TriggerBackend/server.cjs

require('dotenv').config()
const express = require("express");
const cors = require("cors");
const fs = require("node:fs");
const wol = require("wol");
const mariadb = require("mariadb");
const snmp = require("net-snmp");
const bodyParser = require("body-parser");

const pool = mariadb.createPool({
	host: process.env.DB_HOST,
	user: process.env.DB_USER,
	password: process.env.DB_PASS,
	connectionLimit: 5,
});

const options = {
	port: 162,
	disableAuthorization: true,
	includeAuthentication: false,
	accessControlModelType: snmp.AccessControlModelType.None,
	address: null,
	transport: "udp4",
};

const callback = (error, notification) => {
	if (error) {
		console.error(error);
	} else {
		console.log(notification);
	}
};

function sqlEscape(str) {
	return str.replace(/[\0\x08\x09\x1a\n\r"'\\\%]/g, (char) => {
		switch (char) {
			case "\0":
				return "\\0";
			case "\x08":
				return "\\b";
			case "\x09":
				return "\\t";
			case "\x1a":
				return "\\z";
			case "\n":
				return "\\n";
			case "\r":
				return "\\r";
			case '"':
			case "'":
			case "\\":
			case "%":
				return `\\${char}`; // prepends a backslash to backslash, percent,
			// and double/single quotes
			default:
				return char;
		}
	});
}

// receiver = snmp.createReceiver(options, callback);

// initializing app
const app = express();

// initializing cors middleware for all routes
const corsOptions = {
	origin: "*",
	credentials: true,
};

app.use(cors(corsOptions));
app.use(bodyParser.json());

app.get("/trigger/api/personalData", async (req, res) => {
	const conn = await pool.getConnection();
	const query = "SELECT * FROM trigger_database.personalData;";
	conn.query(query).then((rows) => {
		res.status(200).send(rows);
	});
	conn.end();
});

app.patch("/trigger/api/personalData", async (req, res) => {
	conn = await pool.getConnection();
	const query = `UPDATE trigger_database.personalData SET firstName = '${sqlEscape(req.body.firstName)}', lastName = '${sqlEscape(req.body.lastName)}', email = '${sqlEscape(req.body.email)}';`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.get("/trigger/api/messages", async (req, res) => {
	conn = await pool.getConnection();
	const query = "SELECT * FROM trigger_database.messages;";
	conn.query(query).then((rows) => {
		res.status(200).send(rows);
	});
	conn.end();
});

app.post("/trigger/api/messages", async (req, res) => {
	conn = await pool.getConnection();
	const query = `INSERT INTO trigger_database.messages (message) VALUES ('${sqlEscape(req.body.message)}');`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.patch("/trigger/api/messages", async (req, res) => {
	conn = await pool.getConnection();
	const query = `UPDATE trigger_database.messages SET message = '${sqlEscape(req.body.message)}' WHERE id = '${sqlEscape(req.body.id)}';`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.delete("/trigger/api/messages", async (req, res) => {
	conn = await pool.getConnection();
	const query = `DELETE FROM trigger_database.messages WHERE id = '${sqlEscape(req.body.id)}'`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.get("/trigger/api/apps", async (req, res) => {
	conn = await pool.getConnection();
	const query = "SELECT * FROM trigger_database.apps;";
	conn.query(query).then((rows) => {
		res.status(200).send(rows);
	});
	conn.end();
});

app.post("/trigger/api/apps", async (req, res) => {
	conn = await pool.getConnection();
	const query = `INSERT INTO trigger_database.apps (name, url, icon, baseUrl, filterName) VALUES ('${sqlEscape(req.body.name)}', '${sqlEscape(req.body.url)}', '${sqlEscape(req.body.icon)}', '${sqlEscape(req.body.baseUrl)}', '${sqlEscape(req.body.filterName)}')`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.patch("/trigger/api/apps", async (req, res) => {
	conn = await pool.getConnection();
	const query = `UPDATE trigger_database.apps SET name = '${sqlEscape(req.body.name)}', url = '${sqlEscape(req.body.url)}', icon = '${sqlEscape(req.body.icon)}', baseUrl = '${sqlEscape(req.body.baseUrl)}', category = '${sqlEscape(req.body.filterName)}' WHERE id = '${req.body.id}'`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.delete("/trigger/api/apps", async (req, res) => {
	conn = await pool.getConnection();
	const query = `DELETE FROM trigger_database.apps WHERE id = '${sqlEscape(req.body.id)}'`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.get("/trigger/api/appCategories", async (req, res) => {
	conn = await pool.getConnection();
	const query = "SELECT filterName FROM trigger_database.apps UNION SELECT filterName FROM trigger_database.linkCategories;";
	conn.query(query).then((rows) => {
		res.status(200).send(rows);
	});
	conn.end();
});

app.get("/trigger/api/links", async (req, res) => {
	conn = await pool.getConnection();
	const query = "SELECT * FROM trigger_database.links;";
	conn.query(query).then((rows) => {
		res.status(200).send(rows);
	});
	conn.end();
});

app.post("/trigger/api/links", async (req, res) => {
	conn = await pool.getConnection();
	const query = `INSERT INTO trigger_database.links (name, url, category) VALUES ('${sqlEscape(req.body.name)}', '${sqlEscape(req.body.url)}', '${sqlEscape(req.body.category)}')`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.patch("/trigger/api/links", async (req, res) => {
	conn = await pool.getConnection();
	const query = `UPDATE trigger_database.links SET name = '${sqlEscape(req.body.name)}', url = '${sqlEscape(req.body.url)}', category = '${sqlEscape(req.body.category)}' WHERE id = '${req.body.id}'`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.delete("/trigger/api/links", async (req, res) => {
	conn = await pool.getConnection();
	const query = `DELETE FROM trigger_database.links WHERE id = '${req.body.id}'`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.get("/trigger/api/providers", async (req, res) => {
	conn = await pool.getConnection();
	const query = "SELECT * FROM trigger_database.providers;";
	conn.query(query).then((rows) => {
		res.status(200).send(rows);
	});
	conn.end();
});

app.post("/trigger/api/providers", async (req, res) => {
	conn = await pool.getConnection();
	const query = `INSERT INTO trigger_database.providers (name, url, prefix) VALUES ('${sqlEscape(req.body.name)}', '${req.body.url}', '${req.body.prefix}')`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.patch("/trigger/api/providers", async (req, res) => {
	conn = await pool.getConnection();
	const query = `UPDATE trigger_database.providers SET name = '${sqlEscape(req.body.name)}', url = '${sqlEscape(req.body.url)}', prefix = '${sqlEscape(req.body.prefix)}' WHERE id = '${req.body.id}'`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.delete("/trigger/api/providers", async (req, res) => {
	conn = await pool.getConnection();
	const query = `DELETE FROM trigger_database.providers WHERE id = '${req.body.id}'`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.get("/trigger/api/themes", async (req, res) => {
	conn = await pool.getConnection();
	const query = "SELECT * FROM trigger_database.themes;";
	conn.query(query).then((rows) => {
		res.status(200).send(rows);
	});
	conn.end();
});

app.post("/trigger/api/themes", async (req, res) => {
	conn = await pool.getConnection();
	const query = `INSERT INTO trigger_database.themes (name, backgroundImage, backgroundColor, searchColor, primaryColor, accentColor, borderColor) VALUES ('${sqlEscape(req.body.name)}','${sqlEscape(req.body.backgroundImage)}','${req.body.backgroundColor}','${req.body.searchColor}','${req.body.primaryColor}','${req.body.accentColor}','${req.body.borderColor}')`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.patch("/trigger/api/themes", async (req, res) => {
	conn = await pool.getConnection();
	const query = `UPDATE trigger_database.themes SET name = '${sqlEscape(req.body.name)}', backgroundImage = '${sqlEscape(req.body.backgroundImage)}', backgroundColor = '${req.body.backgroundColor}', searchColor = '${req.body.searchColor}', primaryColor = '${req.body.primaryColor}', accentColor = '${req.body.accentColor}', borderColor = '${req.body.borderColor}', randomEnabled = '${req.body.randomEnabled ? 1 : 0}' WHERE id = '${req.body.id}';`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.delete("/trigger/api/themes", async (req, res) => {
	conn = await pool.getConnection();
	const query = `DELETE FROM trigger_database.themes WHERE id = '${req.body.id}'`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.get("/trigger/api/categories", async (req, res) => {
	conn = await pool.getConnection();
	const query = "SELECT * from trigger_database.linkCategories;";
	conn.query(query).then((rows) => {
		res.status(200).send(rows);
	});
	conn.end();
});

app.post("/trigger/api/categories", async (req, res) => {
	conn = await pool.getConnection();
	let query = "SELECT * from trigger_database.linkCategories;";
	let categoryIndex;
	conn.query(query).then((rows) => {
		categoryIndex = rows.length;
	});
	conn.end();
	conn = await pool.getConnection();
	query = `INSERT INTO trigger_database.linkCategories (categoryName, categoryIndex, filterName) VALUES ('${sqlEscape(req.body.categoryName)}','${categoryIndex || 0}','${sqlEscape(req.body.filterName)}')`;
	conn.query(query).then((rows) => {
		categoryIndex = rows.length;
	});
	conn.end();
});

app.patch("/trigger/api/categories", async (req, res) => {
	conn = await pool.getConnection();
	const query = `UPDATE trigger_database.linkCategories SET categoryName = '${sqlEscape(req.body.categoryName)}', filterName = '${sqlEscape(req.body.filterName)}' WHERE id = '${req.body.id}';`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.delete("/trigger/api/categories", async (req, res) => {
	conn = await pool.getConnection();
	const query = `DELETE FROM trigger_database.linkCategories WHERE id = '${req.body.id}'`;
	conn.query(query).then((rows) => {
		res.status(200);
	});
	conn.end();
});

app.get("/trigger/api/wakeDakota", (req, res) => {
	wol.wake("18:C0:4D:81:57:68", (err, res) => {});
});

// app is listening on port 5000
app.listen(5000, '0.0.0.0', () => {});