added admin page, adjusted way of creating posts

controllers/admin.go

@@ -0,0 +1,87 @@
+package controllers
+
+import (
+	"crypto/sha256"
+	"net/http"
+
+	"github.com/gin-gonic/gin"
+	"gitlab.com/rawleyifowler/site-rework/models"
+	"gitlab.com/rawleyifowler/site-rework/utils"
+)
+
+var (
+	key        string            = utils.LoadApiKey("api_key.pem")
+	admin_hash string            = utils.LoadAdminHash("admin_hash.pem")
+	att        map[string]uint32 = make(map[string]uint32)
+)
+
+// Ensure is logged in
+func AdminOnly() gin.HandlerFunc {
+	return func(c *gin.Context) {
+		k, err := c.Cookie("admin_key")
+		if err != nil {
+			c.Redirect(http.StatusPermanentRedirect, "/admin/")
+		}
+		if k == key {
+			c.Next()
+		}
+	}
+}
+
+func RegisterAdminGroup(r *gin.RouterGroup) {
+	r.GET("/", utils.ServePage("login.tmpl"))
+	r.POST("/login", HandleLogin)
+	r.GET("/post", AdminOnly(), utils.ServePage("create_post.tmpl"))
+	r.POST("/post", AdminOnly(), CreatePost)
+}
+
+func HandleLogin(c *gin.Context) {
+	if att[c.ClientIP()] > 5 {
+		c.Redirect(http.StatusPermanentRedirect, "/admin/")
+	}
+	err := c.Request.ParseForm()
+	if err != nil {
+		c.Redirect(http.StatusPermanentRedirect, "/admin/")
+	}
+	f := c.Request.Form
+	for _, v := range []string{"username", "password"} {
+		if !f.Has(v) {
+			c.AbortWithStatus(http.StatusNotAcceptable)
+		}
+	}
+	str := f.Get("username") + f.Get("password")
+	s := sha256.New()
+	s.Sum([]byte(str))
+	var h []byte
+	s.Write(h)
+	if string(h) == admin_hash {
+		c.SetCookie("admin_key", key, 1, "/", "rawley.xyz", true, true)
+		c.Redirect(http.StatusTemporaryRedirect, "/admin/post")
+	} else {
+		att[c.ClientIP()]++
+		c.Redirect(http.StatusTemporaryRedirect, "/admin/")
+	}
+}
+
+func CreatePost(c *gin.Context) {
+	err := c.Request.ParseForm()
+	if err != nil {
+		c.AbortWithStatus(http.StatusBadRequest)
+	}
+	f := c.Request.Form
+	for _, v := range []string{"title", "content", "url"} {
+		if !f.Has(v) {
+			c.AbortWithStatus(http.StatusNotAcceptable)
+		}
+	}
+	b := AddBlogPost(&models.BlogPost{
+		Title:   f.Get("title"),
+		Content: f.Get("content"),
+		Url:     f.Get("url"),
+	})
+	if b {
+		c.Redirect(http.StatusTemporaryRedirect, "/blog/post/"+f.Get("url"))
+	} else {
+		c.Redirect(http.StatusTemporaryRedirect, "/admin/post")
+	}
+}