IPost/routes/api/post.js

export const setup = function (router, con, server) {
    const PIDS = {}; //[pid]: true/"already_used"

    function isNotNull(a) {
        return typeof a !== "null" && typeof a !== "undefined" && a !== null && a !== undefined
    }

    function createPID(){
        let pid = server.genstring(10); //collision chance is low enough, but we'll check anyways
        while (PIDS[pid] != undefined) {
            pid = server.genstring(10);
            console.log(5, "pid collision");
        }
        PIDS[pid] = true;
        setTimeout(function() {
            PIDS[pid] = undefined;
        }, 40000);
        return pid
    }

    router.get("/api/pid",  function (req, res) {
        res.set("Access-Control-Allow-Origin", "*");
        res.json({ "pid": createPID() });
    });
    router.post("/api/post",  function (req, res) {
        if (!req.body.message) {
            res.status(410)
            res.json({ "error": "no message to post" });
            return;
        }
        if ((typeof req.body.message) != "string") {
            res.status(411)
            res.json({ "error": "no message to post" });
            return;
        }
        if ((typeof req.body.pid) != "string") {
            res.status(412)
            res.json({ "error": "no pid given" });
            return;
        }
        if (req.body.pid.length != 10 || PIDS[req.body.pid] !== true) {
            res.status(413)
            res.json({ "error": "invalid pid given" });
            return;
        }
        PIDS[req.body.pid] = "already_used";
        let reply_id;
        if (!req.body.reply_id || req.body.reply_id < 0) {
            reply_id = 0;
        }
        else {
            reply_id = req.body.reply_id;
        }
        if(typeof reply_id == "string") {
            reply_id = parseInt(reply_id)
            if(isNaN(reply_id)) {
                res.status(414)
                res.json({ "error": "no valid reply id given" });
                return;
            }
        }
        if ((typeof reply_id) != "number") {
            res.status(415)
            res.json({ "error": "no valid reply id given" });
            return;
        }
        if (req.body.message.length > 1000) {
            res.status(416)
            res.json({ "error": "message too long" });
            return;
        }
        req.body.message = encodeURIComponent(req.body.message.trim());
        if (req.body.message.length > 3000) {
            res.status(417)
            res.json({ "error": "message too long" }); //check again after URI encoding it
            return;
        }
        req.body.receiver = encodeURIComponent(req.body.receiver || "");
        if (req.body.receiver == "")
            req.body.receiver = "everyone";
        if (!req.body.message) {
            res.status(418)
            res.json({ "error": "no message to post" });
            return;
        }
        console.log(req.body);
        let __dirname = server.dirname

        let file0_name="",file1_name="",file2_name="",file3_name="",file4_name = ""
        if(isNotNull(req.files)) {
            if(isNotNull(req.files.file_0)) {
                let file = req.files["file_0"]
                const file0_id = server.genstring(20)
                console.log(file.name);
                file0_name = file0_id+"/"+(file.name.substring(0,25))
                server.ensureExists(__dirname + "/user_uploads/"+file0_id,undefined,(err)=>{
                    if(err) {
                        console.error(err)
                        return;
                    }
                    file.mv(__dirname + "/user_uploads/"+file0_name,(err2) => {
                        if(err2) {
                            console.error(err2)
                            return;
                        }
                    })
                })
            }
            if(isNotNull(req.files.file_1)) {
                let file = req.files["file_1"]
                const file1_id = server.genstring(20)
                console.log(file.name);
                file1_name = file1_id+"/"+(file.name.substring(0,25))
                server.ensureExists(__dirname + "/user_uploads/"+file1_id,undefined,(err)=>{
                    if(err) {
                        console.error(err)
                        return;
                    }
                    file.mv(__dirname + "/user_uploads/"+file1_name,(err2) => {
                        if(err2) {
                            console.error(err2)
                            return;
                        }
                    })
                })
            }
            if(isNotNull(req.files.file_2)) {
                let file = req.files["file_2"]
                const file2_id = server.genstring(20)
                console.log(file.name);
                file2_name = file2_id+"/"+(file.name.substring(0,25))
                server.ensureExists(__dirname + "/user_uploads/"+file2_id,undefined,(err)=>{
                    if(err) {
                        console.error(err)
                        return;
                    }
                    file.mv(__dirname + "/user_uploads/"+file2_name,(err2) => {
                        if(err2) {
                            console.error(err2)
                            return;
                        }
                    })
                })
            }
            if(isNotNull(req.files.file_3)) {
                let file = req.files["file_3"]
                const file3_id = server.genstring(20)
                console.log(file.name);
                file3_name = file3_id+"/"+(file.name.substring(0,25))
                server.ensureExists(__dirname + "/user_uploads/"+file3_id,undefined,(err)=>{
                    if(err) {
                        console.error(err)
                        return;
                    }
                    file.mv(__dirname + "/user_uploads/"+file3_name,(err2) => {
                        if(err2) {
                            console.error(err2)
                            return;
                        }
                    })
                })
            }
            if(isNotNull(req.files.file_4)) {
                let file = req.files["file_4"]
                const file4_id = server.genstring(20)
                console.log(file.name);
                file4_name = file4_id+"/"+(file.name.substring(0,25))
                server.ensureExists(__dirname + "/user_uploads/"+file4_id,undefined,(err)=>{
                    if(err) {
                        console.error(err)
                        return;
                    }
                    file.mv(__dirname + "/user_uploads/"+file4_name,(err2) => {
                        if(err2) {
                            console.error(err2)
                            return;
                        }
                    })
                })
            }
        }
        

        let sql = `insert into ipost.posts (post_user_name,post_text,post_time,post_receiver_name,post_from_bot,post_reply_id,file_0,file_1,file_2,file_3,file_4) values (?,?,?,?,?,?,?,?,?,?,?);`;
        let values = [encodeURIComponent(res.locals.username), req.body.message, Date.now(), req.body.receiver, res.locals.isbot, reply_id,file0_name,file1_name,file2_name,file3_name,file4_name];
        con.query(sql, values, function (err, result) {
            if (err){
                res.status(500)
                res.json({"error":"there's been an interal error"})
                console.error(err)
                return;
            }
            let post_obj = {
                post_user_name: encodeURIComponent(res.locals.username),
                post_text: req.body.message,
                post_time: Date.now(),
                post_special_text: "",
                post_receiver_name: req.body.receiver,
                post_from_bot: res.locals.isbot,
                post_reply_id: reply_id,
                user_avatar: res.locals.avatar,
                files: [
                    file0_name,
                    file1_name,
                    file2_name,
                    file3_name,
                    file4_name
                ]
            };
            let message = {
                message: "new_post",
                data: post_obj
            };
            let messagestr = JSON.stringify(message);
            server.wss.clients.forEach(function(ws) {
                ws.send(messagestr);
            });
            res.json({ "success": "successfully posted message" });
            console.log(5, `posted new message by ${res.locals.username} : ${req.body.message}`);
        });
    });
    return createPID
};
export default {
    setup
};