Created
March 16, 2016 02:21
-
-
Save anonymous/894b151cc981f783e3af to your computer and use it in GitHub Desktop.
Revisions
-
Anonymous created this gist
Mar 16, 2016 .There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -0,0 +1,106 @@ <!DOCTYPE html> <head> <title>salary: submit info</title> <link rel="stylesheet" href="http://yui.yahooapis.com/pure/0.6.0/base-min.css"> <link rel="stylesheet" href="http://yui.yahooapis.com/pure/0.6.0/pure-min.css"> <meta name="viewport" content="width=device-width, initial-scale=1"> <style> body { padding: 1em; } </style> </head> <body> <h1>Enter Information</h1> <h2>{{.Name}}</h2> <p>Please enter your information. Once you have entered your information and a total of {{.MinSize}} people have entered theirs also, visting this page will show you the results.</p> <form action="/pool/salary" method="post" class="pure-form pure-form-stacked"> <legend>Salary Info</legend> <fieldset> <label for="amount">Salary in USD</label> <input type="number" name="amount" id="amount" min="1" placeholder="12345" required> <label for="title">Title</label> <input type="text" name="title" id="title" value="Software Engineer"> <label for="exp">Years of experience</label> <input type="number" name="yearsexperience" id="exp" min="0" max="123" placeholder="1"> <label for="hours">Hours per week</label> <input type="number" name="hourswk" id="hours" min="1" max="168" placeholder="40"> Mandatory overtime <label for="o1"> <input id="o1" type="radio" name="overtime" value="never" checked> Never </label> <label for="o2"> <input id="o2" type="radio" name="overtime" value="rarely"> Rarely </label> <label for="o3"> <input id="o3" type="radio" name="overtime" value="sometimes"> Sometimes </label> <label for="o4"> <input id="o4" type="radio" name="overtime" value="often"> Often </label> Paid overtime <label for="po1"> <input id="po1" type="radio" name="overtimepaid" value="unpaid" checked> Unpaid </label> <label for="po2"> <input id="po2" type="radio" name="overtimepaid" value="paid"> Paid </label> Remote / Telecommuting <label for="r1"> <input id="r1" type="radio" name="remote" value="no" checked> No </label> <label for="r2"> <input id="r2" type="radio" name="remote" value="special"> Special (infrequently for things such as bad weather) </label> <label for="r3"> <input id="r3" type="radio" name="remote" value="partial"> Partial Telecommute </label> <label for="r4"> <input id="r4" type="radio" name="remote" value="yes"> Full Telecommute </label> Travel <label for="t1"> <input id="t1" type="radio" name="travel" value="never" checked> Never </label> <label for="t2"> <input id="t2" type="radio" name="travel" value="rarely"> Rarely </label> <label for="t3"> <input id="t3" type="radio" name="travel" value="sometimes"> Sometimes </label> <label for="t4"> <input id="t4" type="radio" name="travel" value="often"> Often </label> <input type="hidden" name="id" value="{{.UUID}}"> <input type="submit" value="Submit" class="pure-button pure-button-primary"> </fieldset> </form> </body> </html> This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -0,0 +1,31 @@ <!DOCTYPE html> <head> <title>salary</title> <link rel="stylesheet" href="http://yui.yahooapis.com/pure/0.6.0/base-min.css"> <link rel="stylesheet" href="http://yui.yahooapis.com/pure/0.6.0/pure-min.css"> <meta name="viewport" content="width=device-width, initial-scale=1"> <style> body { padding: 1em; } </style> </head> <body> <h1>anonsalary</h1> <h2>Share salary information anonymously with friends.</h2> <form action="/pool" method="post" class="pure-form pure-form-stacked"> <fieldset> <legend>New Share</legend> <label for="poolName">Pool name</label> <input type="text" name="poolName" id="poolName" required> <label for="minSize">Minimum #/submissions until results are displayed</label> <input type="number" name="minSize" id="minSize" min="1" value="5" required></p> <input type="submit" value="Share" class="pure-button pure-button-primary"> </fieldset> </form> </body> </html> This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -0,0 +1,22 @@ <!DOCTYPE html> <head> <title>salary</title> <link rel="stylesheet" href="http://yui.yahooapis.com/pure/0.6.0/base-min.css"> <link rel="stylesheet" href="http://yui.yahooapis.com/pure/0.6.0/pure-min.css"> <meta name="viewport" content="width=device-width, initial-scale=1"> <style> body { padding: 1em; } </style> </head> <body> <h1>anonsalary</h1> <h2>{{.Name}}</h2> <p>This pool will not be visible until {{.MinSize}} users have submitted their information.</p> <p>To share this pool, give your friends the current URL in your browser.</p> <p>Please check back again later.</p> </body> </html> This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -0,0 +1,44 @@ <!DOCTYPE html> <head> <title>salary: view pool</title> <link rel="stylesheet" href="http://yui.yahooapis.com/pure/0.6.0/base-min.css"> <link rel="stylesheet" href="http://yui.yahooapis.com/pure/0.6.0/pure-min.css"> <meta name="viewport" content="width=device-width, initial-scale=1"> <style> body { padding: 1em; } </style> </head> <body> <h1>Salary Information</h1> <h2>{{.PoolName}}</h2> <table class="pure-table pure-table-striped"> <thead> <th>Title</th> <th>Salary</th> <th>Hours</th> <th>Exp</th> <th>OT</th> <th>Paid OT</th> <th>Remote</th> <th>Travel</th> </thead> <tbody> {{range .Salaries}} <tr> <td>{{.Title}}</td> <td>{{.Amount}}</td> <td>{{.HoursWk}}</td> <td>{{.YearsExperience}}</td> <td>{{.Overtime}}</td> <td>{{.OvertimePaid}}</td> <td>{{.Remote}}</td> <td>{{.Travel}}</td> </tr> {{end}} </tbody> </body> </html> This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -0,0 +1,338 @@ // salary // // This is a web application for anonymously sharing salary information among a // pool of participants. Each pool is identified by a UUID. A user cannot view // the results of the pool unless they first share their information; the pool // must also meet a mininum number of contributors set at pool creation time. // // It requires PostgreSQL. Configure the database connection via the following // environment variables: SUSER, SPASS, SDB (database name). Commands to // create the two necessary tables are below. // // I meant to clean this up a bit and write tests, but after two months I // haven't gotten around to it. Sorry for any bad code here. // // A good change would be to make hours/wk an enum like the overtime field, so // that there's less potential for inadvertently knowing who submitted a // salary ("I know $foo works 42 hours, and this entry is for 42 hours"). // // Copyright notice: // // This program is free software: you can redistribute it and/or modify // it under the terms of the GNU General Public License as published by // the Free Software Foundation, either version 3 of the License, or // (at your option) any later version. // // This program is distributed in the hope that it will be useful, // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU General Public License for more details. // // You should have received a copy of the GNU General Public License // along with this program. If not, see <http://www.gnu.org/licenses/>. package main import ( "database/sql" "errors" "fmt" _ "github.com/lib/pq" "github.com/satori/go.uuid" "html/template" "io/ioutil" "log" "net/http" "os" "strconv" "time" ) // create table pool ( // pool_id serial primary key, // uuid uuid not null, // submit uuid not null, // name varchar(140) not null, // minsize smallint not null // ) type pool struct { Id int32 UUID uuid.UUID Submit uuid.UUID Name string MinSize int16 } // create table salary ( // salary_id serial primary key, // amount int not null, // hourswk smallint not null, // overtime varchar(9) check (overtime in ('never', 'rarely', 'sometimes', 'often')) not null, // overtimepaid bool not null, // remote varchar(7) check (remote in ('no', 'special', 'partial', 'yes')) not null, // title varchar (100) not null, // yearsexperience smallint not null, // travel varchar(9) check (travel in ('never', 'rarely', 'sometimes', 'often')) not null, // pool_id integer not null, // constraint pool_id foreign key (pool_id) // references pool (pool_id) match simple // on update cascade on delete cascade // ); type salary struct { Amount int32 HoursWk int16 Overtime string OvertimePaid bool Remote string Title string Travel string YearsExperience int16 } var ( db *sql.DB indexPage []byte enterInfoTemplate = template.Must(template.ParseFiles("enter_info.html")) poolTemplate = template.Must(template.ParseFiles("pool.html")) notEnoughTemplate = template.Must(template.ParseFiles("notenough.html")) ) type poolTemplateData struct { PoolName string Salaries []salary } func index(w http.ResponseWriter, r *http.Request) { w.Write(indexPage) } func submitPool(w http.ResponseWriter, r *http.Request) { minSize, err := strconv.ParseUint(r.FormValue("minSize"), 10, 0) if err != nil || minSize < 1 { log.Println(err) http.Error(w, "Invalid minimum share size", http.StatusBadRequest) return } name := r.FormValue("poolName") if name == "" { log.Println(err) http.Error(w, "Invalid pool name", http.StatusBadRequest) return } u := uuid.NewV4().String() s := uuid.NewV4().String() stmt := "insert into pool(uuid, submit, name, minsize) values($1,$2,$3,$4)" if _, err := db.Exec(stmt, u, s, name, minSize); err != nil { log.Println(err) http.Error(w, "error creating pool; please try again", http.StatusInternalServerError) return } poolUrl := fmt.Sprintf("/pool?id=%s", u) http.Redirect(w, r, poolUrl, 303) } func poolHandler(w http.ResponseWriter, r *http.Request) { if r.Method == "POST" { submitPool(w, r) return } id := r.FormValue("id") if id == "" { http.Error(w, "missing pool id", http.StatusBadRequest) return } submitted, no_submitted := r.Cookie(fmt.Sprintf("salary_%s", id)) // Retrieve Pool p, err := getPool(id, w) if err != nil { return } // Enter salary if no cookie or cookie doesn't match submit key if no_submitted != nil || submitted.Value != p.Submit.String() { enterSalary(w, r, p) return } // Get count var count int16 stmt := `select count(*) from salary where pool_id=$1` err = db.QueryRow(stmt, p.Id).Scan(&count) switch { case err == sql.ErrNoRows: http.Error(w, "requested pool does not exist", http.StatusNotFound) return case err != nil: log.Println(err) http.Error(w, "error retrieving pool info", http.StatusInternalServerError) return } if count >= p.MinSize { displayPool(w, r, p) return } if err := notEnoughTemplate.Execute(w, p); err != nil { log.Println(err.Error()) http.Error(w, "error rendering template", http.StatusInternalServerError) return } return } func getPool(id string, w http.ResponseWriter) (pool, error) { gpError := func(e string, status int) (pool, error) { log.Println(e) http.Error(w, e, status) return pool{}, errors.New(e) } p := pool{} var u, s string stmt := `select pool_id, uuid, submit, name, minsize from pool where uuid=$1` err := db.QueryRow(stmt, id).Scan(&p.Id, &u, &s, &p.Name, &p.MinSize) switch { case err == sql.ErrNoRows: return gpError("requested pool does not exist", http.StatusNotFound) case err != nil: log.Println(err) return gpError("error retrieving pool info", http.StatusInternalServerError) } p.UUID = uuid.FromStringOrNil(u) p.Submit = uuid.FromStringOrNil(s) return p, nil } func enterSalary(w http.ResponseWriter, r *http.Request, p pool) { if err := enterInfoTemplate.Execute(w, p); err != nil { log.Println(err.Error()) http.Error(w, "error rendering template", http.StatusInternalServerError) return } } func submitSalary(w http.ResponseWriter, r *http.Request) { if r.Method != "POST" { http.Error(w, "you must POST a salary; GET not supported", http.StatusNotImplemented) return } isNeg := func(v string) bool { n, err := strconv.ParseInt(r.FormValue(v), 10, 32) if err != nil { // Failure to convert to int can just return true, since we end up // erroring out anyways return true } return n < 0 } if isNeg("amount") || isNeg("yearsexperience") || isNeg("hourswk") { http.Error(w, "cannot use negative values", http.StatusBadRequest) return } id := r.FormValue("id") submitted, err := r.Cookie(fmt.Sprintf("salary_%s", id)) // For checking if already submitted, don't actually need to compare with // the submit key from the pool table if submitted.String() != "" { http.Error(w, "you have already submitted your salary", http.StatusBadRequest) return } p, err := getPool(id, w) if err != nil { return } ins := `insert into salary(amount, hourswk, overtime, overtimepaid, remote, title, yearsexperience, travel, pool_id) values($1,$2,$3,$4,$5,$6,$7,$8,$9)` _, err = db.Exec(ins, r.FormValue("amount"), r.FormValue("hourswk"), r.FormValue("overtime"), r.FormValue("overtimepaid") == "paid", r.FormValue("remote"), r.FormValue("title"), r.FormValue("yearsexperience"), r.FormValue("travel"), p.Id) if err != nil { log.Println(err) http.Error(w, "All fields are required. Sorry, no fancy helpful message yet. :)", http.StatusInternalServerError) return } expiration := time.Now().Add(365 * 24 * time.Hour) cookie := http.Cookie{Name: fmt.Sprintf("salary_%s", id), Value: p.Submit.String(), Expires: expiration} http.SetCookie(w, &cookie) poolUrl := fmt.Sprintf("/pool?id=%s", p.UUID.String()) http.Redirect(w, r, poolUrl, 303) } func displayPool(w http.ResponseWriter, r *http.Request, p pool) { stmt := `select amount, hourswk, overtimepaid, remote, title, yearsexperience, travel, overtime from salary where pool_id=$1 order by title asc, amount desc` rows, err := db.Query(stmt, p.Id) switch { case err == sql.ErrNoRows: http.Error(w, "no salaries for pool", http.StatusNotFound) return case err != nil: log.Println(err) http.Error(w, "error retrieving group salary info", http.StatusInternalServerError) return } salaries := make([]salary, 0) for rows.Next() { s := salary{} err = rows.Scan(&s.Amount, &s.HoursWk, &s.OvertimePaid, &s.Remote, &s.Title, &s.YearsExperience, &s.Travel, &s.Overtime) if err != nil { log.Println(err) http.Error(w, "error retrieving individual salary info", http.StatusInternalServerError) return } salaries = append(salaries, s) } data := poolTemplateData{ PoolName: p.Name, Salaries: salaries, } if err := poolTemplate.Execute(w, data); err != nil { log.Println(err.Error()) http.Error(w, "error rendering template", http.StatusInternalServerError) return } } func main() { ip, err := ioutil.ReadFile("index.html") if err != nil { panic(err) } indexPage = ip dbinfo := fmt.Sprintf("user=%s password=%s dbname=%s sslmode=disable", os.Getenv("SUSER"), os.Getenv("SPASS"), os.Getenv("SDB")) db, err = sql.Open("postgres", dbinfo) if err != nil { log.Fatal("failed to open database", err) } defer db.Close() http.HandleFunc("/", index) http.HandleFunc("/pool", poolHandler) http.HandleFunc("/pool/salary", submitSalary) log.Fatal(http.ListenAndServe(":9001", nil)) }