503 lines
15 KiB
JavaScript
503 lines
15 KiB
JavaScript
require("dotenv").config();
|
|
const express = require("express");
|
|
const cors = require("cors");
|
|
const fs = require("node:fs");
|
|
const wol = require("wol");
|
|
const mariadb = require("mariadb");
|
|
const snmp = require("net-snmp");
|
|
const bodyParser = require("body-parser");
|
|
|
|
const pool = mariadb.createPool({
|
|
host: process.env.DB_HOST,
|
|
user: process.env.DB_USER,
|
|
password: process.env.DB_PASS,
|
|
connectionLimit: 5,
|
|
});
|
|
|
|
function sqlEscape(str) {
|
|
return str.replace(/[\0\x08\x09\x1a\n\r"'\\\%]/g, (char) => {
|
|
switch (char) {
|
|
case "\0":
|
|
return "\\0";
|
|
case "\x08":
|
|
return "\\b";
|
|
case "\x09":
|
|
return "\\t";
|
|
case "\x1a":
|
|
return "\\z";
|
|
case "\n":
|
|
return "\\n";
|
|
case "\r":
|
|
return "\\r";
|
|
case '"':
|
|
case "'":
|
|
case "\\":
|
|
case "%":
|
|
return `\\${char}`; // prepends a backslash to backslash, percent,
|
|
// and double/single quotes
|
|
default:
|
|
return char;
|
|
}
|
|
});
|
|
}
|
|
|
|
// initializing app
|
|
const app = express();
|
|
|
|
// initializing cors middleware for all routes
|
|
const corsOptions = {
|
|
origin: "*",
|
|
credentials: true,
|
|
};
|
|
|
|
app.use(cors(corsOptions));
|
|
app.use(bodyParser.json());
|
|
|
|
app.get("/trigger/api/personalData", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = "SELECT * FROM trigger_database.personalData;";
|
|
conn.query(query).then((rows) => {
|
|
res.status(200).send(rows);
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.patch("/trigger/api/personalData", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `UPDATE trigger_database.personalData SET firstName = '${sqlEscape(req.body.firstName)}', lastName = '${sqlEscape(req.body.lastName)}', email = '${sqlEscape(req.body.email)}', physicalAddress = '${sqlEscape(req.body.physicalAddress)}';`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.get("/trigger/api/messages", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = "SELECT * FROM trigger_database.messages;";
|
|
conn.query(query).then((rows) => {
|
|
res.status(200).send(rows);
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.post("/trigger/api/messages", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `INSERT INTO trigger_database.messages (message) VALUES ('${sqlEscape(req.body.message)}');`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.patch("/trigger/api/messages", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `UPDATE trigger_database.messages SET message = '${sqlEscape(req.body.message)}' WHERE id = '${req.body.id}';`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.delete("/trigger/api/messages", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `DELETE FROM trigger_database.messages WHERE id = '${req.body.id}'`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.get("/trigger/api/apps", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = "SELECT * FROM trigger_database.apps;";
|
|
conn.query(query).then((rows) => {
|
|
res.status(200).send(rows);
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.post("/trigger/api/apps", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `INSERT INTO trigger_database.apps (name, url, icon, baseUrl, filterName) VALUES ('${sqlEscape(req.body.name)}', '${sqlEscape(req.body.url)}', '${sqlEscape(req.body.icon)}', '${sqlEscape(req.body.baseUrl)}', '${sqlEscape(req.body.filterName)}')`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.patch("/trigger/api/apps", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `UPDATE trigger_database.apps SET name = '${sqlEscape(req.body.name)}', url = '${sqlEscape(req.body.url)}', icon = '${sqlEscape(req.body.icon)}', baseUrl = '${sqlEscape(req.body.baseUrl)}', category = '${sqlEscape(req.body.filterName)}' WHERE id = '${req.body.id}'`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.delete("/trigger/api/apps", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `DELETE FROM trigger_database.apps WHERE id = '${sqlEscape(req.body.id)}'`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.get("/trigger/api/appCategories", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query =
|
|
"SELECT filterName FROM trigger_database.apps UNION SELECT filterName FROM trigger_database.linkCategories;";
|
|
conn.query(query).then((rows) => {
|
|
res.status(200).send(rows);
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.get("/trigger/api/links", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = "SELECT * FROM trigger_database.links;";
|
|
conn.query(query).then((rows) => {
|
|
res.status(200).send(rows);
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.post("/trigger/api/links", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `INSERT INTO trigger_database.links (name, url, category) VALUES ('${sqlEscape(req.body.name)}', '${sqlEscape(req.body.url)}', '${sqlEscape(req.body.category)}')`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.patch("/trigger/api/links", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `UPDATE trigger_database.links SET name = '${sqlEscape(req.body.name)}', url = '${sqlEscape(req.body.url)}', category = '${sqlEscape(req.body.category)}' WHERE id = '${req.body.id}'`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.delete("/trigger/api/links", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `DELETE FROM trigger_database.links WHERE id = '${req.body.id}'`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.get("/trigger/api/providers", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = "SELECT * FROM trigger_database.providers;";
|
|
conn.query(query).then((rows) => {
|
|
res.status(200).send(rows);
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.post("/trigger/api/providers", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `INSERT INTO trigger_database.providers (name, url, prefix) VALUES ('${sqlEscape(req.body.name)}', '${req.body.url}', '${req.body.prefix}')`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.patch("/trigger/api/providers", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `UPDATE trigger_database.providers SET name = '${sqlEscape(req.body.name)}', url = '${sqlEscape(req.body.url)}', prefix = '${sqlEscape(req.body.prefix)}' WHERE id = '${req.body.id}'`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.delete("/trigger/api/providers", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `DELETE FROM trigger_database.providers WHERE id = '${req.body.id}'`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.get("/trigger/api/themes", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = "SELECT * FROM trigger_database.themes;";
|
|
conn.query(query).then((rows) => {
|
|
res.status(200).send(rows);
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.post("/trigger/api/themes", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `INSERT INTO trigger_database.themes (name, backgroundImage, backgroundColor, searchColor, primaryColor, accentColor, borderColor) VALUES ('${sqlEscape(req.body.name)}','${sqlEscape(req.body.backgroundImage)}','${req.body.backgroundColor}','${req.body.searchColor}','${req.body.primaryColor}','${req.body.accentColor}','${req.body.borderColor}')`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.patch("/trigger/api/themes", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `UPDATE trigger_database.themes SET name = '${sqlEscape(req.body.name)}', backgroundImage = '${sqlEscape(req.body.backgroundImage)}', backgroundColor = '${req.body.backgroundColor}', searchColor = '${req.body.searchColor}', primaryColor = '${req.body.primaryColor}', accentColor = '${req.body.accentColor}', borderColor = '${req.body.borderColor}', randomEnabled = '${req.body.randomEnabled ? 1 : 0}' WHERE id = '${req.body.id}';`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.delete("/trigger/api/themes", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `DELETE FROM trigger_database.themes WHERE id = '${req.body.id}'`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.get("/trigger/api/backgrounds", async (req, res) => {
|
|
fs.readdir("../TriggerFrontend/dist/backgrounds", (err, files) => {
|
|
res.status(200).send(files);
|
|
});
|
|
});
|
|
|
|
app.get("/trigger/api/categories", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = "SELECT * from trigger_database.linkCategories;";
|
|
conn.query(query).then((rows) => {
|
|
res.status(200).send(rows);
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.post("/trigger/api/categories", async (req, res) => {
|
|
let conn = await pool.getConnection();
|
|
let query = "SELECT * from trigger_database.linkCategories;";
|
|
let categoryIndex;
|
|
conn.query(query).then((rows) => {
|
|
categoryIndex = rows.length;
|
|
});
|
|
conn.end();
|
|
conn = await pool.getConnection();
|
|
query = `INSERT INTO trigger_database.linkCategories (categoryName, categoryIndex, filterName) VALUES ('${sqlEscape(req.body.categoryName)}','${categoryIndex || 0}','${sqlEscape(req.body.filterName)}')`;
|
|
conn.query(query).then((rows) => {
|
|
categoryIndex = rows.length;
|
|
res.status(200).send({ status: "success" });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.patch("/trigger/api/categories", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `UPDATE trigger_database.linkCategories SET categoryName = '${sqlEscape(req.body.categoryName)}', filterName = '${sqlEscape(req.body.filterName)}' WHERE id = '${req.body.id}';`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.delete("/trigger/api/categories", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `DELETE FROM trigger_database.linkCategories WHERE id = '${req.body.id}'`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.get("/trigger/api/wolClients", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = "SELECT * from trigger_database.wolClients;";
|
|
conn.query(query).then((rows) => {
|
|
res.status(200).send(rows);
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.post("/trigger/api/wolClients", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `INSERT INTO trigger_database.wolClients (hostname, macAddress) VALUES ('${sqlEscape(req.body.hostname)}', '${sqlEscape(req.body.macAddress)}')`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
console.log(err);
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.patch("/trigger/api/wolClients", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `UPDATE trigger_database.wolClients SET hostname = '${sqlEscape(req.body.hostname)}', macAddress = '${sqlEscape(req.body.macAddress)}' WHERE id = '${req.body.id}'`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
console.log(err);
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.delete("/trigger/api/wolClients", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `DELETE FROM trigger_database.wolClients WHERE id = '${req.body.id}'`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.post("/trigger/api/wakeClient", async (req, res) => {
|
|
wol.wake(req.body.macAddress, () => {
|
|
res.status(200).send({ status: "success" });
|
|
});
|
|
});
|
|
|
|
app.get("/trigger/api/searchHistory", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query =
|
|
"SELECT * FROM trigger_database.searchHistory ORDER BY dateTimeStamp DESC;";
|
|
conn.query(query).then((rows) => {
|
|
res.status(200).send(rows);
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.post("/trigger/api/searchHistory", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `INSERT INTO trigger_database.searchHistory (prefix, provider, searchTerm) VALUES ('${sqlEscape(req.body.prefix)}', '${sqlEscape(req.body.provider)}', '${sqlEscape(req.body.searchTerm)}')`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
});
|
|
|
|
app.delete("/trigger/api/searchHistory", async (req, res) => {
|
|
const conn = await pool.getConnection();
|
|
const query = `DELETE FROM trigger_database.searchHistory WHERE id = '${req.body.id}'`;
|
|
conn
|
|
.query(query)
|
|
.then((rows) => {
|
|
res.status(200).send({ status: "success" });
|
|
})
|
|
.catch((err) => {
|
|
res.status(500).send({ error: err });
|
|
});
|
|
conn.end();
|
|
})
|
|
|
|
// app is listening on port 5000
|
|
app.listen(5000, "0.0.0.0", () => {});
|