openNAMU__openNAMU/route/applications.py

from .tool.func import *

def applications_2(conn):
    curs = conn.cursor()

    div = ''

    if admin_check() != 1:
        return re_error('/ban')

    curs.execute(db_change('select data from other where name = "requires_approval"'))
    requires_approval = curs.fetchall()
    if requires_approval and requires_approval[0][0] != 'on':
        div += '<p>' + load_lang('approval_requirement_disabled') + '</p>'

    if flask.request.method == 'GET':
        curs.execute(db_change('select id, date, question, answer, token, email from user_application'))
        db_data = curs.fetchall()
        if db_data:
            div += '<p>' + load_lang('all_register_num') + ' : ' + str(len(db_data)) + '</p><br>'

            for application in db_data:
                question = application[2]
                answer = application[3]
                email = application[5]
                if not question:
                    question = ''

                if not answer:
                    answer = ''
                
                if not email:
                    email = ''
                
                div += '''
                    <form method=\"post\">
                        <table>
                            <tbody>
                                <tr>
                                    <td>''' + load_lang('id') + '''</td><td>''' + application[0] + '''</td>
                                </tr>
                                <tr>
                                    <td>''' + load_lang('application_time') + '''</td><td>''' + application[1] + '''</td>
                                </tr>
                                <tr>
                                    <td>''' + load_lang('approval_question') + '''</td><td>''' + html.escape(question) + '''</td>
                                </tr>
                                <tr>
                                    <td>''' + load_lang('answer') + '''</td><td>''' + html.escape(answer) + '''</td>
                                </tr>
                                <tr>
                                    <td>''' + load_lang('email') + '''</td><td>''' + html.escape(email) + '''</td>
                                </tr>
                                <tr>
                                    <td colspan=\"2\" style=\"text-align: center;\">
                                        <button type=\"submit\" name=\"approve\" value=\"''' + application[4] + '''\">''' + load_lang('approve') + '''</button>
                                        <button type=\"submit\" name=\"decline\" value=\"''' + application[4] + '''\">''' + load_lang('decline') + '''</button>
                                    </td>
                                </tr>
                            </tbody>
                        </table>
                    </form>
                    <br>
                '''
        else:
            div += load_lang('no_applications_now')

        return easy_minify(flask.render_template(skin_check(),
            imp = [load_lang('application_list'), wiki_set(), custom(), other2([0, 0])],
            data = div,
            menu = [['other', load_lang('return')]]
        ))
    else:
        if flask.request.form.get('approve', '') != '':
            curs.execute(db_change('select id, pw, date, encode, question, answer, ip, ua, email from user_application where token = ?'), [
                flask.request.form.get('approve', '')
            ])
            application = curs.fetchall()
            if not application:
                return re_error('/error/26')
            
            application = application[0]

            curs.execute(db_change("select id from user where id = ?"), [application[0]])
            if curs.fetchall():
                return re_error('/error/6')
            
            curs.execute(db_change("insert into user (id, pw, acl, date, encode) values (?, ?, 'user', ?, ?)"), [
                application[0], 
                application[1], 
                application[2], 
                application[3]
            ])
            curs.execute(db_change("insert into user_set (name, id, data) values ('approval_question', ?, ?)"), [application[0], application[4]])
            curs.execute(db_change("insert into user_set (name, id, data) values ('approval_question_answer', ?, ?)"), [application[0], application[5]])
            ua_plus(application[0], application[6], application[7], application[2])
            if application[8] and application[8] != '':
                curs.execute(db_change("insert into user_set (name, id, data) values ('email', ?, ?)"), [application[0], application[8]])
            
            curs.execute(db_change('delete from user_application where token = ?'), [flask.request.form.get('approve', '')])
            conn.commit()
        elif flask.request.form.get('decline', '') != '':
            curs.execute(db_change('delete from user_application where token = ?'), [flask.request.form.get('decline', '')])
            conn.commit()

        return redirect('/applications')