app.py

from flask import Flask, render_template, request, redirect, session
import sqlite3

app = Flask(__name__)

app.secret_key = "shopease_secret_key_2026"

DATABASE = "users.db"


# =============================
# PRODUCT PRICES
# =============================
PRICES = {
    "Smartphone": 29999,
    "Laptop": 59999,
    "Headphones": 2999
}


# =============================
# DATABASE SETUP
# =============================
def init_db():

    conn = sqlite3.connect(DATABASE)
    cursor = conn.cursor()

    cursor.execute("""
        CREATE TABLE IF NOT EXISTS users (
            id INTEGER PRIMARY KEY AUTOINCREMENT,
            name TEXT NOT NULL,
            email TEXT UNIQUE NOT NULL,
            password TEXT NOT NULL
        )
    """)

    cursor.execute("""
        CREATE TABLE IF NOT EXISTS orders (
            id INTEGER PRIMARY KEY AUTOINCREMENT,
            email TEXT NOT NULL,
            product TEXT NOT NULL,
            total REAL NOT NULL,
            status TEXT NOT NULL,
            payment TEXT NOT NULL
        )
    """)

    conn.commit()
    conn.close()


init_db()


# =============================
# HOME
# =============================
@app.route("/")
def home():

    return render_template("index.html")


# =============================
# PRODUCTS
# =============================
@app.route("/products")
def products():

    return render_template("products.html")


# =============================
# LOGIN
# =============================
@app.route("/login", methods=["GET", "POST"])
def login():

    if request.method == "POST":

        email = request.form.get("email")
        password = request.form.get("password")

        conn = sqlite3.connect(DATABASE)
        cursor = conn.cursor()

        cursor.execute(
            """
            SELECT *
            FROM users
            WHERE email = ?
            AND password = ?
            """,
            (email, password)
        )

        user = cursor.fetchone()

        conn.close()

        if user:

            session["user"] = user[1]
            session["email"] = user[2]

            return redirect("/")

        return "Invalid email or password"

    return render_template("login.html")


# =============================
# REGISTER
# =============================
@app.route("/register", methods=["GET", "POST"])
def register():

    if request.method == "POST":

        name = request.form.get("name")
        email = request.form.get("email")
        password = request.form.get("password")

        conn = sqlite3.connect(DATABASE)
        cursor = conn.cursor()

        try:

            cursor.execute(
                """
                INSERT INTO users (name, email, password)
                VALUES (?, ?, ?)
                """,
                (name, email, password)
            )

            conn.commit()

        except sqlite3.IntegrityError:

            conn.close()

            return "Email already registered."

        conn.close()

        return redirect("/login")

    return render_template("register.html")


# =============================
# LOGOUT
# =============================
@app.route("/logout")
def logout():

    session.clear()

    return redirect("/")


# =============================
# ADD TO CART
# =============================
@app.route("/add-to-cart/<product_name>")
def add_to_cart(product_name):

    cart_items = session.get("cart", [])

    cart_items.append(product_name)

    session["cart"] = cart_items

    return redirect("/cart")


# =============================
# CART
# =============================
@app.route("/cart")
def cart():

    cart_items = session.get("cart", [])

    return render_template(
        "cart.html",
        cart_items=cart_items,
        prices=PRICES
    )


# =============================
# REMOVE FROM CART
# =============================
@app.route("/remove-from-cart/<product_name>")
def remove_from_cart(product_name):

    cart_items = session.get("cart", [])

    if product_name in cart_items:

        cart_items.remove(product_name)

    session["cart"] = cart_items

    return redirect("/cart")


# =============================
# CHECKOUT
# =============================
@app.route("/checkout")
def checkout():

    cart_items = session.get("cart", [])

    if not cart_items:

        return redirect("/cart")

    total = 0

    for item in cart_items:

        item_name = str(item).strip()

        total += PRICES.get(item_name, 0)

    return render_template(
        "checkout.html",
        cart_items=cart_items,
        prices=PRICES,
        total=total
    )


# =============================
# PLACE ORDER
# =============================
@app.route("/place-order", methods=["POST"])
def place_order():

    cart_items = session.get("cart", [])

    if not cart_items:

        return redirect("/cart")

    email = session.get(
        "email",
        "guest@example.com"
    )

    payment = request.form.get(
        "payment",
        "Cash on Delivery"
    )

    conn = sqlite3.connect(DATABASE)
    cursor = conn.cursor()

    # Create one order for every product
    for product in cart_items:

        product_name = str(product).strip()

        product_price = PRICES.get(
            product_name,
            0
        )

        cursor.execute(
            """
            INSERT INTO orders
            (email, product, total, status, payment)
            VALUES (?, ?, ?, ?, ?)
            """,
            (
                email,
                product_name,
                product_price,
                "Order Placed",
                payment
            )
        )

    conn.commit()
    conn.close()

    # Clear cart after successful order
    session["cart"] = []

    return render_template(
        "order_success.html"
    )


# =============================
# MY ORDERS
# =============================
@app.route("/orders")
def orders():

    email = session.get("email")

    if not email:

        return redirect("/login")

    conn = sqlite3.connect(DATABASE)

    conn.row_factory = sqlite3.Row

    cursor = conn.cursor()

    cursor.execute(
        """
        SELECT *
        FROM orders
        WHERE email = ?
        ORDER BY id DESC
        """,
        (email,)
    )

    orders_list = cursor.fetchall()

    conn.close()

    return render_template(
        "orders.html",
        orders=orders_list
    )


# =============================
# CANCEL ORDER
# =============================
@app.route("/cancel-order/<int:order_id>")
def cancel_order(order_id):

    email = session.get("email")

    if not email:

        return redirect("/login")

    conn = sqlite3.connect(DATABASE)

    cursor = conn.cursor()

    cursor.execute(
        """
        UPDATE orders
        SET status = ?
        WHERE id = ?
        AND email = ?
        AND status = ?
        """,
        (
            "Cancelled",
            order_id,
            email,
            "Order Placed"
        )
    )

    conn.commit()
    conn.close()

    return redirect("/orders")


# =============================
# RUN APPLICATION
# =============================
if __name__ == "__main__":

    app.run(debug=True)