Updatweb

2025-12-19 20:44:46 -06:00
parent 701f799cde
commit e4b3de4a46
113 changed files with 16673 additions and 2174 deletions
--- a/backend/routes/admin_backup.js
+++ b/backend/routes/admin_backup.js
@@ -0,0 +1,611 @@
+const express = require("express");
+const { query } = require("../config/database");
+const { requireAuth } = require("../middleware/auth");
+const logger = require("../config/logger");
+const { asyncHandler } = require("../middleware/errorHandler");
+const router = express.Router();
+
+// Dashboard stats API
+router.get("/dashboard/stats", requireAuth, async (req, res) => {
+  try {
+    const productsCount = await query("SELECT COUNT(*) FROM products");
+    const projectsCount = await query("SELECT COUNT(*) FROM portfolioprojects");
+    const blogCount = await query("SELECT COUNT(*) FROM blogposts");
+    const pagesCount = await query("SELECT COUNT(*) FROM pages");
+
+    res.json({
+      success: true,
+      stats: {
+        products: parseInt(productsCount.rows[0].count),
+        projects: parseInt(projectsCount.rows[0].count),
+        blog: parseInt(blogCount.rows[0].count),
+        pages: parseInt(pagesCount.rows[0].count),
+      },
+      user: {
+        name: req.session.name,
+        email: req.session.email,
+        role: req.session.role,
+      },
+    });
+  } catch (error) {
+    logger.error("Dashboard error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+// Products API
+router.get("/products", requireAuth, async (req, res) => {
+  try {
+    const result = await query(
+      "SELECT id, name, price, stockquantity, isactive, createdat FROM products ORDER BY createdat DESC"
+    );
+    res.json({
+      success: true,
+      products: result.rows,
+    });
+  } catch (error) {
+    logger.error("Products error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+// Portfolio Projects API
+router.get("/portfolio/projects", requireAuth, async (req, res) => {
+  try {
+    const result = await query(
+      "SELECT id, title, description, imageurl, categoryid, createdat FROM portfolioprojects ORDER BY createdat DESC"
+    );
+    res.json({
+      success: true,
+      projects: result.rows,
+    });
+  } catch (error) {
+    logger.error("Portfolio error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+// Blog Posts API
+router.get("/blog", requireAuth, async (req, res) => {
+  try {
+    const result = await query(
+      "SELECT id, title, slug, excerpt, ispublished, createdat FROM blogposts ORDER BY createdat DESC"
+    );
+    res.json({
+      success: true,
+      posts: result.rows,
+    });
+  } catch (error) {
+    logger.error("Blog error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+// Pages API
+router.get("/pages", requireAuth, async (req, res) => {
+  try {
+    const result = await query(
+      "SELECT id, title, slug, ispublished, createdat FROM pages ORDER BY createdat DESC"
+    );
+    res.json({
+      success: true,
+      pages: result.rows,
+    });
+  } catch (error) {
+    logger.error("Pages error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+// Get single product
+router.get("/products/:id", requireAuth, async (req, res) => {
+  try {
+    const result = await query("SELECT * FROM products WHERE id = $1", [
+      req.params.id,
+    ]);
+    if (result.rows.length === 0) {
+      return res
+        .status(404)
+        .json({ success: false, message: "Product not found" });
+    }
+    res.json({
+      success: true,
+      product: result.rows[0],
+    });
+  } catch (error) {
+    logger.error("Product error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+// Create product
+router.post("/products", requireAuth, async (req, res) => {
+  try {
+    const {
+      name,
+      description,
+      price,
+      stockquantity,
+      category,
+      isactive,
+      isbestseller,
+    } = req.body;
+
+    const result = await query(
+      `INSERT INTO products (name, description, price, stockquantity, category, isactive, isbestseller, createdat)
+       VALUES ($1, $2, $3, $4, $5, $6, $7, NOW())
+       RETURNING *`,
+      [
+        name,
+        description,
+        price,
+        stockquantity || 0,
+        category,
+        isactive !== false,
+        isbestseller || false,
+      ]
+    );
+
+    res.json({
+      success: true,
+      product: result.rows[0],
+      message: "Product created successfully",
+    });
+  } catch (error) {
+    logger.error("Create product error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+// Update product
+router.put("/products/:id", requireAuth, async (req, res) => {
+  try {
+    const {
+      name,
+      description,
+      price,
+      stockquantity,
+      category,
+      isactive,
+      isbestseller,
+    } = req.body;
+
+    const result = await query(
+      `UPDATE products 
+       SET name = $1, description = $2, price = $3, stockquantity = $4, 
+           category = $5, isactive = $6, isbestseller = $7, updatedat = NOW()
+       WHERE id = $8
+       RETURNING *`,
+      [
+        name,
+        description,
+        price,
+        stockquantity || 0,
+        category,
+        isactive !== false,
+        isbestseller || false,
+        req.params.id,
+      ]
+    );
+
+    if (result.rows.length === 0) {
+      return res
+        .status(404)
+        .json({ success: false, message: "Product not found" });
+    }
+
+    res.json({
+      success: true,
+      product: result.rows[0],
+      message: "Product updated successfully",
+    });
+  } catch (error) {
+    logger.error("Update product error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+// Delete product
+router.delete("/products/:id", requireAuth, async (req, res) => {
+  try {
+    const result = await query(
+      "DELETE FROM products WHERE id = $1 RETURNING id",
+      [req.params.id]
+    );
+
+    if (result.rows.length === 0) {
+      return res
+        .status(404)
+        .json({ success: false, message: "Product not found" });
+    }
+
+    res.json({
+      success: true,
+      message: "Product deleted successfully",
+    });
+  } catch (error) {
+    logger.error("Delete product error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+// Portfolio Project CRUD
+router.get("/portfolio/projects/:id", requireAuth, async (req, res) => {
+  try {
+    const result = await query(
+      "SELECT * FROM portfolioprojects WHERE id = $1",
+      [req.params.id]
+    );
+    if (result.rows.length === 0) {
+      return res
+        .status(404)
+        .json({ success: false, message: "Project not found" });
+    }
+    res.json({ success: true, project: result.rows[0] });
+  } catch (error) {
+    logger.error("Portfolio project error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+router.post("/portfolio/projects", requireAuth, async (req, res) => {
+  try {
+    const { title, description, category, isactive } = req.body;
+    const result = await query(
+      `INSERT INTO portfolioprojects (title, description, category, isactive, createdat)
+       VALUES ($1, $2, $3, $4, NOW()) RETURNING *`,
+      [title, description, category, isactive !== false]
+    );
+    res.json({
+      success: true,
+      project: result.rows[0],
+      message: "Project created successfully",
+    });
+  } catch (error) {
+    logger.error("Create portfolio project error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+router.put("/portfolio/projects/:id", requireAuth, async (req, res) => {
+  try {
+    const { title, description, category, isactive } = req.body;
+    const result = await query(
+      `UPDATE portfolioprojects 
+       SET title = $1, description = $2, category = $3, isactive = $4, updatedat = NOW()
+       WHERE id = $5 RETURNING *`,
+      [title, description, category, isactive !== false, req.params.id]
+    );
+    if (result.rows.length === 0) {
+      return res
+        .status(404)
+        .json({ success: false, message: "Project not found" });
+    }
+    res.json({
+      success: true,
+      project: result.rows[0],
+      message: "Project updated successfully",
+    });
+  } catch (error) {
+    logger.error("Update portfolio project error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+router.delete("/portfolio/projects/:id", requireAuth, async (req, res) => {
+  try {
+    const result = await query(
+      "DELETE FROM portfolioprojects WHERE id = $1 RETURNING id",
+      [req.params.id]
+    );
+    if (result.rows.length === 0) {
+      return res
+        .status(404)
+        .json({ success: false, message: "Project not found" });
+    }
+    res.json({ success: true, message: "Project deleted successfully" });
+  } catch (error) {
+    logger.error("Delete portfolio project error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+// Blog Post CRUD
+router.get("/blog/:id", requireAuth, async (req, res) => {
+  try {
+    const result = await query("SELECT * FROM blogposts WHERE id = $1", [
+      req.params.id,
+    ]);
+    if (result.rows.length === 0) {
+      return res
+        .status(404)
+        .json({ success: false, message: "Blog post not found" });
+    }
+    res.json({ success: true, post: result.rows[0] });
+  } catch (error) {
+    logger.error("Blog post error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+router.post("/blog", requireAuth, async (req, res) => {
+  try {
+    const {
+      title,
+      slug,
+      excerpt,
+      content,
+      metatitle,
+      metadescription,
+      ispublished,
+    } = req.body;
+    const result = await query(
+      `INSERT INTO blogposts (title, slug, excerpt, content, metatitle, metadescription, ispublished, createdat)
+       VALUES ($1, $2, $3, $4, $5, $6, $7, NOW()) RETURNING *`,
+      [
+        title,
+        slug,
+        excerpt,
+        content,
+        metatitle,
+        metadescription,
+        ispublished || false,
+      ]
+    );
+    res.json({
+      success: true,
+      post: result.rows[0],
+      message: "Blog post created successfully",
+    });
+  } catch (error) {
+    logger.error("Create blog post error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+router.put("/blog/:id", requireAuth, async (req, res) => {
+  try {
+    const {
+      title,
+      slug,
+      excerpt,
+      content,
+      metatitle,
+      metadescription,
+      ispublished,
+    } = req.body;
+    const result = await query(
+      `UPDATE blogposts 
+       SET title = $1, slug = $2, excerpt = $3, content = $4, metatitle = $5, 
+           metadescription = $6, ispublished = $7, updatedat = NOW()
+       WHERE id = $8 RETURNING *`,
+      [
+        title,
+        slug,
+        excerpt,
+        content,
+        metatitle,
+        metadescription,
+        ispublished || false,
+        req.params.id,
+      ]
+    );
+    if (result.rows.length === 0) {
+      return res
+        .status(404)
+        .json({ success: false, message: "Blog post not found" });
+    }
+    res.json({
+      success: true,
+      post: result.rows[0],
+      message: "Blog post updated successfully",
+    });
+  } catch (error) {
+    logger.error("Update blog post error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+router.delete("/blog/:id", requireAuth, async (req, res) => {
+  try {
+    const result = await query(
+      "DELETE FROM blogposts WHERE id = $1 RETURNING id",
+      [req.params.id]
+    );
+    if (result.rows.length === 0) {
+      return res
+        .status(404)
+        .json({ success: false, message: "Blog post not found" });
+    }
+    res.json({ success: true, message: "Blog post deleted successfully" });
+  } catch (error) {
+    logger.error("Delete blog post error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+// Custom Pages CRUD
+router.get("/pages/:id", requireAuth, async (req, res) => {
+  try {
+    const result = await query("SELECT * FROM pages WHERE id = $1", [
+      req.params.id,
+    ]);
+    if (result.rows.length === 0) {
+      return res
+        .status(404)
+        .json({ success: false, message: "Page not found" });
+    }
+    res.json({ success: true, page: result.rows[0] });
+  } catch (error) {
+    logger.error("Page error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+router.post("/pages", requireAuth, async (req, res) => {
+  try {
+    const { title, slug, content, metatitle, metadescription, ispublished } =
+      req.body;
+    const result = await query(
+      `INSERT INTO pages (title, slug, content, metatitle, metadescription, ispublished, createdat)
+       VALUES ($1, $2, $3, $4, $5, $6, NOW()) RETURNING *`,
+      [title, slug, content, metatitle, metadescription, ispublished !== false]
+    );
+    res.json({
+      success: true,
+      page: result.rows[0],
+      message: "Page created successfully",
+    });
+  } catch (error) {
+    logger.error("Create page error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+router.put("/pages/:id", requireAuth, async (req, res) => {
+  try {
+    const { title, slug, content, metatitle, metadescription, ispublished } =
+      req.body;
+    const result = await query(
+      `UPDATE pages 
+       SET title = $1, slug = $2, content = $3, metatitle = $4, 
+           metadescription = $5, ispublished = $6, updatedat = NOW()
+       WHERE id = $7 RETURNING *`,
+      [
+        title,
+        slug,
+        content,
+        metatitle,
+        metadescription,
+        ispublished !== false,
+        req.params.id,
+      ]
+    );
+    if (result.rows.length === 0) {
+      return res
+        .status(404)
+        .json({ success: false, message: "Page not found" });
+    }
+    res.json({
+      success: true,
+      page: result.rows[0],
+      message: "Page updated successfully",
+    });
+  } catch (error) {
+    logger.error("Update page error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+router.delete("/pages/:id", requireAuth, async (req, res) => {
+  try {
+    const result = await query("DELETE FROM pages WHERE id = $1 RETURNING id", [
+      req.params.id,
+    ]);
+    if (result.rows.length === 0) {
+      return res
+        .status(404)
+        .json({ success: false, message: "Page not found" });
+    }
+    res.json({ success: true, message: "Page deleted successfully" });
+  } catch (error) {
+    logger.error("Delete page error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+// Homepage Settings
+router.get("/homepage/settings", requireAuth, async (req, res) => {
+  try {
+    const result = await query(
+      "SELECT settings FROM site_settings WHERE key = 'homepage'"
+    );
+    const settings = result.rows.length > 0 ? result.rows[0].settings : {};
+    res.json({ success: true, settings });
+  } catch (error) {
+    logger.error("Homepage settings error:", error);
+    res.json({ success: true, settings: {} });
+  }
+});
+
+router.post("/homepage/settings", requireAuth, async (req, res) => {
+  try {
+    const settings = req.body;
+    await query(
+      `INSERT INTO site_settings (key, settings, updatedat)
+       VALUES ('homepage', $1, NOW())
+       ON CONFLICT (key) DO UPDATE SET settings = $1, updatedat = NOW()`,
+      [JSON.stringify(settings)]
+    );
+    res.json({
+      success: true,
+      message: "Homepage settings saved successfully",
+    });
+  } catch (error) {
+    logger.error("Save homepage settings error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+// General Settings
+router.get("/settings", requireAuth, async (req, res) => {
+  try {
+    const result = await query(
+      "SELECT settings FROM site_settings WHERE key = 'general'"
+    );
+    const settings = result.rows.length > 0 ? result.rows[0].settings : {};
+    res.json({ success: true, settings });
+  } catch (error) {
+    logger.error("Settings error:", error);
+    res.json({ success: true, settings: {} });
+  }
+});
+
+router.post("/settings", requireAuth, async (req, res) => {
+  try {
+    const settings = req.body;
+    await query(
+      `INSERT INTO site_settings (key, settings, updatedat)
+       VALUES ('general', $1, NOW())
+       ON CONFLICT (key) DO UPDATE SET settings = $1, updatedat = NOW()`,
+      [JSON.stringify(settings)]
+    );
+    res.json({ success: true, message: "Settings saved successfully" });
+  } catch (error) {
+    logger.error("Save settings error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+// Menu Management
+router.get("/menu", requireAuth, async (req, res) => {
+  try {
+    const result = await query(
+      "SELECT settings FROM site_settings WHERE key = 'menu'"
+    );
+    const items =
+      result.rows.length > 0 ? result.rows[0].settings.items || [] : [];
+    res.json({ success: true, items });
+  } catch (error) {
+    logger.error("Menu error:", error);
+    res.json({ success: true, items: [] });
+  }
+});
+
+router.post("/menu", requireAuth, async (req, res) => {
+  try {
+    const { items } = req.body;
+    await query(
+      `INSERT INTO site_settings (key, settings, updatedat)
+       VALUES ('menu', $1, NOW())
+       ON CONFLICT (key) DO UPDATE SET settings = $1, updatedat = NOW()`,
+      [JSON.stringify({ items })]
+    );
+    res.json({ success: true, message: "Menu saved successfully" });
+  } catch (error) {
+    logger.error("Save menu error:", error);
+    res.status(500).json({ success: false, message: "Server error" });
+  }
+});
+
+module.exports = router;