").append(n.parseHTML(a)).find(d):a)}).always(c&&function(a,b){g.each(function(){c.apply(this,f||[a.responseText,b,a])})}),this},n.each(["ajaxStart","ajaxStop","ajaxComplete","ajaxError","ajaxSuccess","ajaxSend"],function(a,b){n.fn[b]=function(a){return this.on(b,a)}}),n.expr.filters.animated=function(a){return n.grep(n.timers,function(b){return a===b.elem}).length};function mc(a){return n.isWindow(a)?a:9===a.nodeType?a.defaultView||a.parentWindow:!1}n.offset={setOffset:function(a,b,c){var d,e,f,g,h,i,j,k=n.css(a,"position"),l=n(a),m={};"static"===k&&(a.style.position="relative"),h=l.offset(),f=n.css(a,"top"),i=n.css(a,"left"),j=("absolute"===k||"fixed"===k)&&n.inArray("auto",[f,i])>-1,j?(d=l.position(),g=d.top,e=d.left):(g=parseFloat(f)||0,e=parseFloat(i)||0),n.isFunction(b)&&(b=b.call(a,c,n.extend({},h))),null!=b.top&&(m.top=b.top-h.top+g),null!=b.left&&(m.left=b.left-h.left+e),"using"in b?b.using.call(a,m):l.css(m)}},n.fn.extend({offset:function(a){if(arguments.length)return void 0===a?this:this.each(function(b){n.offset.setOffset(this,a,b)});var b,c,d={top:0,left:0},e=this[0],f=e&&e.ownerDocument;if(f)return b=f.documentElement,n.contains(b,e)?("undefined"!=typeof e.getBoundingClientRect&&(d=e.getBoundingClientRect()),c=mc(f),{top:d.top+(c.pageYOffset||b.scrollTop)-(b.clientTop||0),left:d.left+(c.pageXOffset||b.scrollLeft)-(b.clientLeft||0)}):d},position:function(){if(this[0]){var a,b,c={top:0,left:0},d=this[0];return"fixed"===n.css(d,"position")?b=d.getBoundingClientRect():(a=this.offsetParent(),b=this.offset(),n.nodeName(a[0],"html")||(c=a.offset()),c.top+=n.css(a[0],"borderTopWidth",!0),c.left+=n.css(a[0],"borderLeftWidth",!0)),{top:b.top-c.top-n.css(d,"marginTop",!0),left:b.left-c.left-n.css(d,"marginLeft",!0)}}},offsetParent:function(){return this.map(function(){var a=this.offsetParent;while(a&&!n.nodeName(a,"html")&&"static"===n.css(a,"position"))a=a.offsetParent;return a||Qa})}}),n.each({scrollLeft:"pageXOffset",scrollTop:"pageYOffset"},function(a,b){var c=/Y/.test(b);n.fn[a]=function(d){return Y(this,function(a,d,e){var f=mc(a);return void 0===e?f?b in f?f[b]:f.document.documentElement[d]:a[d]:void(f?f.scrollTo(c?n(f).scrollLeft():e,c?e:n(f).scrollTop()):a[d]=e)},a,d,arguments.length,null)}}),n.each(["top","left"],function(a,b){n.cssHooks[b]=Ua(l.pixelPosition,function(a,c){return c?(c=Sa(a,b),Oa.test(c)?n(a).position()[b]+"px":c):void 0;
+})}),n.each({Height:"height",Width:"width"},function(a,b){n.each({padding:"inner"+a,content:b,"":"outer"+a},function(c,d){n.fn[d]=function(d,e){var f=arguments.length&&(c||"boolean"!=typeof d),g=c||(d===!0||e===!0?"margin":"border");return Y(this,function(b,c,d){var e;return n.isWindow(b)?b.document.documentElement["client"+a]:9===b.nodeType?(e=b.documentElement,Math.max(b.body["scroll"+a],e["scroll"+a],b.body["offset"+a],e["offset"+a],e["client"+a])):void 0===d?n.css(b,c,g):n.style(b,c,d,g)},b,f?d:void 0,f,null)}})}),n.fn.extend({bind:function(a,b,c){return this.on(a,null,b,c)},unbind:function(a,b){return this.off(a,null,b)},delegate:function(a,b,c,d){return this.on(b,a,c,d)},undelegate:function(a,b,c){return 1===arguments.length?this.off(a,"**"):this.off(b,a||"**",c)}}),n.fn.size=function(){return this.length},n.fn.andSelf=n.fn.addBack,"function"==typeof define&&define.amd&&define("jquery",[],function(){return n});var nc=a.jQuery,oc=a.$;return n.noConflict=function(b){return a.$===n&&(a.$=oc),b&&a.jQuery===n&&(a.jQuery=nc),n},b||(a.jQuery=a.$=n),n});
diff --git a/src/public/main.css b/src/public/main.css
new file mode 100644
index 00000000..63c8abd7
--- /dev/null
+++ b/src/public/main.css
@@ -0,0 +1,202 @@
+body
+{
+ font-family: arial;
+}
+
+ul
+{
+ border: 1px solid #ccc;
+ padding-top: 5px;
+ padding-bottom: 5px;
+ padding-left: 0px;
+ padding-right: 0px;
+ height: 18px;
+ list-style-type: none;
+}
+
+li
+{
+ float: left;
+ padding-left: 10px;
+ font-weight: bold;
+ text-transform: uppercase;
+}
+
+li a
+{
+ text-decoration: none;
+ color: #515151;
+}
+
+li a:hover
+{
+ color: #7a7a7a;
+}
+
+li:not(:last-child)
+{
+ border-right: 1px solid #ccc;
+ padding-right: 10px;
+}
+
+.container
+{
+ width: 90%;
+ padding: 0px;
+ margin-left: auto;
+ margin-right: auto;
+}
+
+.rowblock
+{
+ border: 1px solid #ccc;
+ width: 100%;
+ padding: 0px;
+ padding-top: 0px;
+}
+.rowblock:empty
+{
+ display: none;
+}
+
+.rowitem
+{
+ width: 99%;
+ padding-left: 8px;
+ padding-right: 8px;
+ padding-top: 17px;
+ padding-bottom: 12px;
+ font-weight: bold;
+ text-transform: uppercase;
+}
+
+.rowitem.passive
+{
+ font-weight: normal;
+ text-transform: none;
+}
+
+.rowitem:not(:last-child)/*:not(:only-child)*/
+{
+ border-bottom: 1px dotted #ccc;
+}
+
+.rowitem a
+{
+ text-decoration: none;
+ color: black;
+}
+
+.rowitem a:hover
+{
+ color: silver;
+}
+
+.formrow
+{
+ /*height: 40px;*/
+ width: 100%;
+}
+
+/*Clearfix*/
+.formrow:before,
+.formrow:after {
+ content: " ";
+ display: table;
+}
+
+.formrow:after {
+ clear: both;
+}
+
+.formrow:not(:last-child)
+{
+ border-bottom: 1px dotted #ccc;
+}
+
+.formitem
+{
+ float: left;
+ padding-left: 8px;
+ padding-right: 8px;
+ padding-top: 13px;
+ padding-bottom: 8px;
+ font-weight: bold;
+}
+
+.formitem:first-child
+{
+ font-weight: bold;
+}
+
+.formitem:not(:last-child)
+{
+ border-right: 1px dotted #ccc;
+}
+
+.formitem.invisible_border
+{
+ border: none;
+}
+
+/* Mostly for textareas */
+.formitem:only-child
+{
+ width: 97%;
+}
+.formitem textarea
+{
+ width: 100%;
+ height: 100px;
+}
+.formitem:has-child()
+{
+ margin: 0 auto;
+ float: none;
+}
+
+button
+{
+ background: white;
+ border: 1px solid #8e8e8e;
+}
+
+/* Topics */
+.topic_status
+{
+ text-transform: none;
+ margin-left: 8px;
+ padding-left: 2px;
+ padding-right: 2px;
+ padding-top: 2px;
+ padding-bottom: 2px;
+ background-color: #E8E8E8; /* 232,232,232. All three RGB colours being the same seems to create a shade of gray */
+ color: #505050; /* 80,80,80 */
+ border-radius: 2px;
+}
+
+.topic_status:empty
+{
+ display: none;
+}
+
+.show_on_edit
+{
+ display: none;
+}
+
+.alert_success
+{
+ display: block;
+ padding: 3px;
+ border: 1px solid A2FC00;
+ background-color: DAF7A6;
+}
+
+.alert_error
+{
+ display: block;
+ padding: 3px;
+ border: 1px solid #FF004B;
+ background-color: #FEB7CC;
+}
\ No newline at end of file
diff --git a/src/routes.go b/src/routes.go
new file mode 100644
index 00000000..5618c346
--- /dev/null
+++ b/src/routes.go
@@ -0,0 +1,705 @@
+package main
+
+import "log"
+import "fmt"
+import "strconv"
+import "bytes"
+import "time"
+import "net/http"
+import "html"
+//import "html/template"
+import "database/sql"
+import _ "github.com/go-sql-driver/mysql"
+import "golang.org/x/crypto/bcrypt"
+
+// A blank list to fill out that parameter in Page for routes which don't use it
+var tList map[int]interface{}
+
+// GET functions
+func route_overview(w http.ResponseWriter, r *http.Request){
+ user := SessionCheck(w,r)
+ pi := Page{"Overview","overview",user,tList,0}
+ err := templates.ExecuteTemplate(w,"overview.html", pi)
+ if err != nil {
+ InternalError(err, w, r, user)
+ }
+}
+
+func route_custom_page(w http.ResponseWriter, r *http.Request){
+ user := SessionCheck(w,r)
+ name := r.URL.Path[len("/edit/"):]
+
+ val, ok := custom_pages[name];
+ if ok {
+ pi := Page{"Page","page",user,tList,val}
+ templates.ExecuteTemplate(w,"custom_page.html", pi)
+ } else {
+ errmsg := "The requested page doesn't exist."
+ pi := Page{"Error","error",user,tList,errmsg}
+
+ var b bytes.Buffer
+ templates.ExecuteTemplate(&b,"error.html", pi)
+ errpage := b.String()
+ http.Error(w,errpage,404)
+ }
+}
+
+func route_topics(w http.ResponseWriter, r *http.Request){
+ user := SessionCheck(w,r)
+ var(
+ topicList map[int]interface{}
+ currentID int
+
+ tid int
+ title string
+ content string
+ createdBy int
+ is_closed bool
+ sticky bool
+ createdAt string
+ parentID int
+ status string
+ )
+ topicList = make(map[int]interface{})
+ currentID = 0
+
+ rows, err := db.Query("select tid, title, content, createdBy, is_closed, sticky, createdAt, parentID from topics")
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+ defer rows.Close()
+
+ for rows.Next() {
+ err := rows.Scan(&tid, &title, &content, &createdBy, &is_closed, &sticky, &createdAt, &parentID)
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+
+ if is_closed {
+ status = "closed"
+ } else {
+ status = "open"
+ }
+ topicList[currentID] = Topic{tid, title, content, createdBy, is_closed, sticky, createdAt,parentID, status}
+ currentID++
+ }
+ err = rows.Err()
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+ pi := Page{"Topic List","topics",user,topicList,0}
+ templates.ExecuteTemplate(w,"topics.html", pi)
+}
+
+func route_topic_id(w http.ResponseWriter, r *http.Request){
+ user := SessionCheck(w,r)
+ var(
+ tid int
+ rid int
+ parentID int
+ title string
+ content string
+ createdBy int
+ createdByName string
+ createdAt string
+ replyContent string
+ replyCreatedBy int
+ replyCreatedByName string
+ replyCreatedAt string
+ replyLastEdit int
+ replyLastEditBy int
+ is_closed bool
+ sticky bool
+
+ currentID int
+ replyList map[int]interface{}
+ )
+ replyList = make(map[int]interface{})
+ currentID = 0
+
+ tid, err := strconv.Atoi(r.URL.Path[len("/topic/"):])
+ if err != nil {
+ LocalError("The provided TopicID is not a valid number.",w,r,user)
+ return
+ }
+
+ // Get the topic..
+ //err = db.QueryRow("select title, content, createdBy, status, is_closed from topics where tid = ?", tid).Scan(&title, &content, &createdBy, &status, &is_closed)
+ err = db.QueryRow("select topics.title, topics.content, topics.createdBy, topics.createdAt, topics.is_closed, topics.sticky, topics.parentID, users.name from topics left join users ON topics.createdBy = users.uid where tid = ?", tid).Scan(&title, &content, &createdBy, &createdAt, &is_closed, &sticky, &parentID, &createdByName)
+ if err == sql.ErrNoRows {
+ errmsg := "The requested topic doesn't exist."
+ pi := Page{"Error","error",user,tList,errmsg}
+
+ var b bytes.Buffer
+ templates.ExecuteTemplate(&b,"error.html", pi)
+ errpage := b.String()
+ http.Error(w,errpage,404)
+ return
+ } else if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+
+ var tdata map[string]string
+ tdata = make(map[string]string)
+ tdata["tid"] = strconv.Itoa(tid)
+ tdata["title"] = title
+ tdata["content"] = content
+ tdata["createdBy"] = string(createdBy)
+ tdata["createdAt"] = string(createdAt)
+ tdata["parentID"] = string(parentID)
+ if is_closed {
+ tdata["status"] = "closed"
+ } else {
+ tdata["status"] = "open"
+ }
+ //tdata["sticky"] = sticky
+ tdata["createdByName"] = createdByName
+
+ // Get the replies..
+ //rows, err := db.Query("select rid, content, createdBy, createdAt from replies where tid = ?", tid)
+ rows, err := db.Query("select replies.rid, replies.content, replies.createdBy, replies.createdAt, replies.lastEdit, replies.lastEditBy, users.name from replies left join users ON replies.createdBy = users.uid where tid = ?", tid)
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+ defer rows.Close()
+
+ for rows.Next() {
+ err := rows.Scan(&rid, &replyContent, &replyCreatedBy, &replyCreatedAt, &replyLastEdit, &replyLastEditBy, &replyCreatedByName)
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+ replyList[currentID] = Reply{rid,tid,replyContent,replyCreatedBy,replyCreatedByName,replyCreatedAt,replyLastEdit,replyLastEditBy}
+ currentID++
+ }
+ err = rows.Err()
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+
+ pi := Page{title,"topic",user,replyList,tdata}
+ templates.ExecuteTemplate(w,"topic.html", pi)
+}
+
+func route_topic_create(w http.ResponseWriter, r *http.Request){
+ user := SessionCheck(w,r)
+ pi := Page{"Create Topic","create-topic",user,tList,0}
+ templates.ExecuteTemplate(w,"create-topic.html", pi)
+}
+
+// POST functions. Authorised users only.
+func route_create_topic(w http.ResponseWriter, r *http.Request) {
+ user := SessionCheck(w,r)
+ if !user.Loggedin {
+ LoginRequired(w,r,user)
+ return
+ }
+
+ err := r.ParseForm()
+ if err != nil {
+ LocalError("Bad Form", w, r, user)
+ return
+ }
+ success := 1
+
+ res, err := create_topic_stmt.Exec(html.EscapeString(r.PostFormValue("topic-name")),html.EscapeString(r.PostFormValue("topic-content")),int32(time.Now().Unix()),user.ID)
+ if err != nil {
+ log.Print(err)
+ success = 0
+ }
+
+ lastId, err := res.LastInsertId()
+ if err != nil {
+ log.Print(err)
+ success = 0
+ }
+
+ if success != 1 {
+ errmsg := "Unable to create the topic"
+ pi := Page{"Error","error",user,tList,errmsg}
+
+ var b bytes.Buffer
+ templates.ExecuteTemplate(&b,"error.html", pi)
+ errpage := b.String()
+ http.Error(w,errpage,500)
+ } else {
+ http.Redirect(w, r, "/topic/" + strconv.FormatInt(lastId, 10), http.StatusSeeOther)
+ }
+}
+
+func route_create_reply(w http.ResponseWriter, r *http.Request) {
+ var tid int
+
+
+ user := SessionCheck(w,r)
+ if !user.Loggedin {
+ LoginRequired(w,r,user)
+ return
+ }
+
+ err := r.ParseForm()
+ if err != nil {
+ LocalError("Bad Form", w, r, user)
+ return
+ }
+
+ success := 1
+ tid, err = strconv.Atoi(r.PostFormValue("tid"))
+ if err != nil {
+ log.Print(err)
+ success = 0
+
+ errmsg := "Unable to create the reply"
+ pi := Page{"Error","error",user,tList,errmsg}
+
+ var b bytes.Buffer
+ templates.ExecuteTemplate(&b,"error.html", pi)
+ errpage := b.String()
+ http.Error(w,errpage,500)
+ return
+ }
+ //log.Println("A reply is being created")
+
+ _, err = create_reply_stmt.Exec(tid,html.EscapeString(r.PostFormValue("reply-content")),int32(time.Now().Unix()),user.ID)
+ if err != nil {
+ log.Print(err)
+ success = 0
+ }
+
+ if success != 1 {
+ errmsg := "Unable to create the reply"
+ pi := Page{"Error","error",user,tList,errmsg}
+
+ var b bytes.Buffer
+ templates.ExecuteTemplate(&b,"error.html", pi)
+ errpage := b.String()
+ http.Error(w,errpage,500)
+ } else {
+ http.Redirect(w, r, "/topic/" + strconv.Itoa(tid), http.StatusSeeOther)
+ }
+}
+
+func route_edit_topic(w http.ResponseWriter, r *http.Request) {
+ user := SessionCheck(w,r)
+ err := r.ParseForm()
+ if err != nil {
+ LocalError("Bad Form", w, r, user)
+ return
+ }
+ is_js := r.PostFormValue("js")
+ if is_js == "" {
+ is_js = "0"
+ }
+
+ if !user.Is_Admin {
+ NoPermissionsJSQ(w,r,user,is_js)
+ return
+ }
+
+ var tid int
+ tid, err = strconv.Atoi(r.URL.Path[len("/topic/edit/submit/"):])
+ if err != nil {
+ LocalErrorJSQ("The provided TopicID is not a valid number.",w,r,user,is_js)
+ return
+ }
+
+ topic_name := r.PostFormValue("topic_name")
+ topic_status := r.PostFormValue("topic_status")
+ topic_content := html.EscapeString(r.PostFormValue("topic_content"))
+ _, err = edit_topic_stmt.Exec(topic_name, topic_status, topic_content, tid)
+ if err != nil {
+ InternalErrorJSQ(err,w,r,user,is_js)
+ return
+ }
+
+ if is_js == "0" {
+ http.Redirect(w, r, "/topic/" + strconv.Itoa(tid), http.StatusSeeOther)
+ } else {
+ fmt.Fprintf(w,"{'success': '1'}")
+ }
+}
+
+func route_reply_edit_submit(w http.ResponseWriter, r *http.Request) {
+ user := SessionCheck(w,r)
+ err := r.ParseForm()
+ if err != nil {
+ LocalError("Bad Form", w, r, user)
+ return
+ }
+
+ is_js := r.PostFormValue("js")
+ if is_js == "" {
+ is_js = "0"
+ }
+
+ if !user.Is_Admin {
+ NoPermissionsJSQ(w,r,user,is_js)
+ return
+ }
+
+ rid, err := strconv.Atoi(r.URL.Path[len("/reply/edit/submit/"):])
+ if err != nil {
+ LocalError("The provided Reply ID is not a valid number.",w,r,user)
+ return
+ }
+
+ content := html.EscapeString(r.PostFormValue("edit_item"))
+ _, err = edit_reply_stmt.Exec(content, rid)
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+
+ // Get the Reply ID..
+ var tid int
+ err = db.QueryRow("select tid from replies where rid = ?", rid).Scan(&tid)
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+
+ if is_js == "0" {
+ http.Redirect(w,r, "/topic/" + strconv.Itoa(tid) + "#reply-" + strconv.Itoa(rid), http.StatusSeeOther)
+ } else {
+ fmt.Fprintf(w,"{'success': '1'}")
+ }
+}
+
+func route_reply_delete_submit(w http.ResponseWriter, r *http.Request) {
+ user := SessionCheck(w,r)
+ err := r.ParseForm()
+ if err != nil {
+ LocalError("Bad Form", w, r, user)
+ return
+ }
+
+ is_js := r.PostFormValue("is_js")
+ if is_js == "" {
+ is_js = "0"
+ }
+
+ if !user.Is_Admin {
+ NoPermissionsJSQ(w,r,user,is_js)
+ return
+ }
+
+ rid, err := strconv.Atoi(r.URL.Path[len("/reply/delete/submit/"):])
+ if err != nil {
+ LocalErrorJSQ("The provided Reply ID is not a valid number.",w,r,user,is_js)
+ return
+ }
+
+ var tid int
+ err = db.QueryRow("SELECT tid from replies where rid = ?", rid).Scan(&tid)
+ if err == sql.ErrNoRows {
+ LocalErrorJSQ("The reply you tried to delete doesn't exist.",w,r,user,is_js)
+ return
+ } else if err != nil {
+ InternalErrorJSQ(err,w,r,user,is_js)
+ return
+ }
+
+ _, err = delete_reply_stmt.Exec(rid)
+ if err != nil {
+ InternalErrorJSQ(err,w,r,user,is_js)
+ return
+ }
+ log.Print("The reply '" + strconv.Itoa(rid) + "' was deleted by User ID #" + strconv.Itoa(user.ID) + ".")
+
+ if is_js == "0" {
+ //http.Redirect(w,r, "/topic/" + strconv.Itoa(tid), http.StatusSeeOther)
+ } else {
+ fmt.Fprintf(w,"{'success': '1'}")
+ }
+}
+
+func route_account_own_edit_critical(w http.ResponseWriter, r *http.Request) {
+ user := SessionCheck(w,r)
+ if !user.Loggedin {
+ errmsg := "You need to login to edit your own account."
+ pi := Page{"Error","error",user,tList,errmsg}
+
+ var b bytes.Buffer
+ templates.ExecuteTemplate(&b,"error.html", pi)
+ errpage := b.String()
+ http.Error(w,errpage,500)
+ return
+ }
+
+ pi := Page{"Edit Password","account-own-edit",user,tList,0}
+ templates.ExecuteTemplate(w,"account-own-edit.html", pi)
+}
+
+func route_account_own_edit_critical_submit(w http.ResponseWriter, r *http.Request) {
+ user := SessionCheck(w,r)
+ if !user.Loggedin {
+ errmsg := "You need to login to edit your own account."
+ pi := Page{"Error","error",user,tList,errmsg}
+
+ var b bytes.Buffer
+ templates.ExecuteTemplate(&b,"error.html", pi)
+ errpage := b.String()
+ http.Error(w,errpage,500)
+ return
+ }
+
+ err := r.ParseForm()
+ if err != nil {
+ LocalError("Bad Form", w, r, user)
+ return
+ }
+
+ //current_password, err := strconv.Atoi(r.PostFormValue("account-current-password"))
+ //new_password, err := strconv.Atoi(r.PostFormValue("account-new-password"))
+ //confirm_password, err := strconv.Atoi(r.PostFormValue("account-confirm-password"))
+
+
+
+ pi := Page{"Edit Password","account-own-edit",user,tList,0}
+ templates.ExecuteTemplate(w,"account-own-edit.html", pi)
+}
+
+func route_logout(w http.ResponseWriter, r *http.Request) {
+ user := SessionCheck(w,r)
+ if !user.Loggedin {
+ errmsg := "You can't logout without logging in first."
+ pi := Page{"Error","error",user,tList,errmsg}
+
+ var b bytes.Buffer
+ templates.ExecuteTemplate(&b,"error.html", pi)
+ errpage := b.String()
+ http.Error(w,errpage,500)
+ return
+ }
+
+ _, err := logout_stmt.Exec(user.ID)
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+ http.Redirect(w,r, "/", http.StatusSeeOther)
+}
+
+func route_login(w http.ResponseWriter, r *http.Request) {
+ user := SessionCheck(w,r)
+ if user.Loggedin {
+ errmsg := "You're already logged in."
+ pi := Page{"Error","error",user,tList,errmsg}
+
+ var b bytes.Buffer
+ templates.ExecuteTemplate(&b,"error.html", pi)
+ errpage := b.String()
+ http.Error(w,errpage,500)
+ return
+ }
+
+ pi := Page{"Login","login",user,tList,0}
+ templates.ExecuteTemplate(w,"login.html", pi)
+}
+
+func route_login_submit(w http.ResponseWriter, r *http.Request) {
+ user := SessionCheck(w,r)
+ if user.Loggedin {
+ errmsg := "You're already logged in."
+ pi := Page{"Error","error",user,tList,errmsg}
+
+ var b bytes.Buffer
+ templates.ExecuteTemplate(&b,"error.html", pi)
+ errpage := b.String()
+ http.Error(w,errpage,500)
+ return
+ }
+
+ err := r.ParseForm()
+ if err != nil {
+ LocalError("Bad Form", w, r, user)
+ return
+ }
+
+ var uid int
+ var real_password string
+ var salt string
+ var session string
+ username := html.EscapeString(r.PostFormValue("username"))
+ log.Print("Username: " + username)
+ password := r.PostFormValue("password")
+ log.Print("Password: " + password)
+
+ err = login_stmt.QueryRow(username).Scan(&uid, &username, &real_password, &salt)
+ if err == sql.ErrNoRows {
+ errmsg := "That username doesn't exist."
+ pi := Page{"Error","error",user,tList,errmsg}
+
+ var b bytes.Buffer
+ templates.ExecuteTemplate(&b,"error.html", pi)
+ errpage := b.String()
+ http.Error(w,errpage,500)
+ return
+ } else if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+
+ // Emergency password reset mechanism..
+ if salt == "" {
+ if password != real_password {
+ errmsg := "That's not the correct password."
+ pi := Page{"Error","error",user,tList,errmsg}
+
+ var b bytes.Buffer
+ templates.ExecuteTemplate(&b,"error.html", pi)
+ errpage := b.String()
+ http.Error(w,errpage,500)
+ return
+ }
+
+ // Re-encrypt the password
+ SetPassword(uid, password)
+ } else { // Normal login..
+ password = password + salt
+ //hashed_password, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+
+ //log.Print("Hashed: " + string(hashed_password))
+ //log.Print("Real: " + real_password)
+ //if string(hashed_password) != real_password {
+ err := bcrypt.CompareHashAndPassword([]byte(real_password), []byte(password))
+ if err == bcrypt.ErrMismatchedHashAndPassword {
+ errmsg := "That's not the correct password."
+ pi := Page{"Error","error",user,tList,errmsg}
+
+ var b bytes.Buffer
+ templates.ExecuteTemplate(&b,"error.html", pi)
+ errpage := b.String()
+ http.Error(w,errpage,500)
+ return
+ } else if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+ }
+
+ session, err = GenerateSafeString(sessionLength)
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+
+ _, err = update_session_stmt.Exec(session, user.ID)
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+
+ log.Print("Successful Login")
+ cookie := http.Cookie{"uid",strconv.Itoa(uid),"/","",time.Now(),"",0,true,false,"",[]string{}}
+ http.SetCookie(w,&cookie)
+ cookie = http.Cookie{"session",session,"/","",time.Now(),"",0,true,false,"",[]string{}}
+ http.SetCookie(w,&cookie)
+ http.Redirect(w,r, "/", http.StatusSeeOther)
+}
+
+func route_register(w http.ResponseWriter, r *http.Request) {
+ user := SessionCheck(w,r)
+ if user.Loggedin {
+ errmsg := "You're already logged in."
+ pi := Page{"Error","error",user,tList,errmsg}
+
+ var b bytes.Buffer
+ templates.ExecuteTemplate(&b,"error.html", pi)
+ errpage := b.String()
+ http.Error(w,errpage,500)
+ return
+ }
+
+ pi := Page{"Registration","register",user,tList,0}
+ templates.ExecuteTemplate(w,"register.html", pi)
+}
+
+func route_register_submit(w http.ResponseWriter, r *http.Request) {
+ user := SessionCheck(w,r)
+ err := r.ParseForm()
+ if err != nil {
+ LocalError("Bad Form", w, r, user)
+ return
+ }
+
+ username := html.EscapeString(r.PostFormValue("username"))
+ password := r.PostFormValue("password")
+ confirm_password := r.PostFormValue("confirm_password")
+ log.Print("Registration Attempt! Username: " + username)
+
+ // Do the two inputted passwords match..?
+ if password != confirm_password {
+ errmsg := "The two passwords don't match."
+ pi := Page{"Password Mismatch","error",user,tList,errmsg}
+
+ var b bytes.Buffer
+ templates.ExecuteTemplate(&b,"error.html", pi)
+ errpage := b.String()
+ http.Error(w,errpage,500)
+ return
+ }
+
+ // Is this username already taken..?
+ err = username_exists_stmt.QueryRow(username).Scan(&username)
+ if err != nil && err != sql.ErrNoRows {
+ InternalError(err,w,r,user)
+ return
+ } else if err != sql.ErrNoRows {
+ errmsg := "This username isn't available. Try another."
+ pi := Page{"Username Taken","error",user,tList,errmsg}
+
+ var b bytes.Buffer
+ templates.ExecuteTemplate(&b,"error.html", pi)
+ errpage := b.String()
+ http.Error(w,errpage,500)
+ return
+ }
+
+ salt, err := GenerateSafeString(saltLength)
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+
+ session, err := GenerateSafeString(sessionLength)
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+
+ password = password + salt
+ hashed_password, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+
+ res, err := register_stmt.Exec(username,string(hashed_password),salt,session)
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+
+ lastId, err := res.LastInsertId()
+ if err != nil {
+ InternalError(err,w,r,user)
+ return
+ }
+
+ cookie := http.Cookie{"uid",strconv.FormatInt(lastId, 10),"/","",time.Now(),"",0,true,false,"",[]string{}}
+ http.SetCookie(w,&cookie)
+ cookie = http.Cookie{"session",session,"/","",time.Now(),"",0,true,false,"",[]string{}}
+ http.SetCookie(w,&cookie)
+ http.Redirect(w,r, "/", http.StatusSeeOther)
+}
diff --git a/src/run.bat b/src/run.bat
new file mode 100644
index 00000000..1ec803bf
--- /dev/null
+++ b/src/run.bat
@@ -0,0 +1,2 @@
+go run errors.go main.go pages.go post.go routes.go topic.go user.go utils.go
+pause
\ No newline at end of file
diff --git a/src/templates/account-own-edit-success.html b/src/templates/account-own-edit-success.html
new file mode 100644
index 00000000..afd3bc7a
--- /dev/null
+++ b/src/templates/account-own-edit-success.html
@@ -0,0 +1,25 @@
+{{template "header.html" . }}
+
Your data was successfully updated
+
+
+
+