server.rb

# Victor Andreoni
# CS4241 - Assignment 4
# Index Ruby file to use with Sinatra as server

$: << File.expand_path(File.dirname(__FILE__) + "/lib") #Add lib folder to path

require 'sinatra'
require 'pgmanager'

enable :sessions

# Serve index of website
get '/' do
	erb :index
end

# Serve database panel. If no session exists, return error.
post '/panel' do
	if session[:loggeduser] == nil
		"You must be logged in to access the database panel!"
	else
		erb :panel
	end
end

# Log user off
get '/logoff' do
	session[:loggeduser] = nil
	redirect to('/')
end

# Register user while performing some server-side validation - Called with AJAX
post '/register' do
	@fullname = params[:fullname].to_s
	@username = params[:username].to_s 
	@password = params[:password].to_s
	
	result = registerUser(ENV['DATABASE_URL'], @fullname, @username, @password)
	if result == 1 # Result code for existing username
		return 1.to_s # Failure
	else
		session[:loggeduser] = result # Login the newly registered user
		return 0.to_s # Success
	end
end

# Login user by checking username and password with database - Called with AJAX
post '/login' do
	@username = params[:username].to_s 
	@password = params[:password].to_s 
	
	result = loginUser(ENV['DATABASE_URL'], @username, @password)	# Execute login routine
	if result == 1 # Result code for login error, established inside pgmanager.rb
		return 1.to_s # Failure
	else
		session[:loggeduser] = result # Create session for logged user
		return 0.to_s # Success
	end
end

# Query database with provided search parameters
get '/search' do
	if session[:loggeduser] == nil
		"You must be logged in to access the database panel!"
	else
		return queryDB(ENV['DATABASE_URL'], params["name"], params["company"], params["year"])
	end
end

# Add smartphones to database
post '/add' do
	return addToDB(ENV['DATABASE_URL'], params[:code], params[:name], params[:company], params[:year])
end

# Update smartphones in database
post '/update' do
	return updateDB(ENV['DATABASE_URL'], params[:code], params[:name], params[:company], params[:year])
end