index.js

import express from "express";
import pkg from "pg";
import path from "path";

const { Pool } = pkg;
const app = express();
const port = 3000;

let currentUser = null;

// DB connection
const pool = new Pool({
  connectionString: "postgres://postgres:postgres2026@localhost:5432/blogdb",
});

// server setup
app.use(express.static("public"));
app.set("view engine", "ejs");
app.use(express.urlencoded({ extended: true }));
app.set("views", path.join(process.cwd(), "views"));

// show all blogs
app.get("/", async (req, res) => {
  const result = await pool.query(
    "SELECT * FROM blogs ORDER BY date_created DESC"
  );
  res.render("index", { blogs: result.rows, user: currentUser });
});

// sign up form
app.get("/signup", (req, res) => {
  res.render("signup", { error: null });
});

// handling sign up
app.post("/signup", async (req, res) => {
  const { user_id, password, name } = req.body;
  try {
    const exists = await pool.query("SELECT * FROM users WHERE user_id=$1", [
      user_id,
    ]);
    if (exists.rows.length > 0) {
      return res.render("signup", { error: "User already exists!" });
    }
    await pool.query(
      "INSERT INTO users (user_id, password, name) VALUES ($1, $2, $3)",
      [user_id, password, name]
    );
    res.redirect("/signin");
  } catch (err) {
    console.error(err);
    res.send("Error creating user");
  }
});

// sign in form
app.get("/signin", (req, res) => {
  res.render("signin", { error: null });
});

// handling sign in
app.post("/signin", async (req, res) => {
  const { user_id, password } = req.body;
  const result = await pool.query(
    "SELECT * FROM users WHERE user_id=$1 AND password=$2",
    [user_id, password]
  );
  if (result.rows.length === 0) {
    return res.render("signin", { error: "Invalid credentials" });
  }
  res.redirect("/");
  currentUser = {
    user_id: result.rows[0].user_id,
    name: result.rows[0].name
};
res.redirect("/");
});

// create blog form
app.get("/new", (req, res) => {
  res.render("new");
});

// insert new blog into db
app.post("/new", async (req, res) => {
  const { creator_name, creator_user_id, title, body } = req.body;
  await pool.query(
    "INSERT INTO blogs (creator_name, creator_user_id, title, body) VALUES ($1,$2,$3,$4)",
    [creator_name, creator_user_id, title, body]
  );
  res.redirect("/");
});

// edit blog
app.get("/edit/:id", async (req, res) => {
  const { id } = req.params;
  try {
    const result = await pool.query("SELECT * FROM blogs WHERE blog_id = $1", [id]);
    if (result.rows.length === 0) {
      return res.status(404).send("Post not found");
    }
    const blog = result.rows[0];
    res.render("edit", { blog });
  } catch (err) {
    console.error(err);
    res.send("Error loading edit form");
  }
});

// handle editing
app.post("/edit/:id", async (req, res) => {
  const { id } = req.params;
  const { title, body, creator_user_id } = req.body;
  try {
    await pool.query(
      "UPDATE blogs SET title=$1, body=$2 WHERE blog_id=$3 AND creator_user_id=$4",
      [title, body, id, creator_user_id]
    );
    res.redirect("/");
  } catch (err) {
    console.error(err);
    res.send("Error updating post");
  }
});

// delete blog
app.post('/delete/:id', async (req, res) => {
  const { id } = req.params;
  const { creator_user_id } = req.body;
  try {
    await pool.query(
      'DELETE FROM blogs WHERE blog_id=$1 AND creator_user_id=$2',
      [id, creator_user_id]
    );
    res.redirect('/');
  } catch (err) {
    console.error(err);
    res.send("Error deleting post");
  }
});

app.listen(port, () => {
  console.log(`Server running on port ${port}.`);
});