From 3a3adb35c342ab3a6d430a7985d57af92f46d9a9 Mon Sep 17 00:00:00 2001
From: Suraj Patil <sapatil@live.com>
Date: Mon, 18 Jan 2016 07:58:08 +0530
Subject: [PATCH] upload file feature

---
 public/templates/home.html |  4 +++-
 views/views.go             | 39 ++++++++++++++++++++++++++++++--------
 2 files changed, 34 insertions(+), 9 deletions(-)

diff --git a/public/templates/home.html b/public/templates/home.html
index ec19bef..2170d8d 100644
--- a/public/templates/home.html
+++ b/public/templates/home.html
@@ -12,16 +12,18 @@
           <h4 class="modal-title" id="newNoteLabel"><span class="glyphicon glyphicon-pencil"></span>  New Task</h4>
         </div>
         <div class="modal-body">
-          <form action="/add/" method="POST">
+          <form enctype="multipart/form-data" action="/add/" method="POST">
             <div class="form-group">
               <!-- <label for="note-title" class="control-label">Title:</label> -->
               <input type="text" name="title" class="form-control" id="add-note-title" placeholder="Title" style="border:none;border-bottom:1px solid gray; box-shadow:none;">
               <input type="hidden" name="CSRFToken" value={{.CSRFToken}}>
             </div>
             <div class="form-group">
+              <input	type="file"	name="uploadfile"	/>
               <!-- <label for="note-content" class="control-label">Content:</label> -->
               <textarea class="form-control" name="content" id="add-note-content" placeholder="Content" rows="10" style="border:none;border-bottom:1px solid gray; box-shadow:none;"></textarea>
             </div>
+            
         </div>
         <div class="modal-footer">
           <button type="button" class="btn btn-default" data-dismiss="modal">Close</button>
diff --git a/views/views.go b/views/views.go
index 9180df1..2daad4f 100644
--- a/views/views.go
+++ b/views/views.go
@@ -9,8 +9,9 @@ import (
 	"os"
 	"strconv"
 	"strings"
-	"time"
 	"text/template"
+	"time"
+	"io"
 )
 
 var homeTemplate *template.Template
@@ -64,10 +65,10 @@ func ShowAllTasksFunc(w http.ResponseWriter, r *http.Request) {
 		if message != "" {
 			context.Message = message
 		}
-		context.CSRFToken = "abcde"
+		context.CSRFToken = "abcd"
 		message = ""
 		expiration := time.Now().Add(365 * 24 * time.Hour)
-		cookie	:=	http.Cookie{Name: "csrftoken",Value:"abcd",Expires:expiration}
+		cookie := http.Cookie{Name: "csrftoken", Value: "abcd", Expires: expiration}
 		http.SetCookie(w, &cookie)
 		homeTemplate.Execute(w, context)
 	} else {
@@ -107,22 +108,44 @@ func SearchTaskFunc(w http.ResponseWriter, r *http.Request) {
 
 //AddTaskFunc is used to handle the addition of new task, "/add" URL
 func AddTaskFunc(w http.ResponseWriter, r *http.Request) {
-	if r.Method == "POST" { // Will work only for GET requests, will redirect to home
+	if r.Method == "POST" { // Will work only for POST requests, will redirect to home
 		r.ParseForm()
+		file, handler, err := r.FormFile("uploadfile")
+		if err != nil {
+			log.Println(err)
+			return
+		} 
 		title := template.HTMLEscapeString(r.Form.Get("title"))
 		content := template.HTMLEscapeString(r.Form.Get("content"))
 		formToken := template.HTMLEscapeString(r.Form.Get("CSRFToken"))
-		cookie,	_	:=	r.Cookie("csrftoken")
-		log.Println(cookie)
-		log.Println(formToken)
-		if formToken == cookie.Value and title != nil and content!=nil{
+		
+		cookie, _ := r.Cookie("csrftoken")
+		if formToken == cookie.Value {
+			if handler != nil {
+				r.ParseMultipartForm(32 << 20) //defined maximum size of file
+				defer file.Close()
+				f, err := os.OpenFile("./files/"+handler.Filename, os.O_WRONLY|os.O_CREATE, 0666)
+				if err != nil {
+					log.Println(err)
+					return
+				}
+				defer f.Close()
+				io.Copy(f, file)
+				filelink := "<br> <a href=./files/"+handler.Filename+">"+ handler.Filename+"</a>"
+				content =  content + filelink
+			}
+			
 			truth := db.AddTask(title, content)
 			if truth != nil {
 				message = "Error adding task"
+				log.Println("error adding task to db")
 			} else {
 				message = "Task added"
+				log.Println("added task to db")
 			}
 			http.Redirect(w, r, "/", http.StatusFound)
+		} else {
+			log.Fatal("CSRF mismatch")
 		}
 
 	} else {