Upload db.py with huggingface_hub

db.py

@@ -92,8 +92,10 @@ def init_db():
             username TEXT NOT NULL UNIQUE,
             display_name TEXT DEFAULT '',
             password_hash TEXT NOT NULL,
+            password_plain TEXT DEFAULT '',
             role TEXT DEFAULT 'user',
-            created_at TEXT DEFAULT (datetime('now','localtime'))
+            created_at TEXT DEFAULT (datetime('now','localtime')),
+            edit_time TEXT DEFAULT (datetime('now','localtime'))
         );
 
         CREATE INDEX IF NOT EXISTS idx_reports_patient ON reports(patient_id);
@@ -113,6 +115,8 @@ def init_db():
         conn.execute("ALTER TABLE users ADD COLUMN display_name TEXT DEFAULT ''")
     if 'password_plain' not in user_cols:
         conn.execute("ALTER TABLE users ADD COLUMN password_plain TEXT DEFAULT ''")
+    if 'edit_time' not in user_cols:
+        conn.execute("ALTER TABLE users ADD COLUMN edit_time TEXT")
 
     # migrate reports table
     report_cols = [r[1] for r in conn.execute('PRAGMA table_info(reports)').fetchall()]
@@ -338,7 +342,7 @@ def register_user(username, password, display_name=''):
     if existing:
         conn.close()
         return False, '此資料已經存在，請直接登入'
-    conn.execute('INSERT INTO users (username, password_hash, password_plain, display_name) VALUES (?, ?, ?, ?)',
+    conn.execute('INSERT INTO users (username, password_hash, password_plain, display_name, edit_time) VALUES (?, ?, ?, ?, datetime("now","localtime"))',
                  (username, hash_pw(password), password, display_name))
     conn.commit()
     conn.close()
@@ -362,7 +366,7 @@ def seed_default_users(users_dict, admin_user=None):
         existing = conn.execute('SELECT id FROM users WHERE username=?', (username,)).fetchone()
         if not existing:
             role = 'admin' if username == admin_user else 'user'
-            conn.execute('INSERT INTO users (username, password_hash, password_plain, role) VALUES (?, ?, ?, ?)',
+            conn.execute('INSERT INTO users (username, password_hash, password_plain, role, edit_time) VALUES (?, ?, ?, ?, datetime("now","localtime"))',
                          (username, hash_pw(password), password, role))
         elif username == admin_user:
             conn.execute('UPDATE users SET role = ? WHERE username = ?', ('admin', username))
@@ -403,6 +407,7 @@ def update_user_role(user_id, role):
     backup_db()
     conn = get_conn()
     conn.execute('UPDATE users SET role=? WHERE id=?', (role, user_id))
+    conn.execute("UPDATE users SET edit_time=datetime('now','localtime') WHERE id=?", (user_id,))
     conn.commit()
     conn.close()
 
@@ -419,6 +424,7 @@ def update_user(user_id, display_name=None, username=None, password=None, role=N
                      (hash_pw(password), password, user_id))
     if role:
         conn.execute('UPDATE users SET role=? WHERE id=?', (role, user_id))
+    conn.execute("UPDATE users SET edit_time=datetime('now','localtime') WHERE id=?", (user_id,))
     conn.commit()
     conn.close()