This repository has been archived on 2026-10-23. You can view files and clone it. You cannot open issues or pull requests or push a commit.
Files
tekstmelding/tekstmelding.py
T

169 lines
5.3 KiB
Python

from flask import Flask, request, g, abort, jsonify
import MySQLdb
import MySQLdb.cursors
import datetime
import config
from utils import CustomJSONEncoder, generate_activation_code
app = Flask(__name__)
app.config.from_object('config')
app.json_encoder = CustomJSONEncoder
def connect_db():
"""Connects to our database."""
db = MySQLdb.connect(
host = app.config['DATABASE_HOST'],
user = app.config['DATABASE_USER'],
passwd = app.config['DATABASE_PASS'],
db = app.config['DATABASE_NAME'],
cursorclass = MySQLdb.cursors.DictCursor,
charset='utf8')
return db
def get_db():
"""Opens a new database connection if there is none yet for the
current application context."""
if not hasattr(g, 'db'):
g.db = connect_db()
return g.db
@app.teardown_appcontext
def close_db(error):
"""Closes the database connection at the end of the request."""
if hasattr(g, 'db'):
g.db.close()
def query_db(query, args=(), one=False, lastrowid=False):
"""Queries the database.
Will use an existing or new database connection, create a cursor,
execute the query, fetch all rows, close the cursor then return the rows.
"""
assert not (one and lastrowid)
cur = get_db().cursor()
if app.config['DEBUG']:
app.logger.debug("Query: %s\nArgs: %s", query, args)
cur.execute(query, args)
if lastrowid:
ret = cur.lastrowid
else:
rv = cur.fetchall()
ret = (rv[0] if rv else None) if one else rv
cur.close()
return ret
def get_user_by_phone(number):
user = query_db("""
SELECT user.*,
(CASE WHEN (user.expires IS NULL) THEN 1 ELSE 0 END) AS expires_lifelong
FROM din_user user, din_userphonenumber phone
WHERE phone.number = %s AND
user.id = phone.user_id""",
[number], one=True)
return user
def log_incoming(userid, gsm, codeword, message, operator, shortno, action, ip, simulation):
return query_db("""
INSERT INTO din_sms_received
(userid, gsm, codeword, message, operator, shortno, action, IP, simulation)
VALUES
(%s, %s, %s, %s, %s, %s, %s, %s, %s)
""", [userid, gsm, codeword, message, operator, shortno, action, ip, simulation], lastrowid=True)
def log_sent(response_to, msgid, sender, receiver, countrycode, message, operator, codeword, billing_price, use_dlr, simulation, activation_code):
query_db("""
INSERT INTO din_sms_sent
(response_to, msgid, sender, receiver, countrycode, message, operator, codeword, billing_price, use_dlr, simulation, activation_code)
VALUES
(%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s)
""", [response_to, msgid, sender, receiver, countrycode, message, operator, codeword, billing_price, use_dlr, simulation, activation_code])
@app.route('/')
def main():
return 'Tekstmelding er bezt!'
@app.route('/callback')
def callback():
gsm = request.args.get('gsm', None)
operator = request.args.get('operator', None)
codeword = request.args.get('kodeord', None)
message = request.args.get('tekst', None)
shortno = request.args.get('kortnr', None)
ip = request.remote_addr
if not gsm.isdigit():
# What the fuck, man, that's not a phone number, man.
abort(400) # Bad Request
# We could use the country code from 'operator' here,
# but can we can't receive messages from operators. Right?
user = get_user_by_phone("+47%s" % gsm)
id_incoming_sms = log_incoming(
userid = int(user['id']) if user else None,
gsm = gsm,
codeword = codeword,
message = message,
operator = operator,
shortno = shortno,
action = 'no_action',
ip = ip,
simulation = 0)
if app.config['DEBUG']:
app.logger.debug("cursor.lastrowid: %s", id_incoming_sms)
if user:
# A friendly reminder about how the 'expires' column works:
# NULL means the membership should never expire
# 0000-00-00 is the default and means the user has never had a membership
# YYYY-MM-DD is the day the membership will or has expired
#
# datetime.date does not accept the date 0000-00-00, instead we end
# up with None. As a workaround we do the NULL comparison with SQL
# and store the result in 'expires_lifelong'.
expires = user.get('expires', None)
expires_lifelong = user.get('expires_lifelong', None)
# Does this user have a lifelong membership?
if expires_lifelong:
app.logger.debug("You have lifelong membership.")
# No need to renew non-expired memberships.
elif type(expires) is datetime.date and expires > datetime.date.today():
app.logger.debug("Your membership has not expired yet.")
# Should we renew?
elif not expires or (type(expires) is datetime.date and expires < datetime.date.today()):
app.logger.debug("Your membership has been renewed.")
else:
assert False, "What a trainwreck, we shouldn't be here"
return jsonify(user.items())
else:
result = {'result': 'No existing member.', 'action': 'new_membership_send_code'}
activation_code = generate_activation_code()
log_sent(
response_to = id_incoming_sms,
msgid = 1337,
sender = 'dns',
receiver = gsm,
countrycode = operator[:1],
message = "Velkommen! Dette er et midlertidig medlemsbevis. Aktiver medlemskapet ditt her: https://s.neuf.no/sms?n=%s&c=%s" % (gsm, activation_code),
operator = operator,
codeword = codeword,
billing_price = 230 * 100,
use_dlr = 0,
simulation = 0,
activation_code = activation_code)
return jsonify(result)
if __name__ == '__main__':
app.run()