computertech/ircquotes
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

stuff idk

Browse Source
This commit is contained in:
Colby Lipsett
2024-10-11 19:57:20 +01:00
parent b8edf8a7f1
commit a69c6d2b06
1 changed files with 7 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
app.py
View File

@@ -8,13 +8,16 @@ import json
import random import random
from argon2 import PasswordHasher from argon2 import PasswordHasher
from argon2.exceptions import VerifyMismatchError from argon2.exceptions import VerifyMismatchError
from werkzeug.middleware.proxy_fix import ProxyFix # Import ProxyFix
app = Flask(__name__) app = Flask(__name__)
app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///quotes.db' app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///quotes.db'
app.config['SECRET_KEY'] = 'your_secret_key' # Use environment variable in production app.config['SECRET_KEY'] = 'your_secret_key' # Use environment variable in production
db = SQLAlchemy(app) db = SQLAlchemy(app)
# Apply ProxyFix middleware
app.wsgi_app = ProxyFix(app.wsgi_app, x_for=1, x_proto=1, x_host=1, x_port=1, x_prefix=1)
# Initialize Argon2 password hasher # Initialize Argon2 password hasher
ph = PasswordHasher() ph = PasswordHasher()
@@ -25,7 +28,7 @@ ADMIN_CREDENTIALS = {
'password': '$argon2i$v=19$m=65536,t=4,p=1$cWZDc1pQaUJLTUJoaVI4cw$kn8XKz6AEZi8ebXfyyZuzommSypliVFrsGqzOyUEIHA' # Example hash 'password': '$argon2i$v=19$m=65536,t=4,p=1$cWZDc1pQaUJLTUJoaVI4cw$kn8XKz6AEZi8ebXfyyZuzommSypliVFrsGqzOyUEIHA' # Example hash
} }
# Define the Quote modelclass Quote(db.Model): # Define the Quote model
class Quote(db.Model): class Quote(db.Model):
id = db.Column(db.Integer, primary_key=True) id = db.Column(db.Integer, primary_key=True)
text = db.Column(db.Text, nullable=False) text = db.Column(db.Text, nullable=False)
@@ -36,9 +39,6 @@ class Quote(db.Model):
user_agent = db.Column(db.String(255)) # Store user-agent strings user_agent = db.Column(db.String(255)) # Store user-agent strings
submitted_at = db.Column(db.DateTime, default=datetime.datetime.utcnow) submitted_at = db.Column(db.DateTime, default=datetime.datetime.utcnow)
# Home route to display quotes
# Home route to display quotes # Home route to display quotes
@app.route('/') @app.route('/')
def index(): def index():
@@ -60,7 +60,7 @@ def submit():
flash("Quote cannot be empty.", 'error') flash("Quote cannot be empty.", 'error')
return redirect(url_for('submit')) return redirect(url_for('submit'))
ip_address = request.remote_addr # Get the user's IP address ip_address = request.headers.get('CF-Connecting-IP', request.remote_addr) # Get the user's IP address
user_agent = request.headers.get('User-Agent') # Get the user's browser info user_agent = request.headers.get('User-Agent') # Get the user's browser info
new_quote = Quote(text=quote_text, ip_address=ip_address, user_agent=user_agent) new_quote = Quote(text=quote_text, ip_address=ip_address, user_agent=user_agent)
@@ -134,7 +134,6 @@ def vote(id, action):
flash("Error voting on quote: {}".format(e), 'error') flash("Error voting on quote: {}".format(e), 'error')
return redirect(url_for('browse', page=page)) return redirect(url_for('browse', page=page))
# Route for displaying a random quote # Route for displaying a random quote
@app.route('/random') @app.route('/random')
def random_quote(): def random_quote():
@@ -246,7 +245,6 @@ def delete_quote(quote_id):
db.session.delete(quote) db.session.delete(quote)
db.session.commit() db.session.commit()
@app.route('/search', methods=['GET']) @app.route('/search', methods=['GET'])
def search(): def search():
query = request.args.get('q', '').strip() # Get the search query and trim whitespace query = request.args.get('q', '').strip() # Get the search query and trim whitespace
@@ -291,7 +289,6 @@ def reject(id):
db.session.commit() db.session.commit()
return redirect(url_for('modapp')) return redirect(url_for('modapp'))
# Delete a quote (admin only) # Delete a quote (admin only)
@app.route('/delete/<int:id>') @app.route('/delete/<int:id>')
def delete(id): def delete(id):
@@ -314,7 +311,6 @@ def logout():
with app.app_context(): with app.app_context():
db.create_all() db.create_all()
# Initialize rate limiter and CORS for cross-origin API access # Initialize rate limiter and CORS for cross-origin API access
limiter = Limiter(app, key_func=get_remote_address) limiter = Limiter(app, key_func=get_remote_address)
CORS(app) CORS(app)
@@ -424,4 +420,3 @@ def submit_quote():
# Run the Flask app # Run the Flask app
if __name__ == '__main__': if __name__ == '__main__':
app.run(host='127.0.0.1', port=5050, debug=True) app.run(host='127.0.0.1', port=5050, debug=True)