Compare commits
No commits in common. "main" and "v2.5.0" have entirely different histories.
|
@ -1,7 +1 @@
|
|||
MONGO_DB_URL = mongodb://localhost:27017/akf-forum
|
||||
SECRET = secret
|
||||
DISCORD_SECRET = yourDiscordSecret
|
||||
DISCORD_ID = yourDiscordId
|
||||
EMAIL_USER =
|
||||
EMAIL_PASS =
|
||||
EMAIL_SERVICE =
|
|
@ -1,27 +0,0 @@
|
|||
{
|
||||
"ignorePatterns": [
|
||||
"test.js"
|
||||
],
|
||||
"env": {
|
||||
"node": true,
|
||||
"commonjs": true,
|
||||
"es2021": true
|
||||
},
|
||||
"extends": "eslint:recommended",
|
||||
"parserOptions": {
|
||||
"ecmaVersion": "latest"
|
||||
},
|
||||
"rules": {
|
||||
"no-use-before-define": "error"
|
||||
},
|
||||
"overrides": [
|
||||
{
|
||||
"env": {
|
||||
"browser": true
|
||||
},
|
||||
"files": [
|
||||
"src/public/js/*"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
14
.gitignore
vendored
|
@ -1,15 +1,9 @@
|
|||
# Dependency directories
|
||||
node_modules/
|
||||
|
||||
# Environment variables
|
||||
# env
|
||||
.env
|
||||
|
||||
# Config files
|
||||
config.json
|
||||
|
||||
# Test files
|
||||
test.js
|
||||
|
||||
# avatars folder
|
||||
src/public/images/avatars/*
|
||||
!src/public/images/avatars/default.jpg
|
||||
# Test files:
|
||||
a.js
|
||||
db.js
|
105
APIDOCS.md
|
@ -1,105 +0,0 @@
|
|||
# API documentation of Akf-forum
|
||||
Akf-forum has got an API for AJAX, other clients etc.
|
||||
|
||||
## Authorization
|
||||
You need this header for send request to API:
|
||||
```json
|
||||
{
|
||||
"authorization": "Basic <base64 encoded username:password>"
|
||||
}
|
||||
```
|
||||
|
||||
But in front end, the API will works with session.
|
||||
|
||||
## Default Limits:
|
||||
- 3 - 25 char for username, password and category name
|
||||
- 256 char for user about and desp of category
|
||||
- 5 - 128 char for thread titles.
|
||||
- 5 - 1024 char for messages.
|
||||
|
||||
You can change them in config.json.
|
||||
|
||||
## How to request?
|
||||
### Request types:
|
||||
#### `/api/me`
|
||||
- GET `/api/me` to get your account.
|
||||
|
||||
#### `/api/config`
|
||||
- GET `/` to reach config file.
|
||||
- PUT `/` to edit config file.
|
||||
|
||||
#### `/api/bans`
|
||||
- GET `/` fetch all bans.
|
||||
- GET `/:ip` fetch a ban.
|
||||
- DELETE `/:ip` for unban an IP adress.
|
||||
- POST `/?reason=flood` for ban an IP adress.
|
||||
|
||||
#### `/api/categories`
|
||||
- GET `/` fetch all categories.
|
||||
- GET `/:id` fetch a category
|
||||
- PATCH `/:id` for update a category.
|
||||
- DELETE `/:id` for delete a category.
|
||||
- POST `/` for create a category.
|
||||
|
||||
#### `/api/messages`
|
||||
- GET `/:id` for fetch message.
|
||||
- DELETE `/:id` for delete message.
|
||||
- PATCH `/:id` for edit message.
|
||||
- POST `/:id/react/:type` for react to a message.
|
||||
- POST `/` for create message.
|
||||
|
||||
#### `/api/search` use `?limit=&skip=` for skip and limit
|
||||
- GET `/users?q=query` find users.
|
||||
- GET `/threads?q=query&authorID=not_required` find threads.
|
||||
- GET `/messages?q=query&authorID=not_required` find messages.
|
||||
|
||||
#### `/api/threads`
|
||||
- GET `/:id` for fetch thread.
|
||||
- DELETE `/:id` for delete thread.
|
||||
- PATCH `/:id` for edit thread.
|
||||
- GET `/:id/messages?skip=0&limit=10` for fetch messages in thread.
|
||||
- POST `/` for create thread.
|
||||
|
||||
#### `/api/users`
|
||||
- GET `/:id` for fetch user.
|
||||
- DELETE `/:id` for delete user.
|
||||
- PATCH `/:id` for edit user.
|
||||
- PUT `/:id` for add profile photo to user.
|
||||
- POST `/:id/ban` for ban all ips of user.
|
||||
|
||||
### Example request:
|
||||
GET ```/api/messages/0```
|
||||
|
||||
#### Example API Output:
|
||||
```js
|
||||
{
|
||||
"react": {
|
||||
"like": [],
|
||||
"dislike": ["0"]
|
||||
},
|
||||
"_id": "6325c216faa938c4cfc43075",
|
||||
"author": {
|
||||
"_id": "632e028ca4ba362ebbb75a43",
|
||||
"name": "Akif9748",
|
||||
"avatar": "/images/avatars/0.jpg",
|
||||
"deleted": false,
|
||||
"edited": true,
|
||||
"about": "# Owner",
|
||||
"admin": true,
|
||||
"theme": "black",
|
||||
"hideLastSeen": false,
|
||||
"time": "2022-09-23T19:01:32.610Z",
|
||||
"id": "0",
|
||||
"__v": 0,
|
||||
"discordID": "539506680140922890"
|
||||
},
|
||||
"threadID": "0",
|
||||
"content": "This is a thread opened via API, yes",
|
||||
"deleted": false,
|
||||
"edited": true,
|
||||
"time": "2022-09-17T12:48:22.378Z",
|
||||
"id": "0",
|
||||
"__v": 4,
|
||||
"oldContents": []
|
||||
}
|
||||
```
|
143
LICENSE
|
@ -1,5 +1,5 @@
|
|||
GNU AFFERO GENERAL PUBLIC LICENSE
|
||||
Version 3, 19 November 2007
|
||||
GNU GENERAL PUBLIC LICENSE
|
||||
Version 3, 29 June 2007
|
||||
|
||||
Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
|
||||
Everyone is permitted to copy and distribute verbatim copies
|
||||
|
@ -7,15 +7,17 @@
|
|||
|
||||
Preamble
|
||||
|
||||
The GNU Affero General Public License is a free, copyleft license for
|
||||
software and other kinds of works, specifically designed to ensure
|
||||
cooperation with the community in the case of network server software.
|
||||
The GNU General Public License is a free, copyleft license for
|
||||
software and other kinds of works.
|
||||
|
||||
The licenses for most software and other practical works are designed
|
||||
to take away your freedom to share and change the works. By contrast,
|
||||
our General Public Licenses are intended to guarantee your freedom to
|
||||
the GNU General Public License is intended to guarantee your freedom to
|
||||
share and change all versions of a program--to make sure it remains free
|
||||
software for all its users.
|
||||
software for all its users. We, the Free Software Foundation, use the
|
||||
GNU General Public License for most of our software; it applies also to
|
||||
any other work released this way by its authors. You can apply it to
|
||||
your programs, too.
|
||||
|
||||
When we speak of free software, we are referring to freedom, not
|
||||
price. Our General Public Licenses are designed to make sure that you
|
||||
|
@ -24,34 +26,44 @@ them if you wish), that you receive source code or can get it if you
|
|||
want it, that you can change the software or use pieces of it in new
|
||||
free programs, and that you know you can do these things.
|
||||
|
||||
Developers that use our General Public Licenses protect your rights
|
||||
with two steps: (1) assert copyright on the software, and (2) offer
|
||||
you this License which gives you legal permission to copy, distribute
|
||||
and/or modify the software.
|
||||
To protect your rights, we need to prevent others from denying you
|
||||
these rights or asking you to surrender the rights. Therefore, you have
|
||||
certain responsibilities if you distribute copies of the software, or if
|
||||
you modify it: responsibilities to respect the freedom of others.
|
||||
|
||||
A secondary benefit of defending all users' freedom is that
|
||||
improvements made in alternate versions of the program, if they
|
||||
receive widespread use, become available for other developers to
|
||||
incorporate. Many developers of free software are heartened and
|
||||
encouraged by the resulting cooperation. However, in the case of
|
||||
software used on network servers, this result may fail to come about.
|
||||
The GNU General Public License permits making a modified version and
|
||||
letting the public access it on a server without ever releasing its
|
||||
source code to the public.
|
||||
For example, if you distribute copies of such a program, whether
|
||||
gratis or for a fee, you must pass on to the recipients the same
|
||||
freedoms that you received. You must make sure that they, too, receive
|
||||
or can get the source code. And you must show them these terms so they
|
||||
know their rights.
|
||||
|
||||
The GNU Affero General Public License is designed specifically to
|
||||
ensure that, in such cases, the modified source code becomes available
|
||||
to the community. It requires the operator of a network server to
|
||||
provide the source code of the modified version running there to the
|
||||
users of that server. Therefore, public use of a modified version, on
|
||||
a publicly accessible server, gives the public access to the source
|
||||
code of the modified version.
|
||||
Developers that use the GNU GPL protect your rights with two steps:
|
||||
(1) assert copyright on the software, and (2) offer you this License
|
||||
giving you legal permission to copy, distribute and/or modify it.
|
||||
|
||||
An older license, called the Affero General Public License and
|
||||
published by Affero, was designed to accomplish similar goals. This is
|
||||
a different license, not a version of the Affero GPL, but Affero has
|
||||
released a new version of the Affero GPL which permits relicensing under
|
||||
this license.
|
||||
For the developers' and authors' protection, the GPL clearly explains
|
||||
that there is no warranty for this free software. For both users' and
|
||||
authors' sake, the GPL requires that modified versions be marked as
|
||||
changed, so that their problems will not be attributed erroneously to
|
||||
authors of previous versions.
|
||||
|
||||
Some devices are designed to deny users access to install or run
|
||||
modified versions of the software inside them, although the manufacturer
|
||||
can do so. This is fundamentally incompatible with the aim of
|
||||
protecting users' freedom to change the software. The systematic
|
||||
pattern of such abuse occurs in the area of products for individuals to
|
||||
use, which is precisely where it is most unacceptable. Therefore, we
|
||||
have designed this version of the GPL to prohibit the practice for those
|
||||
products. If such problems arise substantially in other domains, we
|
||||
stand ready to extend this provision to those domains in future versions
|
||||
of the GPL, as needed to protect the freedom of users.
|
||||
|
||||
Finally, every program is threatened constantly by software patents.
|
||||
States should not allow patents to restrict development and use of
|
||||
software on general-purpose computers, but in those that do, we wish to
|
||||
avoid the special danger that patents applied to a free program could
|
||||
make it effectively proprietary. To prevent this, the GPL assures that
|
||||
patents cannot be used to render the program non-free.
|
||||
|
||||
The precise terms and conditions for copying, distribution and
|
||||
modification follow.
|
||||
|
@ -60,7 +72,7 @@ modification follow.
|
|||
|
||||
0. Definitions.
|
||||
|
||||
"This License" refers to version 3 of the GNU Affero General Public License.
|
||||
"This License" refers to version 3 of the GNU General Public License.
|
||||
|
||||
"Copyright" also means copyright-like laws that apply to other kinds of
|
||||
works, such as semiconductor masks.
|
||||
|
@ -537,45 +549,35 @@ to collect a royalty for further conveying from those to whom you convey
|
|||
the Program, the only way you could satisfy both those terms and this
|
||||
License would be to refrain entirely from conveying the Program.
|
||||
|
||||
13. Remote Network Interaction; Use with the GNU General Public License.
|
||||
|
||||
Notwithstanding any other provision of this License, if you modify the
|
||||
Program, your modified version must prominently offer all users
|
||||
interacting with it remotely through a computer network (if your version
|
||||
supports such interaction) an opportunity to receive the Corresponding
|
||||
Source of your version by providing access to the Corresponding Source
|
||||
from a network server at no charge, through some standard or customary
|
||||
means of facilitating copying of software. This Corresponding Source
|
||||
shall include the Corresponding Source for any work covered by version 3
|
||||
of the GNU General Public License that is incorporated pursuant to the
|
||||
following paragraph.
|
||||
13. Use with the GNU Affero General Public License.
|
||||
|
||||
Notwithstanding any other provision of this License, you have
|
||||
permission to link or combine any covered work with a work licensed
|
||||
under version 3 of the GNU General Public License into a single
|
||||
under version 3 of the GNU Affero General Public License into a single
|
||||
combined work, and to convey the resulting work. The terms of this
|
||||
License will continue to apply to the part which is the covered work,
|
||||
but the work with which it is combined will remain governed by version
|
||||
3 of the GNU General Public License.
|
||||
but the special requirements of the GNU Affero General Public License,
|
||||
section 13, concerning interaction through a network will apply to the
|
||||
combination as such.
|
||||
|
||||
14. Revised Versions of this License.
|
||||
|
||||
The Free Software Foundation may publish revised and/or new versions of
|
||||
the GNU Affero General Public License from time to time. Such new versions
|
||||
will be similar in spirit to the present version, but may differ in detail to
|
||||
the GNU General Public License from time to time. Such new versions will
|
||||
be similar in spirit to the present version, but may differ in detail to
|
||||
address new problems or concerns.
|
||||
|
||||
Each version is given a distinguishing version number. If the
|
||||
Program specifies that a certain numbered version of the GNU Affero General
|
||||
Program specifies that a certain numbered version of the GNU General
|
||||
Public License "or any later version" applies to it, you have the
|
||||
option of following the terms and conditions either of that numbered
|
||||
version or of any later version published by the Free Software
|
||||
Foundation. If the Program does not specify a version number of the
|
||||
GNU Affero General Public License, you may choose any version ever published
|
||||
GNU General Public License, you may choose any version ever published
|
||||
by the Free Software Foundation.
|
||||
|
||||
If the Program specifies that a proxy can decide which future
|
||||
versions of the GNU Affero General Public License can be used, that proxy's
|
||||
versions of the GNU General Public License can be used, that proxy's
|
||||
public statement of acceptance of a version permanently authorizes you
|
||||
to choose that version for the Program.
|
||||
|
||||
|
@ -633,29 +635,40 @@ the "copyright" line and a pointer to where the full notice is found.
|
|||
Copyright (C) <year> <name of author>
|
||||
|
||||
This program is free software: you can redistribute it and/or modify
|
||||
it under the terms of the GNU Affero General Public License as published
|
||||
by the Free Software Foundation, either version 3 of the License, or
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation, either version 3 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU Affero General Public License for more details.
|
||||
GNU General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU Affero General Public License
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with this program. If not, see <https://www.gnu.org/licenses/>.
|
||||
|
||||
Also add information on how to contact you by electronic and paper mail.
|
||||
|
||||
If your software can interact with users remotely through a computer
|
||||
network, you should also make sure that it provides a way for users to
|
||||
get its source. For example, if your program is a web application, its
|
||||
interface could display a "Source" link that leads users to an archive
|
||||
of the code. There are many ways you could offer source, and different
|
||||
solutions will be better for different programs; see section 13 for the
|
||||
specific requirements.
|
||||
If the program does terminal interaction, make it output a short
|
||||
notice like this when it starts in an interactive mode:
|
||||
|
||||
<program> Copyright (C) <year> <name of author>
|
||||
This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
|
||||
This is free software, and you are welcome to redistribute it
|
||||
under certain conditions; type `show c' for details.
|
||||
|
||||
The hypothetical commands `show w' and `show c' should show the appropriate
|
||||
parts of the General Public License. Of course, your program's commands
|
||||
might be different; for a GUI interface, you would use an "about box".
|
||||
|
||||
You should also get your employer (if you work as a programmer) or school,
|
||||
if any, to sign a "copyright disclaimer" for the program, if necessary.
|
||||
For more information on this, and how to apply and follow the GNU AGPL, see
|
||||
For more information on this, and how to apply and follow the GNU GPL, see
|
||||
<https://www.gnu.org/licenses/>.
|
||||
|
||||
The GNU General Public License does not permit incorporating your program
|
||||
into proprietary programs. If your program is a subroutine library, you
|
||||
may consider it more useful to permit linking proprietary applications with
|
||||
the library. If this is what you want to do, use the GNU Lesser General
|
||||
Public License instead of this License. But first, please read
|
||||
<https://www.gnu.org/licenses/why-not-lgpl.html>.
|
||||
|
|
162
README.md
|
@ -1,104 +1,84 @@
|
|||
# akf-forum
|
||||
A Node.js based forum software.
|
||||
<img src="https://raw.githubusercontent.com/Akif9748/akf-forum/main/public/images/logo.jpg" align="right" width="300px" />
|
||||
|
||||
A forum software written in Node.js.
|
||||
|
||||
## Installation
|
||||
- Clone or download this repo.
|
||||
- Run `npm i` to install **dependencies**.
|
||||
- Enter your database credentials in `.env`.
|
||||
- Run `npm start` for run it.
|
||||
- Go `/setup` page for setup your forum.
|
||||
|
||||
### Extra (If you are not use `setup` page)
|
||||
Run `node util/reset` to **reset the database** for duplicate key errors, and run `node util/admin` for give admin perms to first member.
|
||||
Edit `config.json` for default theme for users, forum name, meta description, character limits, discord auth enabler, global ratelimit etc.
|
||||
|
||||
### How to install theme:
|
||||
- Copy your theme to `src/themes` folder.
|
||||
Additional note for themes: If a theme has not got any .ejs file, it will use default theme's .ejs files. default theme is in themes folder, named as `common`.
|
||||
|
||||
### DISCORD AUTH:
|
||||
`"discord_auth": true` in config.json.
|
||||
Add your app secret and app id to `.env` as `DISCORD_SECRET` and `DISCORD_ID`.
|
||||
Create a redirect url in discord developer portal:
|
||||
`https://forum_url.com/auth/discord`
|
||||
|
||||
### EMAIL AUTH:
|
||||
You can configure it. Just edit `config.json` and `.env` files.
|
||||
`"email_auth": true, "default_user_state": "APPROVAL"` in config.json.
|
||||
Add your email credentials to `.env` as `EMAIL_USER` and `EMAIL_PASS`.
|
||||
Add your email domain to `.env` as `EMAIL_SERVICE`.
|
||||
### Extra
|
||||
Run `node util/reset` to **reset the database**, and run `node util/admin` for give admin perms to first member.
|
||||
|
||||
## API
|
||||
Akf-forum has got an API for AJAX (fetch), other clients etc. And, you can learn about API in `APIDOCS.md`.
|
||||
|
||||
**And you can use [offical API wrapper](https://github.com/Akif9748/akf-forum-api).**
|
||||
Akf-forum has got an API for other clients etc. You can test api with python files in `test` folder. python is only for testing 😭
|
||||
And, you can learn about API in `util/APIDOCS.md`.
|
||||
|
||||
## Credits
|
||||
* [Akif9748](https://github.com/Akif9748) - Project mainteiner, main developer, made **old** frontend
|
||||
* [Tokmak](https://github.com/tokmak0) - Made **new** frontend
|
||||
* [Camroku](https://github.com/Camroku) - Made **old** stylesheets
|
||||
* [Akif9748](https://github.com/Akif9748) - Project mainteiner, main developer
|
||||
* [Camroku](https://github.com/Camroku) - Made stylesheets
|
||||
|
||||
## To do (Backend, bug fixes)
|
||||
- `/errors/error` will ~~change~~ deprecate, it will be in res.error . And we will use "alert" for errors with fetch api. this added for messages and reactions...
|
||||
- message.js/12, so, admin perms,(req.user?.admin || !thread.deleted), and api in message.
|
||||
- the forum will only use api path... this added for messages and reactions...
|
||||
|
||||
## Roadmap
|
||||
### User
|
||||
| To do | Is done? | Priority |
|
||||
| ----- | -------- | -------- |
|
||||
| Login via redirect query | 🟢 | HIGH |
|
||||
| Register | 🟢 | HIGH |
|
||||
| Logout | 🟢 | HIGH |
|
||||
| Admin | 🟢 | HIGH |
|
||||
| Message count | 🟢 | MEDIUM |
|
||||
| Delete user | 🟢 | HIGH |
|
||||
| About me | 🔴 | LOW |
|
||||
| Edit user | 🔴 | HIGH |
|
||||
| IP ban | 🔴 | MEDIUM |
|
||||
|
||||
### Messages
|
||||
| To do | Is done? | Priority |
|
||||
| ----- | -------- | -------- |
|
||||
| Ratelimit | 🟢 | HIGH |
|
||||
| Send | 🟢 | HIGH |
|
||||
| Delete | 🟢 | HIGH |
|
||||
| React | 🟢 | MEDIUM |
|
||||
| Edit | 🔴 | HIGH |
|
||||
|
||||
### Threads
|
||||
| To do | Is done? | Priority |
|
||||
| ----- | -------- | -------- |
|
||||
| Ratelimit | 🟢 | HIGH |
|
||||
| Create | 🟢 | HIGH |
|
||||
| Delete | 🟢 | HIGH |
|
||||
| Edit | 🔴 | HIGH |
|
||||
|
||||
### API
|
||||
| To do | Is done? | Priority |
|
||||
| ----- | -------- | -------- |
|
||||
| Other clients for forum via API | 🟢 | LOW |
|
||||
| Send message | 🟢 | MEDIUM |
|
||||
| Create thread | 🟢 | MEDIUM |
|
||||
| Get info about thread | 🟢 | MEDIUM |
|
||||
<<<<<<< HEAD
|
||||
| Delete message & thread | 🔴 | MEDIUM |
|
||||
| Edit message & thread | 🔴 | MEDIUM |
|
||||
|
||||
=======
|
||||
| Delete message | 🔴 | MEDIUM |
|
||||
| React | 🟢 | MEDIUM |
|
||||
>>>>>>> 9f10a32b7ce05cbb81acacb8277b68c25d4baa34
|
||||
|
||||
### Other
|
||||
| To do | Is done? | Priority |
|
||||
| ----- | -------- | -------- |
|
||||
| Footer | 🟡 | LOW |
|
||||
| Multi-theme support | 🔴 | LOW |
|
||||
| Search | 🔴 | MEDIUM |
|
||||
| Better view | 🟢 | MEDIUM |
|
||||
| Sending message etc. will use fetch API | 🔴 | HIGH |
|
||||
|
||||
## Screenshot
|
||||
|
||||
### Thread Page w/Bootstrap theme
|
||||

|
||||
|
||||
## TO-DO list
|
||||
|
||||
### Backend:
|
||||
#### Feature:
|
||||
- Profile Message or DM
|
||||
- Upload other photos, model for it
|
||||
- Edit & download template
|
||||
- Banner
|
||||
- Add @me support for ids, <%= member.id %>
|
||||
- Roles & Permissions
|
||||
```
|
||||
role: "moderator",
|
||||
permissions: ["see_deleted_message"]
|
||||
```
|
||||
|
||||
#### Fixes:
|
||||
- Admin deleting other admins.
|
||||
- theme.js, change theme js code to a file.
|
||||
- same email discord???? direct err
|
||||
- IMPORTANT: add user/member id to file so scripts can access
|
||||
|
||||
#### ETC:
|
||||
- Rewrite apidocs
|
||||
- Add a feature list to README.md
|
||||
|
||||
### Frontend
|
||||
#### Features:
|
||||
- change category name
|
||||
- Add approval threads page.
|
||||
- add support for switch around gravatar and upload photo
|
||||
- old contents / titles add to forum interface
|
||||
- who liked a message
|
||||
|
||||
#### Fixes:
|
||||
- BETTER SETUP PAGE: use setup everytime
|
||||
- add threads, messages etc. to "extra" folder
|
||||
- add category to thread list page
|
||||
- working reset button
|
||||
- text alling center body
|
||||
- thread.js unfuction only listener
|
||||
- show error on modal
|
||||
- send delete, ban to user settings (edit user) menu and fix edit user menu
|
||||
|
||||
## Special Thanks:
|
||||
https://github.com/akashgiricse/Online-Forum for bootstrap theme.
|
||||
|
||||
@Tokmak for old frontend.
|
||||
|
||||
https://fengyuanchen.github.io/cropperjs/examples/crop-a-round-image.html for avatar upload panel.
|
||||
|
||||
https://github.com/mdbootstrap/bootstrap-profiles for profile page of bootstrap theme.
|
||||
|
||||
## Major Version History
|
||||
- V5: Enchanted Themes
|
||||
- V4: Caching
|
||||
- V3: New Theme
|
||||
- V2: Backend fix, mongoose is fixed. Really big fix.
|
||||
- V1: Mongoose added.
|
||||
- V0: Birth with quick.db
|
||||

|
||||
|
|
|
@ -1,24 +0,0 @@
|
|||
{
|
||||
"def_theme": {
|
||||
"codename": "bootstrap_black",
|
||||
"language": "en"
|
||||
},
|
||||
"forum_name": "akf-forum",
|
||||
"description": "Akf-forum offical site!",
|
||||
"limits": {
|
||||
"title": 128,
|
||||
"message": 1024,
|
||||
"names": 25,
|
||||
"desp": 256
|
||||
},
|
||||
"global_ratelimit": {
|
||||
"enabled": true,
|
||||
"max": 30,
|
||||
"windowMs": 60000
|
||||
},
|
||||
"discord_auth": false,
|
||||
"default_thread_state": "OPEN",
|
||||
"default_user_state": "ACTIVE",
|
||||
"email_auth": false,
|
||||
"host": "https://akf-forum.glitch.me"
|
||||
}
|
2
errors/error.js
Normal file
|
@ -0,0 +1,2 @@
|
|||
module.exports = (res, type, error) =>
|
||||
res.status(type).render("error", { type, error });
|
25
index.js
Normal file
|
@ -0,0 +1,25 @@
|
|||
const error = require("./errors/error.js"),
|
||||
session = require('express-session'),
|
||||
bodyParser = require('body-parser'),
|
||||
port = process.env.PORT || 3000,
|
||||
mongoose = require("mongoose"),
|
||||
express = require('express'),
|
||||
fs = require("fs"),
|
||||
app = express();
|
||||
|
||||
require("dotenv").config();
|
||||
mongoose.connect(process.env.MONGO_DB_URL || "mongodb://localhost:27017/akf-forum", () => console.log("Database is connected"));
|
||||
|
||||
app.use(session({ secret: 'secret', resave: true, saveUninitialized: true }));
|
||||
app.use(bodyParser.urlencoded({ extended: true }));
|
||||
app.use(express.static("public"));
|
||||
app.set("view engine", "ejs");
|
||||
app.use(express.json());
|
||||
app.use(require("./middlewares/user"));
|
||||
|
||||
for (const file of fs.readdirSync("./routes"))
|
||||
app.use("/" + file.replace(".js", ""), require(`./routes/${file}`));
|
||||
|
||||
app.all("*", (req, res) => error(res, 404, "We have not got this page."));
|
||||
|
||||
app.listen(port, () => console.log("akf-forum on port:", port));
|
4
middlewares/login.js
Normal file
|
@ -0,0 +1,4 @@
|
|||
module.exports = (req, res, next) => {
|
||||
if (!req.session.userid) return res.redirect('/login');
|
||||
next();
|
||||
}
|
6
middlewares/user.js
Normal file
|
@ -0,0 +1,6 @@
|
|||
const { UserModel } = require("../models");
|
||||
|
||||
module.exports = async (req, res, next) => {
|
||||
req.user = await UserModel.get(req.session.userid);
|
||||
next();
|
||||
}
|
34
models/Message.js
Normal file
|
@ -0,0 +1,34 @@
|
|||
const mongoose = require("mongoose")
|
||||
const UserModel = require("./User");
|
||||
|
||||
const schema = new mongoose.Schema({
|
||||
id: { type: String, unique: true },
|
||||
|
||||
threadID: String,
|
||||
author: UserModel.schema, // user-model
|
||||
|
||||
content: String,
|
||||
time: { type: Date, default: Date.now },
|
||||
deleted: { type: Boolean, default: false },
|
||||
edited: { type: Boolean, default: false },
|
||||
react: { type:Object, default: {} }
|
||||
|
||||
})
|
||||
|
||||
schema.virtual('authorID').get(function() { return this.author?.id; });
|
||||
|
||||
schema.methods.takeId = async function () {
|
||||
this.id = String(await model.count() || 0);
|
||||
return this;
|
||||
}
|
||||
|
||||
schema.methods.getLink = function (id = this.id) {
|
||||
return "/messages/" + id;
|
||||
}
|
||||
|
||||
const model = mongoose.model('message', schema);
|
||||
|
||||
model.get = id => model.findOne({ id });
|
||||
|
||||
module.exports = model;
|
||||
|
12
models/Secret.js
Normal file
|
@ -0,0 +1,12 @@
|
|||
const { Schema, model } = require("mongoose")
|
||||
|
||||
const schema = new Schema({
|
||||
|
||||
username: { type: String, unique: true },
|
||||
password: String,
|
||||
id: { type:String, unique: true }
|
||||
|
||||
|
||||
});
|
||||
|
||||
module.exports = model('secret', schema);
|
36
models/Thread.js
Normal file
|
@ -0,0 +1,36 @@
|
|||
const mongoose = require("mongoose")
|
||||
const UserModel = require("./User");
|
||||
const schema = new mongoose.Schema({
|
||||
id: { type: String, unique: true },
|
||||
|
||||
author: UserModel.schema,
|
||||
|
||||
title: String,
|
||||
time: { type: Date, default: Date.now },
|
||||
deleted: { type: Boolean, default: false },
|
||||
messages: [String]
|
||||
|
||||
});
|
||||
|
||||
schema.virtual('authorID').get(function() { return this.author?.id; });
|
||||
|
||||
schema.methods.push = function (messageID) {
|
||||
this.messages.push(messageID);
|
||||
return this;
|
||||
}
|
||||
|
||||
|
||||
schema.methods.takeId = async function () {
|
||||
this.id = await model.count() || 0;
|
||||
return this;
|
||||
}
|
||||
|
||||
schema.methods.getLink = function (id = this.id) {
|
||||
return "/threads/" + id;
|
||||
}
|
||||
|
||||
const model = mongoose.model('thread', schema);
|
||||
|
||||
model.get = id => model.findOne({ id });
|
||||
|
||||
module.exports = model;
|
28
models/User.js
Normal file
|
@ -0,0 +1,28 @@
|
|||
const mongoose = require("mongoose")
|
||||
|
||||
const schema = new mongoose.Schema({
|
||||
id: { type: String },
|
||||
|
||||
name: String,
|
||||
avatar: { type: String, default: "/images/guest.png" },
|
||||
time: { type: Date, default: Date.now },
|
||||
deleted: { type: Boolean, default: false },
|
||||
admin: { type: Boolean, default: false }
|
||||
|
||||
});
|
||||
|
||||
|
||||
schema.methods.takeId = async function () {
|
||||
this.id = String(await model.count() || 0);
|
||||
return this;
|
||||
}
|
||||
|
||||
schema.methods.getLink = function (id = this.id) {
|
||||
return "/users/" + id;
|
||||
}
|
||||
|
||||
const model = mongoose.model('user', schema);
|
||||
|
||||
model.get = id => model.findOne({ id });
|
||||
|
||||
module.exports = model;
|
6
models/index.js
Normal file
|
@ -0,0 +1,6 @@
|
|||
const UserModel = require("./User"),
|
||||
MessageModel = require("./Message"),
|
||||
ThreadModel = require("./Thread"),
|
||||
SecretModel = require("./Secret");
|
||||
|
||||
module.exports = { UserModel, MessageModel, ThreadModel, SecretModel };
|
4351
package-lock.json
generated
40
package.json
|
@ -1,13 +1,11 @@
|
|||
{
|
||||
"name": "akf-forum",
|
||||
"version": "5.7.1",
|
||||
"description": "A Node.js based forum software",
|
||||
"main": "src/index.js",
|
||||
"version": "2.5.0",
|
||||
"description": "A forum script written in Node.js",
|
||||
"main": "index.js",
|
||||
"scripts": {
|
||||
"start": "node .",
|
||||
"reset": "node util/reset",
|
||||
"admin": "node util/admin",
|
||||
"test": "echo \"Error: no test specified\" && exit 1"
|
||||
"reset": "node reset.js"
|
||||
},
|
||||
"repository": {
|
||||
"type": "git",
|
||||
|
@ -15,31 +13,21 @@
|
|||
},
|
||||
"author": "Akif9748",
|
||||
"contributors": [
|
||||
"Camroku",
|
||||
"Tokmak"
|
||||
"Camroku"
|
||||
],
|
||||
"license": "GPL-3.0-or-later",
|
||||
"bugs": {
|
||||
"url": "https://github.com/Akif9748/akf-forum/issues"
|
||||
},
|
||||
"engines": {
|
||||
"node": ">=18 >=17.5 >=16.15"
|
||||
},
|
||||
"homepage": "https://akf-forum.glitch.me/",
|
||||
"homepage": "https://akf-forum.herokuapp.com/",
|
||||
"dependencies": {
|
||||
"bcrypt": "^5.1.1",
|
||||
"connect-mongo": "^5.1.0",
|
||||
"dotenv": "^16.4.2",
|
||||
"ejs": "^3.1.9",
|
||||
"express": "^4.18.2",
|
||||
"express-rate-limit": "^7.1.5",
|
||||
"express-session": "^1.18.0",
|
||||
"mongoose": "^8.1.1",
|
||||
"multer": "^1.4.5-lts.1",
|
||||
"nodemailer": "^6.9.9",
|
||||
"request-ip": "^3.3.0"
|
||||
},
|
||||
"devDependencies": {
|
||||
"eslint": "^8.56.0"
|
||||
"bcrypt": "^5.0.1",
|
||||
"body-parser": "^1.19.2",
|
||||
"dotenv": "^16.0.1",
|
||||
"ejs": "^3.1.6",
|
||||
"express": "^4.17.3",
|
||||
"express-rate-limit": "^6.5.1",
|
||||
"express-session": "^1.17.2",
|
||||
"mongoose": "^6.5.1"
|
||||
}
|
||||
}
|
||||
|
|
2114
pnpm-lock.yaml
generated
260
public/css/styles.css
Normal file
|
@ -0,0 +1,260 @@
|
|||
:root {
|
||||
/* Apprentice Scheme */
|
||||
/*
|
||||
* use `var(--col-x)` instead of directly typing the color.
|
||||
*/
|
||||
--col-0: #1C1C1C;
|
||||
--col-1: #AF5F5F;
|
||||
--col-2: #5F875F;
|
||||
--col-3: #87875F;
|
||||
--col-4: #5F87AF;
|
||||
--col-5: #5F5F87;
|
||||
--col-6: #5F8787;
|
||||
--col-7: #6C6C6C;
|
||||
--col-8: #444444;
|
||||
--col-9: #FF8700;
|
||||
--col-10: #87AF87;
|
||||
--col-11: #FFFFAF;
|
||||
--col-12: #8FAFD7;
|
||||
--col-13: #8787AF;
|
||||
--col-14: #5FAFAF;
|
||||
--col-15: #FFFFFF;
|
||||
--col-fg: #BCBCBC;
|
||||
--col-bg: #262626;
|
||||
}
|
||||
|
||||
|
||||
|
||||
textarea {
|
||||
|
||||
font-family: monospace;
|
||||
background-color: var(--col-bg);
|
||||
border: 2px solid var(--col-8);
|
||||
color: var(--col-fg);
|
||||
width: auto;
|
||||
height: auto;
|
||||
cursor: pointer;
|
||||
resize: none;
|
||||
}
|
||||
|
||||
p {
|
||||
font-size: 25px;
|
||||
}
|
||||
|
||||
hr {
|
||||
border-color: var(--col-8);
|
||||
border: 0;
|
||||
border-top: 1px solid var(--col-fg);
|
||||
margin: 20px 0;
|
||||
}
|
||||
|
||||
body,
|
||||
h1,
|
||||
h2,
|
||||
h3,
|
||||
h4,
|
||||
h5,
|
||||
h6 {
|
||||
font-family: monospace;
|
||||
background: var(--col-bg);
|
||||
color: var(--col-fg);
|
||||
max-width: 69rem;
|
||||
margin-top: 10px;
|
||||
margin: auto;
|
||||
|
||||
/* funny number */
|
||||
}
|
||||
|
||||
a:link {
|
||||
color: var(--col-4);
|
||||
}
|
||||
|
||||
a:hover {
|
||||
color: var(--col-1);
|
||||
}
|
||||
|
||||
a:visited {
|
||||
color: var(--col-13);
|
||||
}
|
||||
|
||||
a:active {
|
||||
color: var(--col-1);
|
||||
}
|
||||
|
||||
pre {
|
||||
background-color: var(--col-0);
|
||||
padding: 1em;
|
||||
border: 0;
|
||||
}
|
||||
|
||||
h1,
|
||||
h2,
|
||||
h3,
|
||||
h4,
|
||||
h5 {
|
||||
margin-bottom: 0.1rem;
|
||||
}
|
||||
|
||||
hr {
|
||||
border-color: var(--col-8);
|
||||
}
|
||||
|
||||
button, input {
|
||||
font-family: monospace;
|
||||
background-color: var(--col-bg);
|
||||
border: 2px solid var(--col-8);
|
||||
|
||||
color: var(--col-fg);
|
||||
width: auto;
|
||||
height: 30px;
|
||||
|
||||
}
|
||||
|
||||
button.buyuk {
|
||||
width: 150px;
|
||||
height: 50px;
|
||||
}
|
||||
|
||||
input {
|
||||
width: 75%;
|
||||
cursor: pointer;
|
||||
color: var(--col-fg);
|
||||
}
|
||||
|
||||
button:hover {
|
||||
background-color: var(--col-fg);
|
||||
color: var(--col-bg);
|
||||
}
|
||||
|
||||
|
||||
/* NAVBAR: */
|
||||
|
||||
.navbar {
|
||||
background-color: #333;
|
||||
overflow: hidden;
|
||||
}
|
||||
|
||||
.navbar a {
|
||||
float: left;
|
||||
color: var(--col-fg);
|
||||
text-align: center;
|
||||
padding: 14px 16px;
|
||||
text-decoration: none;
|
||||
font-size: 17px;
|
||||
border-right: 3px solid var(--col-8);
|
||||
}
|
||||
|
||||
.navbar a:hover {
|
||||
background-color: var(--col-bg);
|
||||
color: var(--col-fg);
|
||||
}
|
||||
|
||||
.navbar h1:hover {
|
||||
background-color: var(--col-bg);
|
||||
color: var(--col-fg);
|
||||
}
|
||||
|
||||
.navbar a.active {
|
||||
background-color: var(--col-14);
|
||||
color: var(--col-15);
|
||||
}
|
||||
|
||||
|
||||
.user {
|
||||
margin: 0;
|
||||
border: 1px solid var(--col-8);
|
||||
}
|
||||
|
||||
.user h1 {
|
||||
font-family: monospace;
|
||||
background: #333;
|
||||
color: var(--col-fg);
|
||||
margin: auto;
|
||||
text-align: center;
|
||||
line-height: 1;
|
||||
color: var(--col-13);
|
||||
font-size: 27px;
|
||||
}
|
||||
|
||||
.user img {
|
||||
padding: 6px 10px;
|
||||
}
|
||||
|
||||
.user a {
|
||||
color: var(--col-13);
|
||||
padding: 0px 5px;
|
||||
}
|
||||
|
||||
|
||||
/*
|
||||
*****************************
|
||||
IMAGES
|
||||
*****************************
|
||||
*/
|
||||
|
||||
|
||||
/*
|
||||
*****************************
|
||||
IMAGES
|
||||
*****************************
|
||||
*/
|
||||
img.yuvarlak {
|
||||
border-radius: 50%;
|
||||
height: 30px;
|
||||
width: 30px;
|
||||
}
|
||||
|
||||
img.logo {
|
||||
width: 266px;
|
||||
height: 75px;
|
||||
}
|
||||
|
||||
|
||||
/*
|
||||
*****************************
|
||||
FOOTER
|
||||
*****************************
|
||||
*/
|
||||
.footer {
|
||||
position: fixed;
|
||||
left: 0;
|
||||
bottom: 0;
|
||||
width: 100%;
|
||||
background-color: var(--col-8);
|
||||
color: white;
|
||||
text-align: center;
|
||||
}
|
||||
|
||||
.footer p {
|
||||
|
||||
font-size: 16px;
|
||||
color: white;
|
||||
|
||||
}
|
||||
|
||||
/*
|
||||
*****************************
|
||||
ADMIN TEXT
|
||||
*****************************
|
||||
*/
|
||||
.admin {
|
||||
position: fixed;
|
||||
left: 0;
|
||||
top: 0;
|
||||
height: 20px;
|
||||
width: 100%;
|
||||
text-align: center;
|
||||
}
|
||||
|
||||
.admin p {
|
||||
font-size: 16px;
|
||||
margin: auto;
|
||||
color: var(--col-15);
|
||||
}
|
||||
|
||||
.admin a {
|
||||
background-color: var(--col-13);
|
||||
border: 2px solid var(--col-8);
|
||||
height: 20px;
|
||||
color: var(--col-15);
|
||||
}
|
BIN
public/images/favicon.jpg
Normal file
After Width: | Height: | Size: 5 KiB |
BIN
public/images/favicon.png
Normal file
After Width: | Height: | Size: 5 KiB |
Before Width: | Height: | Size: 4.4 KiB After Width: | Height: | Size: 4.4 KiB |
BIN
public/images/logo.jpg
Normal file
After Width: | Height: | Size: 15 KiB |
44
public/js/send.js
Normal file
|
@ -0,0 +1,44 @@
|
|||
document.getElementById("send").addEventListener("submit", async e => {
|
||||
|
||||
e.preventDefault();
|
||||
const form = e.target;
|
||||
const data = new FormData(form);
|
||||
fetch("/api/messages", {
|
||||
method: 'POST',
|
||||
body: JSON.stringify({ threadID: data.get("threadID"), content: data.get("content") }),
|
||||
headers: {
|
||||
"Content-Type": "application/json"
|
||||
}
|
||||
}).then(res => res.json())
|
||||
.then(res => {
|
||||
if (res.result.error) return alert(res.result.error);
|
||||
|
||||
form.reset();
|
||||
const message = res.result;
|
||||
document.getElementById("messages").innerHTML += `<br>
|
||||
<div id="message-${message.id}" style="border: 2px solid #444444; padding: 10px;">
|
||||
|
||||
<h3 style="float:right;">${new Date(message.time).toLocaleString()}</h3>
|
||||
|
||||
<h2>
|
||||
<img class="yuvarlak" src=${message.author.avatar} alt=${message.author.name}>
|
||||
<a href="/users/${message.author.id}"> ${message.author.name}</a>:
|
||||
</h2>
|
||||
|
||||
<h2>${message.content}</h2><br>
|
||||
|
||||
<form style="display:inline;" action="/message/${message.id}/delete/" method="post">
|
||||
</a><button type="submit">DELETE</button>
|
||||
</form>
|
||||
<div style="float: right;">
|
||||
<h3 id="count${message.id}" style="display:inline;">0</h3>
|
||||
<button style="display:inline;" id="like" value="${message.id}">+🔼</button>
|
||||
<button style="display:inline;" id="dislike" value="${message.id}" >-🔽</button>
|
||||
</div>
|
||||
|
||||
</div>`;
|
||||
|
||||
}).catch(err => {
|
||||
alert(err);
|
||||
});
|
||||
});
|
18
routes/.js
Normal file
|
@ -0,0 +1,18 @@
|
|||
const { UserModel, ThreadModel, MessageModel } = require("../models")
|
||||
const { Router } = require("express");
|
||||
const app = Router();
|
||||
|
||||
app.get("/", async (req, res) => {
|
||||
const
|
||||
mem = process.memoryUsage().heapUsed / Math.pow(2, 20),
|
||||
users = await UserModel.count({}),
|
||||
threads = await ThreadModel.count({}),
|
||||
messages = await MessageModel.count({}),
|
||||
user = req.user;
|
||||
|
||||
res.render("index", { mem, user, users, threads, messages })
|
||||
|
||||
})
|
||||
|
||||
|
||||
module.exports = app;
|
38
routes/admin.js
Normal file
|
@ -0,0 +1,38 @@
|
|||
const { UserModel } = require("../models")
|
||||
|
||||
const { Router } = require("express")
|
||||
const error = require("../errors/error")
|
||||
|
||||
const app = Router();
|
||||
|
||||
app.use(require("../middlewares/login"));
|
||||
|
||||
app.get("/", async (req, res) => {
|
||||
const user = req.user;
|
||||
|
||||
if (!user.admin) return error(res, 403, "You have not got permissions for view to this page.");
|
||||
|
||||
res.render("admin", { user, user2: false })
|
||||
});
|
||||
|
||||
app.post("/", async (req, res) => {
|
||||
|
||||
const user = req.user;
|
||||
|
||||
if (!user.admin) return error(res, 403, "You have not got permissions for view to this page.");
|
||||
const user2 = await UserModel.get(req.body.userid);
|
||||
|
||||
if (!user2)
|
||||
return error(res, 404, "We have not got this user in all of the forum. Vesselam.");
|
||||
|
||||
else {
|
||||
user2.admin = true;
|
||||
await user2.save()
|
||||
}
|
||||
|
||||
res.render("admin", { user, user2 })
|
||||
|
||||
|
||||
});
|
||||
|
||||
module.exports = app;
|
68
routes/api/index.js
Normal file
|
@ -0,0 +1,68 @@
|
|||
const { Router } = require("express")
|
||||
const app = Router();
|
||||
const bcrypt = require("bcrypt");
|
||||
|
||||
const { request, response } = require("express");
|
||||
const { SecretModel, UserModel } = require("../../models")
|
||||
|
||||
/**
|
||||
* AUTH TYPE:
|
||||
|
||||
headers:
|
||||
{
|
||||
username: "Username for client",
|
||||
password: "Password of selected username for client"
|
||||
}
|
||||
|
||||
*/
|
||||
|
||||
/**
|
||||
* REQUEST TYPE:
|
||||
* GET /api/action/id
|
||||
*
|
||||
* @example message action:
|
||||
* GET /api/message/0
|
||||
*
|
||||
*/
|
||||
|
||||
|
||||
/**
|
||||
* Auth checker
|
||||
* @param {request} req
|
||||
* @param {response} res
|
||||
*/
|
||||
|
||||
app.use(async (req, res, next) => {
|
||||
res.error = (status, error) =>
|
||||
res.status(status).json({ status, result: { error } })
|
||||
|
||||
res.complate = result => res.status(200).json({ status: 200, result });
|
||||
|
||||
if (req.user) return next();
|
||||
const { username = null, password = null } = req.headers;
|
||||
|
||||
if (!username || !password)
|
||||
return res.error(401, "Authorise headers are missing")
|
||||
|
||||
const user = await SecretModel.findOne({ username });
|
||||
|
||||
if (!user)
|
||||
return res.error(401, "We have not got any user has got this name")
|
||||
|
||||
const validPassword = await bcrypt.compare(password, user.password);
|
||||
|
||||
if (!validPassword)
|
||||
return res.error(401, 'Incorrect Password!')
|
||||
req.user = await UserModel.findOne({ name: req.headers.username });
|
||||
|
||||
next();
|
||||
});
|
||||
|
||||
/* will add for loop */
|
||||
app.use("/messages", require("./routes/message"))
|
||||
app.use("/users", require("./routes/user"))
|
||||
app.use("/threads", require("./routes/threads"))
|
||||
|
||||
app.all("*", (req, res) => res.error(400, "Bad request"));
|
||||
|
||||
module.exports = app;
|
62
routes/api/routes/message.js
Normal file
|
@ -0,0 +1,62 @@
|
|||
const { UserModel, MessageModel, ThreadModel } = require("../../../models");
|
||||
const rateLimit = require('express-rate-limit')
|
||||
|
||||
const { Router } = require("express")
|
||||
|
||||
const app = Router();
|
||||
|
||||
app.get("/:id", async (req, res) => {
|
||||
|
||||
|
||||
const { id = null } = req.params;
|
||||
if (!id) return res.error(400, "Missing id in query")
|
||||
const message = await MessageModel.get(id);
|
||||
|
||||
if (!message || message.deleted) return res.error(404, "We have not got any message declared as this id.");
|
||||
|
||||
res.complate(message);
|
||||
|
||||
})
|
||||
|
||||
app.post("/", rateLimit({
|
||||
windowMs: 60_000, max: 1, standardHeaders: true, legacyHeaders: false,
|
||||
handler: (request, response, next, options) =>
|
||||
!request.user.admin ?
|
||||
response.error(options.statusCode, "You are begin ratelimited")
|
||||
: next()
|
||||
}), async (req, res) => {
|
||||
|
||||
const { threadID = null, content = null } = req.body;
|
||||
if (!content) return res.error(400, "Missing message content in request body.");
|
||||
|
||||
const thread = await ThreadModel.get(threadID);
|
||||
|
||||
if (!thread) return res.error(404, "We have not got this thread.");
|
||||
|
||||
const message = await new MessageModel({ content, author: req.user, threadID: thread.id }).takeId();
|
||||
await message.save();
|
||||
await thread.push(message.id).save();
|
||||
|
||||
res.complate(message);
|
||||
|
||||
})
|
||||
app.post("/:id/react/:type", async (req, res) => {
|
||||
|
||||
const message = await MessageModel.get(req.params.id);
|
||||
if (message) {
|
||||
|
||||
if (req.user.id in message.react)
|
||||
delete message.react[req.session.userid];
|
||||
else
|
||||
message.react[req.session.userid] = req.params.type === "like";
|
||||
message.markModified("react");
|
||||
await message.save();
|
||||
|
||||
const arr = Object.values(message.react)
|
||||
res.complate(arr.filter(Boolean).length - arr.filter(x => !x).length)
|
||||
} else error(res, 404, "We have not got this Message for reacting.");
|
||||
|
||||
|
||||
});
|
||||
|
||||
module.exports = app;
|
37
routes/api/routes/threads.js
Normal file
|
@ -0,0 +1,37 @@
|
|||
const { UserModel, MessageModel, ThreadModel } = require("../../../models");
|
||||
const { Router } = require("express")
|
||||
|
||||
const app = Router();
|
||||
|
||||
app.get("/:id", async (req, res) => {
|
||||
|
||||
const { id = null } = req.params;
|
||||
if (!id) return res.error(400, "Missing id in query")
|
||||
|
||||
const thread = await ThreadModel.get(id);
|
||||
if (thread && (req.user?.admin || !thread.deleted))
|
||||
res.complate( thread);
|
||||
else
|
||||
return res.error(404, "We have not got any thread declared as this id.");
|
||||
|
||||
|
||||
});
|
||||
|
||||
|
||||
app.post("/", async (req, res) => {
|
||||
|
||||
const { title = null, content = null } = req.body;
|
||||
|
||||
if (!content || !title) return res.error(400, "Missing content/title in request body.");
|
||||
|
||||
const user = req.user;
|
||||
const thread = await new ThreadModel({ title, author: user }).takeId()
|
||||
const message = await new MessageModel({ content, author: user, threadID: thread.id }).takeId()
|
||||
await thread.push(message.id).save();
|
||||
await message.save();
|
||||
|
||||
res.complate(thread);
|
||||
|
||||
});
|
||||
|
||||
module.exports = app;
|
17
routes/api/routes/user.js
Normal file
|
@ -0,0 +1,17 @@
|
|||
const { UserModel, MessageModel, ThreadModel } = require("../../../models");
|
||||
const { Router } = require("express")
|
||||
|
||||
const app = Router();
|
||||
|
||||
app.get("/:id", async (req, res) => {
|
||||
|
||||
const { id = null } = req.params;
|
||||
if (!id) return res.error(400, "Missing id in query")
|
||||
const member = await UserModel.get(id);
|
||||
if (!member || member.deleted) return res.error(404, "We have not got any user declared as this id.");
|
||||
|
||||
res.complate(member);
|
||||
|
||||
});
|
||||
|
||||
module.exports = app;
|
39
routes/login.js
Normal file
|
@ -0,0 +1,39 @@
|
|||
const { UserModel, SecretModel } = require("../models");
|
||||
const { Router } = require("express");
|
||||
const error = require("../errors/error");
|
||||
const app = Router();
|
||||
const bcrypt = require("bcrypt");
|
||||
|
||||
app.get("/", (req, res) => res.render("login",{redirect: req.query.redirect}));
|
||||
|
||||
app.post("/", async (req, res) => {
|
||||
req.session.userid = null;
|
||||
|
||||
const { username = null, password = null } = req.body;
|
||||
|
||||
if (username && password) {
|
||||
const user = await SecretModel.findOne({ username });
|
||||
if (user) {
|
||||
|
||||
const validPassword = await bcrypt.compare(password, user.password);
|
||||
|
||||
if (!validPassword) return error(res, 403, 'Incorrect Password!')
|
||||
const member = await UserModel.findOne({ name: username });
|
||||
if (!member || member.deleted) return error(res, 403, 'Incorrect Username and/or Password!')
|
||||
|
||||
req.session.userid = user.id;
|
||||
|
||||
res.redirect( req.query.redirect || '/');
|
||||
} else
|
||||
error(res, 403, 'Incorrect Username and/or Password!')
|
||||
|
||||
|
||||
} else
|
||||
error(res, 400, "You forgot entering some values")
|
||||
|
||||
|
||||
|
||||
})
|
||||
|
||||
|
||||
module.exports = app;
|
34
routes/message.js
Normal file
|
@ -0,0 +1,34 @@
|
|||
const { MessageModel } = require("../models");
|
||||
const error = require("../errors/error")
|
||||
|
||||
const { Router } = require("express");
|
||||
|
||||
const app = Router();
|
||||
|
||||
app.get("/:id", async (req, res) => {
|
||||
const message = await MessageModel.get(req.params.id);
|
||||
|
||||
if (!message || message.deleted) return error(res, 404, "We have not got any message declared as this id.");
|
||||
res.redirect("/threads/" + message.threadID);
|
||||
|
||||
});
|
||||
|
||||
app.use(require("../middlewares/login"));
|
||||
|
||||
app.post("/:id/delete", async (req, res) => {
|
||||
const message = await MessageModel.get(req.params.id);
|
||||
if (!message || message.deleted) return error(res, 404, "We have not got any message declared as this id.");
|
||||
const user = req.user;
|
||||
if (user.id != message.authorID && !user.admin)
|
||||
return error(res, 403, "You have not got permission for this.");
|
||||
message.deleted = true;
|
||||
await message.save();
|
||||
|
||||
|
||||
res.status(200).redirect("/threads/" + message.threadID);
|
||||
|
||||
})
|
||||
|
||||
|
||||
|
||||
module.exports = app;
|
44
routes/register.js
Normal file
|
@ -0,0 +1,44 @@
|
|||
const { UserModel, SecretModel } = require("../models");
|
||||
const { Router } = require("express")
|
||||
const error = require("../errors/error")
|
||||
const bcrypt = require("bcrypt");
|
||||
|
||||
const app = Router();
|
||||
|
||||
app.get("/", (req, res) => res.render("register"));
|
||||
|
||||
app.post("/", async (req, res) => {
|
||||
req.session.userid = null;
|
||||
|
||||
|
||||
let { username = null, password = null, avatar } = req.body;
|
||||
|
||||
if (username && password) {
|
||||
const user = await SecretModel.findOne({ username });
|
||||
|
||||
if (user)
|
||||
error(res, 400, `We have got an user named ${username}!`)
|
||||
|
||||
else {
|
||||
|
||||
|
||||
const user2 = new UserModel({ name: req.body.username, avatar })
|
||||
await user2.takeId()
|
||||
await user2.save();
|
||||
|
||||
const salt = await bcrypt.genSalt(10);
|
||||
password = await bcrypt.hash(password, salt);
|
||||
await SecretModel.create({ username, password, id: user2.id })
|
||||
req.session.userid = user2.id;
|
||||
|
||||
res.redirect('/');
|
||||
}
|
||||
|
||||
} else
|
||||
error(res, 400, "You forgot entering some values")
|
||||
|
||||
|
||||
})
|
||||
|
||||
|
||||
module.exports = app;
|
92
routes/threads.js
Normal file
|
@ -0,0 +1,92 @@
|
|||
const { Router } = require("express");
|
||||
const app = Router();
|
||||
const rateLimit = require('express-rate-limit')
|
||||
|
||||
const error = require("../errors/error")
|
||||
const { ThreadModel, MessageModel } = require("../models")
|
||||
|
||||
|
||||
app.get("/", async (req, res) => {
|
||||
|
||||
const user = req.user;
|
||||
|
||||
const threads = await ThreadModel.find(user?.admin ? {} : { deleted: false }).limit(10);
|
||||
|
||||
return res.render("threads", { threads, user });
|
||||
});
|
||||
|
||||
|
||||
app.get("/create*", async (req, res) => {
|
||||
|
||||
const user = req.user
|
||||
res.render("createThread", { user })
|
||||
|
||||
});
|
||||
|
||||
app.get("/:id", async (req, res) => {
|
||||
|
||||
const { id } = req.params;
|
||||
|
||||
const thread = await ThreadModel.get(id);
|
||||
const user = req.user;
|
||||
|
||||
if (thread && (user?.admin || !thread.deleted)) {
|
||||
|
||||
const messages = await Promise.all(thread.messages.map(async id => {
|
||||
const message = await MessageModel.get(id)
|
||||
const arr = Object.values(message.react)
|
||||
message.reactCount = arr.filter(Boolean).length - arr.filter(x => !x).length;
|
||||
|
||||
return user?.admin || !message?.deleted ? message : null;
|
||||
}));
|
||||
|
||||
res.render("thread", { thread, messages, user })
|
||||
} else
|
||||
error(res, 404, "We have not got this thread.");
|
||||
});
|
||||
|
||||
|
||||
|
||||
|
||||
app.use(require("../middlewares/login"));
|
||||
|
||||
|
||||
app.post("/", rateLimit({
|
||||
windowMs: 10 * 60_000, max: 1, standardHeaders: true, legacyHeaders: false,
|
||||
handler: (request, response, next, options) =>
|
||||
!request.user.admin ?
|
||||
error(response, options.statusCode, "You are begin ratelimited")
|
||||
: next()
|
||||
}), async (req, res) => {
|
||||
|
||||
const { title = null, content = null } = req.body;
|
||||
|
||||
if (!title || !content) return error(res, 400, "Title and/or content is missing");
|
||||
const user = req.user
|
||||
const thread = await new ThreadModel({ title, author: user }).takeId()
|
||||
|
||||
const message = await new MessageModel({ content, author: user, threadID: thread.id }).takeId()
|
||||
|
||||
await thread.push(message.id).save();
|
||||
|
||||
await message.save();
|
||||
|
||||
res.redirect('/threads/' + thread.id);
|
||||
})
|
||||
|
||||
app.post("/:id/delete", async (req, res) => {
|
||||
const thread = await ThreadModel.get(req.params.id);
|
||||
if (!thread || thread.deleted) return error(res, 404, "We have not got any thread declared as this id.");
|
||||
const user = req.user;
|
||||
if (user.id != thread.authorID && !user.admin)
|
||||
return error(res, 403, "You have not got permission for this.");
|
||||
|
||||
thread.deleted = true;
|
||||
await thread.save();
|
||||
|
||||
|
||||
res.status(200).redirect("/threads/");
|
||||
|
||||
})
|
||||
|
||||
module.exports = app;
|
48
routes/users.js
Normal file
|
@ -0,0 +1,48 @@
|
|||
const { Router } = require("express");
|
||||
const app = Router();
|
||||
|
||||
const error = require("../errors/error");
|
||||
const { UserModel, MessageModel, ThreadModel } = require("../models");
|
||||
|
||||
app.get("/", async ({ user }, res) => {
|
||||
const users = await UserModel.find(user?.admin ? {} : { deleted: false });
|
||||
return res.render("users", { users, user })
|
||||
|
||||
});
|
||||
|
||||
app.get("/:id", async (req, res) => {
|
||||
const user = req.user
|
||||
const { id = null } = req.params;
|
||||
const member = await UserModel.get(id);
|
||||
|
||||
|
||||
if (member && (user?.admin || !member.deleted)) {
|
||||
|
||||
const message = await MessageModel.count({ authorID: id });
|
||||
const thread = await ThreadModel.count({ authorID: id });
|
||||
res.render("user", { user, member, counts: { message, thread } })
|
||||
}
|
||||
else error(res, 404, "We have not got this user.");
|
||||
|
||||
});
|
||||
|
||||
app.use(require("../middlewares/login"));
|
||||
|
||||
|
||||
app.post("/:id/delete/", async (req, res) => {
|
||||
const user = req.user;
|
||||
if (!user?.admin)
|
||||
return error(res, 403, "You have not got permission for this.");
|
||||
|
||||
const { id = null } = req.params;
|
||||
const member = await UserModel.get(id);
|
||||
|
||||
if (!member || member.deleted) return error(res, 404, "We have not got any user declared as this id.");
|
||||
|
||||
member.deleted = true;
|
||||
await member.save();
|
||||
|
||||
res.redirect("/admin");
|
||||
});
|
||||
|
||||
module.exports = app;
|
92
src/index.js
|
@ -1,92 +0,0 @@
|
|||
require("dotenv").config();
|
||||
const
|
||||
{ def_theme, forum_name, description, limits, global_ratelimit: RLS, discord_auth, host } = require("../config.json"),
|
||||
{ UserModel, BanModel } = require("./models"),
|
||||
port = process.env.PORT || 3000,
|
||||
mongoose = require("mongoose"),
|
||||
express = require('express'),
|
||||
fs = require("fs"),
|
||||
{ join } = require("path"),
|
||||
app = express(),
|
||||
{ mw: IP } = require('request-ip'),
|
||||
{ RL, themes } = require('./lib'),
|
||||
SES = require('express-session'),
|
||||
MS = require("connect-mongo"),
|
||||
DB = mongoose.connect(process.env.MONGO_DB_URL)
|
||||
.then(async m => {
|
||||
console.log("Database is connected with", (app.ips = await BanModel.find({})).length, "banned IPs");
|
||||
return m.connection.getClient()
|
||||
});
|
||||
|
||||
app.ips = [];
|
||||
|
||||
app.onlines = new Map();
|
||||
|
||||
setInterval(() => {
|
||||
const now = Date.now();
|
||||
for (const [ip, lastSeen] of app.onlines.entries())
|
||||
if (now - lastSeen > 1000 * 60 * 5)
|
||||
app.onlines.delete(ip);
|
||||
}, 1000 * 60 * 5);
|
||||
|
||||
app.set("view engine", "ejs");
|
||||
app.set("limits", limits);
|
||||
|
||||
for (const theme of themes)
|
||||
app.use(`/themes/${theme.codename}`, express.static(join(__dirname, "themes", theme.codename, "public")));
|
||||
|
||||
app.use(express.static(join(__dirname, "public")), express.json(), express.urlencoded({ extended: true }), IP(),
|
||||
SES({ secret: process.env.SECRET, store: MS.create({ clientPromise: DB, stringify: false }), resave: false, saveUninitialized: false }),
|
||||
async (req, res, next) => {
|
||||
if (app.ips.includes(req.clientIp)) return res.status(403).send("You are banned from this forum.");
|
||||
|
||||
const lastSeen = Date.now();
|
||||
|
||||
req.user = req.session.userID ? await UserModel.findOneAndUpdate({ id: req.session.userID }, {
|
||||
lastSeen, $addToSet: { ips: req.clientIp }
|
||||
}) : null;
|
||||
|
||||
app.onlines.set(req.clientIp, lastSeen);
|
||||
|
||||
let theme = req.user?.theme || def_theme;
|
||||
|
||||
if (!themes.some(t => t.codename === theme.codename))
|
||||
theme = def_theme;
|
||||
|
||||
res.reply = (page, options = {}, status = 200) => {
|
||||
const road = join(__dirname, "themes", theme.codename, "views", `${page}.ejs`);
|
||||
const renderpage = fs.existsSync(road) ? road : join(__dirname, "themes", def_theme, "views", `${page}.ejs`);
|
||||
return res.status(status).render(renderpage, {
|
||||
dataset: {
|
||||
themes, theme, forum_name, description,
|
||||
getFile: file => join(__dirname, "themes", file),
|
||||
},
|
||||
user: req.user,
|
||||
...options
|
||||
});
|
||||
}
|
||||
|
||||
res.error = (type, error) => res.reply("error", { type, error }, type);
|
||||
|
||||
if (req.user?.deleted) {
|
||||
req.session.destroy();
|
||||
return res.error(403, "Your account has been deleted.");
|
||||
}
|
||||
|
||||
if (req.user && req.user.state == "APPROVAL" && !req.user.admin && !req.url.startsWith("/auth/email")) return res.error(403, "Your account is not approved yet.");
|
||||
|
||||
next();
|
||||
}
|
||||
);
|
||||
|
||||
if (RLS.enabled) app.use(RL(RLS.windowMs, RLS.max));
|
||||
|
||||
if (discord_auth)
|
||||
app.set("DISCORD_AUTH_URL", `https://discord.com/api/oauth2/authorize?client_id=${process.env.DISCORD_ID}&redirect_uri=${host}%2Fauth%2Fdiscord&response_type=code&scope=identify`);
|
||||
|
||||
for (const file of fs.readdirSync(join(__dirname, "routes")))
|
||||
app.use("/" + file.replace(".js", ""), require(`./routes/${file}`));
|
||||
|
||||
app.all("*", (req, res) => res.error(404, "This page does not exist on this forum."));
|
||||
|
||||
app.listen(port, () => console.log(`${forum_name} on port:`, port));
|
34
src/lib.js
|
@ -1,34 +0,0 @@
|
|||
const RL = require('express-rate-limit');
|
||||
const nodemailer = require("nodemailer");
|
||||
const config = require("../config.json");
|
||||
const crypto = require("crypto");
|
||||
const { readdirSync } = require('fs');
|
||||
const { join } = require('path');
|
||||
require("dotenv").config();
|
||||
module.exports = {
|
||||
themes: readdirSync(join(__dirname, "themes")).map(f => require(`./themes/${f}`)),
|
||||
threadEnum: ["OPEN", "APPROVAL", "DELETED"],
|
||||
userEnum: ["ACTIVE", "APPROVAL", "DELETED", "BANNED"],
|
||||
RL(windowMs = 60_000, max = 1) {
|
||||
return RL({
|
||||
windowMs, max, standardHeaders: true, legacyHeaders: false,
|
||||
handler: (req, res, next, opts) => !req.user?.admin ? res.error(opts.statusCode, "You are begin ratelimited") : next()
|
||||
})
|
||||
},
|
||||
getGravatar(email, size) {
|
||||
return `https://www.gravatar.com/avatar/${crypto.createHash('md5').update(email).digest("hex")}?d=mp${size ? `&size=${size}` : ''}`;
|
||||
},
|
||||
// eslint-disable-next-line no-useless-escape
|
||||
emailRegEx: /^(([^<>()\[\]\\.,;:\s@"]+(\.[^<>()\[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/,
|
||||
|
||||
|
||||
}
|
||||
|
||||
if (config.email_auth)
|
||||
module.exports.transporter = nodemailer.createTransport({
|
||||
service: process.env.EMAIL_SERVICE, direct: true, secure: true,
|
||||
auth: {
|
||||
user: process.env.EMAIL_USER,
|
||||
pass: process.env.EMAIL_PASS
|
||||
}
|
||||
});
|
|
@ -1,10 +0,0 @@
|
|||
const mongoose = require("mongoose")
|
||||
|
||||
const schema = new mongoose.Schema({
|
||||
ip: { type: String, unique: true },
|
||||
reason: { type: String, default: "No reason given" },
|
||||
authorID: { type: String }
|
||||
});
|
||||
|
||||
const model = mongoose.model('ban', schema);
|
||||
module.exports = model;
|
|
@ -1,23 +0,0 @@
|
|||
const mongoose = require("mongoose")
|
||||
|
||||
const schema = new mongoose.Schema({
|
||||
name: { type: String, unique: true },
|
||||
desp: String, position: Number,
|
||||
id: { type: String, unique: true },
|
||||
authorID: { type: String }
|
||||
|
||||
});
|
||||
|
||||
schema.methods.takeId = async function () {
|
||||
// eslint-disable-next-line no-use-before-define
|
||||
this.id = await model.countDocuments() || 0;
|
||||
return this;
|
||||
}
|
||||
|
||||
schema.methods.getLink = function (id = this.id) {
|
||||
return "/categories/" + id;
|
||||
}
|
||||
|
||||
const model = mongoose.model('category', schema);
|
||||
|
||||
module.exports = model;
|
|
@ -1,47 +0,0 @@
|
|||
const mongoose = require("mongoose");
|
||||
const cache = require("./cache");
|
||||
const { limits } = require("../../config.json");
|
||||
|
||||
const schema = new mongoose.Schema({
|
||||
id: { type: String, unique: true },
|
||||
authorID: {
|
||||
type: String, get(v) { return v || this.author?.id }
|
||||
},
|
||||
author: {
|
||||
type: Object, set(v) {
|
||||
this.authorID = v.id;
|
||||
return v;
|
||||
}
|
||||
},
|
||||
threadID: String,
|
||||
content: { type: String, maxlength: limits.message },
|
||||
oldContents: [String],
|
||||
time: { type: Date, default: Date.now },
|
||||
deleted: { type: Boolean, default: false },
|
||||
edited: { type: Boolean, default: false },
|
||||
react: {
|
||||
like: [String],
|
||||
dislike: [String]
|
||||
}
|
||||
})
|
||||
|
||||
schema.methods.get_author = cache.getAuthor
|
||||
|
||||
schema.methods.takeId = async function () {
|
||||
// eslint-disable-next-line no-use-before-define
|
||||
this.id = await model.countDocuments() || 0;
|
||||
return this;
|
||||
}
|
||||
|
||||
schema.methods.getLink = function (id = this.id) {
|
||||
return "/messages/" + id;
|
||||
}
|
||||
|
||||
const model = mongoose.model('message', schema);
|
||||
|
||||
model.get = async id => {
|
||||
const message = await model.findOne({ id })
|
||||
return await message.get_author();
|
||||
};
|
||||
|
||||
module.exports = model;
|
|
@ -1,68 +0,0 @@
|
|||
const mongoose = require("mongoose");
|
||||
const cache = require("./cache")
|
||||
const MessageModel = require("./Message");
|
||||
const { limits, default_thread_state } = require("../../config.json");
|
||||
const { threadEnum } = require("../lib");
|
||||
const schema = new mongoose.Schema({
|
||||
id: { type: String, unique: true },
|
||||
|
||||
categoryID: String,
|
||||
authorID: {
|
||||
type: String, get(v) { return v || this.author?.id }
|
||||
},
|
||||
author: {
|
||||
type: Object, set(v) {
|
||||
this.authorID = v.id;
|
||||
return v;
|
||||
}
|
||||
},
|
||||
|
||||
title: { type: String, maxlength: limits.title },
|
||||
oldTitles: [String],
|
||||
|
||||
time: { type: Date, default: Date.now },
|
||||
edited: { type: Boolean, default: false },
|
||||
state: { type: String, default: default_thread_state, enum: threadEnum, uppercase: true },
|
||||
messages: [String],
|
||||
views: { type: Number, default: 0 }
|
||||
});
|
||||
|
||||
|
||||
schema.methods.get_author = cache.getAuthor;
|
||||
|
||||
schema.virtual("deleted").get(function () {
|
||||
return this.state === "DELETED";
|
||||
}).set(function (value) {
|
||||
this.set({ state: value ? "DELETED" : "OPEN" });
|
||||
});
|
||||
|
||||
|
||||
schema.methods.get_category = async function () {
|
||||
return await require("./Category").findOne({ id: this.categoryID }) || { id: this.categoryID, name: "Unknown" };
|
||||
}
|
||||
schema.methods.messageCount = async function (admin = false) {
|
||||
const query = { threadID: this.id };
|
||||
if (!admin) query.deleted = false;
|
||||
return await MessageModel.countDocuments(query) || 0;
|
||||
};
|
||||
|
||||
schema.methods.push = function (messageID) {
|
||||
this.messages.push(messageID);
|
||||
return this;
|
||||
}
|
||||
|
||||
schema.methods.takeId = async function () {
|
||||
// eslint-disable-next-line no-use-before-define
|
||||
this.id = await model.countDocuments() || 0;
|
||||
return this;
|
||||
}
|
||||
|
||||
schema.methods.getLink = function (id = this.id) {
|
||||
return "/threads/" + id;
|
||||
}
|
||||
|
||||
const model = mongoose.model('thread', schema);
|
||||
|
||||
model.get = id => model.findOne({ id }).then(thread => thread.get_author());
|
||||
|
||||
module.exports = model;
|
|
@ -1,51 +0,0 @@
|
|||
const mongoose = require("mongoose")
|
||||
const { def_theme, limits, default_user_state } = require("../../config.json");
|
||||
const { userEnum } = require("../lib");
|
||||
|
||||
const schema = new mongoose.Schema({
|
||||
id: { type: String, unique: true },
|
||||
discordID: { type: String },
|
||||
name: { type: String, maxlength: limits.names },
|
||||
avatar: { type: String, default: "/images/avatars/default.jpg" },
|
||||
time: { type: Date, default: Date.now },
|
||||
edited: { type: Boolean, default: false },
|
||||
about: { type: String, default: "", maxlength: limits.desp },
|
||||
admin: { type: Boolean, default: false },
|
||||
theme: {
|
||||
codename: { type: String, default: def_theme.codename },
|
||||
language: { type: String, default: def_theme.language }
|
||||
},
|
||||
lastSeen: { type: Date, default: Date.now, select: false },
|
||||
hideLastSeen: { type: Boolean, default: false },
|
||||
ips: { type: [String], default: [], select: false },
|
||||
password: { type: String, select: false },
|
||||
discord_code: { type: String, select: false },
|
||||
state: { type: String, default: default_user_state, enum: userEnum, uppercase: true },
|
||||
email: { type: String, select: false },
|
||||
email_code: { type: String, select: false },
|
||||
});
|
||||
|
||||
schema.virtual("deleted").get(function () {
|
||||
return this.state === "DELETED";
|
||||
}).set(function (value) {
|
||||
this.set({ state: value ? "DELETED" : "ACTIVE" });
|
||||
});
|
||||
schema.virtual("active").get(function () {
|
||||
return this.state === "ACTIVE";
|
||||
})
|
||||
|
||||
schema.methods.takeId = async function () {
|
||||
// eslint-disable-next-line no-use-before-define
|
||||
this.id = String(await model.countDocuments() || 0);
|
||||
return this;
|
||||
}
|
||||
|
||||
schema.methods.getLink = function (id = this.id) {
|
||||
return "/users/" + id;
|
||||
}
|
||||
|
||||
const model = mongoose.model('user', schema);
|
||||
|
||||
model.get = (id, select = "") => model.findOne({ id }, select);
|
||||
|
||||
module.exports = model;
|
|
@ -1,17 +0,0 @@
|
|||
const UserModel = require("./User");
|
||||
const UserCache = new Map();
|
||||
module.exports.getAuthor = async function () {
|
||||
const id = this.authorID || this.author?.id;
|
||||
let user = UserCache.get(id);
|
||||
if (!user)
|
||||
UserCache.set(id, user = await UserModel.findOne({ id }));
|
||||
|
||||
if (!this.get('authorID', null, { getters: false })) {
|
||||
this.authorID = user.id;
|
||||
await this.save();
|
||||
}
|
||||
|
||||
this.author = user;
|
||||
|
||||
return this;
|
||||
}
|
|
@ -1,7 +0,0 @@
|
|||
module.exports = {
|
||||
CategoryModel: require("./Category"),
|
||||
MessageModel: require("./Message"),
|
||||
ThreadModel: require("./Thread"),
|
||||
UserModel: require("./User"),
|
||||
BanModel: require("./Ban")
|
||||
};
|
Before Width: | Height: | Size: 4.2 KiB |
Before Width: | Height: | Size: 206 KiB |
Before Width: | Height: | Size: 64 KiB |
Before Width: | Height: | Size: 5.3 KiB |
|
@ -1,63 +0,0 @@
|
|||
function b64toBlob(b64Data, contentType = "", sliceSize = 512) {
|
||||
|
||||
const byteCharacters = atob(b64Data);
|
||||
const byteArrays = [];
|
||||
|
||||
for (let offset = 0; offset < byteCharacters.length; offset += sliceSize) {
|
||||
const slice = byteCharacters.slice(offset, offset + sliceSize);
|
||||
|
||||
const byteNumbers = new Array(slice.length);
|
||||
for (let i = 0; i < slice.length; i++)
|
||||
byteNumbers[i] = slice.charCodeAt(i);
|
||||
const byteArray = new Uint8Array(byteNumbers);
|
||||
byteArrays.push(byteArray);
|
||||
}
|
||||
const blob = new Blob(byteArrays, {
|
||||
type: contentType
|
||||
});
|
||||
return blob;
|
||||
}
|
||||
|
||||
const image = document.getElementById('image');
|
||||
const button = document.getElementById('button');
|
||||
const reader = new FileReader();
|
||||
|
||||
document.getElementById("file-input")
|
||||
.addEventListener("change", function () {
|
||||
reader.onload = () => {
|
||||
image.src = reader.result;
|
||||
|
||||
let croppable = false;
|
||||
// eslint-disable-next-line no-undef
|
||||
const cropper = new Cropper(image, {
|
||||
aspectRatio: 1,
|
||||
viewMode: 1,
|
||||
ready: function () {
|
||||
croppable = true;
|
||||
},
|
||||
});
|
||||
|
||||
button.onclick = async () => {
|
||||
if (!croppable) return;
|
||||
|
||||
const croppedCanvas = cropper.getCroppedCanvas();
|
||||
// const croppedImage = document.getElementById('cropped-image');
|
||||
const body = new FormData(document.createElement('form'))
|
||||
const block = croppedCanvas.toDataURL().split(";");
|
||||
const contentType = block[0].split(":")[1];
|
||||
const realData = block[1].split(",")[1];
|
||||
body.append('avatar', b64toBlob(realData, contentType));
|
||||
|
||||
// eslint-disable-next-line no-undef
|
||||
const res = await fetch('/api/users/'+MEM_ID+'/avatar', {
|
||||
method: 'POST',
|
||||
body
|
||||
}).then(res => res.json());
|
||||
|
||||
if (res.error) return alert(res.error);
|
||||
alert('Success!');
|
||||
location.reload();
|
||||
};
|
||||
}
|
||||
reader.readAsDataURL(event.target.files[0]);
|
||||
});
|
|
@ -1,15 +0,0 @@
|
|||
function editor( uniqueId, textarea = document.getElementById("textarea")) {
|
||||
|
||||
return new SimpleMDE({
|
||||
autosave: {
|
||||
enabled: true,
|
||||
uniqueId,
|
||||
delay: 1000,
|
||||
},// width: 100%;
|
||||
|
||||
element: textarea,
|
||||
spellChecker: false
|
||||
|
||||
});
|
||||
|
||||
}
|
|
@ -1,3 +0,0 @@
|
|||
for (const modal of document.querySelectorAll("[modal]"))
|
||||
modal.onclick = () => {
|
||||
document.querySelector(modal.getAttribute("modal")).classList.toggle('active')};
|
|
@ -1,19 +0,0 @@
|
|||
export default async function request(link, method = "POST", body={}) {
|
||||
try {
|
||||
const res = await fetch(link, {
|
||||
method,
|
||||
body: JSON.stringify(body),
|
||||
headers: {
|
||||
"Content-Type": "application/json"
|
||||
}
|
||||
}).then(res => res.json())
|
||||
|
||||
if (res.error) return alert(res.error);
|
||||
|
||||
return res;
|
||||
|
||||
} catch (err) {
|
||||
alert(err);
|
||||
}
|
||||
|
||||
}
|
|
@ -1,84 +0,0 @@
|
|||
import request from "./request.js";
|
||||
|
||||
let editing;
|
||||
// THREAD:
|
||||
|
||||
window.edit_thread = async function (id) {
|
||||
const title = prompt("Enter new title!");
|
||||
const res = await request(`/api/threads/${id}/`, "PATCH", { title });
|
||||
if (res.error) return;
|
||||
alert(`Thread updated`);
|
||||
document.getElementById("title").innerHTML = title;
|
||||
|
||||
}
|
||||
window.delete_thread = async function (id) {
|
||||
const res = await request(`/api/threads/${id}/`, "DELETE");
|
||||
if (res.error) return;
|
||||
alert(`Thread deleted`);
|
||||
location.reload();
|
||||
}
|
||||
|
||||
window.undelete_thread = async function (id) {
|
||||
const res = await request(`/api/threads/${id}/`, "PATCH", { state: "OPEN" });
|
||||
if (res.error) return;
|
||||
alert(`Thread undeleted`);
|
||||
location.reload();
|
||||
}
|
||||
|
||||
|
||||
// MESSAGES:
|
||||
window.send_edit = async function (id) {
|
||||
const message = document.getElementById(`message-${id}`);
|
||||
const content = editing.value();
|
||||
|
||||
const res = await request(`/api/messages/${id}/`, "PATCH", { content });
|
||||
if (res.error) return;
|
||||
alert(`Message updated`);
|
||||
message.querySelector(".content").innerHTML = converter.makeHtml(res.content);
|
||||
}
|
||||
window.edit_message = async function (id) {
|
||||
const message = document.getElementById(`message-${id}`)
|
||||
|
||||
const content = message.querySelector(".content");
|
||||
|
||||
content.innerHTML = `
|
||||
<textarea rows="4" cols="40" id="content"></textarea>
|
||||
<button onclick="send_edit(${id});" class="btn-primary">Edit!</button>`;
|
||||
const cnt = message.querySelector("#content");
|
||||
editing = new SimpleMDE({
|
||||
element: cnt,
|
||||
spellChecker: false,
|
||||
height: "200px"
|
||||
});
|
||||
editing.value(content.rawText)
|
||||
}
|
||||
window.undelete_message = async function (id) {
|
||||
const response = await request(`/api/messages/${id}/`, "PATCH", { deleted: false });
|
||||
if (response.deleted) return;
|
||||
const message = document.getElementById("message-" + id);
|
||||
|
||||
message.querySelector("#deleted").remove();
|
||||
message.querySelector(".dots-menu").innerHTML = `
|
||||
<a onclick="delete_message('${id}');">DELETE</a>
|
||||
<a onclick="edit_message('${id}');">EDIT</a>`
|
||||
}
|
||||
|
||||
window.delete_message = async function (id) {
|
||||
const response = await request(`/api/messages/${id}/`, "DELETE");
|
||||
if (!response.deleted) return
|
||||
const message = document.getElementById(`message-${id}`);
|
||||
alert("Message deleted");
|
||||
|
||||
message.querySelector(".dots-menu").innerHTML = `<a onclick="undelete_message('${id}');">UNDELETE</a>`;
|
||||
|
||||
let dots = message.querySelector(".dots");
|
||||
dots.innerHTML = "<i class='bx bx-trash bx-sm' id='deleted' style='color: var(--important)'></i>" + dots.innerHTML;
|
||||
|
||||
}
|
||||
|
||||
window.react = async function (id, type) {
|
||||
const res = await request(`/api/messages/${id}/react/${type}`)
|
||||
const message = document.getElementById(`message-${id}`);
|
||||
for (const react in res.react)
|
||||
message.querySelector("#" + react).innerHTML = res.react[react].length;
|
||||
}
|
|
@ -1,304 +0,0 @@
|
|||
/*!
|
||||
* Cropper.js v1.5.12
|
||||
* https://fengyuanchen.github.io/cropperjs
|
||||
*
|
||||
* Copyright 2015-present Chen Fengyuan
|
||||
* Released under the MIT license
|
||||
*
|
||||
* Date: 2021-06-12T08:00:11.623Z
|
||||
*/
|
||||
|
||||
.cropper-container {
|
||||
direction: ltr;
|
||||
font-size: 0;
|
||||
line-height: 0;
|
||||
position: relative;
|
||||
-ms-touch-action: none;
|
||||
touch-action: none;
|
||||
-webkit-user-select: none;
|
||||
-moz-user-select: none;
|
||||
-ms-user-select: none;
|
||||
user-select: none;
|
||||
}
|
||||
|
||||
.cropper-container img {
|
||||
display: block;
|
||||
height: 100%;
|
||||
image-orientation: 0deg;
|
||||
max-height: none !important;
|
||||
max-width: none !important;
|
||||
min-height: 0 !important;
|
||||
min-width: 0 !important;
|
||||
width: 100%;
|
||||
}
|
||||
|
||||
.cropper-wrap-box,
|
||||
.cropper-canvas,
|
||||
.cropper-drag-box,
|
||||
.cropper-crop-box,
|
||||
.cropper-modal {
|
||||
bottom: 0;
|
||||
left: 0;
|
||||
position: absolute;
|
||||
right: 0;
|
||||
top: 0;
|
||||
}
|
||||
|
||||
.cropper-wrap-box,
|
||||
.cropper-canvas {
|
||||
overflow: hidden;
|
||||
}
|
||||
|
||||
.cropper-drag-box {
|
||||
background-color: #fff;
|
||||
opacity: 0;
|
||||
}
|
||||
|
||||
.cropper-modal {
|
||||
background-color: #000;
|
||||
opacity: 0.5;
|
||||
}
|
||||
|
||||
.cropper-view-box {
|
||||
display: block;
|
||||
height: 100%;
|
||||
outline: 1px solid #39f;
|
||||
outline-color: rgba(51, 153, 255, 0.75);
|
||||
overflow: hidden;
|
||||
width: 100%;
|
||||
}
|
||||
|
||||
.cropper-dashed {
|
||||
border: 0 dashed #eee;
|
||||
display: block;
|
||||
opacity: 0.5;
|
||||
position: absolute;
|
||||
}
|
||||
|
||||
.cropper-dashed.dashed-h {
|
||||
border-bottom-width: 1px;
|
||||
border-top-width: 1px;
|
||||
height: calc(100% / 3);
|
||||
left: 0;
|
||||
top: calc(100% / 3);
|
||||
width: 100%;
|
||||
}
|
||||
|
||||
.cropper-dashed.dashed-v {
|
||||
border-left-width: 1px;
|
||||
border-right-width: 1px;
|
||||
height: 100%;
|
||||
left: calc(100% / 3);
|
||||
top: 0;
|
||||
width: calc(100% / 3);
|
||||
}
|
||||
|
||||
.cropper-center {
|
||||
display: block;
|
||||
height: 0;
|
||||
left: 50%;
|
||||
opacity: 0.75;
|
||||
position: absolute;
|
||||
top: 50%;
|
||||
width: 0;
|
||||
}
|
||||
|
||||
.cropper-center::before,
|
||||
.cropper-center::after {
|
||||
background-color: #eee;
|
||||
content: ' ';
|
||||
display: block;
|
||||
position: absolute;
|
||||
}
|
||||
|
||||
.cropper-center::before {
|
||||
height: 1px;
|
||||
left: -3px;
|
||||
top: 0;
|
||||
width: 7px;
|
||||
}
|
||||
|
||||
.cropper-center::after {
|
||||
height: 7px;
|
||||
left: 0;
|
||||
top: -3px;
|
||||
width: 1px;
|
||||
}
|
||||
|
||||
.cropper-face,
|
||||
.cropper-line,
|
||||
.cropper-point {
|
||||
display: block;
|
||||
height: 100%;
|
||||
opacity: 0.1;
|
||||
position: absolute;
|
||||
width: 100%;
|
||||
}
|
||||
|
||||
.cropper-face {
|
||||
background-color: #fff;
|
||||
left: 0;
|
||||
top: 0;
|
||||
}
|
||||
|
||||
.cropper-line {
|
||||
background-color: #39f;
|
||||
}
|
||||
|
||||
.cropper-line.line-e {
|
||||
cursor: ew-resize;
|
||||
right: -3px;
|
||||
top: 0;
|
||||
width: 5px;
|
||||
}
|
||||
|
||||
.cropper-line.line-n {
|
||||
cursor: ns-resize;
|
||||
height: 5px;
|
||||
left: 0;
|
||||
top: -3px;
|
||||
}
|
||||
|
||||
.cropper-line.line-w {
|
||||
cursor: ew-resize;
|
||||
left: -3px;
|
||||
top: 0;
|
||||
width: 5px;
|
||||
}
|
||||
|
||||
.cropper-line.line-s {
|
||||
bottom: -3px;
|
||||
cursor: ns-resize;
|
||||
height: 5px;
|
||||
left: 0;
|
||||
}
|
||||
|
||||
.cropper-point {
|
||||
background-color: #39f;
|
||||
height: 5px;
|
||||
opacity: 0.75;
|
||||
width: 5px;
|
||||
}
|
||||
|
||||
.cropper-point.point-e {
|
||||
cursor: ew-resize;
|
||||
margin-top: -3px;
|
||||
right: -3px;
|
||||
top: 50%;
|
||||
}
|
||||
|
||||
.cropper-point.point-n {
|
||||
cursor: ns-resize;
|
||||
left: 50%;
|
||||
margin-left: -3px;
|
||||
top: -3px;
|
||||
}
|
||||
|
||||
.cropper-point.point-w {
|
||||
cursor: ew-resize;
|
||||
left: -3px;
|
||||
margin-top: -3px;
|
||||
top: 50%;
|
||||
}
|
||||
|
||||
.cropper-point.point-s {
|
||||
bottom: -3px;
|
||||
cursor: s-resize;
|
||||
left: 50%;
|
||||
margin-left: -3px;
|
||||
}
|
||||
|
||||
.cropper-point.point-ne {
|
||||
cursor: nesw-resize;
|
||||
right: -3px;
|
||||
top: -3px;
|
||||
}
|
||||
|
||||
.cropper-point.point-nw {
|
||||
cursor: nwse-resize;
|
||||
left: -3px;
|
||||
top: -3px;
|
||||
}
|
||||
|
||||
.cropper-point.point-sw {
|
||||
bottom: -3px;
|
||||
cursor: nesw-resize;
|
||||
left: -3px;
|
||||
}
|
||||
|
||||
.cropper-point.point-se {
|
||||
bottom: -3px;
|
||||
cursor: nwse-resize;
|
||||
height: 20px;
|
||||
opacity: 1;
|
||||
right: -3px;
|
||||
width: 20px;
|
||||
}
|
||||
|
||||
@media (min-width: 768px) {
|
||||
.cropper-point.point-se {
|
||||
height: 15px;
|
||||
width: 15px;
|
||||
}
|
||||
}
|
||||
|
||||
@media (min-width: 992px) {
|
||||
.cropper-point.point-se {
|
||||
height: 10px;
|
||||
width: 10px;
|
||||
}
|
||||
}
|
||||
|
||||
@media (min-width: 1200px) {
|
||||
.cropper-point.point-se {
|
||||
height: 5px;
|
||||
opacity: 0.75;
|
||||
width: 5px;
|
||||
}
|
||||
}
|
||||
|
||||
.cropper-point.point-se::before {
|
||||
background-color: #39f;
|
||||
bottom: -50%;
|
||||
content: ' ';
|
||||
display: block;
|
||||
height: 200%;
|
||||
opacity: 0;
|
||||
position: absolute;
|
||||
right: -50%;
|
||||
width: 200%;
|
||||
}
|
||||
|
||||
.cropper-invisible {
|
||||
opacity: 0;
|
||||
}
|
||||
|
||||
.cropper-bg {
|
||||
background-image: url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQAQMAAAAlPW0iAAAAA3NCSVQICAjb4U/gAAAABlBMVEXMzMz////TjRV2AAAACXBIWXMAAArrAAAK6wGCiw1aAAAAHHRFWHRTb2Z0d2FyZQBBZG9iZSBGaXJld29ya3MgQ1M26LyyjAAAABFJREFUCJlj+M/AgBVhF/0PAH6/D/HkDxOGAAAAAElFTkSuQmCC');
|
||||
}
|
||||
|
||||
.cropper-hide {
|
||||
display: block;
|
||||
height: 0;
|
||||
position: absolute;
|
||||
width: 0;
|
||||
}
|
||||
|
||||
.cropper-hidden {
|
||||
display: none !important;
|
||||
}
|
||||
|
||||
.cropper-move {
|
||||
cursor: move;
|
||||
}
|
||||
|
||||
.cropper-crop {
|
||||
cursor: crosshair;
|
||||
}
|
||||
|
||||
.cropper-disabled .cropper-drag-box,
|
||||
.cropper-disabled .cropper-face,
|
||||
.cropper-disabled .cropper-line,
|
||||
.cropper-disabled .cropper-point {
|
||||
cursor: not-allowed;
|
||||
}
|
3
src/public/libs/showdown/showdown.min.js
vendored
7
src/public/libs/simplemde/simplemde.min.css
vendored
15
src/public/libs/simplemde/simplemde.min.js
vendored
|
@ -1,31 +0,0 @@
|
|||
const { UserModel, ThreadModel, MessageModel, CategoryModel } = require("../models");
|
||||
const { Router } = require("express");
|
||||
const app = Router();
|
||||
|
||||
app.get("/", async (req, res) => {
|
||||
|
||||
const [
|
||||
categories, users, threads, messages, newestMember, newestMessages, newestThreads, onlineMemberCount, onlineMembers
|
||||
] = await Promise.all([
|
||||
CategoryModel.countDocuments(),
|
||||
UserModel.countDocuments({ deleted: false }),
|
||||
ThreadModel.countDocuments({ state: "OPEN" }),
|
||||
MessageModel.countDocuments({ deleted: false }),
|
||||
UserModel.findOne({ deleted: false }, "name id").sort({ time: -1 }),
|
||||
MessageModel.find({ deleted: false }).sort({ time: -1 }).limit(10),
|
||||
ThreadModel.find({ state: "OPEN" }).sort({ time: -1 }).limit(10),
|
||||
UserModel.countDocuments({ deleted: false, lastSeen: { $gt: Date.now() - 1000 * 60 * 5 } }),
|
||||
UserModel.find({ deleted: false, hideLastSeen: false, lastSeen: { $gt: Date.now() - 1000 * 60 * 5 } }, "name id")
|
||||
]),
|
||||
onlineTotal = req.app.onlines.size,
|
||||
onlineGuests = onlineTotal - onlineMemberCount;
|
||||
|
||||
res.reply("index", {
|
||||
categories, users, threads, messages,
|
||||
newestMember, newestMessages, newestThreads,
|
||||
onlineMemberCount, onlineMembers, onlineGuests, onlineTotal
|
||||
});
|
||||
|
||||
});
|
||||
|
||||
module.exports = app;
|
|
@ -1,15 +0,0 @@
|
|||
const { Router } = require("express");
|
||||
const fs = require("fs");
|
||||
const { BanModel, UserModel } = require("../models");
|
||||
const app = Router();
|
||||
app.use(async (req, res, next) => {
|
||||
if (!req.user?.admin) return res.error(403, "You are not admin");
|
||||
next();
|
||||
});
|
||||
app.get("/", async (req, res) => {
|
||||
res.reply("admin", { bans: await BanModel.find({}), admins: await UserModel.find({ admin: true }) });
|
||||
});
|
||||
app.get("/config", async (req, res) => {
|
||||
res.reply("config", { config: fs.readFileSync("./config.json", "utf8") });
|
||||
});
|
||||
module.exports = app;
|
|
@ -1,39 +0,0 @@
|
|||
const { Router } = require("express");
|
||||
const app = Router();
|
||||
const fs = require("fs");
|
||||
const bcrypt = require("bcrypt");
|
||||
const { UserModel } = require("../../models");
|
||||
const{join}=require("path");
|
||||
|
||||
app.use(async (req, res, next) => {
|
||||
res.error = (status, error) => res.status(status).json({ error });
|
||||
res.complate = result => res.status(200).json(result);
|
||||
|
||||
if (req.user) return next();
|
||||
const authHeader = req.headers.authorization;
|
||||
if (!authHeader) return res.error(401, "No authorization header");
|
||||
const [name, password] = Buffer.from(authHeader.split(' ')[1], "base64").toString().split(":");
|
||||
|
||||
if (!name || !password)
|
||||
return res.error(400, "Authorise headers are not well formed");
|
||||
|
||||
const user = await UserModel.findOne({ name });
|
||||
|
||||
if (!user || user.deleted) return res.error(401, `We don't have any user with name ${name}.`)
|
||||
if (!user.active) return res.error(401, "Your account is not approved yet.");
|
||||
|
||||
if (!await bcrypt.compare(password, user.password)) return res.error(401, 'Incorrect Password!');
|
||||
|
||||
req.user = user;
|
||||
|
||||
next();
|
||||
});
|
||||
|
||||
app.get("/me", (req, res) => res.complate(req.user))
|
||||
|
||||
for (const file of fs.readdirSync(join(__dirname, "routes")))
|
||||
app.use("/" + file.replace(".js", ""), require(`./routes/${file}`));
|
||||
|
||||
app.all("*", (req, res) => res.error(400, "Bad request"));
|
||||
|
||||
module.exports = app;
|
|
@ -1,38 +0,0 @@
|
|||
const { BanModel } = require("../../../models");
|
||||
const { Router } = require("express")
|
||||
|
||||
const app = Router();
|
||||
|
||||
app.use((req, res, next) => {
|
||||
if (!req.user.admin) return res.error(403, "You have not got permission for this.");
|
||||
next();
|
||||
});
|
||||
|
||||
app.get("/", async (req, res) => {
|
||||
const bans = await BanModel.find({});
|
||||
res.complate(bans);
|
||||
});
|
||||
app.get("/:ip", async (req, res) => {
|
||||
const ban = await BanModel.findOne({ ip: req.params.ip });
|
||||
if (!ban) return res.error(400, "This ip is not banned.");
|
||||
res.complate(ban);
|
||||
|
||||
});
|
||||
|
||||
app.post("/:ip", async (req, res) => {
|
||||
|
||||
if (await BanModel.exists({ ip: req.params.ip })) return res.error(400, "This ip is already banned.");
|
||||
const ban = await BanModel.create({ ip: req.params.ip, reason: req.query.reason || "No reason given", authorID: req.user.id });
|
||||
req.app.ips.push(req.params.ip);
|
||||
res.complate(ban);
|
||||
|
||||
|
||||
});
|
||||
|
||||
app.delete("/:ip/", async (req, res) => {
|
||||
|
||||
if (!await BanModel.exists({ ip: req.params.ip })) return res.error(400, "This ip is already not banned.");
|
||||
res.complate(await BanModel.deleteOne({ ip: req.params.ip }));
|
||||
|
||||
});
|
||||
module.exports = app;
|
|
@ -1,44 +0,0 @@
|
|||
const { CategoryModel } = require("../../../models");
|
||||
const { Router } = require("express")
|
||||
|
||||
const app = Router();
|
||||
|
||||
app.use((req, res, next) => {
|
||||
if (!req.user.admin) return res.error(403, "You have not got permission for this.");
|
||||
next();
|
||||
});
|
||||
|
||||
app.param("id", async (req, res, next, id) => {
|
||||
req.category = await CategoryModel.findOne({ id });
|
||||
if (!req.category) return res.error(404, `We don't have any category with id ${id}.`);
|
||||
next();
|
||||
});
|
||||
|
||||
app.get("/", async (req, res) => {
|
||||
const categories = await CategoryModel.find({});
|
||||
res.complate(categories);
|
||||
});
|
||||
|
||||
app.get("/:id", async (req, res) => res.complate(req.category));
|
||||
|
||||
app.patch("/:id", async (req, res) => {
|
||||
const { category } = req;
|
||||
if (req.body.name) category.name = req.body.name;
|
||||
if (req.body.desp) category.name = req.body.name;
|
||||
res.complate(await category.save());
|
||||
});
|
||||
|
||||
app.delete("/:id", async (req, res) => res.complate(await CategoryModel.deleteOne({ id: req.params.id })));
|
||||
|
||||
app.post("/", async (req, res) => {
|
||||
const { name, desp } = req.body;
|
||||
if (!name) return res.error(400, "You have to give a name for the category.");
|
||||
|
||||
if (await CategoryModel.exists({ name })) return res.error(400, "This category is already opened.");
|
||||
const category = await new CategoryModel({ name, desp, authorID: req.user.id }).takeId();
|
||||
res.complate(await category.save());
|
||||
|
||||
});
|
||||
|
||||
|
||||
module.exports = app;
|
|
@ -1,25 +0,0 @@
|
|||
const { Router } = require("express")
|
||||
const fs = require("fs");
|
||||
const app = Router();
|
||||
|
||||
app.use((req, res, next) => {
|
||||
if (!req.user.admin)
|
||||
return res.error(403, "You have not got permission for this.");
|
||||
next();
|
||||
});
|
||||
|
||||
app.get("/", (req, res) => {
|
||||
try {
|
||||
return res.reply(JSON.parse(fs.readFileSync("./config.json", "utf8")));
|
||||
} catch (e) {
|
||||
res.error(500, e.message);
|
||||
}
|
||||
});
|
||||
app.put("/", (req, res) => {
|
||||
const write = req.query.text ? req.body : JSON.stringify(req.body, null, 4)
|
||||
fs.writeFileSync("./config.json", write);
|
||||
require.cache[require.resolve("../../../../config.json")] = require("../../../../config.json");
|
||||
res.complate(require("../../../../config.json"));
|
||||
});
|
||||
|
||||
module.exports = app;
|
|
@ -1,113 +0,0 @@
|
|||
const { MessageModel, ThreadModel } = require("../../../models");
|
||||
const { RL } = require('../../../lib');
|
||||
const { Router } = require("express")
|
||||
|
||||
const app = Router();
|
||||
|
||||
app.param("id", async (req, res, next, id) => {
|
||||
req.message = await MessageModel.get(id);
|
||||
|
||||
if (!req.message) return res.error(404, `We don't have any message with id ${id}.`);
|
||||
|
||||
if (req.message.deleted && !req.user?.admin)
|
||||
return res.error(404, `You do not have permissions to view this message with id ${id}.`)
|
||||
|
||||
next();
|
||||
});
|
||||
|
||||
|
||||
app.get("/:id", async (req, res) => res.complate(req.message));
|
||||
|
||||
app.delete("/:id/", async (req, res) => {
|
||||
|
||||
|
||||
const { message, user } = req;
|
||||
|
||||
if (user.id != message.authorID && !user.admin)
|
||||
return res.error(403, "You have not got permission for this.");
|
||||
if (message.deleted) return res.error(404, "This message is already deleted.");
|
||||
|
||||
message.deleted = true;
|
||||
await message.save()
|
||||
res.complate(message);
|
||||
|
||||
});
|
||||
|
||||
app.patch("/:id/", async (req, res) => {
|
||||
|
||||
|
||||
const { message, user } = req;
|
||||
|
||||
if (user.id !== message.authorID && !user.admin) return res.error(403, "You have not got permission for this.");
|
||||
if (!Object.keys(req.body).some(Boolean)) return res.error(400, "Missing message informations for update in request body.");
|
||||
const { content, deleted } = req.body;
|
||||
|
||||
const limits = req.app.get("limits");
|
||||
if (content.length < 5 || content.length > limits.message) return res.error(400, `content must be between 5 - ${limits.message} characters`);
|
||||
|
||||
if (deleted === false) message.deleted = false;
|
||||
|
||||
message.content = content;
|
||||
|
||||
if (!message.oldContents.includes(content))
|
||||
message.oldContents.push(content);
|
||||
|
||||
message.edited = true;
|
||||
|
||||
await message.save();
|
||||
res.complate(message);
|
||||
|
||||
})
|
||||
|
||||
app.post("/", RL(), async (req, res) => {
|
||||
|
||||
const { threadID, content } = req.body;
|
||||
if (!content) return res.error(400, "Missing message content in request body.");
|
||||
const limits = req.app.get("limits");
|
||||
|
||||
if (content.length < 5 || content.length > limits.message) return res.error(400, `content must be between ${limits.message} characters`);
|
||||
|
||||
const thread = await ThreadModel.get(threadID);
|
||||
|
||||
if (!thread) return res.error(404, `We don't have any thread with id ${threadID}.`);
|
||||
|
||||
const message = await new MessageModel({ content, author: req.user, threadID: thread.id }).takeId();
|
||||
await message.save();
|
||||
await thread.push(message.id).save();
|
||||
|
||||
res.complate(message);
|
||||
|
||||
})
|
||||
app.post("/:id/react/:type", async (req, res) => {
|
||||
|
||||
|
||||
const { message } = req;
|
||||
|
||||
if (req.params.type == "like") {
|
||||
if (message.react.like.includes(req.user.id))
|
||||
message.react.like.pull(req.user.id);
|
||||
else {
|
||||
message.react.like.push(req.user.id);
|
||||
message.react.dislike.pull(req.user.id);
|
||||
}
|
||||
|
||||
|
||||
} else if (req.params.type == "dislike") {
|
||||
|
||||
if (message.react.dislike.includes(req.user.id))
|
||||
message.react.dislike.pull(req.user.id);
|
||||
else {
|
||||
message.react.dislike.push(req.user.id);
|
||||
message.react.like.pull(req.user.id);
|
||||
}
|
||||
|
||||
} else
|
||||
return res.error(400, `We don't have any react type with name ${req.params.type}.`);
|
||||
|
||||
await message.save();
|
||||
|
||||
res.complate(message);
|
||||
|
||||
});
|
||||
|
||||
module.exports = app;
|
|
@ -1,40 +0,0 @@
|
|||
const { Router } = require("express")
|
||||
const { MessageModel, ThreadModel, UserModel } = require("../../../models");
|
||||
|
||||
const app = Router();
|
||||
app.use((req, res, next) => {
|
||||
req.sq = {}
|
||||
req.so = {}
|
||||
const limit = Number(req.query.limit);
|
||||
const skip = Number(req.query.skip);
|
||||
if (!req.user.admin) req.sq.deleted = false;
|
||||
|
||||
if (limit) req.so.limit = limit;
|
||||
if (skip) req.so.skip = skip;
|
||||
next();
|
||||
})
|
||||
app.get("/users", async (req, res) => {
|
||||
if (!req.query.q) return res.error(400, "Missing query parameter 'q' in request body.");
|
||||
const results = await UserModel.find({ ...req.sq, name: { $regex: req.query.q, $options: "i" } }, null, req.so);
|
||||
res.complate(results);
|
||||
});
|
||||
app.get("/messages", async (req, res) => {
|
||||
if (!Object.values(req.query).length) return res.error(400, "Missing query parameters in request body.");
|
||||
const query = { ...req.sq };
|
||||
if (req.query.q) query.content = { $regex: req.query.q, $options: "i" };
|
||||
if (req.query.authorID) query.authorID = req.query.authorID;
|
||||
const results = await MessageModel.find(query, null, req.so)
|
||||
res.complate(results);
|
||||
});
|
||||
app.get("/threads", async (req, res) => {
|
||||
if (!Object.values(req.query).length) return res.error(400, "Missing query parameters in request body.");
|
||||
const query = {};
|
||||
if (!req.user.admin) query.state = "OPEN";
|
||||
|
||||
if (req.query.q) query.title = { $regex: req.query.q, $options: "i" };
|
||||
if (req.query.authorID) query.authorID = req.query.authorID;
|
||||
const results = await ThreadModel.find(query, null, req.so)
|
||||
res.complate(results);
|
||||
});
|
||||
|
||||
module.exports = app;
|
|
@ -1,15 +0,0 @@
|
|||
const {themes}= require("../../../lib");
|
||||
const { Router } = require("express")
|
||||
|
||||
const app = Router();
|
||||
|
||||
app.get("/", async (req, res) => res.complate(themes));
|
||||
|
||||
app.get("/:codename", async (req, res) => {
|
||||
const theme = themes.find(t => t.codename === req.params.codename);
|
||||
if (!theme) return res.error(404, "Theme not found.");
|
||||
res.complate(theme);
|
||||
});
|
||||
|
||||
|
||||
module.exports = app;
|
|
@ -1,111 +0,0 @@
|
|||
const { MessageModel, ThreadModel } = require("../../../models");
|
||||
const { Router } = require("express")
|
||||
const { RL, threadEnum } = require('../../../lib');
|
||||
|
||||
const app = Router();
|
||||
app.param("id", async (req, res, next, id) => {
|
||||
req.thread = await ThreadModel.get(id);
|
||||
|
||||
if (!req.thread) return res.error(404, `We don't have any thread with id ${id}.`);
|
||||
|
||||
if (req.thread.state !== "OPEN" && !req.user?.admin)
|
||||
return res.error(404, `You do not have permissions to view this thread with id ${id}.`)
|
||||
|
||||
next();
|
||||
});
|
||||
|
||||
app.get("/:id", async (req, res) => res.complate(req.thread));
|
||||
|
||||
app.get("/:id/messages/", async (req, res) => {
|
||||
|
||||
const { id } = req.params;
|
||||
const limit = Number(req.query.limit);
|
||||
const skip = Number(req.query.skip);
|
||||
|
||||
const query = { threadID: id };
|
||||
if (!req.user.admin) query.deleted = false;
|
||||
|
||||
const options = { sort: { time: -1 } };
|
||||
if (limit) options.limit = limit;
|
||||
if (skip) options.skip = skip;
|
||||
|
||||
const messages = await MessageModel.find(query, null, options)
|
||||
|
||||
if (!messages.length) return res.error(404, "We don't have any messages in this with your query thread.");
|
||||
|
||||
res.complate(messages);
|
||||
|
||||
})
|
||||
|
||||
app.post("/", RL(5 * 60_000, 1), async (req, res) => {
|
||||
|
||||
const { title, content, category } = req.body;
|
||||
|
||||
if (!content || !title) return res.error(400, "Missing content/title in request body.");
|
||||
const limits = req.app.get("limits");
|
||||
|
||||
if (title.length < 5 || title.length > limits.title) return res.error(400, `title must be between 5 - ${limits.title} characters`);
|
||||
if (content.length < 5 || content.length > limits.message) return res.error(400, `content must be between 5 - ${limits.message} characters`);
|
||||
const { user } = req;
|
||||
const thread = await new ThreadModel({ title, author: user }).takeId()
|
||||
if (category)
|
||||
thread.categoryID = category;
|
||||
const message = await new MessageModel({ content, author: user, threadID: thread.id }).takeId()
|
||||
await thread.push(message.id).save();
|
||||
await message.save();
|
||||
|
||||
res.complate(thread);
|
||||
|
||||
});
|
||||
|
||||
app.patch("/:id/", async (req, res) => {
|
||||
const { user, thread } = req;
|
||||
|
||||
if (user.id !== thread.authorID && !user.admin) return res.error(403, "You have not got permission for this.");
|
||||
if (!Object.values(req.body).some(Boolean)) return res.error(400, "Missing thread informations for update in request body.");
|
||||
|
||||
|
||||
const { title, state } = req.body;
|
||||
|
||||
if (title) {
|
||||
const limits = req.app.get("limits");
|
||||
|
||||
if (title.length < 5 || title.length > limits.title) return res.error(400, `title must be between 5 - ${limits.title} characters`);
|
||||
if (thread.oldTitles.at(-1) == title) return res.error(400, "You can't use the same title as the previous one.");
|
||||
|
||||
thread.oldTitles.push(thread.title = title);
|
||||
}
|
||||
|
||||
|
||||
if (state) {
|
||||
if (!user.admin)
|
||||
return res.error(403, "You have not got permission for change state.");
|
||||
|
||||
if (thread.state === state) return res.error(400, "You can't change thread state to same state.");
|
||||
if (!threadEnum.includes(state)) return res.error(400, "Invalid thread state.");
|
||||
if (thread.deleted)
|
||||
await MessageModel.updateMany({ threadID: thread.id }, { deleted: false });
|
||||
thread.state = state;
|
||||
}
|
||||
|
||||
await thread.save();
|
||||
|
||||
res.complate(thread);
|
||||
|
||||
})
|
||||
app.delete("/:id/", async (req, res) => {
|
||||
|
||||
const { user, thread } = req;
|
||||
if (user.id != thread.authorID && !user.admin)
|
||||
return res.error(403, "You have not got permission for this.");
|
||||
|
||||
if (thread.deleted) return res.error(404, "This thread is already deleted.");
|
||||
thread.deleted= true;
|
||||
await thread.save();
|
||||
|
||||
await MessageModel.updateMany({ threadID: thread.id }, { deleted: true });
|
||||
res.complate(thread);
|
||||
|
||||
})
|
||||
|
||||
module.exports = app;
|
|
@ -1,112 +0,0 @@
|
|||
const { UserModel, BanModel } = require("../../../models");
|
||||
const { Router } = require("express");
|
||||
const multer = require("multer");
|
||||
const { themes, emailRegEx } = require("../../../lib")
|
||||
const app = Router();
|
||||
const { join } = require("path");
|
||||
app.param("id", async (req, res, next, id) => {
|
||||
if (id === "me") //
|
||||
id = req.user.id;
|
||||
|
||||
req.member = await UserModel.get(id, req.user.admin ? "+lastSeen +ips" : "");
|
||||
|
||||
if (!req.member) return res.error(404, `We don't have any user with id ${id}.`);
|
||||
|
||||
if (req.member.deleted && !req.user?.admin)
|
||||
return res.error(404, `You do not have permissions to view this user with id ${id}.`);
|
||||
|
||||
next();
|
||||
});
|
||||
|
||||
app.get("/:id", async (req, res) => res.complate(req.member));
|
||||
|
||||
app.delete("/:id", async (req, res) => {
|
||||
const { user, member } = req;
|
||||
|
||||
if (!user.admin)
|
||||
return res.error(403, "You have not got permission for this.");
|
||||
|
||||
if (member.deleted) return res.error(404, `This user is with id ${member.id} already deleted.`);
|
||||
|
||||
member.deleted = true;
|
||||
await member.save();
|
||||
|
||||
res.complate(member);
|
||||
});
|
||||
|
||||
app.patch("/:id", async (req, res) => {
|
||||
const { user, member } = req;
|
||||
|
||||
if (req.user.id !== member.id && !user.admin) return res.error(403, "You have not got permission for this.");
|
||||
if (!Object.keys(req.body).some(Boolean)) return res.error(400, "Missing member informations in request body.");
|
||||
|
||||
const { name, about, admin, deleted, hideLastSeen, theme, email } = req.body;
|
||||
|
||||
if ((admin?.length || "deleted" in req.body) && !req.user.admin) return res.error(403, "You have not got permission for edit 'admin' and 'deleted' information, or bad request.");
|
||||
const { names, desp } = req.app.get("limits");
|
||||
|
||||
if (name) {
|
||||
if (name.length < 3 || names > 25) return res.error(400, `Username must be between 3 - ${names} characters`);
|
||||
member.name = name;
|
||||
}
|
||||
|
||||
if (about) {
|
||||
if (about.length > desp) return res.error(400, `About must be under ${desp} characters`);
|
||||
member.about = about;
|
||||
}
|
||||
if (theme && themes.some(t => t.codename === theme.codename))
|
||||
member.theme = theme;
|
||||
|
||||
if (email) {
|
||||
if (!emailRegEx.test(email)) return res.error(400, "E-mail is not valid");
|
||||
if (await UserModel.exists({ email })) return res.error(400, "E-mail is already in use");
|
||||
member.email = email;
|
||||
}
|
||||
|
||||
if (typeof admin === "boolean" || ["false", "true"].includes(admin)) member.admin = admin;
|
||||
if (deleted === false) member.deleted = false;
|
||||
|
||||
if (typeof hideLastSeen === "boolean" || ["false", "true"].includes(admin)) member.hideLastSeen = hideLastSeen;
|
||||
|
||||
member.edited = true;
|
||||
|
||||
res.complate(await member.save());
|
||||
|
||||
})
|
||||
|
||||
app.post("/:id/ban", async (req, res) => {
|
||||
if (!req.user.admin) return res.error(403, "You have not got permission for this.");
|
||||
const { member } = req;
|
||||
for (const ip of member.ips)
|
||||
try {
|
||||
await BanModel.create({ ip, reason: `Ban for ${member.name}`, authorID: req.user.id });
|
||||
req.app.ips.push(ip);
|
||||
} catch {
|
||||
continue;
|
||||
}
|
||||
|
||||
res.complate(member);
|
||||
});
|
||||
|
||||
const storage = multer.diskStorage({
|
||||
destination: join(__dirname, "..", "..", "..", "public", "images", "avatars"),
|
||||
filename: function (req, _file, cb) {
|
||||
cb(null, req.member.id + ".jpg")
|
||||
}
|
||||
})
|
||||
|
||||
const upload = multer({ storage })
|
||||
|
||||
app.post("/:id/avatar", upload.single('avatar'), async (req, res) => {
|
||||
|
||||
const { member } = req;
|
||||
|
||||
if (req.user.id !== member.id && !req.user.admin) return res.error(403, "You have not got permission for this.");
|
||||
|
||||
if (!req.file) return res.error(400, "Missing avatar in request body.");
|
||||
member.avatar = "/images/avatars/" + req.file.filename;
|
||||
res.complate(await member.save());
|
||||
});
|
||||
|
||||
|
||||
module.exports = app;
|
|
@ -1,98 +0,0 @@
|
|||
const { Router } = require("express")
|
||||
const { UserModel } = require("../models");
|
||||
const app = Router();
|
||||
const { host, email_auth } = require("../../config.json")
|
||||
|
||||
app.get("/discord", async (req, res) => {
|
||||
const client_id = process.env.DISCORD_ID;
|
||||
if (!client_id) return res.error(404, "Discord auth is disabled")
|
||||
const { code } = req.query;
|
||||
if (!code) return res.error(400, "No code provided");
|
||||
try {
|
||||
const response = await fetch('https://discord.com/api/v10/oauth2/token', {
|
||||
method: 'POST',
|
||||
body: new URLSearchParams({
|
||||
client_id, code,
|
||||
client_secret: process.env.DISCORD_SECRET,
|
||||
grant_type: 'authorization_code',
|
||||
redirect_uri: host + "/auth/discord",
|
||||
scope: 'identify+email',
|
||||
}).toString(),
|
||||
headers: {
|
||||
'Content-Type': 'application/x-www-form-urlencoded',
|
||||
},
|
||||
});
|
||||
|
||||
if (!response.ok) return res.error(500, "Bad request to discord");
|
||||
|
||||
const { access_token, token_type } = await response.json();
|
||||
|
||||
const discord = await fetch('https://discord.com/api/users/@me', {
|
||||
headers: { authorization: `${token_type} ${access_token}` }
|
||||
}).then(res => res.json());
|
||||
|
||||
const forum = await UserModel.findOne({ discordID: discord.id });
|
||||
|
||||
if (req.user) {
|
||||
if (req.user.discordID)
|
||||
return res.error(403, "Your forum account is already linked to a discord account.");
|
||||
|
||||
if (forum)
|
||||
return res.error(409, "This discord account is already linked to a forum account.");
|
||||
|
||||
req.user.discordID = discord.id;
|
||||
req.user.discord_code = code;
|
||||
await req.user.save();
|
||||
return res.redirect(`/users/${req.user.id}`)
|
||||
}
|
||||
|
||||
|
||||
if (forum) {
|
||||
req.session.userID = forum.id;
|
||||
return res.redirect("/");
|
||||
}
|
||||
|
||||
let name = discord.username;
|
||||
while (await UserModel.exists({ name }))
|
||||
name += Math.floor(Math.random() * 2);
|
||||
|
||||
const user2 = new UserModel({
|
||||
name, email: discord.email,
|
||||
discordID: discord.id, discord_code: code,
|
||||
avatar: `https://cdn.discordapp.com/avatars/${discord.id}/${discord.avatar}.png?size=256`,
|
||||
});
|
||||
|
||||
await user2.takeId();
|
||||
await user2.save();
|
||||
|
||||
req.session.userID = user2.id;
|
||||
|
||||
res.redirect("/");
|
||||
} catch (error) {
|
||||
res.error(500, "Something went wrong");
|
||||
console.error(error);
|
||||
}
|
||||
});
|
||||
|
||||
app.delete("/discord", async (req, res) => {
|
||||
if (!req.user) return res.error(401, "You are not logged in");
|
||||
if (!req.user.discordID) return res.error(403, "You don't have a discord account linked to your forum account.");
|
||||
req.user.discordID = undefined;
|
||||
req.user.discord_code = undefined;
|
||||
await req.user.save();
|
||||
res.send("Your discord account has been unlinked from your forum account.");
|
||||
});
|
||||
|
||||
app.get("/email", async (req, res) => {
|
||||
if (!email_auth) return res.error(404, "Email auth is disabled");
|
||||
if (!req.user) return res.error(401, "You are not logged in");
|
||||
if (req.user.email) return res.error(403, "You already have an email linked to your account.");
|
||||
const { code } = req.query;
|
||||
if (!code) return res.error(400, "No code provided");
|
||||
if (code !== req.user.email_code) return res.error(403, "Invalid code");
|
||||
req.user.state = "ACTIVE";
|
||||
await req.user.save();
|
||||
res.send("Your email has been linked to your forum account.");
|
||||
});
|
||||
|
||||
module.exports = app;
|
|
@ -1,30 +0,0 @@
|
|||
const { CategoryModel, ThreadModel } = require("../models");
|
||||
|
||||
const { Router } = require("express");
|
||||
|
||||
const app = Router();
|
||||
app.get("/", async (req, res) => {
|
||||
const page = Number(req.query.page) || 0;
|
||||
|
||||
const categories = await CategoryModel.find({}).limit(10).skip(page * 10).sort({ time: -1 });
|
||||
res.reply("categories", {
|
||||
categories, page,
|
||||
pages: Math.ceil(await CategoryModel.countDocuments({}) / 10)
|
||||
});
|
||||
});
|
||||
|
||||
app.get("/create", (req, res) => res.reply("create_category"));
|
||||
app.get("/:id", async (req, res) => {
|
||||
const category = await CategoryModel.findOne({ id: req.params.id });
|
||||
if (!category) return res.error(404, "Category not found.");
|
||||
const page = Number(req.query.page) || 0;
|
||||
const query = { categoryID: category.id };
|
||||
if (!req.user?.admin) query.deleted = false;
|
||||
|
||||
let threads = await ThreadModel.find(query).limit(10).skip(page * 10).sort({ time: -1 });
|
||||
threads = await Promise.all(threads.map(thread => thread.get_author()));
|
||||
|
||||
res.reply("threads", { threads, page, title: `Threads in ${category.name}`, desp: category.desp, pages: Math.ceil(await ThreadModel.countDocuments(query) / 10) });
|
||||
});
|
||||
|
||||
module.exports = app;
|
|
@ -1,27 +0,0 @@
|
|||
const { UserModel } = require("../models");
|
||||
const { Router } = require("express");
|
||||
const app = Router();
|
||||
const bcrypt = require("bcrypt");
|
||||
|
||||
app.get("/", (req, res) => res.reply("login", { redirect: req.query.redirect, user: null, discord: req.app.get("DISCORD_AUTH_URL") }));
|
||||
|
||||
app.post("/", async (req, res) => {
|
||||
req.session.userID = null;
|
||||
|
||||
const { name, password } = req.body;
|
||||
|
||||
if (!name || !password) return res.error(400, "You forgot entering some values")
|
||||
|
||||
const member = await UserModel.findOne({
|
||||
$or: [{ name }, { email: name }]
|
||||
}, "+password");
|
||||
if (!member || member.deleted) return res.error(401, 'Incorrect username or email!');
|
||||
if (!await bcrypt.compare(password, member.password)) return res.error(401, 'Incorrect password!');
|
||||
|
||||
req.session.userID = member.id;
|
||||
|
||||
res.redirect(req.query.redirect || '/');
|
||||
|
||||
});
|
||||
|
||||
module.exports = app;
|
|
@ -1,16 +0,0 @@
|
|||
const { MessageModel } = require("../models");
|
||||
|
||||
const { Router } = require("express");
|
||||
|
||||
const app = Router();
|
||||
|
||||
app.get("/:id", async (req, res) => {
|
||||
const message = await MessageModel.get(req.params.id);
|
||||
|
||||
if (!message || (message.deleted && !req.user?.admin)) return res.error( 404,
|
||||
`We don't have any message with id ${req.params.id}.`);
|
||||
res.redirect(`/threads/${message.threadID}#message-${message.id}`);
|
||||
|
||||
});
|
||||
|
||||
module.exports = app;
|
|
@ -1,64 +0,0 @@
|
|||
const { UserModel } = require("../models");
|
||||
const { Router } = require("express")
|
||||
const bcrypt = require("bcrypt");
|
||||
const { RL, transporter, emailRegEx, getGravatar } = require('../lib');
|
||||
const app = Router();
|
||||
const { email_auth, forum_name, host } = require("../../config.json");
|
||||
app.get("/", (req, res) => res.reply("register", { user: null, discord: req.app.get("DISCORD_AUTH_URL"), mail: email_auth }));
|
||||
|
||||
app.post("/", RL(24 * 60 * 60_000, 5), async (req, res) => {
|
||||
|
||||
req.session.userID = null;
|
||||
|
||||
let { name, password, about, email } = req.body;
|
||||
|
||||
if (!name || !password || !email) return res.error(400, "You forgot entering some values");
|
||||
if (!emailRegEx.test(email)) return res.error(400, "E-mail is not valid");
|
||||
const { names } = req.app.get("limits");
|
||||
if (name.length < 3 || name.length > names) return res.error(400, "Name must be between 3 - 25 characters");
|
||||
if (password.length < 3 || password.length > names) return res.error(400, "Password must be between 3 - 25 characters");
|
||||
|
||||
if (await UserModel.exists({ name })) return res.error(400, `We have got an user named ${name}!`)
|
||||
if (await UserModel.exists({ email })) return res.error(400, "E-mail is already in use");
|
||||
|
||||
|
||||
const user = new UserModel({ name, email });
|
||||
user.avatar = getGravatar(email, 128);
|
||||
|
||||
if (about) {
|
||||
if (about.length > 256) return res.error(400, "about must be under 256 characters");
|
||||
user.about = about;
|
||||
}
|
||||
|
||||
await user.takeId();
|
||||
|
||||
if (user.id === "0")
|
||||
user.admin = true;
|
||||
else if (email_auth) {
|
||||
|
||||
user.email_code = await bcrypt.hash(`${Date.now()}-${Math.floor(Math.random() * 1e20)}`, 10)
|
||||
|
||||
transporter.sendMail({
|
||||
from: transporter.options.auth.user,
|
||||
to: email,
|
||||
subject: name + ", please verify your email",
|
||||
html: `
|
||||
<h1>Verify your email in ${forum_name}</h1>
|
||||
<a href="${host}/auth/email?code=${user.email_code}">Click here to verify your email</a>
|
||||
`
|
||||
}, (err) => {
|
||||
if (err) return res.error(500, "Failed to send email");
|
||||
});
|
||||
|
||||
}
|
||||
|
||||
user.password = await bcrypt.hash(password, 10);
|
||||
await user.save();
|
||||
|
||||
req.session.userID = user.id;
|
||||
|
||||
res.redirect('/');
|
||||
|
||||
});
|
||||
|
||||
module.exports = app;
|
|
@ -1,53 +0,0 @@
|
|||
const { UserModel, ThreadModel, MessageModel } = require("../models")
|
||||
const { Router } = require("express");
|
||||
|
||||
const app = Router();
|
||||
|
||||
app.get("/", (req, res) => res.reply("search"));
|
||||
|
||||
app.use(async (req, res, next) => {
|
||||
req.sq = {}
|
||||
req.page = Number(req.query.page) || 0;
|
||||
req.so = { limit: 10, skip: req.page * 10 }
|
||||
if (!req.user?.admin) req.sq.deleted = false;
|
||||
|
||||
next();
|
||||
});
|
||||
|
||||
app.get("/users", async (req, res) => {
|
||||
if (!req.query.q) return res.error(400, "Missing query parameter 'q' in request body.");
|
||||
const users = await UserModel.find({ ...req.sq, name: { $regex: req.query.q, $options: "i" } }, null, req.so)
|
||||
res.reply("users", {
|
||||
users, page: req.page,
|
||||
pages: Math.ceil(await UserModel.countDocuments(req.sq) / 10)
|
||||
});
|
||||
});
|
||||
|
||||
app.get("/messages", async (req, res) => {
|
||||
if (!Object.values(req.query).length) return res.error(400, "Missing query parameters in request body.");
|
||||
const query = { ...req.sq };
|
||||
if (req.query.q) query.content = { $regex: req.query.q, $options: "i" };
|
||||
if (req.query.authorID) query.authorID = req.query.authorID;
|
||||
const messages = await MessageModel.find(query, null, req.so)
|
||||
res.reply("messages", {
|
||||
messages, page: req.page,
|
||||
pages: Math.ceil(await MessageModel.countDocuments(query) / 10)
|
||||
});
|
||||
});
|
||||
|
||||
app.get("/threads", async (req, res) => {
|
||||
if (!Object.values(req.query).length) return res.error(400, "Missing query parameters in request body.");
|
||||
const query = {};
|
||||
if (!req.user?.admin) query.state = "OPEN";
|
||||
|
||||
if (req.query.q) query.title = { $regex: req.query.q, $options: "i" };
|
||||
if (req.query.authorID) query.authorID = req.query.authorID;
|
||||
const threads = await ThreadModel.find(query, null, req.so)
|
||||
res.reply("threads", {
|
||||
threads, page: req.page, title: `Threads with query '${req.query.q}'`,
|
||||
pages: Math.ceil(await ThreadModel.countDocuments(query) / 10), desp: `${threads.length} threads are listed`
|
||||
});
|
||||
});
|
||||
|
||||
module.exports = app;
|
||||
|
|
@ -1,28 +0,0 @@
|
|||
const { UserModel } = require("../models");
|
||||
const { Router } = require("express")
|
||||
const bcrypt = require("bcrypt");
|
||||
const { RL} = require('../lib');
|
||||
const app = Router();
|
||||
|
||||
app.use(async (req, res, next) => {
|
||||
if (!req.user) return res.error(403, "You are not logged in");
|
||||
next();
|
||||
});
|
||||
|
||||
app.get("/", (req, res) => res.reply("security"));
|
||||
|
||||
app.post("/", RL(24 * 60 * 60_000, 5), async (req, res) => {
|
||||
|
||||
let { old_password, password } = req.body;
|
||||
if (!old_password || !password) return res.error(400, "You forgot entering some values");
|
||||
const { names } = req.app.get("limits");
|
||||
if (password.length < 3 || password.length > names) return res.error(400, "Password must be between 3 - 25 characters");
|
||||
const user = await UserModel.get(req.user.id, "+password");
|
||||
if (!await bcrypt.compare(old_password, user.password)) return res.error(401, 'Incorrect password!');
|
||||
user.password = await bcrypt.hash(password, 10);
|
||||
await user.save();
|
||||
res.send("Password changed");
|
||||
|
||||
});
|
||||
|
||||
module.exports = app;
|
|
@ -1,34 +0,0 @@
|
|||
const { UserModel } = require("../models")
|
||||
const { Router } = require("express");
|
||||
const app = Router();
|
||||
const fs = require("fs");
|
||||
|
||||
app.use(async (req, res, next) => {
|
||||
if (await UserModel.exists({ admin: true })) return res.error(400, "You have already setuped the site.");
|
||||
next();
|
||||
});
|
||||
app.get("/", async (req, res) => res.reply("setup"))
|
||||
app.post("/", async (req, res) => {
|
||||
let original = {};
|
||||
|
||||
try {
|
||||
original = JSON.parse(fs.readFileSync("./config.json", "utf8"));
|
||||
} catch (e) {
|
||||
try {
|
||||
original = JSON.parse(fs.readFileSync("./config.json.example", "utf8"));
|
||||
// eslint-disable-next-line no-empty
|
||||
} catch (e) { }
|
||||
}
|
||||
|
||||
const content = req.body;
|
||||
|
||||
for (const key in content)
|
||||
if (key in original && content[key])
|
||||
original[key] = content[key];
|
||||
|
||||
fs.writeFileSync("./config.json", JSON.stringify(original, null, 4));
|
||||
require.cache[require.resolve("../../config.json")] = require("../../config.json");
|
||||
res.redirect("/register");
|
||||
})
|
||||
|
||||
module.exports = app;
|
|
@ -1,43 +0,0 @@
|
|||
const { Router } = require("express");
|
||||
const app = Router();
|
||||
const { ThreadModel, MessageModel, CategoryModel } = require("../models")
|
||||
|
||||
app.get("/", async (req, res) => {
|
||||
const page = Number(req.query.page) || 0;
|
||||
const query = req.user?.admin ? {} : { state: "OPEN" };
|
||||
let threads = await ThreadModel.find(query).limit(10).skip(page * 10).sort({ time: -1 });
|
||||
threads = await Promise.all(threads.map(thread => thread.get_author()));
|
||||
|
||||
return res.reply("threads", { threads, page, title: "Threads", desp: threads.length + " threads are listed", pages: Math.ceil(await ThreadModel.countDocuments(query) / 10) });
|
||||
});
|
||||
|
||||
|
||||
app.get("/create/", async (req, res) => res.reply("create_thread", { categories: await CategoryModel.find() }));
|
||||
|
||||
app.get("/:id/", async (req, res) => {
|
||||
|
||||
const { user, params: { id } } = req
|
||||
|
||||
const page = Number(req.query.page || 0);
|
||||
|
||||
const thread = await ThreadModel.get(id)
|
||||
if (thread && (user?.admin || thread.state == "OPEN")) {
|
||||
thread.count = await thread.messageCount(user?.admin);
|
||||
thread.pages = Math.ceil(thread.count / 10);
|
||||
thread.views++;
|
||||
const query = { threadID: id };
|
||||
if (!user || !user.admin) query.deleted = false;
|
||||
|
||||
const messages = await Promise.all(await MessageModel.find(query).sort({ time: 1 }).limit(10).skip(page * 10)
|
||||
.then(messages => messages.map(message => message.get_author())));
|
||||
|
||||
res.reply("thread", { page, thread, messages });
|
||||
|
||||
thread.save();
|
||||
|
||||
} else
|
||||
res.error(404, `We don't have any thread with id ${id}.`);
|
||||
});
|
||||
|
||||
|
||||
module.exports = app;
|
|
@ -1,50 +0,0 @@
|
|||
const { Router } = require("express");
|
||||
const app = Router();
|
||||
const { UserModel, MessageModel, ThreadModel } = require("../models");
|
||||
|
||||
app.get("/", async (req, res) => {
|
||||
const page = Number(req.query.page) || 0;
|
||||
const query = req.user?.admin ? {} : { deleted: false };
|
||||
let users = await UserModel.find(query).limit(10).skip(page * 10);
|
||||
return res.reply("users", { users, page, pages: Math.ceil(await UserModel.countDocuments(query) / 10) });
|
||||
});
|
||||
|
||||
app.get("/:id/avatar", async (req, res) => {
|
||||
if (!req.user || (!req.user.admin && req.params.id !== req.user.id)) return res.error(403, "You have not got permission for this.");
|
||||
const member = await UserModel.get(req.params.id);
|
||||
|
||||
if (member && (req.user?.admin || !member.deleted))
|
||||
res.reply("avatar_upload", { member })
|
||||
else
|
||||
res.error(404, `We don't have any user with id ${req.params.id}.`);
|
||||
})
|
||||
|
||||
app.get("/:id", async (req, res) => {
|
||||
const user = req.user
|
||||
const { id } = req.params;
|
||||
const member = await UserModel.get(id, "+lastSeen +ips");
|
||||
|
||||
if (member && (user?.admin || !member.deleted)) {
|
||||
|
||||
const message = await MessageModel.countDocuments({ authorID: id });
|
||||
const thread = await ThreadModel.countDocuments({ authorID: id });
|
||||
res.reply("user", { member, counts: { message, thread }, discord: req.app.get("DISCORD_AUTH_URL") })
|
||||
}
|
||||
else res.error(404, `We don't have any user with id ${id}.`);
|
||||
|
||||
});
|
||||
|
||||
app.get("/:id/edit", async (req, res) => {
|
||||
const user = req.user
|
||||
const { id } = req.params;
|
||||
const member = await UserModel.get(id);
|
||||
if (!member) return res.error(404, `We don't have any user with id ${id}.`);
|
||||
if (user?.admin || user.id === member.id)
|
||||
return res.reply("edit_user", { member });
|
||||
|
||||
res.error(403, "You have not got permission for this.");
|
||||
|
||||
});
|
||||
|
||||
|
||||
module.exports = app;
|
|
@ -1,6 +0,0 @@
|
|||
module.exports = {
|
||||
name: "Bootstrap black theme",
|
||||
codename: "bootstrap_black",
|
||||
description: "A black theme fueled by bootstrap, created by Akif9748 and overwrited Alair's website's theme.",
|
||||
author: "Akif9748"
|
||||
}
|
|
@ -1,650 +0,0 @@
|
|||
@import url('https://fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap');
|
||||
|
||||
|
||||
|
||||
:root {
|
||||
--alair: #736FE9;
|
||||
--main: #736FE9;
|
||||
--btn-clr-1: #e8e8e8;
|
||||
--menu-item: #ffffff;
|
||||
--borders: #d9d9d9;
|
||||
--input-clr: #dcdcdc;
|
||||
--box-shadow: #c3c3c3;
|
||||
--second: #9f9f9f;
|
||||
--anti: #ebebeb;
|
||||
--t-username: rgb(236 236 236);
|
||||
--background-color: #000000;
|
||||
|
||||
}
|
||||
|
||||
|
||||
|
||||
/***********************************
|
||||
|
||||
START OF OLD THEME
|
||||
|
||||
***********************************/
|
||||
|
||||
|
||||
|
||||
|
||||
* {
|
||||
box-sizing: border-box;
|
||||
}
|
||||
|
||||
body {
|
||||
margin: 0;
|
||||
font-family: Poppins;
|
||||
min-height: 400px;
|
||||
margin-bottom: 100px;
|
||||
clear: both;
|
||||
}
|
||||
|
||||
a {
|
||||
text-decoration: none;
|
||||
color: initial;
|
||||
}
|
||||
|
||||
.header {
|
||||
width: 100%;
|
||||
padding: 20px;
|
||||
display: flex;
|
||||
justify-content: space-between;
|
||||
align-items: center;
|
||||
}
|
||||
|
||||
.logo {
|
||||
padding: 10px;
|
||||
font-size: 28px;
|
||||
color: var(--main);
|
||||
font-weight: 900;
|
||||
}
|
||||
|
||||
.logo>span {
|
||||
color: var(--second);
|
||||
}
|
||||
|
||||
.buttons {
|
||||
padding: 0;
|
||||
display: flex;
|
||||
align-items: center;
|
||||
}
|
||||
|
||||
.btn-primary {
|
||||
color: #fafafa;
|
||||
background-color: var(--alair);
|
||||
border-color: var(--alair);
|
||||
padding: 10px 20px 10px 20px;
|
||||
border-radius: 4px;
|
||||
font-weight: 700;
|
||||
margin: 10px;
|
||||
cursor: pointer;
|
||||
border: 2px solid var(--main);
|
||||
}
|
||||
|
||||
.btn-primary:hover {
|
||||
color: var(--alair);
|
||||
background-color: rgba(0, 0, 0, 0);
|
||||
border: 2px solid var(--alair);
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
.btn-danger {
|
||||
color: var(--btn-clr-1);
|
||||
background-color: var(--important);
|
||||
padding: 0px 10px 0px 10px;
|
||||
|
||||
border-radius: 4px;
|
||||
font-weight: 700;
|
||||
margin: 10px;
|
||||
cursor: pointer;
|
||||
border: 2px solid var(--important);
|
||||
}
|
||||
|
||||
|
||||
.btn-outline-primary {
|
||||
|
||||
|
||||
color: var(--alair);
|
||||
padding: 10px 20px 10px 20px;
|
||||
|
||||
border-radius: 4px;
|
||||
font-weight: 700;
|
||||
margin: 10px;
|
||||
cursor: pointer;
|
||||
border: 2px solid var(--borders);
|
||||
}
|
||||
|
||||
.btn-outline-primary:hover {
|
||||
color: var(--btn-clr-1);
|
||||
background-color: var(--alair);
|
||||
border: 2px solid var(--alair);
|
||||
}
|
||||
|
||||
.btn-danger:hover {
|
||||
background-color: var(--important);
|
||||
border: 2px solid var(--important);
|
||||
}
|
||||
|
||||
|
||||
.menu {
|
||||
width: 100%;
|
||||
padding: 20px;
|
||||
display: flex;
|
||||
justify-content: space-around;
|
||||
}
|
||||
|
||||
.menu-item {
|
||||
padding: 10px;
|
||||
font-weight: 700;
|
||||
background-color: var(--second);
|
||||
color: var(--menu-item);
|
||||
|
||||
border-radius: 5px;
|
||||
width: 100%;
|
||||
text-align: center;
|
||||
margin: 0px 10px 0px 0px;
|
||||
cursor: pointer;
|
||||
transition: background-color 0.3s ease;
|
||||
}
|
||||
|
||||
.active-menu {
|
||||
background-color: var(--main);
|
||||
}
|
||||
|
||||
.menu-item:hover {
|
||||
background-color: var(--main);
|
||||
}
|
||||
|
||||
.admin-bar {
|
||||
font-size: 15px;
|
||||
color: var(--menu-item);
|
||||
background: var(--main);
|
||||
text-align: center;
|
||||
}
|
||||
|
||||
div.avatar {
|
||||
padding-left: 10px;
|
||||
}
|
||||
|
||||
.avatar>img {
|
||||
width: 30px;
|
||||
height: 30px;
|
||||
border-radius: 50%;
|
||||
margin: auto;
|
||||
}
|
||||
|
||||
.box-username {
|
||||
display: flex;
|
||||
align-items: center;
|
||||
justify-content: center;
|
||||
font-size: 18px;
|
||||
font-weight: 700;
|
||||
color: var(--main);
|
||||
}
|
||||
|
||||
.title {
|
||||
color: var(--main);
|
||||
}
|
||||
|
||||
.input {
|
||||
padding: 8px 10px;
|
||||
color: var(--input-clr);
|
||||
width: 100%;
|
||||
margin-bottom: 10px;
|
||||
border: 2px solid var(--borders);
|
||||
}
|
||||
|
||||
form.post {
|
||||
display: flex;
|
||||
flex-direction: column;
|
||||
align-items: center;
|
||||
max-width: 1000px;
|
||||
margin: 0 auto;
|
||||
}
|
||||
|
||||
@media (max-width: 992px) {
|
||||
.header {
|
||||
flex-direction: column;
|
||||
align-items: center;
|
||||
}
|
||||
|
||||
.menu {
|
||||
flex-direction: column;
|
||||
}
|
||||
|
||||
.menu-item {
|
||||
margin: 0px 10px 10px 0px;
|
||||
}
|
||||
|
||||
|
||||
}
|
||||
|
||||
@media (max-width: 480px) {
|
||||
.btn-outline-primary {
|
||||
width: 100%;
|
||||
text-align: center;
|
||||
}
|
||||
|
||||
.buttons {
|
||||
flex-direction: column;
|
||||
width: 100%;
|
||||
}
|
||||
|
||||
.btn-primary {
|
||||
width: 100%;
|
||||
text-align: center;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
/***********************************
|
||||
|
||||
START OF BOOTSTRAP THEME
|
||||
|
||||
***********************************/
|
||||
|
||||
.a:hover {
|
||||
color: var(--alair);
|
||||
}
|
||||
|
||||
.CodeMirror {
|
||||
color: var(--input-clr);
|
||||
background-color: var(--bs-body-bg);
|
||||
}
|
||||
|
||||
|
||||
footer {
|
||||
background-color: #000000;
|
||||
font-size: small;
|
||||
}
|
||||
|
||||
body {
|
||||
min-height: 400px;
|
||||
background-size: cover;
|
||||
clear: both;
|
||||
}
|
||||
|
||||
a {
|
||||
color: var(--alair);
|
||||
}
|
||||
|
||||
.alair-trans {
|
||||
padding: 20px;
|
||||
background-color: rgba(0, 0, 0, 0.7);
|
||||
}
|
||||
|
||||
.alair-cl {
|
||||
width: 50%;
|
||||
}
|
||||
|
||||
@media screen and (max-width: 768px) {
|
||||
.alair-cl {
|
||||
width: 90%;
|
||||
}
|
||||
}
|
||||
|
||||
.container-sm {
|
||||
margin-top: 25px;
|
||||
margin-bottom: 125px;
|
||||
}
|
||||
|
||||
|
||||
|
||||
/************************************
|
||||
Threads
|
||||
*************************************/
|
||||
.threads {
|
||||
width: 100%;
|
||||
padding: 20px;
|
||||
}
|
||||
|
||||
.threads-box {
|
||||
width: 100%;
|
||||
padding: 8px;
|
||||
box-shadow: 0 0 5px 0 var(--box-shadow);
|
||||
display: flex;
|
||||
justify-content: space-between;
|
||||
margin: 0px 0px 8px 0px;
|
||||
cursor: pointer;
|
||||
align-items: center;
|
||||
}
|
||||
|
||||
.threads-box:hover {
|
||||
background-color: var(--box-shadow);
|
||||
}
|
||||
|
||||
.thread-box-title {
|
||||
padding: 10px;
|
||||
font-size: 18px;
|
||||
font-weight: 700;
|
||||
color: var(--anti);
|
||||
|
||||
}
|
||||
|
||||
.thread-box-title>span {
|
||||
color: var(--important);
|
||||
}
|
||||
|
||||
|
||||
@media (max-width: 480px) {
|
||||
.threads-box {
|
||||
flex-direction: column;
|
||||
}
|
||||
}
|
||||
|
||||
/*****
|
||||
LOGIN / REGISTER
|
||||
******/
|
||||
|
||||
form.login {
|
||||
display: flex;
|
||||
align-items: center;
|
||||
flex-direction: column;
|
||||
max-width: 500px;
|
||||
margin: 0 auto;
|
||||
padding: 8px;
|
||||
}
|
||||
|
||||
/********
|
||||
MESSAGE
|
||||
********/
|
||||
.message .date {
|
||||
color: var(--second);
|
||||
}
|
||||
|
||||
.message {
|
||||
max-width: 800px;
|
||||
box-shadow: 0 0 5px 0 var(--box-shadow);
|
||||
margin: 10px auto;
|
||||
padding: 20px;
|
||||
display: flex;
|
||||
gap: 10px;
|
||||
position: relative;
|
||||
}
|
||||
|
||||
.message .left {
|
||||
text-align: center;
|
||||
border-right: 2px solid var(--borders);
|
||||
}
|
||||
|
||||
.message .left img {
|
||||
width: 100px;
|
||||
height: 100px;
|
||||
border-radius: 50%;
|
||||
margin-right: 5px;
|
||||
}
|
||||
|
||||
.message .left .username a {
|
||||
color: var(--t-username);
|
||||
}
|
||||
|
||||
.message .content {
|
||||
width: 70%;
|
||||
color: var(--anti);
|
||||
}
|
||||
|
||||
|
||||
@media(max-width:980px) {
|
||||
.message {
|
||||
margin: 10px 20px;
|
||||
max-width: 100%;
|
||||
flex-direction: column;
|
||||
position: relative;
|
||||
}
|
||||
|
||||
.message .left {
|
||||
padding: 40px;
|
||||
border: none;
|
||||
border-bottom: 2px solid var(--borders);
|
||||
|
||||
}
|
||||
|
||||
.message .left img {
|
||||
width: 50px;
|
||||
height: 50px;
|
||||
border-radius: 50%;
|
||||
margin-right: 5px;
|
||||
position: absolute;
|
||||
left: 20px;
|
||||
top: 20px;
|
||||
}
|
||||
|
||||
.message .left .username {
|
||||
position: absolute;
|
||||
top: 20px;
|
||||
left: 80px;
|
||||
}
|
||||
|
||||
.message .date:nth-of-type(3) {
|
||||
position: absolute;
|
||||
right: 20px;
|
||||
top: 20px;
|
||||
}
|
||||
|
||||
.message .date:nth-of-type(2) {
|
||||
position: absolute;
|
||||
right: 20px;
|
||||
top: 40px;
|
||||
}
|
||||
|
||||
|
||||
.message .content {
|
||||
width: 50%;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
/************************************
|
||||
SEARCH
|
||||
***************************************/
|
||||
|
||||
.search form {
|
||||
display: flex;
|
||||
align-items: center;
|
||||
flex-direction: column;
|
||||
max-width: 500px;
|
||||
margin: 20px auto;
|
||||
width: 100%;
|
||||
padding: 10px;
|
||||
box-shadow: 0 0 5px 0 #b0b0b0;
|
||||
}
|
||||
|
||||
|
||||
/****************************************
|
||||
USERS
|
||||
*****************************************/
|
||||
.users {
|
||||
width: 100%;
|
||||
padding: 20px;
|
||||
display: grid;
|
||||
grid-template-columns: 1fr 1fr 1fr 1fr;
|
||||
gap: 10px;
|
||||
}
|
||||
|
||||
.user-box {
|
||||
width: 100%;
|
||||
padding: 20px;
|
||||
display: flex;
|
||||
flex-direction: column;
|
||||
align-items: center;
|
||||
box-shadow: 0 0 5px 0 var(--box-shadow);
|
||||
max-width: 500px;
|
||||
}
|
||||
|
||||
.user-box-title {
|
||||
padding: 10px;
|
||||
margin: 8px;
|
||||
font-weight: 500;
|
||||
|
||||
}
|
||||
|
||||
.user-box-title>a {
|
||||
color: var(--anti);
|
||||
|
||||
}
|
||||
|
||||
.user-box-title>span {
|
||||
color: var(--important);
|
||||
}
|
||||
|
||||
.user-box-img {
|
||||
width: 80px;
|
||||
height: 80px;
|
||||
margin: auto;
|
||||
}
|
||||
|
||||
@media (max-width: 992px) {
|
||||
.users {
|
||||
display: block;
|
||||
}
|
||||
|
||||
.user-box {
|
||||
margin-bottom: 10px;
|
||||
}
|
||||
}
|
||||
|
||||
/************************************
|
||||
THREAD
|
||||
*************************************/
|
||||
.title {
|
||||
color: var(--input-clr);
|
||||
font-weight: 700;
|
||||
font-size: 36px;
|
||||
}
|
||||
|
||||
.reactions {
|
||||
position: absolute;
|
||||
right: 20px;
|
||||
bottom: 20px;
|
||||
display: flex;
|
||||
align-items: center;
|
||||
gap: 10px;
|
||||
}
|
||||
|
||||
.reactions div {
|
||||
display: flex;
|
||||
align-items: center;
|
||||
gap: 5px;
|
||||
padding: 4px;
|
||||
color: var(--second);
|
||||
cursor: pointer;
|
||||
transition: color 0.3s ease;
|
||||
}
|
||||
|
||||
.reactions div:hover {
|
||||
color: var(--anti);
|
||||
|
||||
}
|
||||
|
||||
.reactions div i {
|
||||
font-size: 22px;
|
||||
}
|
||||
|
||||
.dots {
|
||||
position: absolute;
|
||||
right: 20px;
|
||||
font-size: 22px;
|
||||
top: 10px;
|
||||
color: var(--second);
|
||||
cursor: pointer;
|
||||
}
|
||||
|
||||
.dots-menu {
|
||||
position: absolute;
|
||||
top: 50px;
|
||||
right: 0;
|
||||
background-color: var(--second);
|
||||
width: 100px;
|
||||
text-align: center;
|
||||
display: none;
|
||||
}
|
||||
|
||||
.active {
|
||||
display: block;
|
||||
}
|
||||
|
||||
.no-display {
|
||||
display: none;
|
||||
}
|
||||
|
||||
.dots-menu a {
|
||||
display: block;
|
||||
margin: 8px;
|
||||
cursor: pointer;
|
||||
}
|
||||
|
||||
.dots-menu a:hover:nth-child(1) {
|
||||
color: var(--important);
|
||||
}
|
||||
|
||||
.dots-menu a:hover:nth-child(2) {
|
||||
color: var(--main);
|
||||
|
||||
}
|
||||
|
||||
/* Media Query */
|
||||
|
||||
@media(max-width:980px) {
|
||||
.dots {
|
||||
position: absolute;
|
||||
right: auto;
|
||||
top: 70px;
|
||||
left: 40px;
|
||||
}
|
||||
|
||||
.dots-menu {
|
||||
position: absolute;
|
||||
left: 70px;
|
||||
top: 60px;
|
||||
width: 120px;
|
||||
}
|
||||
|
||||
.active {
|
||||
display: flex;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
/******************************
|
||||
USER
|
||||
******************************/
|
||||
|
||||
|
||||
.usercontent {
|
||||
display: flex;
|
||||
flex-direction: column;
|
||||
box-shadow: 0 0 5px 0 var(--box-shadow);
|
||||
max-width: 900px;
|
||||
margin: 0 auto;
|
||||
padding: 10px;
|
||||
color: var(--anti);
|
||||
}
|
||||
|
||||
.userbox {
|
||||
display: flex;
|
||||
align-items: center;
|
||||
justify-content: space-between;
|
||||
margin: 0 auto;
|
||||
max-width: 800px;
|
||||
width: 100%;
|
||||
}
|
||||
|
||||
.userbox-title {
|
||||
font-weight: 400;
|
||||
color: var(--anti);
|
||||
}
|
||||
|
||||
.userbox-value {
|
||||
font-weight: 300;
|
||||
background-color: var(--main);
|
||||
color: white;
|
||||
font-size: 14px;
|
||||
padding: 4px;
|
||||
border-radius: 5px;
|
||||
min-width: 50px;
|
||||
text-align: center;
|
||||
}
|
Before Width: | Height: | Size: 10 KiB |
|
@ -1,124 +0,0 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/meta"), {title: "Admin Panel!" }) %>
|
||||
|
||||
|
||||
<body style="text-align: center;">
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/navbar")) %>
|
||||
|
||||
<style>
|
||||
table {
|
||||
font-family: arial, sans-serif;
|
||||
border-collapse: collapse;
|
||||
width: 100%;
|
||||
}
|
||||
|
||||
td,
|
||||
th {
|
||||
border: 1px solid #dddddd;
|
||||
text-align: left;
|
||||
padding: 8px;
|
||||
color: var(--anti);
|
||||
}
|
||||
|
||||
tr:nth-child(even) {
|
||||
background-color: #dddddd;
|
||||
}
|
||||
</style>
|
||||
|
||||
<h2>Welcome to the admin panel of the forum, <%= user.name %>!</h1>
|
||||
<div>
|
||||
|
||||
|
||||
|
||||
<!-- Modal -->
|
||||
<div class="modal fade" id="exampleModal" tabindex="-1" role="dialog" aria-labelledby="exampleModalLabel" aria-hidden="true">
|
||||
<div class="modal-dialog modal-lg" role="document">
|
||||
<div class="modal-content">
|
||||
<div class="modal-header">
|
||||
<h5 class="modal-title" id="exampleModalLabel">Banned users</h5>
|
||||
<button type="button" class="close" data-dismiss="modal" aria-label="Close" onclick="document.getElementById('exampleModal').style.display = 'none';">
|
||||
<span aria-hidden="true">×</span>
|
||||
</button>
|
||||
</div>
|
||||
<div class="modal-body">
|
||||
<table>
|
||||
<tr>
|
||||
<th>IP</th>
|
||||
<th>Reason</th>
|
||||
<th>AuthorID</th>
|
||||
</tr>
|
||||
<% for (const ban of bans) { %>
|
||||
<tr>
|
||||
<td><%=ban.ip%></td>
|
||||
<td><%=ban.reason%></td>
|
||||
<td><%=ban.authorID%></td>
|
||||
</tr>
|
||||
<% } %>
|
||||
</table>
|
||||
</div>
|
||||
<div class="modal-footer">
|
||||
<a class="btn-primary" onclick="ban();">IP BAN</a>
|
||||
<a class="btn-outline-primary" onclick="unban();">REMOVE IP BAN</a>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
|
||||
|
||||
<button onclick="window.location.href = '/categories/create';" class="btn-primary">Create Category</button>
|
||||
<button onclick="window.location.href = '/admin/config';" class="btn-primary">Edit config</button>
|
||||
|
||||
<button onclick="document.getElementById('exampleModal').style.display = 'block';" class="btn-primary" type="button" data-bs-toggle="collapse" data-bs-target="#exampleModal" aria-controls="navbarText" aria-expanded="false" aria-label="Toggle navigation">
|
||||
Banned users
|
||||
</button>
|
||||
<div>
|
||||
<table>
|
||||
<tr>
|
||||
<th>Admin list</th>
|
||||
</tr>
|
||||
<% for (const admin of admins) { %>
|
||||
<tr>
|
||||
<td><a style="color: var(--anti);" href="<%= admin.getLink() %>"><%= admin.name %></a></td>
|
||||
</tr>
|
||||
<% } %>
|
||||
</table>
|
||||
<ul>
|
||||
|
||||
|
||||
</ul>
|
||||
</div>
|
||||
|
||||
<script type="module">
|
||||
import request from "../../js/request.js";
|
||||
|
||||
window.unban = async function() {
|
||||
const ip = prompt("Enter ip to unban");
|
||||
if (!ip) return;
|
||||
const response = await request("/api/bans/" + ip, "DELETE");
|
||||
if (response)
|
||||
alert("IP unbanned!");
|
||||
else
|
||||
alert("IP is not unbanned!");
|
||||
location.reload();
|
||||
}
|
||||
window.ban = async function() {
|
||||
const ip = prompt("Enter ip to ban");
|
||||
if (!ip) return;
|
||||
|
||||
const response = await request("/api/bans/" + ip);
|
||||
if (response)
|
||||
alert("IP banned!");
|
||||
else
|
||||
alert("IP is not banned!");
|
||||
location.reload();
|
||||
}
|
||||
</script>
|
||||
</div>
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/footer")) %>
|
||||
|
||||
</body>
|
||||
|
||||
</html>
|
|
@ -1,55 +0,0 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/meta"), {title: "Avatar Upload Panel!" }) %>
|
||||
|
||||
<body style="text-align: center;">
|
||||
<link rel="stylesheet" href="/libs/cropper/cropper.css">
|
||||
<style>
|
||||
.container {
|
||||
margin: 20px auto;
|
||||
max-width: 640px;
|
||||
}
|
||||
|
||||
img {
|
||||
max-width: 100%;
|
||||
}
|
||||
|
||||
.cropper-view-box,
|
||||
.cropper-face {
|
||||
border-radius: 50%;
|
||||
}
|
||||
|
||||
.cropper-view-box {
|
||||
outline: 0;
|
||||
box-shadow: 0 0 0 1px #39f;
|
||||
}
|
||||
</style>
|
||||
<script src="/libs/cropper/cropper.js"></script>
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/navbar")) %>
|
||||
|
||||
|
||||
|
||||
<div class="container">
|
||||
<h1>Upload avatar for <%= member.name %></h1>
|
||||
|
||||
<input type="file" id="file-input">
|
||||
<img id="image" src="<%= member.avatar %>">
|
||||
<p>
|
||||
<button type="button" id="button">Upload</button>
|
||||
</p>
|
||||
<file id="cropped-image" name="avatar">
|
||||
<form id="form"></form>
|
||||
|
||||
</div>
|
||||
<script>
|
||||
const MEM_ID="<%= member.id %>";
|
||||
</script>
|
||||
<script src="/js/avatar.js"></script>
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/footer")) %>
|
||||
|
||||
</body>
|
||||
|
||||
</html>
|
|
@ -1,76 +0,0 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/meta"), {title: "Category list!" }) %>
|
||||
|
||||
<body>
|
||||
<link href='https://unpkg.com/boxicons@2.1.2/css/boxicons.min.css' rel='stylesheet'>
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/navbar")) %>
|
||||
|
||||
<div class="container my-3">
|
||||
<div class="row">
|
||||
<div class="col-12">
|
||||
<h2 class="h4 text-white bg-info mb-0 p-4 rounded-top"><%= "Categories" %></h2>
|
||||
|
||||
<table class="table table-striped table-bordered table-responsive-lg">
|
||||
<thead class="thead-light">
|
||||
<tr>
|
||||
<th scope="col" class="topic-col">Topic</th>
|
||||
<th scope="col">Description</th>
|
||||
<% if (user?.admin){ %> <th scope="col" class="last-post-col">Action</th> <% } %>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<% categories.forEach(category=>{ %>
|
||||
<tr>
|
||||
<td>
|
||||
<h3 class="h6">
|
||||
<a href="<%= category.getLink() %>"><%= category.name %></a>
|
||||
</h3>
|
||||
</td>
|
||||
<td>
|
||||
<div><%= category.desp %></div>
|
||||
</td>
|
||||
<% if (user?.admin){ %>
|
||||
<td>
|
||||
<a class="btn-danger" onclick="fetch('/api/categories/<%= category.id %>/',{method:'DELETE'})"><i class="bx bx-trash bx-sm"></i></a>
|
||||
</td>
|
||||
<% } %>
|
||||
</tr>
|
||||
<% }); %>
|
||||
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
|
||||
<% if(typeof page === "number"){ %>
|
||||
<div class="mb-3 clearfix">
|
||||
<nav aria-label="Navigate post pages">
|
||||
<ul class="pagination justify-content-center">
|
||||
<li class="page-item <%= page > 0 ?"": "disabled" %>">
|
||||
<a class="page-link" href="/categories?page=<%= page-1 %>" tabindex="-1">Back</a>
|
||||
</li>
|
||||
<% for(let i=0; i < pages; i++){ %>
|
||||
<li class="page-item">
|
||||
<a class="page-link <%= i==page?'active':'' %>" href="/categories?page=<%= i %>"><%= i+1 %>
|
||||
<% if (i==page){ %>
|
||||
<span class="sr-only">(current)</span>
|
||||
<% } %>
|
||||
</a>
|
||||
</li>
|
||||
<% } %>
|
||||
<li class="page-item <%= pages-1 > page ?"": "disabled" %>">
|
||||
<a class="page-link" href="/categories?page=<%= page+1 %>">Next</a>
|
||||
</li>
|
||||
</ul>
|
||||
</nav>
|
||||
</div>
|
||||
|
||||
<% } %>
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/footer")) %>
|
||||
|
||||
</body>
|
||||
|
||||
</html>
|
|
@ -1,32 +0,0 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/meta"), {title: "Edit Forum Config!" }) %>
|
||||
|
||||
<body style="text-align: center;">
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/navbar")) %>
|
||||
|
||||
<h1>Edit forum config</h1>
|
||||
<textarea rows="30" cols="75"><%= config %></textarea>
|
||||
<a onclick="send();" class="btn-primary">Edit config</a>
|
||||
<script>
|
||||
const textarea = document.querySelector('textarea');
|
||||
async function send() {
|
||||
const res = await fetch('/api/config?text', {
|
||||
method: 'PUT',
|
||||
body: textarea.value,
|
||||
headers: {
|
||||
'Content-Type': 'application/json'
|
||||
}
|
||||
})
|
||||
if (res.error) return alert(res.error);
|
||||
alert('Success!');
|
||||
textarea.value=JSON.stringify( await res.json(),null,4)
|
||||
|
||||
}
|
||||
</script>
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/footer")) %>
|
||||
|
||||
</body>
|
||||
|
||||
</html>
|
|
@ -1,59 +0,0 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/meta"), {title: "Create Category!" }) %>
|
||||
|
||||
<body>
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/navbar")) %>
|
||||
|
||||
<link rel="stylesheet" href="/libs/simplemde/simplemde.min.css">
|
||||
<script src="/libs/simplemde/simplemde.min.js"></script>
|
||||
|
||||
<div class="container my-3">
|
||||
<div class="col-12">
|
||||
<h2 class="h4 text-white bg-info mb-3 p-4 rounded">Create new category</h2>
|
||||
<form class="mb-3">
|
||||
<div class="form-group">
|
||||
<label for="topic">Name</label>
|
||||
<input type="text" class="form-control" id="title" placeholder="Give your category a name" required>
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label for="comment">Description</label>
|
||||
<textarea id="textarea"></textarea>
|
||||
</div>
|
||||
<button type="submit" class="btn btn-primary">Create</button>
|
||||
<button type="reset" class="btn btn-danger">Reset</button>
|
||||
</form>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
|
||||
|
||||
<script src="/js/editor.js"></script>
|
||||
|
||||
|
||||
<script type="module">
|
||||
const simplemde = editor("category-create");
|
||||
|
||||
import request from "../../js/request.js";
|
||||
|
||||
document.addEventListener("submit", async e => {
|
||||
e.preventDefault();
|
||||
const response = await request("/api/categories/", "POST", {
|
||||
name: document.getElementById("title").value,
|
||||
desp: simplemde.value()
|
||||
});
|
||||
|
||||
simplemde.clearAutosavedValue();
|
||||
|
||||
if (response)
|
||||
window.location.href = "/categories/" + response.id;
|
||||
|
||||
|
||||
});
|
||||
</script>
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/footer")) %>
|
||||
|
||||
</body>
|
||||
|
||||
</html>
|
|
@ -1,69 +0,0 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/meta"), {title: "Create thread!" }) %>
|
||||
|
||||
<body>
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/navbar")) %>
|
||||
|
||||
<link rel="stylesheet" href="/libs/simplemde/simplemde.min.css">
|
||||
<script src="/libs/simplemde/simplemde.min.js"></script>
|
||||
|
||||
|
||||
<div class="container my-3">
|
||||
<div class="col-12">
|
||||
<h2 class="h4 text-white bg-info mb-3 p-4 rounded">Create new thread</h2>
|
||||
<form class="mb-3">
|
||||
<div class="form-group">
|
||||
<label for="topic">Title</label>
|
||||
<input type="text" class="form-control" id="title" placeholder="Give your thread a title." required>
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label for="comment">Comment:</label>
|
||||
<textarea id="textarea"></textarea>
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label class="form-check-label">
|
||||
Category:
|
||||
</label>
|
||||
|
||||
<select id="category" class="input">
|
||||
<% for (const category of categories) { %>
|
||||
<option value="<%= category.id %>"><%= category.name %></option>
|
||||
<% } %>
|
||||
</select>
|
||||
</div>
|
||||
<button type="submit" class="btn btn-primary">Create</button>
|
||||
<button type="reset" class="btn btn-danger">Reset</button>
|
||||
</form>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<script src="/js/editor.js"></script>
|
||||
|
||||
|
||||
<script type="module">
|
||||
const simplemde = editor("thread-create");
|
||||
|
||||
import request from "../../js/request.js";
|
||||
|
||||
document.addEventListener("submit", async e => {
|
||||
e.preventDefault();
|
||||
const response = await request("/api/threads/", "POST", {
|
||||
title: document.getElementById("title").value,
|
||||
content: simplemde.value(),
|
||||
category: document.getElementById("category").value
|
||||
});
|
||||
if (response) {
|
||||
simplemde.clearAutosavedValue();
|
||||
window.location.href = "/threads/" + response.id;
|
||||
}
|
||||
});
|
||||
</script>
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/footer")) %>
|
||||
|
||||
</body>
|
||||
|
||||
</html>
|
|
@ -1,62 +0,0 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/meta"), {title: member.name }) %>
|
||||
|
||||
|
||||
<body>
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/navbar")) %>
|
||||
|
||||
<link rel="stylesheet" href="/libs/simplemde/simplemde.min.css">
|
||||
<script src="/libs/simplemde/simplemde.min.js"></script>
|
||||
|
||||
<div class="container my-3">
|
||||
<div class="col-12">
|
||||
<a class="btn-primary" href="/security" >Change your own password</a>
|
||||
|
||||
<h2 class="h4 text-white bg-info mb-3 p-4 rounded">Edit User</h2>
|
||||
<form id="form" class="mb-3">
|
||||
<input type="text" name="name" placeholder="<%= member.name %>" class="input">
|
||||
<input type="email" name="email" placeholder="<%= member.email %>" class="input">
|
||||
<textarea id="textarea" class="input" name="about" rows="4" cols="60" name="content" placeholder="<%=member.about%>"></textarea>
|
||||
<% if (user?.admin){ %>
|
||||
Is Admin? <input id='admin' type='checkbox' value='true' name='admin' <%=member.admin ? "checked": ""%>>
|
||||
<input id='adminHidden' type='hidden' value='false' name='admin'>
|
||||
<% } %>
|
||||
Hide Last Seen? <input id='last' type='checkbox' value='true' name='hideLastSeen' <%=member.hideLastSeen ? "checked": ""%>>
|
||||
<input id='lastHidden' type='hidden' value='false' name='admin'>
|
||||
<button type="submit" class="btn-primary" style="width:100%;">Update User!</button>
|
||||
</form>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<script src="/js/editor.js"></script>
|
||||
|
||||
<script type="module">
|
||||
import request from "/js/request.js";
|
||||
const simplemde = editor("user-edit-<%=member.id%>");
|
||||
|
||||
document.getElementById("form").addEventListener("submit", async e => {
|
||||
e.preventDefault();
|
||||
document.getElementById('adminHidden').disabled = document.getElementById("admin").checked;
|
||||
document.getElementById('lastHidden').disabled = document.getElementById("last").checked;
|
||||
|
||||
const formdata = new FormData(e.target)
|
||||
const res = await request("/api/users/<%=member.id%>", "PATCH", {
|
||||
name: formdata.get("name"),
|
||||
about: simplemde.value(),
|
||||
admin: formdata.get("admin"),
|
||||
email: formdata.get("email"),
|
||||
hideLastSeen: formdata.get("hideLastSeen")
|
||||
});
|
||||
simplemde.clearAutosavedValue();
|
||||
|
||||
if (res) alert(`User is updated!`);
|
||||
location.reload();
|
||||
});
|
||||
</script>
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/footer")) %>
|
||||
|
||||
</body>
|
||||
|
||||
</html>
|
|
@ -1,17 +0,0 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/meta"), {title: type+" error!" }) %>
|
||||
|
||||
|
||||
<body style="text-align: center;">
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/navbar")) %>
|
||||
|
||||
|
||||
<h1 style="color: var(--main);"><%= type %></h1>
|
||||
<h2 style="color: var(--second);"><%= error %></h2>
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/footer")) %>
|
||||
|
||||
</body>
|
||||
|
||||
</html>
|
|
@ -1,41 +0,0 @@
|
|||
<footer class="text-center text-white fixed-bottom">
|
||||
<% if (user){ %>
|
||||
<select id="theme_select">
|
||||
<% for(const theme of dataset.themes){%>
|
||||
<option value="<%= theme.codename %>"><%= theme.name %></option>
|
||||
<% } %>
|
||||
</select>
|
||||
<script>
|
||||
const theme_select = document.getElementById("theme_select");
|
||||
theme_select.querySelector(`option[value=<%= user.theme.codename %>]`).selected = true;
|
||||
theme_select.addEventListener("change", async e => {
|
||||
const codename = e.target.value;
|
||||
await fetch('/api/users/<%= user.id %>', {
|
||||
method: 'PATCH',
|
||||
body: JSON.stringify({
|
||||
theme: {
|
||||
codename
|
||||
}
|
||||
}),
|
||||
headers: {
|
||||
"Content-Type": "application/json"
|
||||
}
|
||||
});
|
||||
const theme = await fetch("/api/themes/" + codename).then(res => res.json());
|
||||
const txt = "Theme changed to:\n" +
|
||||
"Name: " + theme.name + "\n" +
|
||||
"Description: " + theme.description + "\n" +
|
||||
"Author: " + theme.author + "\n";
|
||||
|
||||
|
||||
alert(txt)
|
||||
location.reload();
|
||||
});
|
||||
</script>
|
||||
<% } %>
|
||||
|
||||
<div class="text-center p-3">
|
||||
akf-forum bootstrap theme created by <a class="text-white" href="https://akif9748.github.io/">Akif9748</a>,<br>
|
||||
This website is powered by <a class="text-white" href="https://github.com/Akif9748/akf-forum">akf-forum</a>
|
||||
</div>
|
||||
</footer>
|
|
@ -1,10 +0,0 @@
|
|||
<head>
|
||||
<meta charset="UTF-8" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
||||
<title><%= title || dataset.forum_name %></title>
|
||||
<meta name="description" content="<%= dataset.description %>">
|
||||
<link rel="icon" type="image/x-icon" href="/favicon.ico">
|
||||
<link href="/themes/bootstrap_black/bootstrap-night.min.css" rel="stylesheet">
|
||||
<script src="/themes/bootstrap_black/bootstrap.min.js"></script>
|
||||
<link rel="stylesheet" href="/themes/bootstrap_black/main.css" />
|
||||
</head>
|
|
@ -1,70 +0,0 @@
|
|||
<% if (user?.admin){ %>
|
||||
<div class="admin-bar">
|
||||
<a href="/admin" class="admin-bar">Click here to reach admin panel</a>
|
||||
</div>
|
||||
<% } %>
|
||||
|
||||
|
||||
<nav class="navbar navbar-expand-lg navbar-light bg-light">
|
||||
<div class="container-fluid">
|
||||
<button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarText" aria-controls="navbarText" aria-expanded="false" aria-label="Toggle navigation">
|
||||
<span class="navbar-toggler-icon"></span>
|
||||
</button>
|
||||
|
||||
<a class="navbar-brand" href="/"><%= dataset.forum_name.toUpperCase() %></a>
|
||||
|
||||
<div class="collapse navbar-collapse" id="navbarText">
|
||||
<ul class="navbar-nav me-auto mb-2 mb-lg-0">
|
||||
|
||||
<li class="nav-item">
|
||||
<a class="nav-link" href="/threads/create/">Create Thread</a>
|
||||
</li>
|
||||
|
||||
<li class="nav-item">
|
||||
<a class="nav-link" href="/categories">Categories</a>
|
||||
</li>
|
||||
|
||||
<li class="nav-item">
|
||||
<a class="nav-link" href="/threads">Threads</a>
|
||||
</li>
|
||||
|
||||
<li class="nav-item">
|
||||
<a class="nav-link" href="/users">Users</a>
|
||||
</li>
|
||||
|
||||
<li class="nav-item">
|
||||
<a class="nav-link" href="/search">Search</a>
|
||||
</li>
|
||||
|
||||
<li class="nav-item">
|
||||
<a class="nav-link" href="/login">Logout</a>
|
||||
</li>
|
||||
</ul>
|
||||
|
||||
</div>
|
||||
<div>
|
||||
<% if (user) { %>
|
||||
<a class="navbar-brand" href="<%=user.getLink()%>"> <%= user.name %>
|
||||
<img style="border-radius: 50%;" width="32" src="<%=user.avatar %>">
|
||||
</a>
|
||||
|
||||
<% } else{ %>
|
||||
<a class="navbar-brand" id="login" href="/login">Login</a>
|
||||
<script>
|
||||
document.getElementById("login").href += "?redirect=" + location.pathname;
|
||||
</script>
|
||||
<% } %>
|
||||
</div>
|
||||
</div>
|
||||
<script>
|
||||
const menuItems = document.getElementsByClassName("nav-link");
|
||||
|
||||
for (let i = 0; i < menuItems.length; i++)
|
||||
if (window.location.pathname.includes(menuItems[i].getAttribute("href"))) {
|
||||
menuItems[i].classList.add("active");
|
||||
break;
|
||||
}
|
||||
|
||||
</script>
|
||||
|
||||
</nav>
|
|
@ -1,179 +0,0 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
|
||||
<%- include("extra/meta", {title: "Welcome to the " + dataset.forum_name }) %>
|
||||
|
||||
|
||||
<body>
|
||||
<%- include("extra/navbar") %>
|
||||
<link href='https://unpkg.com/boxicons@2.1.2/css/boxicons.min.css' rel='stylesheet'>
|
||||
|
||||
|
||||
<div class="container my-3">
|
||||
<nav class="breadcrumb">
|
||||
<span class="breadcrumb-item active">
|
||||
<% if (user) { %>
|
||||
Welcome, <%= user.name %>
|
||||
<% } else { %>
|
||||
Welcome, Guest! <a href="/register">You can press here to register.</a>
|
||||
<% } %>
|
||||
</span>
|
||||
</nav>
|
||||
<div class="row">
|
||||
<div class="col-12 col-xl-9">
|
||||
|
||||
<div class="category">
|
||||
|
||||
<h2 class="h4 text-white bg-danger mb-0 p-4 rounded-top">New threads</h2>
|
||||
<table class="table table-striped table-bordered table-responsive">
|
||||
<thead class="thead-light">
|
||||
<tr>
|
||||
<th scope="col" class="topic-col">Topic</th>
|
||||
<th scope="col" class="created-col">Created</th>
|
||||
<th scope="col">Statistics</th>
|
||||
<% if (user?.admin){ %> <th scope="col" class="last-post-col">Action</th> <% } %>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<% newestThreads.forEach(thread=>{ %>
|
||||
<tr>
|
||||
<td>
|
||||
<h3 class="h6">
|
||||
<% if (thread.deleted) { %> <span class="badge badge-primary">[DELETED]</span><% } %>
|
||||
<a href="<%= thread.getLink() %>"><%= thread.title %></a>
|
||||
</h3>
|
||||
</td>
|
||||
<td>
|
||||
<div class="avatar">by <a href="/users/<%= thread.authorID %>"><%= thread.author.name %></a><img src="<%=thread.author.avatar %>"></div>
|
||||
<div><%= new Date(thread.time).toLocaleString() %></div>
|
||||
</td>
|
||||
<td>
|
||||
<div><%= thread.messages.length %> messages</div>
|
||||
<div><%= thread.views %> views</div>
|
||||
</td>
|
||||
<% if (user?.admin){ %>
|
||||
<td>
|
||||
<% if (!thread.deleted){ %>
|
||||
<a class="btn-danger" onclick="fetch('/api/threads/<%= thread.id %>/',{method:'DELETE'})"><i class="bx bx-trash bx-sm"></i></a>
|
||||
<% } %>
|
||||
</td>
|
||||
<% } %>
|
||||
</tr>
|
||||
<% }); %>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
<div class="category">
|
||||
|
||||
<h2 class="h4 text-white bg-danger mb-0 p-4 rounded-top">New messages</h2>
|
||||
<table class="table table-striped table-bordered table-responsive">
|
||||
<thead class="thead-light">
|
||||
<tr>
|
||||
<th scope="col" class="forum-col">Message</th>
|
||||
<th scope="col">Date</th>
|
||||
<th scope="col" class="last-post-col">Author</th>
|
||||
</tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<% newestMessages.forEach(message => { %>
|
||||
<tr>
|
||||
<td>
|
||||
<p class="mb-0">
|
||||
<a href="<%= message.getLink() %>"> <%= message.content.slice(0, 100) %></a>
|
||||
</p>
|
||||
</td>
|
||||
<td>
|
||||
<div><%= new Date(message.time).toLocaleString() %></div>
|
||||
</td>
|
||||
<td>
|
||||
<div class="avatar">by <a href="<%= message.getLink() %>"><%= message.author.name %></a><img src="<%=message.author.avatar %>"></div>
|
||||
</td>
|
||||
</tr>
|
||||
<% }) %>
|
||||
</tbody>
|
||||
</table>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
|
||||
<div class="col-12 col-xl-3">
|
||||
<aside>
|
||||
<div class="row">
|
||||
<div class="col-12 col-sm-6 col-xl-12">
|
||||
<div class="card mb-3 mb-sm-0 mb-xl-3">
|
||||
<div class="card-body">
|
||||
<h2 class="h4 card-title">Members online</h2>
|
||||
<style>
|
||||
li.d-inline~li.d-inline::before {
|
||||
content: ', ';
|
||||
}
|
||||
</style>
|
||||
<ul class="list-unstyled mb-0">
|
||||
<% onlineMembers.slice(0, 30).forEach(user => { %>
|
||||
<li class="d-inline">
|
||||
<a href="/users/<%=user.id %>"><%= user.name %></a>
|
||||
</li>
|
||||
<% }); %>
|
||||
<% if (onlineMemberCount > 30) { %>
|
||||
<li>
|
||||
<a href="/users/"><%= onlineMemberCount - 30 %></a> more...
|
||||
</li>
|
||||
<% } %>
|
||||
</ul>
|
||||
</div>
|
||||
<div class="card-footer">
|
||||
<dl class="row mb-0">
|
||||
<dt class="col-8">Total:</dt>
|
||||
<dd class="col-4 mb-0"><%= onlineTotal %></dd>
|
||||
</dl>
|
||||
<dl class="row mb-0">
|
||||
<dt class="col-8">Members:</dt>
|
||||
<dd class="col-4 mb-0"><%= onlineMemberCount %></dd>
|
||||
</dl>
|
||||
<dl class="row mb-0">
|
||||
<dt class="col-8">Guests:</dt>
|
||||
<dd class="col-4 mb-0"><%= onlineGuests %></dd>
|
||||
</dl>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
<div class="col-12 col-sm-6 col-xl-12">
|
||||
<div class="card">
|
||||
<div class="card-body">
|
||||
<h2 class="h4 card-title">Forum statistics</h2>
|
||||
<dl class="row mb-0">
|
||||
<dt class="col-8">Total categories:</dt>
|
||||
<dd class="col-4 mb-0"><%= categories %></dd>
|
||||
</dl>
|
||||
<dl class="row mb-0">
|
||||
<dt class="col-8">Total threads:</dt>
|
||||
<dd class="col-4 mb-0"><%= threads %></dd>
|
||||
</dl>
|
||||
<dl class="row mb-0">
|
||||
<dt class="col-8">Total messages:</dt>
|
||||
<dd class="col-4 mb-0"><%= messages %></dd>
|
||||
</dl>
|
||||
<dl class="row mb-0">
|
||||
<dt class="col-8">Total members:</dt>
|
||||
<dd class="col-4 mb-0"><%= users %></dd>
|
||||
</dl>
|
||||
</div>
|
||||
<% if(newestMember) {%>
|
||||
<div class="card-footer">
|
||||
<div>Newest member:</div>
|
||||
<div><a href="/users/<%= newestMember.id %>"><%= newestMember.name %></a></div>
|
||||
</div>
|
||||
<% }%>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</aside>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<%- include("extra/footer") %>
|
||||
|
||||
</body>
|
||||
|
||||
</html>
|
|
@ -1,50 +0,0 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/meta"), {title: "Log in!" }) %>
|
||||
|
||||
<body style="text-align: center;">
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/navbar")) %>
|
||||
|
||||
<div class="jumbotron jumbotron-fluid">
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-12 col-sm-8 col-md-6 col-lg-4 offset-sm-4 offset-sd-3 offset-lg-4">
|
||||
<h1 class="mb-3 text-center">Please log in</h1>
|
||||
<form action="/login?redirect=<%= redirect !== "/register" ? redirect : "/" %>" method="post" class="mb-3">
|
||||
<div class="form-group">
|
||||
<label for="name">Email/Username:</label>
|
||||
<input name="name" class="form-control" placeholder="example@email.com" id="email" required />
|
||||
</div>
|
||||
<div class="form-group">
|
||||
<label for="password">Password:</label>
|
||||
<input name="password" type="password" class="form-control" id="password" required />
|
||||
</div>
|
||||
<button type="submit" class="btn btn-primary btn-block">
|
||||
Login
|
||||
</button>
|
||||
</form>
|
||||
<div class="text-center">
|
||||
<p>or..</p>
|
||||
<a href="/register" class="btn btn-outline-primary">Create account</a>
|
||||
|
||||
<% if(discord) { %>
|
||||
<a href="<%=discord%>" class="btn btn-outline-primary">Auth with discord</a>
|
||||
<% } %>
|
||||
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/footer")) %>
|
||||
|
||||
</body>
|
||||
|
||||
</html>
|
|
@ -1,35 +0,0 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/meta"), {title:"Message search!" }) %>
|
||||
|
||||
|
||||
<body style="text-align: center;">
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/navbar")) %>
|
||||
|
||||
|
||||
<div id="messages">
|
||||
|
||||
<% messages.filter(Boolean).forEach(message=>{ %>
|
||||
|
||||
<div class="message" id="message-<%= message.id %>">
|
||||
<div class="left">
|
||||
<img src="<%= message.author.avatar %>" />
|
||||
<div class="username"><a href="/users/<%=message.authorID %>"><%=message.author.name %></a></div>
|
||||
<div class="date">
|
||||
<%= new Date(message.time).toLocaleDateString() %>
|
||||
</div>
|
||||
<div class="date">
|
||||
<%= new Date(message.time).toLocaleTimeString() %>
|
||||
</div>
|
||||
</div>
|
||||
<div class="content"><%- message.content %></div>
|
||||
</div>
|
||||
|
||||
<% }); %>
|
||||
</div>
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/footer")) %>
|
||||
|
||||
</body>
|
||||
|
||||
</html>
|
|
@ -1,32 +0,0 @@
|
|||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/meta"), {title: "Register!" }) %>
|
||||
|
||||
|
||||
<body style="text-align: center;">
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/navbar")) %>
|
||||
|
||||
|
||||
<h1 class="title">Register</h1>
|
||||
|
||||
|
||||
<form class="login" action="/register" method="post">
|
||||
<input type="email" name="email" placeholder="Email" class="input" required>
|
||||
<input type="text" name="name" placeholder="Username" class="input" required>
|
||||
<input type="password" name="password" placeholder="Password" class="input" required>
|
||||
<textarea class="input" name="about" rows="4" placeholder="About you... You can use markdown"></textarea>
|
||||
<input type="submit" class="btn-primary" style="width:100%;" value="Register">
|
||||
</form>
|
||||
<% if(discord) { %>
|
||||
<a href="<%=discord%>" class="btn-outline-primary">Auth with discord</a>
|
||||
<% } %>
|
||||
<a href="/login" class="btn-outline-primary">Login</a>
|
||||
|
||||
|
||||
<%- include(dataset.getFile(dataset.theme.codename +"/views/extra/footer")) %>
|
||||
|
||||
</body>
|
||||
|
||||
</html>
|