server.py

from flask import Flask, render_template, redirect, url_for, request, session, escape, request
import os
import json
import re
import psycopg2 as dbapi2
import datetime
from initdb import *
from user import User
from comment import Comment
from content import Content
from stage import Stage
from action import Action
from actor import Actor
from report import Report
from notification import Notification
import time
from decimal import *


app = Flask(__name__)
app.secret_key = 'MerhabaITUCSDB1610'

def get_elephantsql_dsn(vcap_services):
    """Returns the data source name for ElephantSQL."""
    parsed = json.loads(vcap_services)
    uri = parsed["elephantsql"][0]["credentials"]["uri"]
    match = re.match('postgres://(.*?):(.*?)@(.*?)(:(\d+))?/(.*)', uri)
    user, password, host, _, port, dbname = match.groups()
    dsn = """user='{}' password='{}' host='{}' port={}
             dbname='{}'""".format(user, password, host, port, dbname)
    return dsn


@app.route('/clearuserdb')
def clear_userdb():
    drop_usertable(app.config['dsn'])
    return redirect(url_for('home'))

@app.route('/', methods=['GET', 'POST'])
def home():
    if 'username' in session:
        return redirect(url_for('timeline'))

    if request.method == 'POST':
        username = request.form['inputUsername']
        password = request.form['inputPassword']
        email = request.form['inputEmail']
        name = request.form['inputName']
        surname = request.form['inputSurname']
        user = User(username, password, email, name, surname, "http://www.sbsc.in/images/dummy-profile-pic.png")
        insert_userstable(app.config['dsn'], user)
        return redirect(url_for('user_login'))

    return render_template('index.html')

@app.route('/login', methods=['GET', 'POST'])
def user_login():
    error = None
    if 'username' in session:
        return redirect(url_for('timeline'))

    if request.method == 'POST':
        username = request.form['inputUsername']
        password = request.form['inputPassword']
        if isuser_intable(app.config['dsn'], username, password):
            session['username'] = username
            if isAdmin_userEdit(app.config['dsn'], username):
                session['isAdmin'] = username
            return redirect(url_for('timeline'))
        else:
            error = "Invalid credentials"

    return render_template('login.html')

@app.route('/logout')
def user_logout():
    if 'username' not in session:
        return redirect(url_for('user_login'))
    session.pop('username', None)
    if 'isAdmin' in session:
        session.pop('isAdmin', None)
    return redirect(url_for('home'))

@app.route('/userdelete/<username>', methods=['GET', 'POST'])
def user_delete(username):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        if not username == session['username']:
            return redirect(url_for('timeline'))
    else:
        if getspecific_admistable(app.config['dsn'], session['username'])[1] != 0:
            if not username == session['username']:
                return redirect(url_for('timeline'))

    if request.method == 'POST':
        deletefrom_usertable(app.config['dsn'], username)
        if username == session['username']: # if user deletes him/her own account, remove it from session
            session.pop('username', None)
        return redirect(url_for('users_list'))
    else:
        return render_template('confirmuserdelete.html', username=username)

    

@app.route('/userslist')
def users_list():
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))
    else:
        if getspecific_admistable(app.config['dsn'], session['username'])[1] != 0:
            return redirect(url_for('timeline'))

    fixdrop_usertable(app.config['dsn'])
    alldata = getall_usertable(app.config['dsn'])
    return render_template('userslist.html', users = alldata)

@app.route('/useredit/<username>', methods=['GET', 'POST'])
def user_edit(username):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        if not username == session['username']:
            return redirect(url_for('timeline'))
    else:
        if getspecific_admistable(app.config['dsn'], session['username'])[1] != 0:
            if not username == session['username']:
                return redirect(url_for('timeline'))

    if request.method == 'GET':
        getuser = getuser_usertable(app.config['dsn'], username)
        return render_template('useredit.html', user=getuser, username=username)
    else:
        name = request.form['inputName']
        surname = request.form['inputSurname']
        email = request.form['inputEmail']
        password = request.form['inputPassword']
        profpic = request.form['inputProfPic']
        if len(password) == 0:
            user = User(username, "1", email, name, surname, profpic)
            edituserwopass_usertable(app.config['dsn'], user)
        else:
            user = User(username, password, email, name, surname, profpic)
            edituserwpass_usertable(app.config['dsn'], user)

        return redirect(url_for('users_list'))

@app.route('/useredit/editgenre/<username>', methods=['GET', 'POST'])
def add_genre_user(username):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        if not username == session['username']:
            return redirect(url_for('timeline'))
    else:
        if getspecific_admistable(app.config['dsn'], session['username'])[1] != 0:
            if not username == session['username']:
                return redirect(url_for('timeline'))

    if request.method == 'POST':
        genre = request.form['inputGenres']
        order = request.form['inputImportance']
        init_genreTable(app.config['dsn'], username, genre, order)
        alldata = getall_genres(app.config['dsn'],username)
    else:
        alldata = getall_genres(app.config['dsn'],username)        

    return render_template('editgenre.html', genres=alldata, username=username)

@app.route('/useredit/editgenre/deletegenre/<username>', methods=['GET','POST'])
def genre_delete(username):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        if not username == session['username']:
            return redirect(url_for('timeline'))
    else:
        if getspecific_admistable(app.config['dsn'], session['username'])[1] != 0:
            if not username == session['username']:
                return redirect(url_for('timeline'))

    if request.method == 'GET':
        genre = request.args.get('genre')
        delete_genreTable(app.config['dsn'], username, genre)

    return redirect(url_for('users_list'))

@app.route('/useredit/editgenre/editgenre/<username>', methods=['GET', 'POST'])
def genre_edit(username):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        if not username == session['username']:
            return redirect(url_for('timeline'))
    else:
        if getspecific_admistable(app.config['dsn'], session['username'])[1] != 0:
            if not username == session['username']:
                return redirect(url_for('timeline'))

    if request.method == 'GET':
        genre = request.args.get('genre')
        getGenre = getone_genre(app.config['dsn'], username, genre)
        return render_template('editonegenre.html', genre=getGenre, username=username)
    else:
        genre = request.form['inputGenres']
        order = request.form['inputImportance']
        update_genreTable(app.config['dsn'], username, genre, order)

    return redirect(url_for('users_list'))

@app.route('/commentslist')
def comments_list():
    if 'username' not in session:
        return redirect(url_for('user_login'))
    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))
    else:
        if getspecific_admistable(app.config['dsn'], session['username'])[1] > 1:
            return redirect(url_for('timeline'))
    
    fixdrop_usertable(app.config['dsn'])
    alldata = getall_commenttable(app.config['dsn'])
    return render_template('commentslist.html', comments = alldata)
	
@app.route('/commentedit/<commentid>', methods=['GET', 'POST'])
def comment_edit(commentid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if request.method == 'GET':
        actualcomment = getcomment(app.config['dsn'], commentid)
        return render_template('commentedit.html', comment=actualcomment, commentid=commentid)
    else:
        inusername = username_of_comment(app.config['dsn'], commentid)
        incomm = request.form['incomment']
        inactionid = actionid_of_comment(app.config['dsn'], commentid)
        date = request.form['indate']
        comment = Comment(incomm,inactionid,inusername, date)
        edit_comment(app.config['dsn'], commentid, comment)
        return redirect(url_for('timeline'))
		
@app.route('/commentdelete/<commentid>', methods=['GET', 'POST'])
def comment_delete(commentid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if request.method == 'POST':
        deletefrom_commenttable(app.config['dsn'], commentid)
        return redirect(url_for('timeline'))
    else:
        return render_template('confirmcommentdelete.html', commentid=commentid)

@app.route('/dropcomments')
def dropcomments():
    if 'username' not in session:
        return redirect(url_for('user_login'))

    drop_commenttable(app.config['dsn'])
    return redirect(url_for('comments_list'))	
    
@app.route('/deletecommentsofaction/<actionid>', methods=['GET','POST'])
def deleteCommentsOfAction(actionid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if request.method == 'POST':
        delete_comments_from_action(app.config['dsn'], actionid)
        return redirect(url_for('timeline'))
    else:
        username = request.args.get('username')
        return render_template('confirmdeleteactioncomments.html', actionid=actionid)    

@app.route('/timeline',methods=['GET', 'POST'])
def timeline():
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if request.method == 'GET':
        getallcontent = getActionContent(app.config['dsn'])
        getall = getAction(app.config['dsn'],session['username'])
        getallcomments = getall_commenttable(app.config['dsn'])
        adminedit = isAdmin_userEdit(app.config['dsn'], session['username'])
        if adminedit:
            if getspecific_admistable(app.config['dsn'], session['username'])[1] <= 1:
                adminedit = True
            else:
                adminedit = False
        return render_template('timeline.html',actionList = getall, commentList = getallcomments,contentlist = getallcontent,admin=adminedit)
    else:
        username = session['username']
        actioncomment = request.form['inputCommentary']
        actionid = request.form['actionid']
        date = datetime.datetime.now().strftime("%Y-%m-%d %H:%M")
        cmm = Comment(actioncomment,actionid, username, date)
        commentid=insert_commenttable(app.config['dsn'], cmm)
        receiver = username_of_action(app.config['dsn'],actionid)
        ntf = Notification(commentid,username, receiver, date)
        insert_notifications(app.config['dsn'],ntf)
        return redirect(url_for('timeline'))

@app.route('/clearactiontable')
def clearActionTable():
    if 'username' not in session:
        return redirect(url_for('user_login'))

    dropActionTable(app.config['dsn'])
    return redirect(url_for('timeline'))

@app.route('/actionModify/<actionid>', methods=['GET','POST']) 
def actionModify(actionid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if request.method == 'GET':
        thisaction = getEditAction(app.config['dsn'],actionid)
        return render_template('actionModify.html',action = thisaction, actionid = actionid)
    else:
        comment = request.form['inputComment']
        edit_Action(app.config['dsn'],comment,actionid)
        return redirect(url_for('timeline'))

@app.route('/deleteAction/<actionid>', methods=['GET','POST'])
def deleteAction(actionid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if request.method == 'POST':
        deleteActionFromTable(app.config['dsn'],actionid)
        return redirect(url_for('timeline'))
    else:
        return render_template('confirmactiondelete.html',actionid=actionid)

@app.route('/critic/<criticid>')
def critic(criticid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    getCritic = getcriticfromtable(app.config['dsn'],criticid)
    getReview = getReviewofCritic(app.config['dsn'],criticid)
    adminedit = isAdmin_userEdit(app.config['dsn'], session['username'])
    return render_template('critic.html', critic = getCritic, reviews = getReview,admin= adminedit)

@app.route('/criticadd', methods=['GET', 'POST'])
def criticadd():
    if 'username' not in session:
        return redirect(url_for('user_login'))
    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if request.method == 'GET':
        return render_template('criticadd.html')
    else:
        criticname = request.form['CriticName']
        criticsurname = request.form['CriticSurname']
        criticWorkplace = request.form['CriticWorkplace']
        criticPic = request.form['CriticPic']
        insert_criticTable(app.config['dsn'], criticname, criticsurname, criticWorkplace,criticPic)
        return redirect(url_for('criticlist'))

@app.route('/criticlist')
def criticlist():
    if 'username' not in session:
        return redirect(url_for('user_login'))
    alldata = getall_critictable(app.config['dsn'])
    return render_template('criticlist.html', critics = alldata)

@app.route('/criticdelete/<criticid>', methods=['GET', 'POST'])
def criticdelete(criticid):
    if 'username' not in session:
        return redirect(url_for('user_login'))
    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if request.method == 'POST':
        deleteCriticFromTable(app.config['dsn'], criticid)
        return redirect(url_for('criticadd'))
    else:
        return render_template('criticdelete.html', criticid=criticid)

@app.route('/criticedit/<criticid>', methods=['GET', 'POST'])
def criticedit(criticid):
    if 'username' not in session:
        return redirect(url_for('user_login'))
    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))
    if request.method == 'POST':
        criticname = request.form['CriticName']
        criticsurname = request.form['CriticSurname']
        criticworkplace = request.form['CriticWorkplace']
        criticPic = request.form['CriticPic']
        edit_critic(app.config['dsn'], criticid,criticname,criticsurname,criticworkplace,criticPic)
        return redirect(url_for('criticadd'))
    else:
        getCritic = getCurrentcritic(app.config['dsn'],criticid)
        return render_template('criticedit.html', criticid=criticid,critic=getCritic)

@app.route('/add_review/<contentid>', methods=['GET', 'POST'])
def add_review(contentid):
    if 'username' not in session:
        return redirect(url_for('user_login'))
    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))
    if request.method == 'GET':
        getcritic = getall_critictable(app.config['dsn'])
        return render_template('add_review.html', contentid = contentid, critics = getcritic)
    else:
        criticid = request.form['inputName']
        contentid = contentid
        review = request.form['inputReview']
        date = request.form['inputDate']
        score = request.form['inputScore']
        insert_reviewTable(app.config['dsn'], criticid,contentid,review,date,score)
        return redirect(url_for('contents_list'))

@app.route('/edit_review/<reviewid>', methods=['GET', 'POST'])
def edit_review(reviewid):
    if 'username' not in session:
        return redirect(url_for('user_login'))
    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))
    if request.method == 'POST':
        criticid = request.form['inputName']
        review = request.form['inputReview']
        date = request.form['inputDate']
        score = request.form['inputScore']
        edit_reviewTable(app.config['dsn'], criticid,review,date,score,reviewid)
        return redirect(url_for('contents_list'))
    else:
        getcritic = getall_critictable(app.config['dsn'])
        getReview = getCurrentReview(app.config['dsn'],reviewid)
        return render_template('edit_review.html',reviewid=reviewid, critics = getcritic,review = getReview)

@app.route('/delete_review/<reviewid>', methods=['GET', 'POST'])
def delete_review(reviewid):
    if 'username' not in session:
        return redirect(url_for('user_login'))
    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))
    if request.method == 'POST':
        deleteReviewFromTable(app.config['dsn'], reviewid)
        return redirect(url_for('contents_list'))
    else:
        return render_template('delete_review.html', reviewid=reviewid)

@app.route('/profile/<username>')
def profile(username):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if session['username'] == username:
        same = True
        adminedit = True
    else:
        same = False
        adminedit = isAdmin_userEdit(app.config['dsn'], session['username'])
        if adminedit:
            if(getspecific_admistable(app.config['dsn'], session['username'])[1] != 0):
                adminedit = False

    getUsername = session['username']
    getUser = getuser_usertable(app.config['dsn'], username)
    getGenres = getall_genres(app.config['dsn'], username)
    getFollowingCounts = get_following_counts(app.config['dsn'], username)
    isFollowing = is_following(app.config['dsn'],getUsername, username)
    getFollowerCounts = get_followed_counts(app.config['dsn'],username)
    getAction = getuser_action(app.config['dsn'],username)
    return render_template('profile.html', user=getUser, genres=getGenres, username=username, followingCounts=getFollowingCounts, followedCounts=getFollowerCounts, follows=isFollowing, same=same, adminedit=adminedit,actions=getAction)

@app.route('/follow/<username>')
def follow(username):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if session['username'] == username:
        return redirect(url_for('timeline'))

    date = datetime.datetime.now().strftime("%Y-%m-%d %H:%M")
    init_followUserUser(app.config['dsn'], session['username'], username, date)

    return redirect(url_for('timeline'))

@app.route('/unfollow/<username>')
def unfollow(username):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if session['username'] == username:
        return redirect(url_for('timeline'))

    unfollow_followUserUser(app.config['dsn'], session['username'], username)

    return redirect(url_for('timeline'))

@app.route('/following/<username>')
def following(username):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    getFollowing = get_allfollowing(app.config['dsn'], username)

    return render_template('followlist.html', follow=getFollowing, username=username)

@app.route('/followed/<username>')
def followed(username):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    getFollowed = get_allfollower(app.config['dsn'], username)

    return render_template('followlist.html', follow=getFollowed, username=username)
    
@app.route('/content')
def content():
    if 'username' not in session:
        return redirect(url_for('user_login'))

    return render_template('content.html')

@app.route('/content/<contentid>', methods=['GET', 'POST'])
def contentstatic(contentid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if request.method == 'GET':
        init_casting(app.config['dsn'])
        getcontentAction = getcontent_action(app.config['dsn'], contentid) 
        getcontent = getcontent_contenttable(app.config['dsn'], contentid)
        getcast = searchcast(app.config['dsn'],contentid)
        onstages = findstages(app.config['dsn'], contentid)
        getreviews = getreview_content(app.config['dsn'],contentid)
        adminedit = isAdmin_userEdit(app.config['dsn'], session['username'])
        is_rated = israted(app.config['dsn'], session['username'], contentid)
        onevote = getonevote(app.config['dsn'], session['username'], contentid)
        votes = countvotes(app.config['dsn'], contentid)
        getMeta = getMetaScore(app.config['dsn'],contentid)
        getMeta = str(getMeta)
        if getMeta == "(None,)":
            getMeta = "None"
        else:
            getMeta = re.findall('\d+', getMeta)[0]
        if votes==0:
            rating = 0
        else:
            ratings = getvotes(app.config['dsn'], contentid) 
            totalrating = 0
            for rate in ratings:
                totalrating = totalrating + rate[0]
            rating = float(totalrating) / float(votes)
        return render_template('contentstatic.html',content = getcontent, contentid=contentid, contentaction=getcontentAction, cast = getcast,stages=onstages,reviews = getreviews,admin=adminedit, israted = is_rated, rating = float("{0:.1f}".format(rating)), onevote = onevote,metascore=getMeta)

    elif request.method == 'POST':#this section belongs to Mahmut Lutfullah ÖZBİLEN
        if request.form['submit'] == 'Share':
            username = session['username']
            actiontype = "comment"
            actioncomment = request.form['inputCommentary']
            date = datetime.datetime.now().strftime("%Y-%m-%d %H:%M")
            action = Action(username,contentid,actiontype,actioncomment,date)
            cmm = Comment(actioncomment,contentid, username,date)
            insert_actionTable(app.config['dsn'], action)
            return redirect(url_for('contentstatic',contentid=contentid))
    else:
        return render_template('content.html')

@app.route('/contentrate/<contentid>/<newrating>', methods=['GET', 'POST'])
def content_rate(contentid, newrating):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if request.method == 'GET':
        username = session['username']
        if (israted(app.config['dsn'], session['username'], contentid)):
                editrating(app.config['dsn'], username, contentid, newrating)
        else:
            insert_rating(app.config['dsn'], username, contentid, newrating)
        return redirect(url_for('contentstatic',contentid=contentid))


@app.route('/contentslist')
def contents_list():
    if 'username' not in session:
        return redirect(url_for('user_login'))
    adminedit = isAdmin_userEdit(app.config['dsn'], session['username'])
    allcontents = getall_contenttable(app.config['dsn'])
    return render_template('contentslist.html', contents = allcontents, admin=adminedit)

@app.route('/contentdelete/<contentid>', methods=['GET', 'POST'])
def content_delete(contentid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if request.method == 'POST':
        deletefrom_contenttable(app.config['dsn'], contentid)
        return redirect(url_for('contents_list'))
    else:
        return render_template('confirmcontentdelete.html', contentid=contentid)

@app.route('/contentedit/<contentid>', methods=['GET', 'POST'])
def content_edit(contentid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if request.method == 'GET':
        getcontent = getcontent_contenttable(app.config['dsn'], contentid)
        return render_template('contentedit.html', content=getcontent, contentid=contentid)
    else:
        title = request.form['inputTitle']
        artist = request.form['inputArtist']
        duration = request.form['inputDuration']
        date = request.form['inputDate']
        contentpic = request.form['inputCp']
        genres = request.form['inputGenres']
        content = Content(title, artist, duration, date, contentpic, genres)
        edit_content(app.config['dsn'], contentid,content)

        return redirect(url_for('contents_list'))

@app.route('/stage/<stageid>', methods=['GET', 'POST'])
def stage(stageid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if request.method == 'GET':
        getstage = getstage_stagetable(app.config['dsn'], stageid)
        return render_template('stage.html',stage = getstage)

@app.route('/stages_list')
def stages_list():
    if 'username' not in session:
        return redirect(url_for('user_login'))

    allstages = getall_stagestable(app.config['dsn'])
    return render_template('stageslist.html', stages = allstages)

@app.route('/stagedelete/<stageid>', methods=['GET', 'POST'])
def stage_delete(stageid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if request.method == 'POST':
        deletefrom_stagetable(app.config['dsn'], stageid)
        return redirect(url_for('stages_list'))
    else:
        return render_template('confirmstagedelete.html', stageid=stageid)

@app.route('/stageedit/<stageid>', methods=['GET', 'POST'])
def stage_edit(stageid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if request.method == 'GET':
        getstage = getstage_stagetable(app.config['dsn'], stageid)
        return render_template('stageedit.html', stage=getstage, stageid=stageid)
    else:
        name = request.form['inputName']
        location = request.form['inputLocation']
        capacity = request.form['inputCapacity']
        stagepic = request.form['inputStagepic']
        stage = Stage(name,location,capacity,stagepic)
        edit_stage(app.config['dsn'], stageid,stage)

        return redirect(url_for('stages_list'))

@app.route('/stage_add',methods=['GET', 'POST'])
def stage_add():
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if request.method=='GET':
        return render_template('stageadmin.html')
    else:
        name = request.form['inputName']
        location = request.form['inputLocation']
        capacity = request.form['inputCapacity']
        stagepic = request.form['inputStagepic']
        stage = Stage(name,location,capacity,stagepic)
        init_stagetable(app.config['dsn'], stage)
        return redirect(url_for('stage_add'))

@app.route('/plays_list')
def plays_list():
    if 'username' not in session:
        return redirect(url_for('user_login'))

    allplays = getall_playstable(app.config['dsn'])
    return render_template('playslist.html', plays = allplays)

@app.route('/playdelete/<stageid>/<contentid>', methods=['GET', 'POST'])
def play_delete(stageid,contentid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if request.method == 'POST':
        deletefrom_playtable(app.config['dsn'], stageid,contentid)
        return redirect(url_for('plays_list'))
    else:
        return render_template('confirmplaydelete.html', stageid=stageid,contentid=contentid)

@app.route('/playedit/<stageid>/<contentid>', methods=['GET', 'POST'])
def play_edit(stageid,contentid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if request.method == 'GET':
        getplay = getplay_playtable(app.config['dsn'], stageid, contentid)
        allstages = getall_stagestable(app.config['dsn'])
        allcontents = getall_contenttable(app.config['dsn'])
        return render_template('playedit.html', stageid=getplay[0], contentid=getplay[1],stages=allstages,contents=allcontents)
    else:
        stageidn = request.form['inputName']
        contentidn = request.form['inputTitle']
        date = request.form['inputDate']
        edit_play(app.config['dsn'], stageid,contentid,stageidn,contentidn,date)

        return redirect(url_for('plays_list'))

@app.route('/play_add',methods=['GET', 'POST'])
def play_add():
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if request.method=='GET':
        allstages = getall_stagestable(app.config['dsn'])
        allcontents = getall_contenttable(app.config['dsn'])
        return render_template('playadmin.html',stages=allstages,contents=allcontents)
    else:
        stageid = request.form['inputName']
        contentid = request.form['inputTitle']
        date = request.form['inputDate']
        init_playtable(app.config['dsn'], stageid,contentid,date)
        return redirect(url_for('play_add'))

@app.route('/admin')
def adminpanel():
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    getorder = getspecific_admistable(app.config['dsn'], session['username'])[1]

    return render_template('adminpanel.html', order=getorder)

@app.route('/contentadmin',methods=['GET', 'POST'])
def admin():
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if request.method=='GET':
        return render_template('contentadmin.html')
    else:
        title = request.form['inputTitle']
        artist = request.form['inputArtist']
        duration = request.form['inputDuration']
        date = request.form['inputDate']
        contentpic = request.form['inputCp']
        genres = request.form['inputGenres']
        content = Content(title,artist,duration,date,genres,contentpic)
        init_contenttable(app.config['dsn'], content)
        return redirect(url_for('admin'))

@app.route('/listadmins')
def listadmin():
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if getspecific_admistable(app.config['dsn'], session['username'])[1] != 0:
        return redirect(url_for('timeline'))

    admins = getall_adminstable(app.config['dsn'])
    return render_template('listadmins.html', admins=admins)

@app.route('/addadmin', methods=['GET', 'POST'])
def addadmin():
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if getspecific_admistable(app.config['dsn'], session['username'])[1] != 0:
        return redirect(url_for('timeline'))

    if request.method == 'POST':
        adminusername = request.form['inputUsername']
        adminorder = request.form['inputOrder']
        insert_adminstable(app.config['dsn'], adminusername, adminorder)
        alldata = getall_usertable(app.config['dsn'])
    else:
        alldata = getall_usertable(app.config['dsn'])

    return render_template('addadmin.html', admins=alldata)

@app.route('/admindelete/<username>', methods=['GET'])
def admindelete(username):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if getspecific_admistable(app.config['dsn'], session['username'])[1] != 0:
        return redirect(url_for('timeline'))

    if request.method == 'GET':
        remove_adminstable(app.config['dsn'], username)
        return redirect(url_for('listadmin'))
    

@app.route('/search', methods=['GET','POST'])
def search():
    if 'username' not in session:
        return redirect(url_for('user_login'))

    keyword = request.form['searchbox']

    searchAllUsers = search_user_table(app.config['dsn'], keyword)
    searchAllContents = search_content_table(app.config['dsn'], keyword)
    return render_template('searchresult.html', results=searchAllUsers, keyword=keyword, plays=searchAllContents)

@app.route('/actor', methods=['GET', 'POST'])
def actor():
    if 'username' not in session:
        return redirect(url_for('user_login'))
    if request.method == 'GET':
        return render_template('actor.html')
    elif request.method == 'POST':
        if request.form['submit'] == 'Add':
            actorname = request.form['ActorName']
            actorsurname = request.form['ActorSurname']
            actorbirthday = request.form['ActorBirthday']
            init_actortable(app.config['dsn'], actorname, actorsurname, actorbirthday)
            return render_template('actor.html')
        elif request.form['submit'] == 'Search':
            actortosearch = request.form['ActorName']
            actorarr = searchactor(app.config['dsn'], actortosearch)
            return render_template('actorlist.html', actors = actorarr)
            return render_template('actor.html')

@app.route('/actorlist')
def actor_list():
    if 'username' not in session:
        return redirect(url_for('user_login'))
    init_actortablenoadd(app.config['dsn'])
    alldata = getall_actortable(app.config['dsn'])
    return render_template('actorlist.html', actors = alldata)

@app.route('/actordelete/<actorid>', methods=['GET', 'POST'])
def actor_delete(actorid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if request.method == 'POST':
        deleteactor(app.config['dsn'], actorid)
        return redirect(url_for('actor'))
    else:
        return render_template('actordelete.html', actorid=actorid)

@app.route('/actoredit/<actorid>', methods=['GET', 'POST'])
def actor_edit(actorid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if request.method == 'GET':
        actortoedit = searchactor_byid(app.config['dsn'], actorid)
        return render_template('actoredit.html', editactor=actortoedit, actorid=actorid)
    else:
        actorname = request.form['ActorName']
        actorsurname = request.form['ActorSurname']
        actorbirthday = request.form['ActorBirthday']
        actortoedit = Actor(actorname, actorsurname, actorbirthday)
        editactor(app.config['dsn'], actorid, actortoedit)

        return redirect(url_for('actor'))

@app.route('/castedit/<contentid>', methods=['GET', 'POST'])
def cast_edit(contentid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if request.method == 'GET':
        init_casting(app.config['dsn'])
        getdata = searchcast(app.config['dsn'], contentid)
        return render_template('castedit.html', conid = contentid, actors = getdata)
    elif request.method == 'POST':
        if request.form['submit'] == 'Search':
            actortosearch = request.form['ActorName']
            actorarr = searchactor(app.config['dsn'], actortosearch)
            return render_template('castactorlist.html', conid = contentid, actors = actorarr)


@app.route('/castdelete/<actorid>/<contentid>', methods=['GET', 'POST'])
def cast_delete(actorid, contentid):
    if 'username' not in session:
        return redirect(url_for('user_login'))
    
    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if request.method == 'GET':
        deletecast(app.config['dsn'], actorid, contentid)
        return redirect(url_for('cast_edit', contentid = contentid))

@app.route('/castlist/<contentid>', methods=['GET', 'POST'])
def cast_list(contentid):
    if 'username' not in session:
        return redirect(url_for('user_login'))
    if request.method =='GET':
        alldata = getall_actortable(app.config['dsn'])
        return render_template('castactorlist.html', actors=alldata, conid = contentid)
    elif request.method =='POST':
        values = request.form.getlist('checked')
        orders = request.form.getlist('Ord')
        count = 0
        for value in values:
            while int(orders[count]) == 0:
                count = count + 1
            insert_casting(app.config['dsn'], int(value), int(contentid), int(orders[count]))
            count = count + 1
        return redirect(url_for('cast_edit', contentid = contentid))

@app.route('/castactoredit/<actorid>/<contentid>', methods=['GET', 'POST'])
def cast_actoredit(actorid, contentid):
    if 'username' not in session:
        return redirect(url_for('user_login'))

    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))

    if request.method == 'GET':
        return render_template('castactoredit.html', actorid = actorid, contentid = contentid)
    elif request.method == "POST":
        neworder = request.form['Order']
        editcast(app.config['dsn'], actorid, contentid, neworder)
        return redirect(url_for('cast_edit', contentid = contentid))
@app.route('/reportcomment/<commentid>', methods=['GET', 'POST'])
def report_comment(commentid):
    if 'username' not in session:
        return redirect(url_for('user_login'))
    if request.method == "GET":
        return render_template('sendreport.html', commentid = commentid)
    elif request.method == "POST":
        username = session['username']
        rptxt = request.form['report']
        date = datetime.datetime.now().strftime("%Y-%m-%d %H:%M")
        rep = Report(rptxt,commentid,username,date)
        insert_reports(app.config['dsn'],rep)
        return redirect(url_for('timeline'))
@app.route('/reportslist')
def report_list():
    if 'username' not in session:
        return redirect(url_for('user_login'))
    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))
    init_reportstable(app.config['dsn'])
    alldata = getall_reports(app.config['dsn'])
    return render_template('reportslist.html', reports = alldata)
@app.route('/deletereport/<id>', methods=['GET', 'POST'])
def delete_report(id):
    if 'username' not in session:
        return redirect(url_for('user_login'))
    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))
    if request.method == 'POST':
        deleteFromReport(app.config['dsn'], id)
        return redirect(url_for('timeline'))
    else:
        return render_template('confirmreportdelete.html', id=id)
@app.route('/clearreports')
def clear_reports():
    if 'username' not in session:
        return redirect(url_for('user_login'))
    if not isAdmin_userEdit(app.config['dsn'], session['username']):
        return redirect(url_for('timeline'))
    drop_reports(app.config['dsn'])
    return redirect(url_for('report_list'))	
@app.route('/notifications')
def notifications():
    if 'username' not in session:
        return redirect(url_for('user_login'))
    getnotifications = get_notifications(app.config['dsn'], session['username'])
    return render_template('notifications.html', username = session['username'], ntfList = getnotifications)    
@app.route('/markoneread/<id>')
def markoneread(id):
    if 'username' not in session:
        return redirect(url_for('user_login'))
    make_read(app.config['dsn'],id)
    return redirect(url_for('notifications'))
@app.route('/markallread/<username>')
def markallread(username):
    if 'username' not in session:
        return redirect(url_for('user_login'))
    make_all_read(app.config['dsn'],session['username'])
    return redirect(url_for('notifications'))    

def init_all_db():
    VCAP_SERVICES = os.getenv('VCAP_SERVICES')
    if VCAP_SERVICES is not None:
        app.config['dsn'] = get_elephantsql_dsn(VCAP_SERVICES)
    else:
        app.config['dsn'] = """user='postgres' password='123456' host='localhost' port=5432 dbname='itucsdb1610'"""
	
    return app

if __name__ == '__main__':
    VCAP_APP_PORT = os.getenv('VCAP_APP_PORT')
    if VCAP_APP_PORT is not None:
        port, debug = int(VCAP_APP_PORT), False
    else:
        port, debug = 5000, True
	
    init_all_db()
    app.run(host='0.0.0.0', port=port, debug=debug)