(feat): We've got a working admin panel

app.py

@@ -1,41 +1,42 @@
 import os
-import sqlite3
 import smtplib
 from email.mime.text import MIMEText
-from flask import Flask, render_template, request, redirect, url_for, flash
+from flask import Flask, render_template, request, redirect, url_for, flash, session
 from dotenv import load_dotenv
+from werkzeug.security import check_password_hash
+from database import init_db, get_all_emails, get_admin, create_default_admin
 
 load_dotenv()
 app = Flask(__name__)
-
+# Use a secret key from .env; ensure your .env sets SECRET_KEY
 app.secret_key = os.getenv('SECRET_KEY')
 
-DATABASE_URL = os.getenv('DATABASE_URL')
+# SMTP settings (for sending update emails)
 SMTP_SERVER = os.getenv('SMTP_SERVER')
 SMTP_PORT = int(os.getenv("SMTP_PORT", 465))
 SMTP_USER = os.getenv('SMTP_USER')
 SMTP_PASSWORD = os.getenv('SMTP_PASSWORD')
 
-def get_all_emails():
-    """Retrieve all subscriber emails from the database"""
-    try:
-        conn = sqlite3.connect(DATABASE_URL)
-        cursor = conn.cursor()
-        cursor.execute('SELECT email FROM subscribers')
-        results = cursor.fetchall()
-        conn.close()
-        return [row[0] for row in results]
-    except Exception as e:
-        print(f"Error: {e}")
-        return []
+# Initialize the database and create default admin user if necessary.
+init_db()
+create_default_admin()
 
-def send_update_email(subject, body):
-    """Send an update email"""
+def login_required(f):
+    from functools import wraps
+    @wraps(f)
+    def decorated_function(*args, **kwargs):
+        if "username" not in session:
+            return redirect(url_for('login'))
+        return f(*args, **kwargs)
+    return decorated_function
+
+def process_send_update_email(subject, body):
+    """Helper function to send an update email to all subscribers."""
     subscribers = get_all_emails()
     if not subscribers:
-        return "No subscribers found"
+        return "No subscribers found."
     try:
-        server = smtplib.SMTP(SMTP_SERVER, SMTP_PORT, timeout=10)
+        server = smtplib.SMTP_SSL(SMTP_SERVER, SMTP_PORT, timeout=10)
         server.set_debuglevel(True)
         server.login(SMTP_USER, SMTP_PASSWORD)
         for email in subscribers:
@@ -44,7 +45,7 @@ def send_update_email(subject, body):
             msg['From'] = SMTP_USER
             msg['To'] = email
             server.sendmail(SMTP_USER, email, msg.as_string())
-            print(f"Updated email for {email} has been sent.")
+            print(f"Update email sent to: {email}")
         server.quit()
         return "Email has been sent."
     except Exception as e:
@@ -52,21 +53,46 @@ def send_update_email(subject, body):
         return f"Failed to send email: {e}"
 
 @app.route('/')
+@login_required
 def index():
     """Displays all subscriber emails"""
     emails = get_all_emails()
     return render_template("admin_index.html", emails=emails)
 
-@app.route('/send_update_email', methods=['GET', 'POST'])
-def send_update_email():
-    """Display a form to send an update email"""
+@app.route('/send_update', methods=['GET', 'POST'])
+@login_required
+def send_update():
+    """Display a form to send an update email; process submission on POST."""
     if request.method == 'POST':
         subject = request.form['subject']
         body = request.form['body']
-        result_message = send_update_email(subject, body)
+        # Call the helper function using its new name.
+        result_message = process_send_update_email(subject, body)
         flash(result_message)
-        return redirect(url_for("send_update_email"))
+        return redirect(url_for("send_update"))
     return render_template("send_update.html")
 
+@app.route('/login', methods=['GET', 'POST'])
+def login():
+    if request.method == 'POST':
+        username = request.form.get('username')
+        password = request.form.get('password')
+        admin = get_admin(username)
+        # Expect get_admin() to return a tuple like (username, password_hash)
+        if admin and check_password_hash(admin[1], password):
+            session['username'] = username
+            flash("Logged in successfully", "success")
+            return redirect(url_for("index"))
+        else:
+            flash("Invalid username or password", "danger")
+            return redirect(url_for("login"))
+    return render_template("login.html")
+
+@app.route('/logout')
+def logout():
+    session.pop('username', None)
+    flash("Logged out successfully", "success")
+    return redirect(url_for("login"))
+
 if __name__ == '__main__':
-    app.run(port=5001, debug=True)
+    app.run(port=5000, debug=True)