Select Git revision
vite.config.js
productController.js 5.01 KiB
const pool = require('../db');
exports.showAddProductForm = (req, res) => {
if (!req.session.userIdEmail) {
return res.redirect('/login');
}
res.render('addProduct');
};
exports.createProduct = async (req, res) => {
const { product_name, price, image, description } = req.body;
const owner = req.session.userIdEmail;
try {
const sql = 'INSERT INTO products (product_name, price, image, description, owner) VALUES (?, ?, ?, ?, ?)';
await pool.query(sql, [product_name, price, image, description, owner]);
res.redirect('/');
} catch (err) {
res.status(500).send('เกิดข้อผิดพลาดในการเพิ่มสินค้า: ' + err.message);
}
};
exports.showUpdateProductForm = async (req, res) => {
const productId = req.params.id;
if (!req.session.userIdEmail) {
return res.redirect('/login');
}
try {
const [rows] = await pool.query('SELECT * FROM products WHERE product_id = ?', [productId]);
if (rows.length === 0) {
return res.status(404).send('ไม่พบสินค้านี้');
}
res.render('editProduct', { product: rows[0] });
} catch (err) {
res.status(500).send('เกิดข้อผิดพลาดในการโหลดข้อมูลสินค้า: ' + err.message);
}
};
exports.updateProduct = async (req, res) => {
const productId = req.params.id;
const { product_name, price, image, description } = req.body;
const currentUserEmail = req.session.userIdEmail;
try {
const [rows] = await pool.query('SELECT * FROM products WHERE product_id = ?', [productId]);
if (rows.length === 0) {
return res.status(404).send('ไม่พบสินค้านี้');
}
const product = rows[0];
if (product.owner !== currentUserEmail) {
return res.status(403).send('คุณไม่มีสิทธิ์แก้ไขสินค้านี้');
}
const sql = 'UPDATE products SET product_name = ?, price = ?, image = ?, description = ? WHERE product_id = ?';
await pool.query(sql, [product_name, price, image, description, productId]);
res.redirect('/');
} catch (err) {
res.status(500).send('เกิดข้อผิดพลาดในการอัปเดตสินค้า: ' + err.message);
}
};
exports.deleteProduct = async (req, res) => {
const productId = req.params.id;
const currentUserEmail = req.session.userIdEmail;
try {
const [rows] = await pool.query('SELECT * FROM products WHERE product_id = ?', [productId]);
if (rows.length === 0) {
return res.status(404).send('ไม่พบสินค้านี้');
}
const product = rows[0];
if (product.owner !== currentUserEmail) {
return res.status(403).send('คุณไม่มีสิทธิ์ลบสินค้านี้');
}
await pool.query('DELETE FROM products WHERE product_id = ?', [productId]);
res.redirect('/');
} catch (err) {
res.status(500).send('เกิดข้อผิดพลาดในการลบสินค้า: ' + err.message);
}
};
exports.searchProducts = async (req, res) => {
const searchQuery = req.query.q;
try {
const sql = 'SELECT * FROM products WHERE product_name LIKE ?';
const [rows] = await pool.query(sql, [`%${searchQuery}%`]);
res.render('searchResults', { products: rows, searchQuery });
} catch (err) {
res.status(500).send('เกิดข้อผิดพลาดในการค้นหา: ' + err.message);
}
};
exports.orderHistory = async (req, res) => {
if (!req.session.userIdEmail) {
return res.redirect('/login');
}
try {
const userEmail = req.session.userIdEmail;
const [user] = await pool.query('SELECT id FROM users WHERE email = ?', [userEmail]);
if (user.length === 0) {
return res.status(404).send('ไม่พบผู้ใช้งาน');
}
const userId = user[0].id;
const [orders] = await pool.query(
'SELECT * FROM orders WHERE user_id = ? ORDER BY created_at DESC',
[userId]
);
for (let order of orders) {
const [items] = await pool.query(
`SELECT oi.*, p.product_name, p.image
FROM order_items oi
JOIN products p ON oi.product_id = p.product_id
WHERE oi.order_id = ?`,
[order.order_id]
);
order.items = items;
}
res.render('orderHistory', { orders });
} catch (err) {
res.status(500).send('เกิดข้อผิดพลาดในการดึงประวัติการสั่งซื้อ: ' + err.message);
}
};