Merge pull request #64 from Pomog/yurii_dev

validations

.gitignore

@@ -28,5 +28,4 @@ getGitUdates.sh
 # corrected fileName
 getGitUpdates.sh
 mainDB.db
-*.db
-
+*.db

internal/handler/homeHandler.go

@@ -120,6 +120,12 @@ func (m *Repository) HomeHandler(w http.ResponseWriter, r *http.Request) {
 			return
 		}
 
+		// checking text length
+		if len(thread.Subject) > 500 {
+			setErrorAndRedirect(w, r, "Only 500 symbols allowed", "/error-page")
+			return
+		}
+
 		id, err := m.DB.CreateThread(thread)
 		if err != nil {
 			setErrorAndRedirect(w, r, "Could not create a thread", "/error-page")

internal/handler/registerHandler.go

@@ -84,6 +84,31 @@ func (m *Repository) RegisterHandler(w http.ResponseWriter, r *http.Request) {
 			}
 			defer file.Close()
 
+			// Validate file size (1 MB limit)
+			if handler.Size > 1<<20 {
+				form.Errors.Add("avatar", "File size should be below 1 MB")
+				data := make(map[string]interface{})
+				data["registrationData"] = registrationData
+				renderer.RendererTemplate(w, "register.page.html", &models.TemplateData{
+					Form: form,
+					Data: data,
+				})
+				return
+			}
+
+			// Validate file type (must be an image)
+			contentType := handler.Header.Get("Content-Type")
+			if contentType != "image/jpeg" && contentType != "image/png" && contentType != "image/gif" {
+				form.Errors.Add("avatar", "Invalid file type. Only JPEG, PNG, and GIF images are allowed")
+				data := make(map[string]interface{})
+				data["registrationData"] = registrationData
+				renderer.RendererTemplate(w, "register.page.html", &models.TemplateData{
+					Form: form,
+					Data: data,
+				})
+				return
+			}
+
 			// Create a new file in the "static/ava" directory
 			newFilePath := filepath.Join("static/ava", handler.Filename)
 			newFile, errFileCreate := os.Create(newFilePath)
@@ -105,6 +130,7 @@ func (m *Repository) RegisterHandler(w http.ResponseWriter, r *http.Request) {
 			err := m.DB.CreateUser(registrationData)
 			if err != nil {
 				setErrorAndRedirect(w, r, "DB Error func CreateUser", "/error-page")
+				return
 			}
 			message := fmt.Sprintf("User %s is registered", registrationData.UserName)
 			helper.SendEmail(m.App.ServerEmail, message)
@@ -113,6 +139,7 @@ func (m *Repository) RegisterHandler(w http.ResponseWriter, r *http.Request) {
 
 	} else {
 		http.Error(w, "No such method", http.StatusMethodNotAllowed)
+		return
 	}
 
 }

internal/handler/themeHandler.go

@@ -85,6 +85,12 @@ func (m *Repository) ThemeHandler(w http.ResponseWriter, r *http.Request) {
 			setErrorAndRedirect(w, r, "Empty post can not be created", "/error-page")
 			return
 		}
+
+		// checking text length
+		if len(post.Content) > 500 {
+			setErrorAndRedirect(w, r, "Only 500 symbols allowed", "/error-page")
+			return
+		}
 
 
 		err = m.DB.CreatePost(post)

template/register.page.html

@@ -49,6 +49,8 @@ <h1>Register</h1>
 
 
                         <input type="file" class="form-control" name="avatar" id="avatar">
+                        {{with .Form.Errors.Get "avatar"}}<label class="text-danger">{{.}}</label>{{end}}
+
                     </div>
                     <button type="submit" class="btn btn-light">Register</button>
                 </form>