Update app.py

app.py

@@ -1,5 +1,6 @@
 import subprocess
 import sys
+import uuid
 from flask import Flask, request, jsonify
 from flask_cors import CORS
 
@@ -8,7 +9,7 @@ CORS(app)
 
 @app.route('/')
 def home():
-    return jsonify({"status": "ok", "message": "API Running (Gunicorn Enabled)"})
+    return jsonify({"status": "ok", "message": "API Running (Isolated Sessions Enabled)"})
 
 def run_command(command, input_text=None, timeout=15):
     """Helper to run shell commands safely"""
@@ -36,8 +37,6 @@ def run_python():
     
     if not code: return jsonify({'output': 'No code provided'}), 400
 
-    # Run python using -c to avoid temp files
-    # We pass the code as the argument to -c
     cmd = [sys.executable, "-c", code]
     output = run_command(cmd, input_text=user_input)
     return jsonify({'output': output})
@@ -47,34 +46,60 @@ def run_sql():
     data = request.json
     sql_code = data.get('code', '')
     db_type = data.get('type', 'sqlite').lower()
-
+    
     if not sql_code: return jsonify({'output': 'No SQL code provided'}), 400
 
     output = ""
-    
-    if db_type == 'sqlite':
-        # SQL via Stdin -> SQLite
-        cmd = ["sqlite3", ":memory:"]
-        output = run_command(cmd, input_text=sql_code)
-
-    elif db_type in ['postgres', 'postgresql']:
-        # SQL via Stdin -> Psql
-        # We do not use -f anymore. Psql reads from stdin by default.
-        cmd = ["psql", "-h", "localhost", "-U", "playground", "-d", "playground"]
-        output = run_command(cmd, input_text=sql_code)
-
-    elif db_type == 'mysql':
-        # SQL via Stdin -> MySQL
-        # -t forces table output
-        cmd = ["mysql", "-h", "localhost", "-u", "playground", "playground", "-t"]
-        output = run_command(cmd, input_text=sql_code)
-
-    else:
-        return jsonify({'output': 'Unsupported database type.'}), 400
+    session_id = uuid.uuid4().hex[:8] # Random 8-char ID for isolation
+
+    try:
+        # 1. SQLITE (Already Isolated by :memory:)
+        if db_type == 'sqlite':
+            cmd = ["sqlite3", ":memory:"]
+            output = run_command(cmd, input_text=sql_code)
+
+        # 2. POSTGRESQL (Schema Isolation)
+        elif db_type in ['postgres', 'postgresql']:
+            schema_name = f"sess_{session_id}"
+            
+            # A. Create Temp Schema
+            setup_cmd = ["psql", "-h", "localhost", "-U", "playground", "-d", "playground", "-c", f"CREATE SCHEMA {schema_name};"]
+            run_command(setup_cmd)
+
+            # B. Run User Code (Wrapped in search_path to use the schema)
+            # We modify the SQL to force it into the new schema
+            isolated_sql = f"SET search_path TO {schema_name};\n{sql_code}"
+            
+            main_cmd = ["psql", "-h", "localhost", "-U", "playground", "-d", "playground"]
+            output = run_command(main_cmd, input_text=isolated_sql)
+
+            # C. Cleanup (Drop Schema)
+            cleanup_cmd = ["psql", "-h", "localhost", "-U", "playground", "-d", "playground", "-c", f"DROP SCHEMA {schema_name} CASCADE;"]
+            run_command(cleanup_cmd)
+
+        # 3. MYSQL (Database Isolation)
+        elif db_type == 'mysql':
+            db_name = f"sess_{session_id}"
+
+            # A. Create Temp Database
+            setup_cmd = ["mysql", "-h", "localhost", "-u", "playground", "-e", f"CREATE DATABASE {db_name};"]
+            run_command(setup_cmd)
+
+            # B. Run User Code (Against the new DB)
+            main_cmd = ["mysql", "-h", "localhost", "-u", "playground", "-D", db_name, "-t"]
+            output = run_command(main_cmd, input_text=sql_code)
+
+            # C. Cleanup (Drop Database)
+            cleanup_cmd = ["mysql", "-h", "localhost", "-u", "playground", "-e", f"DROP DATABASE {db_name};"]
+            run_command(cleanup_cmd)
+
+        else:
+            return jsonify({'output': 'Unsupported database type.'}), 400
+
+    except Exception as e:
+        output = f"Server Error: {str(e)}"
 
     return jsonify({'output': output})
 
-# Note: app.run() is no longer needed here as Gunicorn handles it, 
-# but we keep it for local debugging if you run python app.py directly.
 if __name__ == '__main__':
     app.run(host="0.0.0.0", port=7860)