
||||
|
||||
if not scheduler.running:
|
||||
scheduler.start()
|
||||
scheduler.add_job(
|
||||
id="delete_job", func=delete_inactive_sites, trigger="interval", days=1
|
||||
)
|
||||
|
||||
|
||||
# Routes
|
||||
@app.route("/login", methods=["GET", "POST"])
|
||||
def login():
|
||||
if request.method == "POST":
|
||||
email = request.form.get("email")
|
||||
password = request.form.get("password")
|
||||
user = User.query.filter_by(email=email).first()
|
||||
|
||||
if user and user.check_password(password):
|
||||
login_user(user)
|
||||
return redirect(url_for("dashboard"))
|
||||
flash("Invalid email or password")
|
||||
return render_template("login.html")
|
||||
|
||||
|
||||
@app.route("/logout")
|
||||
def logout():
|
||||
logout_user()
|
||||
return redirect(url_for("home"))
|
||||
|
||||
|
||||
@app.route("/register", methods=["GET", "POST"])
|
||||
def register():
|
||||
if request.method == "POST":
|
||||
email = request.form.get("email")
|
||||
password = request.form.get("password")
|
||||
|
||||
if User.query.filter_by(email=email).first():
|
||||
flash("Email already exists")
|
||||
return redirect(url_for("register"))
|
||||
|
||||
new_user = User(email=email)
|
||||
new_user.set_password(password)
|
||||
db.session.add(new_user)
|
||||
db.session.commit()
|
||||
|
||||
login_user(new_user)
|
||||
return redirect(url_for("dashboard"))
|
||||
return render_template("register.html")
|
||||
|
||||
|
||||
@app.route("/dashboard")
|
||||
@login_required
|
||||
def dashboard():
|
||||
sites = Site.query.filter_by(user_id=current_user.id).all()
|
||||
return render_template("dashboard.html", sites=sites)
|
||||
|
||||
|
||||
@app.route("/upload", methods=["POST"])
|
||||
@login_required
|
||||
def upload_site():
|
||||
site_name = request.form.get("name")
|
||||
if not site_name:
|
||||
flash("Site name is required", "error")
|
||||
return redirect(url_for("dashboard"))
|
||||
|
||||
# Check if index.html is included
|
||||
files = request.files.getlist("files")
|
||||
if not any(file.filename == "index.html" for file in files):
|
||||
flash("You must include an index.html file", "error")
|
||||
return redirect(url_for("dashboard"))
|
||||
|
||||
# Create site directory
|
||||
site = Site(user_id=current_user.id, name=site_name)
|
||||
db.session.add(site)
|
||||
db.session.commit()
|
||||
|
||||
site_dir = os.path.join(
|
||||
app.config["UPLOAD_FOLDER"], str(current_user.id), str(site.id)
|
||||
)
|
||||
os.makedirs(site_dir, exist_ok=True)
|
||||
|
||||
# Save uploaded files
|
||||
for file in files:
|
||||
if file.filename == "":
|
||||
continue
|
||||
file.save(os.path.join(site_dir, file.filename))
|
||||
|
||||
flash("Site created successfully!", "success")
|
||||
return redirect(url_for("dashboard"))
|
||||
|
||||
|
||||
@app.route("/edit/<int:site_id>", methods=["GET", "POST"])
|
||||
@login_required
|
||||
def edit_site(site_id):
|
||||
site = Site.query.get_or_404(site_id)
|
||||
if site.user_id != current_user.id:
|
||||
return "Unauthorized", 403
|
||||
|
||||
site_dir = os.path.join(
|
||||
app.config["UPLOAD_FOLDER"], str(current_user.id), str(site.id)
|
||||
)
|
||||
|
||||
if request.method == "POST":
|
||||
site.name = request.form.get("name", site.name)
|
||||
db.session.commit()
|
||||
|
||||
for filename, content in request.form.items():
|
||||
if filename.endswith((".html", ".css", ".js")):
|
||||
filepath = os.path.join(site_dir, filename)
|
||||
with open(filepath, "w") as f:
|
||||
f.write(content)
|
||||
|
||||
return redirect(url_for("dashboard"))
|
||||
|
||||
files = {}
|
||||
for file in os.listdir(site_dir):
|
||||
with open(os.path.join(site_dir, file), "r") as f:
|
||||
files[file] = f.read()
|
||||
|
||||
return render_template("edit.html", site=site, files=files)
|
||||
|
||||
|
||||
@app.route("/delete/<int:site_id>", methods=["POST"])
|
||||
@login_required
|
||||
def delete_site(site_id):
|
||||
site = Site.query.get_or_404(site_id)
|
||||
if site.user_id != current_user.id:
|
||||
return "Unauthorized", 403
|
||||
|
||||
site_dir = os.path.join(
|
||||
app.config["UPLOAD_FOLDER"], str(current_user.id), str(site.id)
|
||||
)
|
||||
if os.path.exists(site_dir):
|
||||
shutil.rmtree(site_dir)
|
||||
|
||||
db.session.delete(site)
|
||||
db.session.commit()
|
||||
return redirect(url_for("dashboard"))
|
||||
|
||||
|
||||
@app.route("/delete_file/<int:site_id>/<filename>", methods=["POST"])
|
||||
@login_required
|
||||
def delete_file(site_id, filename):
|
||||
# Get the site and verify ownership
|
||||
site = Site.query.get_or_404(site_id)
|
||||
if site.user_id != current_user.id:
|
||||
return "Unauthorized", 403
|
||||
|
||||
# Build the file path
|
||||
site_dir = os.path.join(
|
||||
app.config["UPLOAD_FOLDER"], str(current_user.id), str(site.id)
|
||||
)
|
||||
file_path = os.path.join(site_dir, filename)
|
||||
|
||||
# Delete the file if it exists
|
||||
if os.path.exists(file_path):
|
||||
os.remove(file_path)
|
||||
flash(f"File '{filename}' deleted successfully!", "success")
|
||||
else:
|
||||
flash(f"File '{filename}' not found!", "error")
|
||||
|
||||
return redirect(url_for("dashboard"))
|
||||
|
||||
|
||||
@app.route("/site/<int:user_id>/<int:site_id>")
|
||||
def redirect_to_slash(user_id, site_id):
|
||||
"""Redirect URLs without trailing slash to the slash version"""
|
||||
return redirect(
|
||||
url_for(
|
||||
"serve_site_content",
|
||||
user_id=user_id,
|
||||
site_id=site_id,
|
||||
filename="index.html",
|
||||
),
|
||||
code=301,
|
||||
)
|
||||
|
||||
|
||||
@app.route("/site/<int:user_id>/<int:site_id>/", defaults={"filename": "index.html"})
|
||||
@app.route("/site/<int:user_id>/<int:site_id>/<path:filename>")
|
||||
def serve_site_content(user_id, site_id, filename):
|
||||
# Update last accessed time
|
||||
site = Site.query.get_or_404(site_id)
|
||||
site.last_accessed = datetime.utcnow()
|
||||
db.session.commit()
|
||||
|
||||
# Get site directory
|
||||
site_dir = os.path.join(app.config["UPLOAD_FOLDER"], str(user_id), str(site_id))
|
||||
|
||||
# Security check
|
||||
if '..' in filename or filename.startswith('/') or not os.path.exists(site_dir):
|
||||
abort(404)
|
||||
|
||||
try:
|
||||
# First try to serve requested file
|
||||
return send_from_directory(site_dir, filename)
|
||||
except NotFound:
|
||||
# Handle extensionless URLs and SPA-style routing
|
||||
if "." not in filename:
|
||||
# Try with .html extension
|
||||
try:
|
||||
return send_from_directory(site_dir, f"{filename}.html")
|
||||
except NotFound:
|
||||
# Fallback to index.html for client-side routing
|
||||
return send_from_directory(site_dir, "index.html")
|
||||
abort(404)
|
||||
|
||||
|
||||
def list_files(directory):
|
||||
try:
|
||||
return os.listdir(directory)
|
||||
except FileNotFoundError:
|
||||
return []
|
||||
|
||||
|
||||
@app.context_processor
|
||||
def inject_utilities():
|
||||
return dict(list_files=list_files)
|
||||
|
||||
|
||||
@app.route("/")
|
||||
def home():
|
||||
return render_template("home.html")
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
os.makedirs(app.config["UPLOAD_FOLDER"], exist_ok=True)
|
||||
with app.app_context():
|
||||
db.create_all()
|
||||
app.run(debug=True)
|
||||
Reference in New Issue
Block a user