app.py

#Host : 38489146.mysql.pythonanywhere-services.com
#User : 38489146
#passowrd : Modcom#2023
#Database : 38489146$default




from flask import *

import pymysql

#start
app = Flask(__name__)
#SESSIONS
# step 1: Provide secret key to your application
# Avoid sesstion hijacking, cross - site scripting
app.secret_key = "1234#&$eeeeraijaojeififdkmvfjjkmcmkvkjfojdk!@#4#$#$$^%^%^^%^^&^%&$@#!@&^&*&*(*^%#!@!GFDGDVDFHSW$R@Q$%$T$%SDCG$%#$#@$3"
#Home page
@app.route('/')
def homepage():
    return render_template('index.html')
#vendor Registration
@app.route('/vendor_registration',methods = ['POST','GET'])
def register_vendor():
    if request.method == "POST":
        vendor_name=request.form['vendor_name']
        vendor_contact=request.form['contact']
        vendor_email=request.form['email']
        vendor_location=request.form['location']
        vendor_password=request.form['password']
        vendor_photo = request.files['photo']

        vendor_photo.save('static/images/'+vendor_photo.filename)
        vendor_desc = request.form['desc']

        connection = pymysql.connect(host='localhost',user='root',password='',database='IshopDB')

        cursor = connection.cursor()

        data = (vendor_name,vendor_contact,vendor_email,vendor_location,vendor_password,vendor_photo.filename,vendor_desc)

        sql = 'insert into vendors(vendor_name,vendor_contact,vendor_email,vendor_location,vendor_password,vendor_profilephoto,vendor_desc) values(%s,%s,%s,%s,%s,%s,%s)'

        cursor.execute(sql,data)
        connection.commit()
        return render_template('vendor_register.html', message ='Vendor Regististration Successful')
    else:
        return render_template('vendor_register.html', message = "Please Register Here")


@app.route('/vendor_login', methods=['POST','GET'])
def vendor_login():
    if request.method =='POST':
        username = request.form['vendor_name']
        password = request.form['password']


        connection = pymysql.connect(host='localhost',user='root',password='',database='IshopDB')



        cursor = connection.cursor()
        sql = 'select * from vendors where vendor_name=%s and vendor_password = %s'
        data = (username,password)
        cursor.execute(sql,data)
        count = cursor.rowcount
        if count == 0:
            return render_template('vendor_login.html', message ='Invalid Credentials')
        else:
            # session: Store Information About a specific user
            user_record = cursor.fetchone()
            session['key']= user_record[1]
            session['vendor_id'] = user_record[0]
            session['contact']= user_record[2]
            session['location']= user_record[4]
            session['image']= user_record[5]
            session['desc']=user_record[7]
            return redirect('/vendor_profile')
    else:
        return render_template('vendor_login.html',message = 'Please Login Here')
    
@app.route('/vendor_profile',)
def vendor_profile():
    if 'key' in session:
        return render_template('vendor_profile.html')
    else:
        return redirect('/vendor_login')

@app.route('/vendor_logout')
def vendor_logout():
    if 'key' in session:
        session .clear()
    return redirect('/vendor_login')
@app.route('/add_product',methods = ['POST','GET'])
def add_product():
    if request.method == 'POST':
        product_name= request.form['name']
        product_desc= request.form['desc']
        product_cost= request.form['cost']
        product_discount= request.form['discount']
        product_category= request.form['category']
        product_brand= request.form['brand']
        image_url =request.files['image']
        image_url.save('static/products/'+image_url.filename)
        vendor_id = request.form['vendor']
        connection = pymysql.connect(host='localhost',user='root',password='',database='IshopDB')



        cursor = connection.cursor()
        data =(product_name,product_desc,product_cost,product_discount,product_category,product_brand,image_url.filename,vendor_id)
        sql = 'insert into products(product_name,product_desc,product_cost,product_discount,product_category,product_brand,image_url,vendor_id) values(%s,%s,%s,%s,%s,%s,%s,%s)'
        cursor.execute(sql,data)
        connection.commit()
        return render_template('vendor_profile.html',message='product added successfully')
    else:
        return render_template('vendor_profile.html', message='Please Add Product Details') 

@app.route('/view_products')
def view_products():
    connection = pymysql.connect(
        host='localhost', user='root', password='', database='IshopDB')

    cursor = connection.cursor()

    sql = "select * from products where vendor_id = %s"

    cursor.execute(sql, session['vendor_id'])

    count = cursor.rowcount

    if count == 0:
        return render_template('view_products.html', message='No products available')

    else:
        data = cursor.fetchall()
        return render_template('view_products.html', products=data)
    
@app.route('/buy_products')
def buy_products():
    connection = pymysql.connect(
        host='localhost', user='root', password='', database='IshopDB')

# These are only for phones
    cursor_phones = connection.cursor() 
    sql_phones = 'select * from products where product_category="phones" order by rand() limit 6 '
    cursor_phones.execute(sql_phones)
    phones = cursor_phones.fetchall()

    #laptops
    cursor_laptops = connection.cursor()
    sql_laptops = 'select * from products where product_category = "laptops" order by rand() limit 6'
    cursor_laptops.execute(sql_laptops)
    laptops = cursor_laptops.fetchall()

    # shoes
    cursor_shoes = connection.cursor()
    sql_shoes = 'select * from products where product_category ="shoes" order by rand() limit 6'
    cursor_shoes.execute(sql_shoes)
    shoes = cursor_shoes.fetchall()

    return render_template('buy_products.html', phones=phones,laptops = laptops,shoes = shoes)

@app.route('/single_item/<product_id>')
def single_item(product_id):
    connection = pymysql.connect(
        host='localhost', user='root', password='', database='IshopDB')

    cursor = connection.cursor()

    sql = 'select * from products where product_id = %s'

    cursor.execute(sql, product_id)
    single_record = cursor.fetchone()

    category = single_record[5]
    cursor_similar = connection.cursor()

    sql_similar = 'select * from products where product_category = %s order by rand() limit 3'
    cursor_similar.execute(sql_similar, category)
    similar_products = cursor_similar.fetchall()

    return render_template('single_item.html', single_record=single_record,similar_products=similar_products)

@app.route('/user_register',methods = ['POST','GET'])
def user_register():
    if request.method == 'POST':
        username = request.form['username']
        phone = request.form['phone']
        password = request.form['password']
        connection = pymysql.connect(
            host='localhost', user='root', password='', database='IshopDB')

        cursor = connection.cursor()
        data = (username,phone,password)
        sql = 'insert into users(username,phone,password) values(%s,%s,%s)'
        cursor.execute(sql,data)
        connection.commit()
        return render_template('user_register.html',message = 'Success!')
    else:
        return render_template('user_register.html',message = 'Please register here')

@app.route('/user_login', methods=['POST','GET'])
def user_login():
    if request.method =='POST':
        username = request.form['username']
        password = request.form['password']


        connection = pymysql.connect(host='localhost',user='root',password='',database='IshopDB')



        cursor = connection.cursor()
        sql = 'select * from users where username=%s and password = %s'
        data = (username,password)
        cursor.execute(sql,data)
        count = cursor.rowcount
        if count == 0:
            return render_template('user_login.html', message ='Invalid Credentials')
        else:
            # session: Store Information About a specific user
            user_record = cursor.fetchone()
            session['user_key']= user_record[1]
            session['user_id'] = user_record[0]
            session['contact']= user_record[2]

            return redirect('/buy_products')
    else:
        return render_template('user_login.html',message = 'Please Login Here')
    
@app.route('/user_logout')
def user_logout():
    if 'user_key' in session:
        session.clear()
    return redirect('/buy_products')
import requests
import datetime
import base64
from requests.auth import HTTPBasicAuth

@app.route('/mpesa', methods=['POST', 'GET'])
def mpesa_payment():
    if request.method == 'POST':
        phone = str(request.form['phone'])
        amount = str(request.form['amount'])
        # GENERATING THE ACCESS TOKEN
        consumer_key = "GTWADFxIpUfDoNikNGqq1C3023evM6UH"
        consumer_secret = "amFbAoUByPV2rM5A"

        api_URL = "https://sandbox.safaricom.co.ke/oauth/v1/generate?grant_type=client_credentials"  # AUTH URL
        r = requests.get(api_URL, auth=HTTPBasicAuth(consumer_key, consumer_secret))

        data = r.json()
        access_token = "Bearer" + ' ' + data['access_token']

        #  GETTING THE PASSWORD
        timestamp = datetime.datetime.today().strftime('%Y%m%d%H%M%S')
        passkey = 'bfb279f9aa9bdbcf158e97dd71a467cd2e0c893059b10f78e6b72ada1ed2c919'
        business_short_code = "174379"
        data = business_short_code + passkey + timestamp
        encoded = base64.b64encode(data.encode())
        password = encoded.decode('utf-8')

        # BODY OR PAYLOAD
        payload = {
            "BusinessShortCode": "174379",
            "Password": "{}".format(password),
            "Timestamp": "{}".format(timestamp),
            "TransactionType": "CustomerPayBillOnline",
            "Amount": '1',  # use 1 when testing
            "PartyA": phone,  # change to your number
            "PartyB": "174379",
            "PhoneNumber": phone,
            "CallBackURL": "https://modcom.co.ke/job/confirmation.php",
            "AccountReference": "Modcom",
            "TransactionDesc": "Modcom"
        }

        # POPULAING THE HTTP HEADER
        headers = {
            "Authorization": access_token,
            "Content-Type": "application/json"
        }

        url = "https://sandbox.safaricom.co.ke/mpesa/stkpush/v1/processrequest"  # C2B URL

        response = requests.post(url, json=payload, headers=headers)
        print(response.text)
        return render_template('payment.html', message='Please check your Phone to complete ')
    else:
        return render_template('single_item.html')
    
@app.route('/delete/<product_id>')
def delete(product_id):
    connection = pymysql.connect(
            host='localhost', user='root', password='', database='IshopDB')

    cursor = connection.cursor()

    sql = 'delete from products where product_id = %s'
    cursor.execute(sql,product_id)
    connection.commit()

    return redirect('/view_products')

#Add /give_feedback
@app.route('/giveus_feedback',methods = ['POST','GET'])
def giveus_feedback():
    if request.method == 'POST':
        product_name = request.form['name']
        feedback_desc = request.form['desc']
        feedback_rating = request.form['rating']
        connection = pymysql.connect(host='localhost',user='root',password='',database='IshopDB')



        cursor = connection.cursor()
        sql = 'insert into feedback(product_name,feedback_desc,feedback_rating) values(%s,%s,%s)'
        data =(product_name,feedback_desc,feedback_rating)
        cursor.execute(sql,data)
        connection.commit()
        return render_template('feedback.html',message='Feedback Successfully Saved')
    return render_template('feedback.html')

@app.route('/view_feedback')
def view_feedback():
    connection = pymysql.connect(
        host='localhost', user='root', password='', database='IshopDB')

    cursor = connection.cursor()

    sql = "select * from feedback"

    cursor.execute(sql)

    count = cursor.rowcount

    if count == 0:
        return render_template('view_feedback.html', message='No feedbacks available')

    else:
        data = cursor.fetchall()
        return render_template('view_feedback.html', feedback=data)
    
@app.route('/edit/<product_id>',methods=['POST','GET'])
def edit(product_id):
    if request.method =='POST':
        product_name = request.form['name']
        product_cost = request.form['cost']
        product_category = request.form['category']

        connection = pymysql.connect(
            host='localhost', user='root', password='', database='IshopDB')

        cursor = connection.cursor()
        sql = 'update products set product_name=%s,product_cost=%s,product_category=%s where product_id = %s'
        data = (product_name,product_cost,product_category,product_id)
        cursor.execute(sql,data)
        connection.commit()

        return redirect('/view_products')
    else:
        connection = pymysql.connect(
            host='localhost', user='root', password='', database='IshopDB')

        cursor = connection.cursor()
        sql = 'select * from products where product_id = %s'
        cursor.execute(sql,product_id)
        data = cursor.fetchone()
        return render_template('edit_products.html',data=data)

#product update
@app.route('/update/<product_id>', methods=['POST','GET'])
def update_product(product_id):
    if request.method == 'POST':
        product_name= request.form['name']
        product_desc= request.form['desc']
        product_cost= request.form['cost']
        product_discount= request.form['discount']
        product_category= request.form['category']
        product_brand= request.form['brand']
        image_url =request.files['image']
        image_url.save('static/products/'+image_url.filename)
        vendor_id = request.form['vendor']
        connection = pymysql.connect(host='localhost',user='root',password='',database='IshopDB')

        connection = pymysql.connect(
                host='localhost', user='root', password='', database='IshopDB')
        cursor = connection.cursor()
        sql ='update products set product_name=%s,product_desc = %s, product_cost = %s,product_discount=%s,product_category = %s, product_brand = %s,image_url = %s where product_id = %s'
        data = (product_name,product_desc,product_cost,product_discount,product_category,product_brand,image_url.filename,product_id)

        cursor.execute(sql,data)
        connection.commit()
        return redirect('/view_products')




    else:
        connection = pymysql.connect(
                host='localhost', user='root', password='', database='IshopDB')

        cursor = connection.cursor()
        sql = 'select * from products where product_id=%s'
        cursor.execute(sql,product_id)
        data = cursor.fetchone()
        return render_template('update.html',data = data)


app.run(debug=True)
#end

#Safaricom Daraja
#AfricaStalking

#APPLICATIONS: CRUD Operations
#C - Create Record to a Database (INSERT INTO)
#R - Read/Retrieve(SELECT)
#U - Update/PUT 
#D - Delete.