app.js

const express = require('express');
const bodyParser = require('body-parser');
const path = require('path');
const mysql = require('mysql2');
const cors = require('cors');
const session = require('express-session');
const bcrypt = require('bcrypt');

function requireLogin(req, res, next) {
  if (!req.session.userId) {
    res.status(401).json({ message: '需要登录' });
  } else {
    next();
  }
}

const app = express();

app.use(cors());
app.use(bodyParser.urlencoded({ extended: false }));
app.use(bodyParser.json());
app.use(express.static(__dirname));

app.use(session({
  secret: 'dym114514',
  resave: false,
  saveUninitialized: false,
  cookie: { maxAge: 1000 * 60 * 60 * 24 } // 1 day
}));

app.set('views', path.join(__dirname, 'views'));
app.set('view engine', 'ejs');

const db = mysql.createConnection({
  host: 'localhost',
  user: 'root',
  password: 'hz13316362896dym',
  database: 'db_techcode'
});

db.connect((err) => {
  if (err) {
    throw err;
  }
  console.log('MySQL connected...');
});

// 静态文件服务
app.use(express.static(path.join(__dirname, 'TechCode-graduate-design')));
// 路由
app.get('/', (req, res) => {
  res.sendFile(path.join(__dirname, 'html', 'index.html'));
});

app.get('/forum', (req, res) => {
  res.sendFile(path.join(__dirname, 'html', 'forum.html'));
});

app.get('/post', (req, res) => {
  res.sendFile(path.join(__dirname, 'html', 'post.html'));
});

app.get('/compare', (req, res) => {
  res.sendFile(path.join(__dirname, 'html', 'compare.html'));
});

app.get('/evaluation', (req, res) => {
  res.sendFile(path.join(__dirname, 'html', 'evaluation.html'));
});

app.get('/product', (req, res) => {
  res.sendFile(path.join(__dirname, 'html', 'product.html'));
});

app.get('/productInfo', (req, res) => {
  res.sendFile(path.join(__dirname, 'html', 'productInfo.html'));
});

app.get('/login_register', (req, res) => {
  res.sendFile(path.join(__dirname, 'html', 'login_register.html'));
});

// API
app.post('/api/new-post', (req, res) => {
  const { title, author, date } = req.body;
  posts.unshift({ title, author, date });
  res.status(201).json({ message: '帖子已创建' });
});

app.get('/api/posts', (req, res) => {
  const page = parseInt(req.query.page) || 1;
  const limit = parseInt(req.query.limit) || 10;
  const offset = (page - 1) * limit;

  db.query('SELECT COUNT(*) as totalPosts FROM posts', (error, results) => {
    if (error) {
      console.error('查询数据库时发生错误:', error);
      res.status(500).json({ message: '服务器错误' });
    } else {
      const totalPosts = results[0].totalPosts;
      const totalPages = Math.ceil(totalPosts / limit);

      db.query('SELECT posts.*, users.username AS author_name FROM posts JOIN users ON posts.author_id = users.id LIMIT ? OFFSET ?', [limit, offset], (error, results) => {
        if (error) {
          console.error('查询数据库时发生错误:', error);
          res.status(500).json({ message: '服务器错误' });
        } else {
          // 将查询结果中的日期转换为字符串格式
          const formattedResults = results.map(post => {
            return {
              ...post,
              created_at: post.created_at.toISOString().split('T')[0],
              author: post.author_name
            };
          });

          console.log('查询结果:', formattedResults);
          res.json({ posts: formattedResults, totalPages });
        }
      });
    }
  });
});


app.get('/api/posts/:id/data', (req, res) => {
  const postId = req.params.id;
  db.query('SELECT posts.*, users.username AS author_id FROM posts JOIN users ON posts.author_id = users.id WHERE posts.id = ?', [postId], (err, results) => {
    if (err) {
      res.status(500).json({ message: '服务器错误' });
      return;
    }
    res.json(results[0]);
  });
});

app.get('/api/posts/:id', (req, res) => {
  res.sendFile(path.join(__dirname, 'html', 'post.html'));
});

app.get('/api/posts/:id/comments', (req, res) => {
  const postId = req.params.id;
  const query = 'SELECT comments.*, users.username AS author_id FROM comments JOIN users ON comments.author_id = users.id WHERE comments.post_id = ? ORDER BY comments.created_at DESC';
  db.query(query, [postId], (err, results) => {
    if (err) {
      res.status(500).json({ message: '服务器错误' });
      return;
    }
    res.json(results);
  });
});

app.get('/api/comments', (req, res) => {
  db.query('SELECT * FROM comments', (err, results) => {
    if (err) {
      res.status(500).json({ message: '服务器错误' });
      return;
    }
    res.json(results);
  });
});

app.post('/api/comments', (req, res) => {
  const { postId, author, content, parentCommentId } = req.body;
  const newComment = { post_id: postId, author, content, parent_comment_id: parentCommentId };

  // Add a debug statement to log the newComment object
  console.log('New comment:', newComment);

  db.query('INSERT INTO comments SET ?', newComment, (err) => {
    if (err) {
      // Add a debug statement to log the error
      console.error('Error while inserting comment:', err);

      res.status(500).json({ message: '服务器错误' });
      return;
    }
    res.status(201).json({ message: '评论已创建' });
  });
});

app.get('/api/latest-posts', (req, res) => {
  db.query('SELECT * FROM posts ORDER BY created_at DESC LIMIT 3', (error, results) => {
    if (error) {
      console.error('查询数据库时发生错误:', error);
      res.status(500).json({ message: '服务器错误' });
    } else {
      res.json(results);
    }
  });
});

app.get('/api/products', (req, res) => {
  db.query('SELECT id, brand, model, type FROM products', (err, results) => {
    if (err) {
      res.status(500).json({ message: '服务器错误' });
      return;
    }
    res.json(results);
  });
});

app.get('/api/products/:id', (req, res) => {
  const productId = req.params.id;
  db.query('SELECT * FROM products WHERE id = ?', [productId], (err, results) => {
    if (err) {
      res.status(500).json({ message: '服务器错误' });
      return;
    }
    res.json(results[0]);
  });
});

// User注册路由
app.post('/api/register', async (req, res) => {
  const { username, email, password } = req.body;

  try {
    // 使用bcrypt对密码进行加密
    const hashedPassword = await bcrypt.hash(password, 10);

    db.query('INSERT INTO users (username, email, password) VALUES (?, ?, ?)', [username, email, hashedPassword], (err, results) => {
      if (err) {
        console.error(err); // 记录错误
        res.status(500).json({ message: '服务器错误' });
        return;
      }
      res.json({ message: '注册成功' });
    });
  } catch (error) {
    console.error(error); // 记录错误
    res.status(500).json({ message: '服务器错误' });
  }
});

// User login route
app.post('/api/login', async (req, res) => {
  const { email, password } = req.body;

  db.query('SELECT id, username, password FROM users WHERE email = ?', [email], async (err, results) => {
    if (err) {
      res.status(500).json({ message: '服务器错误' });
      return;
    }

    console.log('查询结果：', results); // 打印查询结果

    if (results.length === 0) {
      res.status(401).json({ message: '邮箱或密码错误' });
      return;
    }

    const user = results[0];

    // 使用bcrypt对密码进行验证
    const passwordMatch = await bcrypt.compare(password, user.password);

    if (passwordMatch) {
      // User authenticated successfully, create a session
      req.session.userId = user.id;
      req.session.username = user.username;
      res.json({ message: '登录成功', redirectTo: '/forum' });
    } else {
      res.status(401).json({ message: '邮箱或密码错误' });
    }
  });
});

app.get('/api/session', (req, res) => {
  if (req.session.userId) {
    res.json({ isLoggedIn: true });
  } else {
    res.json({ isLoggedIn: false });
  }
});

app.get('/forum', requireLogin, (req, res) => {
  if (!req.session.userId) {
    res.redirect('/login_register');
    return;
  }

  res.sendFile(path.join(__dirname, 'html', 'forum.html'));
});

app.get('/api/search-posts', (req, res) => {
  const keyword = req.query.keyword;
  const query = "SELECT * FROM posts WHERE title LIKE ?";

  db.query(query, [`%${keyword}%`], (error, results) => {
    if (error) {
      console.error('查询数据库时发生错误:', error);
      res.status(500).json({ message: '服务器错误' });
    } else {
      // 将查询结果中的日期转换为字符串格式
      const formattedResults = results.map(post => {
        return {
          ...post,
          created_at: post.created_at.toISOString().split('T')[0]
        };
      });

      res.json({ posts: formattedResults });
    }
  });
});

// 查询所有用户
app.get('/users', (req, res) => {
  db.query('SELECT * FROM users', (err, results) => {
    if (err) throw err;
    res.render('users', { users: results });
  });
});

// 删除用户
app.get('/users/:id/delete', (req, res) => {
  const id = req.params.id;
  db.query('DELETE FROM users WHERE id = ?', [id], (err, result) => {
    if (err) throw err;
    res.redirect('/users');
  });
});

// 修改用户信息
app.get('/users/:id/edit', (req, res) => {
  const id = req.params.id;
  db.query('SELECT * FROM users WHERE id = ?', [id], (err, result) => {
    if (err) throw err;
    res.render('editUser', { user: result[0] });
  });
});

app.post('/users/:id/edit', (req, res) => {
  const id = req.params.id;
  const { username, email, password } = req.body;
  db.query('UPDATE users SET username = ?, email = ?, password = ? WHERE id = ?', [username, email, password, id], (err, result) => {
    if (err) throw err;
    res.redirect('/users');
  });
});

const PORT = process.env.PORT || 3000;
app.listen(PORT, () => {
  console.log(`Server is running on port ${PORT}`);
});