Visitors from 0 countries

Furthest visitor: —

\n \n\n \n\n \n \n \n\n`;\n}\n\n// ---------------------------------------------------------------------------\n// Admin helpers\n// ---------------------------------------------------------------------------\n\nfunction escHtml(s: string): string {\n return String(s)\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\");\n}\n\nfunction getLoginHTML(showError: boolean): string {\n return `\n\n\n \n \n Admin Login — Visitor Map\n \n\n\n

Admin Login

\n ${showError ? '

Incorrect password. Try again.

' : \"\"}\n \n

\n\n`;\n}\n\ntype PinRow = {\n id: number;\n lat: number;\n lon: number;\n country_code: string;\n postal_code: string;\n created_at: string;\n};\n\nfunction getAdminHTML(secret: string, pins: PinRow[]): string {\n const rows = pins.map((p) => `\n \n ${p.id}\n ${escHtml(p.country_code)}\n ${escHtml(p.postal_code)}\n ${Number(p.lat).toFixed(4)}\n ${Number(p.lon).toFixed(4)}\n ${escHtml(String(p.created_at ?? \"\"))}\n \n `).join(\"\");\n\n return `\n\n\n \n \n Admin — Visitor Map\n \n\n\n

Admin — Visitor Map

\n ← Back to map\n

${pins.length} pin${\n pins.length !== 1 ? \"s\" : \"\"\n }

\n \n \n \n \n \n \n \n ${rows || ''}\n \n

ID	Country	Postal Code	Lat	Lon	Added
No pins yet.

\n \n\n`;\n}\n\n// ---------------------------------------------------------------------------\n// Request handler\n// ---------------------------------------------------------------------------\n\nconst JSON_HEADERS = { \"Content-Type\": \"application/json\" };\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n\n // Admin page\n if (path === \"/admin\") {\n const adminSecret = Deno.env.get(\"ADMIN_SECRET\") ?? \"\";\n if (!adminSecret) {\n return new Response(\n \"ADMIN_SECRET environment variable is not configured.\",\n {\n status: 500,\n headers: { \"Content-Type\": \"text/plain\" },\n },\n );\n }\n const provided = url.searchParams.get(\"secret\") ?? \"\";\n if (provided !== adminSecret) {\n const showError = url.searchParams.has(\"secret\");\n return new Response(getLoginHTML(showError), {\n status: showError ? 401 : 200,\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n const result = await sqlite.execute(\n \"SELECT id, lat, lon, country_code, postal_code, created_at FROM pins ORDER BY id DESC\",\n );\n const pins: PinRow[] = result.rows.map(\n ([id, lat, lon, country_code, postal_code, created_at]) => ({\n id: Number(id),\n lat: Number(lat),\n lon: Number(lon),\n country_code: String(country_code),\n postal_code: String(postal_code),\n created_at: String(created_at ?? \"\"),\n }),\n );\n return new Response(getAdminHTML(adminSecret, pins), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n // DELETE /api/pins/:id — admin only\n const deleteMatch = path.match(/^\\/api\\/pins\\/(\\d+)$/);\n if (deleteMatch && req.method === \"DELETE\") {\n const adminSecret = Deno.env.get(\"ADMIN_SECRET\") ?? \"\";\n const provided = url.searchParams.get(\"secret\") ?? \"\";\n if (!adminSecret || provided !== adminSecret) {\n return new Response(JSON.stringify({ error: \"Unauthorized\" }), {\n status: 401,\n headers: JSON_HEADERS,\n });\n }\n const id = parseInt(deleteMatch[1], 10);\n await sqlite.execute({ sql: \"DELETE FROM pins WHERE id = ?\", args: [id] });\n return new Response(JSON.stringify({ ok: true }), {\n headers: JSON_HEADERS,\n });\n }\n\n if (path === \"/api/pins\") {\n // GET /api/pins — return all stored pins\n if (req.method === \"GET\") {\n const result = await sqlite.execute(\n \"SELECT id, lat, lon, country_code, postal_code FROM pins ORDER BY id\",\n );\n const pins = result.rows.map((\n [id, lat, lon, country_code, postal_code],\n ) => ({\n id,\n lat,\n lon,\n country_code,\n postal_code,\n }));\n return new Response(JSON.stringify(pins), { headers: JSON_HEADERS });\n }\n\n // POST /api/pins — geocode and store a new pin\n if (req.method === \"POST\") {\n let body: any;\n try {\n body = await req.json();\n } catch {\n return new Response(JSON.stringify({ error: \"Invalid JSON\" }), {\n status: 400,\n headers: JSON_HEADERS,\n });\n }\n\n const postalCode: string = (body.postal_code ?? \"\").trim();\n const countryCode: string = (body.country_code ?? \"\").trim()\n .toUpperCase();\n\n if (!postalCode || !countryCode) {\n return new Response(\n JSON.stringify({\n error: \"postal_code and country_code are required\",\n }),\n { status: 400, headers: JSON_HEADERS },\n );\n }\n\n if (!isValidPostalCode(postalCode, countryCode)) {\n return new Response(\n JSON.stringify({\n error:\n \"That doesn't look like a valid postal code for the selected country.\",\n }),\n { status: 422, headers: JSON_HEADERS },\n );\n }\n\n let coords: [number, number] | null = null;\n try {\n coords = await geocode(postalCode, countryCode);\n } catch {\n // coords stays null\n }\n\n if (!coords) {\n return new Response(\n JSON.stringify({\n error:\n \"Could not find that location. Please check your postal code.\",\n }),\n { status: 422, headers: JSON_HEADERS },\n );\n }\n\n const [lat, lon] = coords;\n if (!Number.isFinite(lat) || !Number.isFinite(lon)) {\n return new Response(\n JSON.stringify({\n error:\n \"Could not find that location. Please check your postal code.\",\n }),\n { status: 422, headers: JSON_HEADERS },\n );\n }\n\n await sqlite.execute({\n sql:\n \"INSERT INTO pins (lat, lon, country_code, postal_code) VALUES (?, ?, ?, ?)\",\n args: [lat, lon, countryCode, postalCode],\n });\n\n return new Response(\n JSON.stringify({\n lat,\n lon,\n country_code: countryCode,\n postal_code: postalCode,\n }),\n { status: 201, headers: JSON_HEADERS },\n );\n }\n\n return new Response(\"Method Not Allowed\", { status: 405 });\n }\n\n // All other paths → serve the frontend\n return new Response(getHTML(), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n}","deleted","label",[100],"permalink","https://www.val.town/x/chriswmartin/untitled-1472/code/main.ts","extension","actionData","errors"]

Where are you from?

Admin Login

Admin — Visitor Map