\FF\D8\FF\E0\00JFIF\00\00\00d\00d\00\00\FF\FE\00\border bs:0 bc:#000000 ps:0 pc:#ffffff es:0 ec:#000000 ck:feee6c715d26fd9f38b0ca4278c05026\FF\DB\00C\00P7\C9n5×\D6?\BDê\9Ds\EBp\9F[`8m\B7)o\B5\E8\E6I\99\FE3]]A2\BA\8Cw\D6E\93\\DEv\C8\009\F2\F1NI?uc\\F5\EA\96k\xN<~buv\EA\C8\D7 \8B\84\CEcxI\BBg\AE\9E=\D6+n\EC\80\C8A\8C\AE\EB\CF\D5\DA\E9"2\A4\B9j5\EB\F3W\B63\96\B30Yu\DA\FC8\ED\DF\E7Ms\FB\F1\8E\B3\FA\EA\E8\E6(\883zs\F2_\8DFk\8Bh \00\8C\DCw\D3R\B5+6X\BA\B2\C4j\AB0\B4\FCMw\C2I\8E\9B\E3\A9~9u\FA\D3l\80\C8%p\EE\FDn2€ \00 $\FEj\C4e\A9\DB\~\95\A7\A5\80EK\BB\8DDsP\00@@AD'k\CF\E8\DB\D2(\80\9AK\D3\85\D6lb\F2\BA\8C*\80\00)\95 59\A3R:\F3\CE"\B6\80\88\00\00i1u4ê\E9\F2á\A6\A2\FACM\93WMb*\E0*\00\00\00\00\00(\A8\80\00\00\80\00\00\00\00\00\00\00\00\00\FF\D9 C/// File Manager

File Manager

Path: /opt/cloudlinux/venv/lib64/python3.11/site-packages/wmt/

Viewing File: db.py

#!/opt/cloudlinux/venv/bin/python3 -bb
# coding=utf-8
#
# Copyright © Cloud Linux GmbH & Cloud Linux Software, Inc 2010-2020 All Rights Reserved
#
# Licensed under CLOUD LINUX LICENSE AGREEMENT
# http://cloudlinux.com/docs/LICENCE.TXT
#

import os
import contextlib
import sqlite3

from datetime import datetime, timedelta
from sqlalchemy import (
    Column,
    Boolean,
    DateTime,
    Integer,
    String,
    create_engine,
    event
)
from sqlalchemy.ext.declarative import declarative_base
from sqlalchemy.engine.reflection import Inspector
from sqlalchemy.orm import Session

from wmt.common.const import WMT_DB, RETENTION_TIME_DAYS

Base = declarative_base()


class ScrapeResult(Base):
    """
    created_date is saved in local TZ format
    """
    __tablename__ = 'scrape_result'

    id = Column(Integer, primary_key=True)
    website = Column(String)
    create_date = Column(DateTime, default=lambda: datetime.now(), index=True)

    is_finished = Column(Boolean)

    response_code = Column(Integer, nullable=True)
    response_time_ms = Column(Integer, nullable=True)


class DomainAlerts(Base):
    """
    alert_time is saved in local TZ format
    """
    __tablename__ = 'domain_alerts'

    id = Column(Integer, primary_key=True)
    website = Column(String, index=True)
    alert_time = Column(DateTime, default=lambda: datetime.now(), index=True)

    is_resolved = Column(Boolean, default=False)


def cleanup_old_data(engine):
    n_days_ago = datetime.today() - timedelta(days=RETENTION_TIME_DAYS)
    with session_scope(engine) as session:
        session.query(ScrapeResult)\
            .filter(ScrapeResult.create_date < n_days_ago)\
            .delete()
        session.query(DomainAlerts)\
            .filter(DomainAlerts.alert_time < n_days_ago)\
            .delete()


def create_db_if_not_exist(engine):
    if not is_db_present(engine):
        Base.metadata.create_all(engine)


def is_db_present(engine):
    if not os.path.isfile(WMT_DB):
        return False
    database_inspection = Inspector.from_engine(engine)
    tables = [table for table in database_inspection.get_table_names()]
    return len(tables) > 0


def setup_wal_mode(dbapi_con, con_record):
    dbapi_con.execute('PRAGMA journal_mode = WAL')


def setup_database(readonly=False):
    connection_string = f'file:{WMT_DB}'
    if readonly:
        connection_string = f'{connection_string}?mode=ro'
    creator = lambda: sqlite3.connect(connection_string, uri=True)
    engine = create_engine(
        'sqlite:////', creator=creator, echo=False,
    )
    event.listen(engine, 'connect', setup_wal_mode)
    old_umask = os.umask(0o137)
    try:
        create_db_if_not_exist(engine)
    finally:
        os.umask(old_umask)
    if not readonly:
        # Tighten the DB and any WAL/SHM siblings that were created
        # previously under the default umask 022 (which would have left
        # them 0644). create_db_if_not_exist guarantees WMT_DB exists,
        # so a chmod failure on it is a real permissions problem and
        # must surface — silently swallowing it would leave the DB
        # world-readable, which is exactly what this fix prevents.
        # WAL/SHM siblings are created on first WAL write and may not
        # exist yet, so FileNotFoundError on those is expected.
        # !9 tightens the mode literal from 0o640 to 0o600 — the daemon
        # is the only legitimate reader, so removing group-read closes
        # the disclosure path entirely.
        os.chmod(WMT_DB, 0o600)
        for sibling in (f'{WMT_DB}-wal', f'{WMT_DB}-shm'):
            try:
                os.chmod(sibling, 0o600)
            except FileNotFoundError:
                pass
    return engine


@contextlib.contextmanager
def session_scope(engine) -> Session:
    """Provide a transactional scope around a series of operations."""
    session = Session(bind=engine)
    try:
        yield session
        session.commit()
    except:
        session.rollback()
        raise
    finally:
        session.close()