1 files changed, 106 insertions, 0 deletions
diff --git a/profile/index.js b/profile/index.js
new file mode 100644
index 0000000..1c5752f
--- /dev/null
+++ b/profile/index.js
@@ -0,0 +1,106 @@
+const express = require("express");
+const db = require("../db");
+const fileupload = require("express-fileupload");
+const app = express.Router();
+
+app.use(fileupload({}));
+
+app.use("/", express.static(__dirname + "/public/"));
+
+app.get("/user/:uid", async (req, res) => { });
+
+// Basic API
+app.get("/api/user", async (req, res) => {
+    const user = (await db.query("SELECT name, surname FROM users WHERE id = ?", [req.session.uid]))[0];
+    res.json(user);
+});
+
+app.get("/api/questions", async (req, res) => {
+    const questions = await db.query("SELECT q.id, q.question, t.type FROM profile_questions q INNER JOIN profile_input_types t ON t.id = q.question_type");
+    const answers = await db.query("SELECT answer, question_id FROM profile_answers WHERE user_id = ?", [
+        req.session.uid,
+    ]);
+
+    for (const answer of answers) {
+        const qid = questions.findIndex((question) => question.id === answer.question_id);
+        if (qid !== undefined) questions[qid].answer = answer.answer;
+    }
+    res.json(questions);
+});
+
+app.post("/api/add", async (req, res) => {
+    try {
+        for (let qid in req.body) {
+            if (!req.body.hasOwnProperty(qid) || req.body[qid] === "dbg-image") continue;
+            let answer = req.body[qid].replace(/</g, "&lt;").replace(/>/g, "&gt;");
+            await db.query("INSERT INTO profile_answers (question_id, user_id, answer) VALUES (?, ?, ?)", [
+                qid,
+                req.session.uid,
+                answer
+            ]);
+        }
+        for (let fid in req.files) {
+            if (!req.files.hasOwnProperty(fid)) return;
+
+            let image, imageType, imageName;
+
+            image = req.files[fid];
+            imageType = image.name.split(".").reverse()[0];
+            imageName = `${req.session.uid}_${(new Date()).getTime()}.${imageType}`;
+            image.mv(__dirname + "/public/uploads/" + imageName);
+            await db.query("INSERT INTO profile_answers (question_id, user_id, answer) VALUES (?, ?, ?)", [
+                qid,
+                req.session.uid,
+                imageName,
+            ]);
+        }
+        res.send("ok");
+    } catch (e) {
+        console.error(e);
+        res.send("error");
+    }
+});
+
+app.put("/api/update", async (req, res) => {
+    try {
+        for (let qid in req.body) {
+            if (!req.body.hasOwnProperty(qid) || req.body[qid] === "dbg-image") continue;
+            let answer = req.body[qid].replace(/</g, "&lt;").replace(/>/g, "&gt;");
+            await db.query("UPDATE profile_answers SET answer = ? WHERE question_id = ? AND user_id = ?", [
+                answer,
+                qid,
+                req.session.uid,
+            ]);
+        }
+        for (let fid in req.files) {
+            if (!req.files.hasOwnProperty(fid)) return;
+
+            let image, imageType, imageName;
+
+            image = req.files[fid];
+            imageType = image.name.split(".").reverse()[0];
+            imageName = `${req.session.uid}_${(new Date()).getTime()}.${imageType}`;
+            image.mv(__dirname + "/public/uploads/" + imageName);
+            await db.query("UPDATE profile_answers SET answer = ? WHERE question_id = ? AND user_id = ?", [
+                imageName,
+                fid,
+                req.session.uid,
+            ]);
+        }
+        res.send("ok");
+    } catch (e) {
+        console.error(e);
+        res.send("error");
+    }
+});
+
+// Comments API
+app.get("/api/comments/:uid", async (req, res) => { });
+
+app.post("/api/comment", async (req, res) => { });
+
+app.put("/api/comment", async (req, res) => { });
+
+app.delete("/api/comment", async (req, res) => { });
+
+module.exports = app;