Update app.py

app.py

@@ -1,28 +1,52 @@
 import os
+import json
+from flask import Flask, render_template, request, redirect, url_for, abort
+from datasets import load_dataset
+from werkzeug.security import generate_password_hash, check_password_hash
+
+app = Flask(__name__)
 
 # Thiết lập HF_HOME trước khi import huggingface_hub hoặc datasets
 os.environ["HF_HOME"] = "/app/hf_cache"
 
-from flask import Flask, render_template
-from datasets import load_dataset
-from huggingface_hub import login
-import pandas as pd
+# Đường dẫn đến file data.json
+DATA_FILE = "/app/data.json"
 
-app = Flask(__name__)
+# Hàm đọc dữ liệu từ file
+def load_data():
+    try:
+        with open(DATA_FILE, "r") as f:
+            return json.load(f)
+    except FileNotFoundError:
+        return {"case_studies": [], "blog_posts": []}
 
-# Đăng nhập Hugging Face
-HF_TOKEN = os.getenv("HF_TOKEN")
-print(f"HF_TOKEN: {HF_TOKEN}")
-login(token=HF_TOKEN)
+# Hàm ghi dữ liệu vào file
+def save_data(data):
+    with open(DATA_FILE, "w") as f:
+        json.dump(data, f, indent=4)
 
-# Tải dataset
+# Tải dataset từ Hugging Face (nếu cần đồng bộ)
+HF_TOKEN = os.getenv("HF_TOKEN")
 try:
-    dataset = load_dataset("huylaughmad/web", data_files={"case_studies": "case_studies.csv"}, use_auth_token=True)
+    dataset = load_dataset("huylaughmad/web", data_files={"case_studies": "case_studies.csv"}, token=HF_TOKEN)
     print(f"Dataset loaded: {dataset}")
 except Exception as e:
     print(f"Error loading dataset: {e}")
     dataset = {"case_studies": []}
 
+# Tải dữ liệu từ file cục bộ
+data = load_data()
+
+# Bảo mật cơ bản cho CMS
+ADMIN_USERNAME = "admin"
+ADMIN_PASSWORD_HASH = generate_password_hash("password")  # Đổi mật khẩu tại đây
+
+def check_auth():
+    auth = request.authorization
+    if not auth or auth.username != ADMIN_USERNAME or not check_password_hash(ADMIN_PASSWORD_HASH, auth.password):
+        return False
+    return True
+
 # Route kiểm tra server
 @app.route('/test')
 def test():
@@ -31,19 +55,19 @@ def test():
 # Route cho trang chủ
 @app.route('/')
 def index():
-    cases = dataset['case_studies'][:6] if dataset['case_studies'] else []
+    cases = data['case_studies'][:6]
     return render_template('index.html', cases=cases)
 
 # Route cho trang thư viện
 @app.route('/thuvien')
 def thuvien():
-    cases = dataset['case_studies'] if dataset['case_studies'] else []
+    cases = data['case_studies']
     return render_template('thuvien.html', cases=cases)
 
 # Route cho trang before/after
 @app.route('/bfat')
 def bfat():
-    case = dataset['case_studies'][0] if dataset['case_studies'] else {}
+    case = data['case_studies'][0] if data['case_studies'] else {}
     return render_template('bfat.html', case=case)
 
 # Route cho trang dịch vụ
@@ -59,8 +83,91 @@ def lienhe():
 # Route cho trang blog
 @app.route('/blog')
 def blog():
-    posts = []
+    posts = data['blog_posts']
     return render_template('blog.html', posts=posts)
 
+# Route cho trang CMS
+@app.route('/cms')
+def cms():
+    if not check_auth():
+        abort(401)  # Trả về lỗi 401 nếu không xác thực
+    cases = data['case_studies']
+    return render_template('cms.html', cases=cases)
+
+# Route để thêm case study mới
+@app.route('/cms/cases/new', methods=['GET', 'POST'])
+def add_case():
+    if not check_auth():
+        abort(401)
+    if request.method == 'POST':
+        new_case = {
+            "id": len(data['case_studies']) + 1,
+            "title": request.form['case-title'],
+            "treatment": request.form['case-treatment'],
+            "description": request.form['case-description'],
+            "before_image": request.form.get('case-before-image', ''),
+            "after_image": request.form.get('case-after-image', ''),
+            "patient_name": request.form.get('case-patient-name', ''),
+            "patient_age": request.form.get('case-patient-age', ''),
+            "patient_rating": request.form.get('case-patient-rating', '5'),
+            "patient_avatar": request.form.get('case-patient-avatar', ''),
+            "status": request.form.get('case-status', 'draft'),
+            "date": request.form.get('case-date', ''),
+            "duration": request.form.get('case-duration', ''),
+            "visits": request.form.get('case-visits', ''),
+            "case_id": request.form.get('case-id', ''),
+            "seo_title": request.form.get('case-seo-title', ''),
+            "seo_description": request.form.get('case-seo-description', ''),
+            "seo_keywords": request.form.get('case-seo-keywords', '')
+        }
+        data['case_studies'].append(new_case)
+        save_data(data)
+        return redirect(url_for('cms'))
+    return render_template('cms.html', section='case-editor-section', case=None)
+
+# Route để chỉnh sửa case study
+@app.route('/cms/cases/edit/<int:id>', methods=['GET', 'POST'])
+def edit_case(id):
+    if not check_auth():
+        abort(401)
+    case = next((c for c in data['case_studies'] if c['id'] == id), None)
+    if not case:
+        return "Case not found", 404
+    if request.method == 'POST':
+        case['title'] = request.form['case-title']
+        case['treatment'] = request.form['case-treatment']
+        case['description'] = request.form['case-description']
+        case['before_image'] = request.form.get('case-before-image', '')
+        case['after_image'] = request.form.get('case-after-image', '')
+        case['patient_name'] = request.form.get('case-patient-name', '')
+        case['patient_age'] = request.form.get('case-patient-age', '')
+        case['patient_rating'] = request.form.get('case-patient-rating', '5')
+        case['patient_avatar'] = request.form.get('case-patient-avatar', '')
+        case['status'] = request.form.get('case-status', 'draft')
+        case['date'] = request.form.get('case-date', '')
+        case['duration'] = request.form.get('case-duration', '')
+        case['visits'] = request.form.get('case-visits', '')
+        case['case_id'] = request.form.get('case-id', '')
+        case['seo_title'] = request.form.get('case-seo-title', '')
+        case['seo_description'] = request.form.get('case-seo-description', '')
+        case['seo_keywords'] = request.form.get('case-seo-keywords', '')
+        save_data(data)
+        return redirect(url_for('cms'))
+    return render_template('cms.html', section='case-editor-section', case=case)
+
+# Route để xóa case study
+@app.route('/cms/cases/delete/<int:id>')
+def delete_case(id):
+    if not check_auth():
+        abort(401)
+    data['case_studies'] = [c for c in data['case_studies'] if c['id'] != id]
+    save_data(data)
+    return redirect(url_for('cms'))
+
+# Xử lý lỗi 401
+@app.errorhandler(401)
+def unauthorized(e):
+    return "Unauthorized - Vui lòng đăng nhập", 401
+
 if __name__ == '__main__':
     app.run(host='0.0.0.0', port=7860, debug=True)