CheckInCare/app.py

from flask import Flask, render_template, request, redirect, url_for
from flask_sqlalchemy import SQLAlchemy
import os
import re
import pathlib
import unicodedata

BASE_DIR = os.path.dirname(os.path.abspath(__file__))
DB_PATH = os.path.join(BASE_DIR, 'anmeldung.db')

app = Flask(__name__)
app.config['SQLALCHEMY_DATABASE_URI'] = f'sqlite:///{DB_PATH}'
app.config['SQLALCHEMY_TRACK_MODIFICATIONS'] = False

db = SQLAlchemy(app)


class Adresse(db.Model):
    id = db.Column(db.Integer, primary_key=True)
    vorname = db.Column(db.String(100), nullable=False)
    nachname = db.Column(db.String(100), nullable=False)
    strasse = db.Column(db.String(200), nullable=False)
    hausnummer = db.Column(db.String(50), nullable=True)
    plz = db.Column(db.String(20), nullable=False)
    ort = db.Column(db.String(100), nullable=False)
    land = db.Column(db.String(50), default='Deutschland')
    telefon_vorwahl = db.Column(db.String(20))
    telefon_nummer = db.Column(db.String(50))
    email = db.Column(db.String(200))


class Frage(db.Model):
    id = db.Column(db.Integer, primary_key=True)
    text = db.Column(db.String(500), nullable=False)


class Antwort(db.Model):
    id = db.Column(db.Integer, primary_key=True)
    adresse_id = db.Column(db.Integer, db.ForeignKey('adresse.id'), nullable=False)
    frage_id = db.Column(db.Integer, db.ForeignKey('frage.id'), nullable=False)
    text = db.Column(db.String(1000), nullable=True)


@app.route('/', methods=['GET', 'POST'])
def index():
    if request.method == 'POST':
        # Adresse speichern
        vorname = request.form.get('vorname', '').strip()
        nachname = request.form.get('nachname', '').strip()
        strasse = request.form.get('strasse', '').strip()
        hausnummer = request.form.get('hausnummer', '').strip()
        plz = request.form.get('plz', '').strip()
        ort = request.form.get('ort', '').strip()
        land = request.form.get('land', 'Deutschland').strip()
        telefon_vorwahl = request.form.get('telefon_vorwahl', '').strip()
        telefon_nummer = request.form.get('telefon_nummer', '').strip()
        email = request.form.get('email', '').strip()
        # server-side E-Mail Validierung (einfache Prüfung)
        errors = {}
        email_re = re.compile(r"[^@]+@[^@]+\.[^@]+")
        if email:
            if not email_re.match(email):
                errors['email'] = 'Ungültige E-Mail-Adresse'
        # PLZ Validierung: genau 5 Ziffern
        if plz:
            if not re.fullmatch(r"\d{5}", plz):
                errors['plz'] = 'Postleitzahl muss genau 5 Ziffern haben'

        if errors:
            fragen = Frage.query.all()
            # pass form data back to template so fields are preserved
            form = request.form.to_dict()
            return render_template('index.html', fragen=fragen, errors=errors, form=form)

        adresse = Adresse(
            vorname=vorname,
            nachname=nachname,
            strasse=strasse,
            hausnummer=hausnummer,
            plz=plz,
            ort=ort,
            land=land,
            telefon_vorwahl=telefon_vorwahl,
            telefon_nummer=telefon_nummer,
            email=email,
        )
        db.session.add(adresse)
        db.session.commit()

        # Antworten speichern
        fragen = Frage.query.all()
        for frage in fragen:
            key = f'frage_{frage.id}'
            antwort_text = request.form.get(key, '').strip()
            antwort = Antwort(adresse_id=adresse.id, frage_id=frage.id, text=antwort_text)
            db.session.add(antwort)
        db.session.commit()

        # vCard 4.0 erzeugen und speichern
        try:
            vcards_dir = os.path.join(BASE_DIR, 'vcards')
            os.makedirs(vcards_dir, exist_ok=True)

            # sanitize filename: remove diacritics and unsafe chars
            def slug(s):
                s = unicodedata.normalize('NFKD', s)
                s = ''.join(c for c in s if not unicodedata.combining(c))
                s = ''.join(c for c in s if c.isalnum() or c in (' ', '_', '-'))
                return s.replace(' ', '_')

            filename = f"{slug(adresse.nachname)}_{slug(adresse.vorname)}_{adresse.id}.vcf"
            filepath = os.path.join(vcards_dir, filename)

            # build vCard 4.0 content
            lines = [
                'BEGIN:VCARD',
                'VERSION:4.0',
                f'N:{adresse.nachname};{adresse.vorname};;;',
                f'FN:{adresse.vorname} {adresse.nachname}',
            ]
            # ADR: PO Box;Extended;Street;Locality;Region;PostalCode;Country
            street = adresse.strasse or ''
            if adresse.hausnummer:
                street = f"{street} {adresse.hausnummer}".strip()
            adr = f'ADR:;;{street};{adresse.ort};;{adresse.plz};{adresse.land}'
            lines.append(adr)
            if adresse.email:
                lines.append(f'EMAIL;TYPE=internet:{adresse.email}')
            phone = ''
            if adresse.telefon_vorwahl or adresse.telefon_nummer:
                phone = f"+{adresse.telefon_vorwahl}{adresse.telefon_nummer}".replace('++', '+')
                lines.append(f'TEL;TYPE=voice:{phone}')
            lines.append('END:VCARD')

            with open(filepath, 'w', encoding='utf-8') as f:
                f.write('\n'.join(lines))
        except Exception:
            # nicht kritisch: bei Fehlern nicht die ganze Anfrage abbrechen
            pass

        # Nach erfolgreichem Speichern weiterleiten
        return redirect(url_for('danke', id=adresse.id))

    # GET: Formular anzeigen
    fragen = Frage.query.all()
    return render_template('index.html', fragen=fragen)


@app.route('/danke')
def danke():
    id = request.args.get('id')
    adresse = Adresse.query.get(id)
    return render_template('danke.html', adresse=adresse)


if __name__ == '__main__':
    # Ensure DB exists
    if not os.path.exists(DB_PATH):
        db.create_all()
    app.run(debug=True)