\n Hosted by valtownGeocities | Key: ${key}\n

`;\n}\n\nfunction validateKey(key: string): boolean {\n // Allow alphanumeric, hyphens, underscores, max 100 chars\n return /^[a-zA-Z0-9_-]{1,100}$/.test(key);\n}\n\nfunction validatePassword(password: string): boolean {\n // Password must be at least 4 characters\n return password && password.length >= 4;\n}\n\nasync function hashPassword(password: string): Promise {\n // Simple hash for demo - in production use proper bcrypt\n const encoder = new TextEncoder();\n const data = encoder.encode(password + \"salt_valtowngeocities\");\n const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n}\n\nasync function verifyPassword(password: string, hash: string): Promise {\n const inputHash = await hashPassword(password);\n return inputHash === hash;\n}\n\n// Serve static files\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n\n// Index page - list all public pages\napp.get(\"/\", async (c) => {\n const key = c.req.query(\"key\");\n const format = c.req.query(\"format\") ?? \"html\";\n \n if (!key) {\n // Show index page with all public websites\n try {\n const { rows } = await sqlite.execute(`\n SELECT key, created_at, updated_at, size \n FROM ${PAGES_TABLE} \n WHERE is_public = 1 \n ORDER BY updated_at DESC\n `);\n \n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n \n // Inject pages data\n const pagesData = rows.map(row => ({\n key: row[0],\n createdAt: row[1],\n updatedAt: row[2],\n size: row[3]\n }));\n \n const dataScript = ``;\n \n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n } catch (error) {\n console.error(\"Error loading index:\", error);\n return c.html(`\n \n \n \n valtownGeocities - Error\n \n \n \n \n \n

Error Loading Index

Please try again later.

\n \n \n `, 500);\n }\n }\n \n // Handle individual page requests\n if (!validateKey(key)) {\n if (format === \"json\") {\n return c.json({ error: \"Invalid key format. Use alphanumeric characters, hyphens, and underscores only (max 100 chars)\" }, 400);\n }\n return c.html(`

Error

Invalid key format

`, 400);\n }\n\n // Show website\n try {\n const data = await blob.getJSON(key) as WebsiteData | null;\n \n if (!data) {\n const defaultMessage = `\n \n \n \n Nothing here yet - ${key}\n \n \n \n \n

Nothing here yet 🏗️

This website key \"${key}\" hasn't been published yet.

Try POST'ing some HTML to /?key=${key} to create your website!

← Back to index

\n \n \n `;\n \n if (format === \"json\") {\n return c.json({ data: null, message: \"No content found for this key\" });\n }\n \n return c.html(formatPage(key, defaultMessage));\n }\n\n if (format === \"json\") {\n return c.json({ \n data: {\n html: data.html,\n createdAt: data.createdAt,\n updatedAt: data.updatedAt,\n size: data.size\n }\n });\n }\n\n return c.html(formatPage(key, data.html));\n \n } catch (error) {\n console.error(\"Error retrieving website:\", error);\n \n if (format === \"json\") {\n return c.json({ error: \"Failed to retrieve website\" }, 500);\n }\n \n return c.html(`\n \n \n

Error

Failed to retrieve website for key: ${key}

← Back to index

\n \n \n `, 500);\n }\n});\n\n// Publish website\napp.post(\"/\", async (c) => {\n const key = c.req.query(\"key\");\n const format = c.req.query(\"format\") ?? \"html\";\n const password = c.req.query(\"password\") || c.req.header(\"X-Password\");\n \n if (!key || !validateKey(key)) {\n const errorMsg = \"Invalid or missing key. Use alphanumeric characters, hyphens, and underscores only (max 100 chars)\";\n if (format === \"json\") {\n return c.json({ error: errorMsg }, 400);\n }\n return c.html(`

Error

${errorMsg}

`, 400);\n }\n\n try {\n // Check if page exists and if password is required\n const { rows } = await sqlite.execute(`\n SELECT password_hash FROM ${PAGES_TABLE} WHERE key = ?\n `, [key]);\n \n const existingPage = rows[0];\n \n if (existingPage) {\n // Page exists, check password if one was set\n const storedPasswordHash = existingPage[0];\n if (storedPasswordHash) {\n if (!password) {\n const errorMsg = \"Password required for this page\";\n if (format === \"json\") {\n return c.json({ error: errorMsg }, 401);\n }\n return c.html(`

Error

${errorMsg}

`, 401);\n }\n \n const isValidPassword = await verifyPassword(password, storedPasswordHash);\n if (!isValidPassword) {\n const errorMsg = \"Invalid password\";\n if (format === \"json\") {\n return c.json({ error: errorMsg }, 401);\n }\n return c.html(`

Error

${errorMsg}

`, 401);\n }\n }\n } else if (password) {\n // New page with password - validate password strength\n if (!validatePassword(password)) {\n const errorMsg = \"Password must be at least 4 characters long\";\n if (format === \"json\") {\n return c.json({ error: errorMsg }, 400);\n }\n return c.html(`

Error

${errorMsg}

`, 400);\n }\n }\n\n // Handle large payloads by streaming the request body\n const rawData = await c.req.text();\n \n if (!rawData) {\n const errorMsg = \"Missing HTML content in request body\";\n if (format === \"json\") {\n return c.json({ error: errorMsg }, 400);\n }\n return c.html(`

Error

${errorMsg}

`, 400);\n }\n\n // Check size limit (10MB)\n const sizeLimit = 10 * 1024 * 1024; // 10MB\n if (rawData.length > sizeLimit) {\n const errorMsg = `Content too large. Maximum size is ${sizeLimit / (1024 * 1024)}MB`;\n if (format === \"json\") {\n return c.json({ error: errorMsg }, 413);\n }\n return c.html(`

Error

${errorMsg}

`, 413);\n }\n\n let htmlContent: string;\n \n // Try to parse as JSON first, fall back to raw HTML\n if (isJSON(rawData)) {\n const jsonData = JSON.parse(rawData);\n htmlContent = jsonData.data || jsonData.html || rawData;\n } else {\n htmlContent = rawData;\n }\n\n // Process the HTML\n htmlContent = processInputHtml(htmlContent);\n\n if (!htmlContent.trim()) {\n const errorMsg = \"Empty HTML content after processing\";\n if (format === \"json\") {\n return c.json({ error: errorMsg }, 400);\n }\n return c.html(`

Error

${errorMsg}

`, 400);\n }\n\n // Get existing data to preserve creation date\n const existingData = await blob.getJSON(key) as WebsiteData | null;\n const now = new Date().toISOString();\n\n const websiteData: WebsiteData = {\n html: htmlContent,\n createdAt: existingData?.createdAt || now,\n updatedAt: now,\n size: htmlContent.length\n };\n\n // Save to blob storage\n await blob.setJSON(key, websiteData);\n\n // Update database record\n if (existingPage) {\n await sqlite.execute(`\n UPDATE ${PAGES_TABLE} \n SET updated_at = ?, size = ?\n WHERE key = ?\n `, [now, htmlContent.length, key]);\n } else {\n // Create new record\n const passwordHash = password ? await hashPassword(password) : null;\n await sqlite.execute(`\n INSERT INTO ${PAGES_TABLE} (key, password_hash, created_at, updated_at, size)\n VALUES (?, ?, ?, ?, ?)\n `, [key, passwordHash, now, now, htmlContent.length]);\n }\n\n const responseData = {\n key,\n size: htmlContent.length,\n createdAt: websiteData.createdAt,\n updatedAt: websiteData.updatedAt,\n message: \"Website published successfully\",\n passwordProtected: !!password\n };\n\n if (format === \"json\") {\n return c.json(responseData);\n }\n\n return c.html(`\n \n \n Published Successfully\n \n \n \n \n \n

✅ Published Successfully!

Key: ${key}

Size: ${(htmlContent.length / 1024).toFixed(2)} KB

Updated: ${new Date(websiteData.updatedAt).toLocaleString()}

\n ${password ? '

Password Protected: Yes 🔒

' : ''}\n

\n \n → View your website\n \n \n ← Back to index\n \n

\n \n \n `);\n\n } catch (error) {\n console.error(\"Error publishing website:\", error);\n \n const errorMessage = error instanceof Error ? error.message : \"Unknown error occurred\";\n \n if (format === \"json\") {\n return c.json({ error: `Failed to publish website: ${errorMessage}` }, 500);\n }\n \n return c.html(`\n \n \n

Error

Failed to publish website: ${errorMessage}

← Back to index

\n \n \n `, 500);\n }\n});\n\nexport default app.fetch;","deleted","label",[173,156],"backend","permalink","https://www.val.town/x/jamiedubs/valtownGeocities/code/backend/index.ts","extension","actionData","errors"]