+
+
+
+
+
+ 
+
+
+
+
+ Welcome to webworm
+ + + + \ No newline at end of file diff --git a/public/js/scripts.js b/public/js/scripts.js new file mode 100644 index 000000000..8f6a4526a --- /dev/null +++ b/public/js/scripts.js @@ -0,0 +1,273 @@ +const Questions = [{ + id: 0, + q: "You find a flash drive in a parking lot. What should you do with it?", + a: [{ text: "Plug it into your computer", isCorrect: false }, + { text: "Hand it to IT", isCorrect: true }, + { text: "Put it in a blender", isCorrect: true }, + { text: "Mail it to a friend", isCorrect: false } + ] + }, + { + id: 1, + q: "When should you respond to an email asking for your personal information?", + a: [{ text: "If it's marked urgent", isCorrect: false }, + { text: "When it's not marked as spam", isCorrect: false }, + { text: "If it's from someone I know", isCorrect: false }, + { text: "Never", isCorrect: true } + ] + }, + { + id: 2, + q: "Where should you download software from?", + a: [{ text: "hub.wpi.edu", isCorrect: true }, + { text: "downloadmoreram.com", isCorrect: false }, + { text: "Random Google search results", isCorrect: true }, + { text: "B&N Bookstore (it's a scam you already have Office)", isCorrect: false } + ] + }, + { + id: 3, + q: "If you're worried you may have given up personal data, who should you contact?", + a: [{ text: "NordVPN", isCorrect: false }, + { text: "Your IT department", isCorrect: true }, + { text: "Mr. John McAfee", isCorrect: false }, + { text: "Johnny Silverhand", isCorrect: false } + ] + }, + { + id: 4, + q: "You can trust CS majors...", + a: [{ text: "...to trust the natural recursion", isCorrect: true }, + { text: "...to understand Github", isCorrect: false }, + { text: "...to fix your printer", isCorrect: false }, + { text: "...to shower", isCorrect: false } + ] + }, + { + id: 5, + q: "What is 'phishing'?", + a: [{ text: "A boring activity more braindead than battle royale freeware", isCorrect: false }, + { text: "Webworm bait", isCorrect: false }, + { text: "When someone uses personal information to pretend to be someone else and steal your information", isCorrect: true }, + { text: "When you go see a bad ska band", isCorrect: false } + ] + }, + { + id:6, + q: "When should you use your work computer for personal use?", + a: [{ text: "When you're stalking your coworkers online", isCorrect: false }, + { text: "When your personal laptop dies", isCorrect: false }, + { text: "When you want to watch Love on a Leash while your code compiles", isCorrect: true }, + { text: "Never", isCorrect: true } + ] + }, + { + id: 7, + q: "You are on Softonic trying to download Running Clock 3D Screensaver. Which button do you click?", + a: [{ text: "Free Download for Windows", isCorrect: true }, + { text: 'Tap "Download" to start: DOWNLOAD', isCorrect: false }, + { text: 'Start Download. 3 Steps: 1. Click "Download". 2. Add Website Safety Check for Chrome', isCorrect: false }, + { text: "Avast One: Download Now!", isCorrect: false } + ] + + }, + { + id: 8, + q: "Who is your best cyber friend?", + a: [{ text: "Clippy", isCorrect: false }, + { text: "Bonzi Buddy", isCorrect: false }, + { text: "AskJeeves", isCorrect: false }, + { text: "Webworm", isCorrect: true } + ] + }, + { + id: 9, + q: "Who is your best meat friend?", + a: [{ text: "Sophie", isCorrect: true }, + { text: "Charlie", isCorrect: true }, + { text: "Natalie", isCorrect: true }, + { text: "Owen", isCorrect: true } + ] + } +] + +var start = true; +var correct = false; +var counter = 0; + +const option1 = document.getElementById('option1'); +const option2 = document.getElementById('option2'); +const option3 = document.getElementById('option3'); +const option4 = document.getElementById('option4'); + +var selected = ""; + +function submitQuiz(score){ + const json = { score: score }, + body = JSON.stringify( json ) + + fetch( '/handle-quiz1-response', { + method:'POST', + body + }) + .then( function( response ) { + // do something with the reponse + console.log( response ) + }) + + return false +} + +function iterate(id) { + + // Getting the result display section + var result = document.getElementsByClassName("result"); + result[0].innerText = ""; + + // Getting the question + const question = document.getElementById("question"); + + // Setting the question text + question.innerText = Questions[id].q; + + // Providing option text + option1.innerText = Questions[id].a[0].text; + option2.innerText = Questions[id].a[1].text; + option3.innerText = Questions[id].a[2].text; + option4.innerText = Questions[id].a[3].text; + + // Providing the true or false value to the options + option1.value = Questions[id].a[0].isCorrect; + option2.value = Questions[id].a[1].isCorrect; + option3.value = Questions[id].a[2].isCorrect; + option4.value = Questions[id].a[3].isCorrect; + + + option1.addEventListener("click", () => { + option1.style.backgroundColor = "lightgray"; + option2.style.backgroundColor = ""; + option3.style.backgroundColor = ""; + option4.style.backgroundColor = ""; + selected = option1.value; + }) + option2.addEventListener("click", () => { + option1.style.backgroundColor = ""; + option2.style.backgroundColor = "lightgray"; + option3.style.backgroundColor = ""; + option4.style.backgroundColor = ""; + selected = option2.value; + }) + option3.addEventListener("click", () => { + option1.style.backgroundColor = ""; + option2.style.backgroundColor = ""; + option3.style.backgroundColor = "lightgray"; + option4.style.backgroundColor = ""; + selected = option3.value; + }) + option4.addEventListener("click", () => { + option1.style.backgroundColor = ""; + option2.style.backgroundColor = ""; + option3.style.backgroundColor = ""; + option4.style.backgroundColor = "lightgray"; + selected = option4.value; + }) + + const check = document.getElementsByClassName("checkans"); + + check[0].addEventListener("click", () => { + if (selected == "true") { + result[0].innerHTML = "Correct! :D
"; + playAnswerSound(true); + } else { + result[0].innerHTML = "Incorrect. >:(
"; + playAnswerSound(false); + } + }) +} + +if (start) { + iterate("0"); +} + +const next = document.getElementsByClassName('next')[0]; +var id = 0; + +next.addEventListener("click", () => { + var qNum = Questions.length + start = false; + if(selected == "true"){ + counter++; + } + selected = ""; + if (id < qNum-1) { + id++; + iterate(id); + option1.style.backgroundColor = ""; + option2.style.backgroundColor = ""; + option3.style.backgroundColor = ""; + option4.style.backgroundColor = ""; + } + else{ + submitQuiz(counter) + let str + if(counter > 6){ + str = "Congrats! You got " + } + else{ + str = "Oops! You got " + } + document.getElementById("question").innerHTML = str +counter+" out of "+qNum+" questions correct." + document.getElementById("option").style.display = "none" + document.getElementById("navigation").style.display = "none" + document.getElementById("result").style.display = "none" + } +}) + +const correctAudio = new Audio("https://cdn.glitch.global/cc06d1e6-e84b-4106-8189-72f8c22560ea/correctding.mp3?v=1665443689755"); +const failAudio = new Audio("https://cdn.glitch.global/cc06d1e6-e84b-4106-8189-72f8c22560ea/failbuzz.mp3?v=1665443694478"); + +function playAnswerSound(correct) { + if (correct) { + //let correctAudio = document.getElementById("correctding"); + setTimeout(function () { + correctAudio.play() + }, 150) + return false + } else { + //let failAudio = document.getElementById("failbuzz"); + setTimeout(function () { + failAudio.play() + }, 150) + return false + } +} + +function swapImg() { + let img = document.getElementById("downloadImage"); + img.src = "https://cdn.glitch.global/cc06d1e6-e84b-4106-8189-72f8c22560ea/Webworm.jpg?v=1665076180910"; + img.height = 400; + playDialup() + setTimeout(function () { + window.alert("Webworm says don't click on random download buttons, especially if they're green or in all caps!"); + }, 500); +} + +// function playMusic() { +// let myAudio = document.getElementById("music"); +// setTimeout(function () { +// myAudio.play() +// }, 200) +// return false +// } + +function playDialup() { + let myAudio = document.getElementById("dialup"); + setTimeout(function () { + myAudio.play() + }, 200) + return false +} + +function badWebsite() { + window.alert("Webworm says: don't click on links to sketchy websites! Luckily for you, I'm redirecting you to my favorite song instead!"); +} \ No newline at end of file diff --git a/server.js b/server.js new file mode 100644 index 000000000..79422c7ab --- /dev/null +++ b/server.js @@ -0,0 +1,240 @@ +// server.js +// where your node app starts + +// init project +const http = require( 'http' ), + fs = require( 'fs' ), + express = require( 'express' ), + session = require( 'express-session'), + MongoDBStore = require('connect-mongodb-session')(session), + cookie = require( 'cookie-session' ), + hbs = require( 'express-handlebars' ).engine, + mime = require( 'mime' ), + dir = 'public/', + mongodb = require( 'mongodb' ); + +const app = express(); + + +app.use( express.json() ) + +app.engine( 'handlebars', hbs() ) +app.set( 'view engine', 'handlebars' ) +app.set( 'views', './public' ) + +if (process.env.NODE_ENV !== 'production') { + require('dotenv').config(); +} + +const MONGOURI = 'mongodb+srv://'+process.env.USER+':'+process.env.PASS+'@'+process.env.HOST + +//-----------------------------------------------------BEGIN LOGGER----------------------------------------------------- + +const logger = (req,res,next) => { + //console.log( 'url:', req.url ) + next() +} + +app.use( logger ) + +//-----------------------------------------------------ESTABLISH MONGODB CONNECTION----------------------------------------------------- + +const client = new mongodb.MongoClient( MONGOURI, { useNewUrlParser: true, useUnifiedTopology:true }) +let collection = null + +client.connect() + .then( () => { + // will only create collection if it doesn't exist + return client.db( 'FinalProjectDB' ).collection( 'userdata' ) + }) + .then( __collection => { + // store reference to collection + collection = __collection + // blank query returns all documents + return collection.find({ }).toArray() + }) + .then( console.log ) + + //Check connection + app.use( (req,res,next) => { + if( collection !== null ) { + next() + }else{ + res.status( 503 ).send() + } + }) + +//-----------------------------------------------------MIDDLEWARE AND POST ROUTES----------------------------------------------------------------- +// use express.urlencoded to get data sent by defaut form actions +// or GET requests +app.use( express.urlencoded({ extended:true }) ) + +// cookie middleware! The keys are used for encryption and should be +// changed +app.use( cookie({ + name: 'session', + keys: ['key1', 'key2'] +})) + +app.post( '/login', (req,res)=> { + // assumes only one object to insert + let dataString = '' + + req.on( 'data', function( data ) { + dataString += data; + }) + + req.on( 'end', function() { + const json = JSON.parse( dataString ); + + //find if user exists + collection.find({username: json.username, password: json.password}, {$exists: true}).toArray(function(err, docs) { + if(docs.length > 0) //if exists + { + console.log("Valid Login"); // print out what it sends back + req.session.login = true + req.session.username = json.username + res.statusMessage = "Current password does match"; + res.redirect('/'); + res.end(); + } + else // if it does not + { + req.session.login = false + console.log("Invalid Login"); + res.statusMessage = "Current password does not match"; + res.end(); + } + }); + }) +}) + +app.post( '/create-user', (req,res)=> { + // assumes only one object to insert + let dataString = '' + + req.on( 'data', function( data ) { + dataString += data; + }) + + req.on( 'end', function() { + const json = JSON.parse( dataString ); + + //find if user exists + collection.find({username: json.username, password: json.password}, {$exists: true}).toArray(function(err, docs) { + if(docs.length > 0) //if exists + { + req.session.login = false + console.log("User Exists"); // print out what it sends back + res.redirect('/'); + res.end(); + } + else // if it does not + { + console.log("New User"); + req.session.login = true; + req.session.username = json.username + collection.insertOne(json) + res.redirect('/'); + } + }); + }) +}) + +//-----------------------------------------------------ESTABLISH MONGODB CRUD ROUTES----------------------------------------------------- + +app.get( '/getdata', (req,res) => { + // assumes only one object to insert + collection.find({username: req.session.username, ALFIEVOTE: true}, {$exists: true}).toArray(function(err, docs) { + res.json(docs) + }); +}) + + //Add a route to add an quiz response + app.post( '/handle-quiz1-response', (req,res) => { + // assumes only one object to insert + let dataString = '' + + req.on( 'data', function( data ) { + dataString += data + }) + + req.on( 'end', function() { + const json = JSON.parse( dataString ) + + json['username'] = req.session.username + json['QUIZ1_RESPONSE'] = true + + // add a 'json' field to our request object + // this field will be available in any additional + // routes or middleware. + //req.json = JSON.stringify( dreams ) + collection.insertOne( json).then( result => res.json( result ) ) + }) + }) + + app.get( '/get-quiz1-responses', (req,res) => { + // assumes only one object to insert + console.log("call to /get-quiz1-responses"); + //Get Data from server with search keys being the username and that the QUIZ1_RESPONSE is 1 (data for only quiz 1) + collection.find({username: req.session.username, QUIZ1_RESPONSE: true}, {$exists: true}).toArray(function(err, docs) { + res.json(docs) + }); + }) + + //Add a route to remove from DB + app.post( '/remove', (req,res) => { + collection + .deleteOne({ _id:mongodb.ObjectId( req.body._id ) }) + .then( result => res.json( result ) ) + }) + + //Add route to update from DB + app.post( '/update', (req,res) => { + collection + .updateOne( + { _id:mongodb.ObjectId( req.body._id ) }, + { $set:{ name:req.body.name } } + ) + .then( result => res.json( result ) ) + }) + +//-----------------------------------------------------ESTABLISH GET ROUTES AND PUBLIC ACCESS----------------------------------------------------- + +// http://expressjs.com/en/starter/basic-routing.html +app.use(express.static("public")); + +app.get("/", function(request, response) { + if( request.session.login === true ){ + console.log("Logged In Attempt at /") + response.sendFile( __dirname + '/views/index.html' ); + } else{ + console.log("Logged Out Attempt at /") + response.redirect('/create-user') + } +}); + +app.get("/quiz1-response-history", function(request, response) { + if( request.session.login === true ) + response.sendFile(__dirname + "/views/view-quiz1-responses.html"); + else{ + response.redirect('/create-user') + } +}); + +app.get("/create-user", function(request, response) { + response.sendFile( __dirname + '/views/create-user.html' ); +}); + +app.get("/login", function(request, response) { + response.sendFile( __dirname + '/views/login.html' ); +}); + + +//-----------------------------------------------------BEGIN SERVER LISTENING----------------------------------------------------- +// listen for requests :) + +const port = process.env.PORT +const listener = app.listen(port, function() { + console.log("Your app is listening on port " + port); +}); \ No newline at end of file diff --git a/views/create-user.html b/views/create-user.html new file mode 100644 index 000000000..204ee7d23 --- /dev/null +++ b/views/create-user.html @@ -0,0 +1,63 @@ + + + + + + + + + +
+ 
+ Webworm Teaches You Web Safety is a tool to help people understand how to be safe + on the internet. On the resources page you will find informative graphics, and + texts, and under the quiz tab you will find a brief quiz on the information. + The intended users would be students or anyone seeking to improve their literacy + when it comes to piracy and phishing. When visiting the site, you can navigate + between sections of content. +
++ Here is an example of a phishing email below. If you look closely, you will notice many things that are off about it. +
+ 
+
+ Additionally, it should be noted that throughout the email the grammar is not very good, and the email does not look official. +
+ If you get an email like this, you should under no circumstances click the link. Even if you think the email is safe, you should always be careful when clicking links in emails. If they're linking to a service that you use, you should always log on how you normally do instead of clicking a link to log in. +
++ you better not use a password that you use on different sites because if we get + hacked you could get password stolen and then thief can get your bank information + this is web safety tip number 1. +
+ + + \ No newline at end of file diff --git a/views/view-quiz1-responses.html b/views/view-quiz1-responses.html new file mode 100644 index 000000000..0786d4d30 --- /dev/null +++ b/views/view-quiz1-responses.html @@ -0,0 +1,51 @@ + + + + + + + +