app.js

// Import the express module
import express from "express";

import mysql2 from 'mysql2';

import dotenv from 'dotenv';

import {validateForm} from './validation.js';

// Define a port number where server will listen
const PORT = 3009;

dotenv.config();

// Create an express application
const app = express();

const pool = mysql2.createPool({
    host: process.env.DB_HOST,
    user: process.env.DB_USER,
    password: process.env.DB_PASSWORD,
    database: process.env.DB_NAME,
    port: process.env.DB_PORT
}).promise();

app.get('/db-test', async (req, res) => {
    try {
        const poems = await pool.query('SELECT * FROM poems');
        res.send(poems[0]);
    } catch (err) {
       console.error('Database error:', err);
       res.status(500).send('Database error: ' + err.message);
    }
});


// Enable static file serving
app.use(express.static("public"));

// Set view engine to EJS
app.set("view engine", "ejs");

// "Middleware" allows express to read form data and store it in req.body
app.use(express.urlencoded({ extended: true }));

const poems = [];

// Define our main route ('/')
// Default route
app.get("/", async(req, res) => {
  try {
    // Read all poems from db
    // newest first
    let sql = 'SELECT * FROM poems ORDER BY timestamp DESC';
    const poems = await pool.query(sql);

    res.render('home', { poems : poems[0] });

  } catch (err) {
    console.error('Database error:', err);
    res.status(500).send('Error loading orders: ' + err.message);
  }

});

// Form route
app.get("/submit-poem", (req, res) => {
  res.render("form");
});

// Poem submission route
app.post("/submit-poem", async (req, res) => {
    try {
        // Get form data from req.body
        const poem = req.body;

        // Calling validation.js to validate our form
        const valid = validateForm(poem);

        // If there are errors, it will not submit
        if (!valid.isValid) {
            console.log(valid);
            res.render('form', {errors: valid.errors});
            return;
        }

        if (poem.tags.trim() == "") {
          poem.tags = "none";
        }

        // Log the order data (for debugging)
        console.log('New poem submitted:', poem);

        // Set poem date to null if empty string
        if (poem.date == "") {
          poem.date = null;
        }


        // SQL INSERT query with placeholders to prevent SQL injection
        const sql = `INSERT INTO poems(author, title, tags, date, poem) 
            VALUES (?, ?, ?, ?, ?);`;

        console.log(poem.tags);

      // Parameters array must match the order of ? placeholders
	    // Make sure your property names match your order names
        const params = [
            poem.author,
            poem.title,
            poem.tags,
		    poem.date,
		    poem.poem
        ];

        // Execute the query and grab the primary key of the new row
        const result = await pool.execute(sql, params);
        console.log('Order saved with ID:', result[0].insertId);
        console.log(params);

        // Add timestamp for confirmation page
        poem.timestamp = new Date();

        console.log(poem.timestamp);

      
        // Render confirmation page with the adoption data
        res.render('confirmation', { poem });        

    } catch (err) {
        console.error('Error saving poem:', err);
        res.status(500).send('Sorry, there was an error posting your poem. Please try again.');
    }
});

// Delete-poem route
app.post('/delete-poem/:id', async (req, res) => {
    try {
        const sql = 'DELETE FROM poems WHERE id = ?';
        const params = [req.params.id];
        await pool.execute(sql, params);
        res.redirect('/');
    } catch (err) {
        console.error('Error deleting poem:', err);
        res.status(500).send('Sorry, there was an error deleting the poem. Please try again!');
    }
})
/*
app.post("/submit-poem", (req, res) => {
  const rawTags = req.body.tags ?? "";
  const tagsString = Array.isArray(rawTags) ? rawTags.join(",") :
    String(rawTags);
  const tags = tagsString
  .split(",")
  .map(t => t.trim())
  .filter(Boolean);

  const poem = {
    author: req.body.author,
    title: req.body.title,
    tags, 
    date: req.body.date,
    poem_body: req.body.poem,
    timestamp: new Date()
  };

  poems.push(poem);

  res.render("confirmation", { poem });
});

*/

// Admin route
app.get('/admin', async (req, res) => {
    try {
        // Fetch all orders from database, newest first
        const [poems] = await pool.query('SELECT * FROM poems ORDER BY timestamp DESC');  

        // Render the admin page
        res.render('admin', { poems });        

    } catch (err) {
        console.error('Database error:', err);
        res.status(500).send('Error loading orders: ' + err.message);
    }
});

// Start server and listen on designated port
app.listen(PORT, () => {
  console.log(`Server is running at http://localhost:${PORT}`);
});