feat: add ci cd files dont edit those files

server/controllers/captchaController.js

@@ -0,0 +1,28 @@
+const Captcha = require('../models/Captcha');
+const svgCaptcha = require('svg-captcha');
+const {_sr} = require('../plugins/serverResponses');
+const {res404, res500, generateRandomDigits} = require('../plugins/controllersHelperFunctions');
+
+const svgWidth = 50;
+const svgHeight = 20;
+
+module.exports.getCaptcha = [
+    async (req, res) => {
+        try {
+            const generateCaptcha = svgCaptcha.create({
+                size : 6,
+                noise : 2
+            });
+
+            const saveCaptcha = await Captcha.create({code : generateCaptcha.text});
+
+            if (saveCaptcha){
+                return res.json(generateCaptcha.data);
+            }else {
+                return res500(res , `مشکلی در اجرای درخواست شما پیش آمده است`);
+            }
+        }catch (e) {
+            return res500(res , `مشکلی در اجرای درخواست شما پیش آمده است`);
+        }
+    }
+]

server/controllers/commentController.js

@@ -0,0 +1,459 @@
+const {body, validationResult} = require('express-validator');
+const {_sr} = require('../plugins/serverResponses');
+const {res404, res500} = require('../plugins/controllersHelperFunctions');
+const Comment = require('../models/Comment');
+const News = require('../models/News');
+const ContactUs = require('../models/ContactUs');
+const Category = require('../models/Category');
+const Captcha = require('../models/Captcha');
+
+
+const limit = 20;
+
+
+/////////////////////////////////////////////////////////////////////// admin
+module.exports.updateComment = [
+  [
+    body('name')
+      .notEmpty().withMessage(_sr['fa'].required.name),
+
+    body('description')
+      .notEmpty().withMessage(_sr['fa'].required.description),
+
+    body('email')
+      .isEmail().withMessage(_sr['fa'].format.email),
+
+    body('allowShow')
+      .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+  ],
+  async (req, res) => {
+    const errors = validationResult(req)
+      if (!errors.isEmpty()) return res.status(422).json({
+        validation: errors.mapped()
+      });
+
+    try {
+
+      /**
+       * get data from input
+       */
+       var {
+        name,
+        description,
+        email,
+        allowShow
+      } = req.body;
+
+      /**
+       * get id
+       */
+      var commentId = req.params.id;
+
+      /**
+       * check comment exist or not
+       */
+      var targetComment = await Comment.findOne({_id : commentId});
+
+      if(!targetComment) return res404(res,`پیام مورد نظر پیدا نشد`);
+
+
+      /**
+       * make update object
+       */
+      targetComment.name = name.trim();
+      targetComment.description = description.trim();
+      targetComment.email = email;
+      targetComment.allowShow = allowShow;
+
+      await targetComment.save();
+
+      /**
+       * show result
+       */
+      return res.json(targetComment);
+
+    } catch (error) {
+      return res500(res , error?.message);
+    }
+  }
+]
+
+module.exports.changeStatus = [
+  async (req, res) => {
+    try {
+      /**
+       * get id
+       */
+      var commentId = req.params.id;
+
+      /**
+       * check comment exist or not
+       */
+      var targetComment = await Comment.findOne({_id : commentId});
+
+      if(!targetComment) return res404(res,`پیام مورد نظر پیدا نشد`);
+
+
+      /**
+       * make update object
+       */
+      targetComment.allowShow = !targetComment.allowShow;
+
+      await targetComment.save();
+
+      /**
+       * show result
+       */
+      return res.json(targetComment);
+
+    } catch (error) {
+      return res500(res , error.message);
+    }
+  }
+]
+
+module.exports.deletOneComment = [
+  async (req, res) => {
+    try {
+      var commentId = req.params.id;
+
+      /**
+       * check comment
+       */
+      var targetComment = await Comment.findOne({_id : commentId});
+
+      if(!targetComment){
+        return res404(res , `پیام مورد نظر پیدا نشد`);
+      }
+
+      /**
+       * delete comment
+       */
+      targetComment.deleteOne();
+
+      /**
+       * show result
+       */
+      return res.json(targetComment);
+
+    } catch (error) {
+      /**
+       * if we got unknown error show to client
+       */
+      res500(res , error);
+    }
+  }
+]
+
+module.exports.getOneComment = [
+  async (req, res) => {
+    try {
+      const commentId = req.params.id;
+
+      /**
+       * get comment
+       */
+      const targetComment = await Comment.findOne({_id : commentId}).populate('modelRef');
+
+      /**
+       * if not exist
+       */
+      if(!targetComment){
+        return res404(res , `پیام مورد نظر پیدا نشد`);
+      }
+
+      if(!targetComment.read){
+        targetComment.read = true;
+
+        await targetComment.save();
+      }
+
+      /**
+       * show result
+       */
+      return res.json(targetComment);
+    } catch (error) {
+      /**
+       * if we got unknown error show to client
+       */
+      res500(res , error);
+    }
+  }
+]
+
+module.exports.getAll = [
+  async (req, res) => {
+    try {
+
+      let findQuery = {};
+
+      findQuery.modelName = req.params.model;
+
+      if (req.params.model !== 'ContactUs'){
+        if (req.user.specialPermissions.length) {
+          findQuery.catsId = {$in : req.user.specialPermissions};
+        }
+      }
+
+      /**
+       * get all comment
+       */
+      const getAll = await Comment.paginate(findQuery ,
+          {page: req.query.page || 1 , limit ,  populate : 'modelRef' , sort:{created_at : -1}});
+
+      /**
+       * show result
+       */
+      return res.json(getAll);
+    } catch (error) {
+      return res500(res , error.message);
+    }
+  }
+]
+
+module.exports.getAllforCount = [
+  async (req, res) => {
+    try {
+
+      let findQuery = {};
+
+      findQuery.modelName = req.params.model;
+
+      if (req.params.model !== 'ContactUs'){
+        if (req.user.specialPermissions.length) {
+          findQuery.catsId = {$in : req.user.specialPermissions};
+        }
+      }
+
+      /**
+       * get all comment
+       */
+      const getAll = await Comment.find(findQuery).populate('modelRef');
+
+      /**
+       * show result
+       */
+      return res.json(getAll);
+    } catch (error) {
+      return res500(res , error.message);
+    }
+  }
+]
+
+module.exports.search = [
+  async (req, res) => {
+    try {
+      var findQuery = {};
+      findQuery['$and'] = [];
+      findQuery['$or'] = [];
+
+      var {
+        name,
+        email,
+        read,
+        allowShow,
+        date
+      } = req.body;
+
+      findQuery.modelName = req.params.model;
+
+      if (req.params.model !== 'ContactUs'){
+        if (req.user.specialPermissions.length) {
+          findQuery.catsId = {$in : req.user.specialPermissions};
+        }
+      }
+
+      /** search by term */
+      if (name && !_.isEmpty(name)) {
+        findQuery['$or'].push(
+          {
+            name: {
+              $regex: '.*' + name + '.*'
+            },
+          }
+          );
+      }
+      /** search by email */
+      if (email && !_.isEmpty(email)) {
+        findQuery['$and'].push({
+          email
+        });
+      }
+      /** search by read */
+      if (!_.isUndefined(read) && _.isBoolean(read)) {
+        findQuery['$and'].push({
+          read
+        });
+      }
+      /** search by allowShow */
+      if (!_.isUndefined(allowShow) && _.isBoolean(allowShow)) {
+        findQuery['$and'].push({
+          allowShow
+        })
+      }
+
+      /** search by date */
+      if (date && !_.isEmpty(date)) {
+        if(date.length === 1){
+          findQuery['$and'].push({
+            created_at: {
+              $gte: moment(date[0]).startOf('days'),
+              $lt: moment(date[0]).endOf('days')
+            }
+          });
+        }else{
+          findQuery['$and'].push({
+            created_at: {
+              $gte: new Date(date[0]),
+              $lt: new Date(date[1])
+            }
+          });
+        }
+      }
+
+      _.isEmpty(findQuery['$and']) && delete findQuery['$and'];
+      _.isEmpty(findQuery['$or']) && delete findQuery['$or'];
+
+      /** get comments */
+      var comments = await Comment.paginate(findQuery , {page : req.query.page , limit,  populate : 'modelRef' , sort:{created_at : -1}});
+
+      /** show result */
+      return res.json(comments);
+    } catch (error) {
+      return res500(res ,error?.message)
+    }
+  }
+]
+
+/////////////////////////////////////////////////////////////////////// public
+module.exports.addComment = [
+  [
+    body('name')
+      .notEmpty().withMessage(_sr['fa'].required.title),
+
+    body('description')
+      .notEmpty().withMessage(_sr['fa'].required.description),
+
+    body('email')
+      .isEmail().withMessage(_sr['fa'].format.email),
+
+    body('modelId')
+      .if((value , {req}) => {
+        return req.body.modelName !== 'contactus';
+      })
+      .notEmpty().withMessage(`این فیلد  ${_sr['fa'].optional.string}`),
+
+    body('modelName')
+      .isString().withMessage(`این فیلد ${_sr['fa'].optional.string}`)
+      .bail()
+      .isIn(['news' , 'contactus' , 'category']).withMessage(`${_sr['fa'].optional.onlyValid} 'news' , 'contactus' , 'category'`),
+
+    body('captcha')
+      .notEmpty().withMessage(_sr['fa'].required.field)
+      .custom((value , {req}) => {
+        return Captcha.findOne({code : value}).then(data => {
+          if (!data) return Promise.reject(`عبارت وارد شده صحیح نمیباشد`)
+          else  return true
+        })
+      }),
+
+  ],
+  async (req, res) => {
+
+    const errors = validationResult(req)
+      if (!errors.isEmpty()) return res.status(422).json({
+        validation: errors.mapped()
+      });
+
+    try {
+      let {
+        name,
+        description,
+        email,
+        modelId,
+        modelName
+      } = req.body;
+
+      let Model;
+
+      switch (modelName) {
+        case 'news':
+          Model = News;
+          modelName = 'News';
+          break;
+        case 'contactus':
+          Model = ContactUs
+          modelName = 'ContactUs';
+          break;
+        case 'category':
+          Model = Category
+          modelName = 'Category';
+          break;
+      }
+
+      let checkParent = null;
+
+      if(modelName !== 'ContactUs'){
+        checkParent = await Model.findOne({_id : modelId});
+
+        if(!checkParent){
+          return res404(res , `ای دی فرستاده شده وجود ندارد`);
+        }
+
+        if(!checkParent?.allowComment){
+          return res.status(403).json({message : `شما اجازه پیام گذاشتن برای این خبر یا صفحه را ندارید`});
+        }
+      }
+
+      const commentData = {
+        name : name.trim(),
+        description : description.trim(),
+        email : email.trim(),
+        modelRef : modelId || null,
+        modelName,
+        modelType : checkParent?.modelType || null,
+        _updatedBy : req.user?._id || null
+      };
+
+      if (modelName !== 'ContactUs'){
+        commentData.catsId = modelName === 'Category' ? checkParent?.treeCat || [] : checkParent?.allCat || []
+      }
+      /**
+       * add new comment
+       */
+      const create = await Comment.create(commentData);
+
+      /**
+       * check added or not
+       */
+      if (!create) {
+        return res500(res, `مشکلی در اضافه کردن پیام پیش آمده است`);
+      }
+
+      /**
+       * show result
+       */
+      return res.json(create);
+    } catch (error) {
+      /**
+       * if we got unknown error show to client
+       */
+      return res500(res , error?.message);
+    }
+  }
+]
+
+module.exports.getCommentById = [
+  async (req , res) => {
+    try {
+      const modelId = req.params.id;
+
+      const getComments = await Comment.find({modelRef: modelId, allowShow: true});
+
+      return res.json(getComments);
+    } catch (error) {
+      return res500(res , error?.message);
+    }
+  }
+]

server/controllers/contactUsController.js

@@ -0,0 +1,140 @@
+const ContactUs = require('../models/ContactUs');
+const {body, validationResult , checkSchema} = require('express-validator');
+const {_sr} = require('../plugins/serverResponses');
+const {res404, res500, hasWhiteSpaces, isLatinCharactersWithSymbol, generateRandomDigits} = require('../plugins/controllersHelperFunctions');
+
+
+/////////////////////////////////////////////////////////////////////// admin
+module.exports.updateContacUs = [
+  checkSchema({
+    description : {
+      notEmpty : true,
+      errorMessage : _sr['fa'].required.description
+    },
+    email : {
+      isEmail : true,
+      errorMessage : _sr['fa'].format.email,
+    },
+    phone : {
+      isNumeric : true,
+      errorMessage : `شماره تلفن ${_sr['fa'].optional.number}`
+    },
+    address : {
+      isString : true,
+      errorMessage : `آدرس ${_sr['fa'].optional.string}`
+    },
+    'location.type' : {
+      isString : true,
+    },
+    'location.coordinates' : {
+      isArray : true
+    }
+  }),
+  async (req, res) => {
+    const errors = validationResult(req)
+      if (!errors.isEmpty()) return res.status(422).json({
+        validation: errors.mapped()
+      });
+
+    try {
+      
+      /**
+       * get data from input
+       */
+      var {
+        description,
+        email,
+        phone,
+        address,
+        location,
+      } = req.body;
+
+      /**
+       * get id
+       */
+      // var contactUsId = req.params.id;
+      
+      var contactUs = await ContactUs.findOne();
+
+      if(!contactUs){
+        return res404(res , `صفحه ارتباط با ما وجود ندارد`);
+      }
+
+      /**
+       * make update object
+       */
+      contactUs.title = contactUs.title.trim();
+      contactUs.description = description.trim();
+      contactUs.email = email.trim();
+      contactUs.phone = phone.trim();
+      contactUs.address = address.trim();
+      contactUs.location = {
+        type : location.type,
+        coordinates : location.coordinates
+      };
+      contactUs.main = contactUs.main;
+      contactUs.showInMenu = contactUs.showInMenu;
+      contactUs._creator = req.user?._id || null;
+      contactUs._updatedBy = req.user?._id || null;
+      contactUs.siteMap = contactUs.siteMap;
+      contactUs.showInFooter = contactUs.showInFooter;
+
+      await contactUs.save();
+
+      /**
+       * show result
+       */
+      return res.json(contactUs);
+
+    } catch (error) {
+      return res500(res , error.message);
+    }
+  }
+]
+
+module.exports.getOneContacUs = [
+  async (req, res) => {
+    try {
+
+      // var add = new ContactUs({
+      //   description: "توضیحات صفحه تماس با ما",
+      //   showInMenu: true,
+      //   main: true,
+      //   email: 'test@gmail.com',
+      //   phone: '08632222222',
+      //   address: 'میدان فاطمیه',
+      //   _creator: null,
+      //   _updatedBy: null,
+      //   location: {
+      //     type: 'Point',
+      //     coordinates: [-118.2870407961309, 33.93508571994455]
+      //   },
+      //   siteMap: true,
+      //   showInFooter: true
+      // });
+
+      // await add.save();
+      /**
+       * get ContacUs
+       */
+      const getContacUs = await ContactUs.find({});
+      
+      /**
+       * if not exist
+       */
+      if(!getContacUs.length){
+        return res404(res , `صفحه ارتباط با ما وجود ندارد`);
+      }
+
+      /**
+       * show result
+       */
+      return res.json(getContacUs[0]);
+    } catch (error) {
+      /**
+       * if we got unkown error show to client
+       */
+      res500(res , error);
+    }
+  }
+]

server/controllers/contentController.js

@@ -0,0 +1,300 @@
+const {body, validationResult} = require('express-validator');
+const sharp = require('sharp');
+const {_sr} = require('../plugins/serverResponses');
+const {res404, res500, hasWhiteSpaces, isLatinCharactersWithSymbol, generateRandomDigits} = require('../plugins/controllersHelperFunctions');
+const Content = require('../models/Content');
+const fs = require('fs');
+
+
+////// variables
+const profileWidth = 1000;
+const profileHeight = 600;
+const profileQuality = 100;
+
+const profileThumbWidth = 400;
+const profileThumbHeight = 400;
+const profileThumbQuality = 100;
+
+/////////////////////////////////////////////////////////////////////// admin
+module.exports.addContent = [
+  [
+    body('title')
+       .notEmpty().withMessage(_sr['fa'].required.title),
+
+    body('param')
+       .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('pageContent')
+       .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('showInMenu')
+        .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+  ],
+  async (req, res) => {
+
+    const errors = validationResult(req)
+    if (!errors.isEmpty()) return res.status(422).json({
+      validation: errors.mapped()
+    });
+
+    try {
+      let {
+        title,
+        param,
+        pageContent,
+        email,
+        showInMenu
+      } = req.body;
+
+      const catData = {
+        title: title.trim(),
+        param: param,
+        pageContent: pageContent,
+        showInMenu,
+        _creator: req.user._id,
+        _updatedBy: req.user._id
+      }
+      if (email) catData.email = email
+
+      /**
+       * add new content
+       */
+      let create = await Content.create(catData);
+
+      /**
+       * check added or not
+       */
+      if (!create) {
+        return res500(res, `مشکلی در اضافه کردن محتوا پیش آمده است`);
+      }
+
+      /**
+       * if we have pic upload to server
+       */
+      if (req.files && req.files.cover) {
+        const image = req.files.cover;
+        if (!_sr.supportedImageFormats.includes(image.mimetype.split('/')[1])) {
+          return res.status(422).json({
+            validation: {
+              cover: {
+                msg: _sr['fa'].format.image
+              }
+            }
+          });
+        }
+        const imageName = `manager_${Date.now()}_${create._id}.${image.mimetype.split('/')[1]}`;
+        const thumbName = 'thumb_' + imageName
+        try {
+          const target = sharp(image.data)
+          await target
+             .resize(profileWidth, profileHeight, {
+               fit: 'cover'
+             })
+             .jpeg({
+               quality: profileQuality
+             })
+             .toFile(`./static/uploads/images/content/${imageName}`)
+          await target
+             .resize(profileThumbWidth, profileThumbHeight, {
+               fit: 'cover'
+             })
+             .jpeg({
+               quality: profileThumbQuality
+             })
+             .toFile(`./static/uploads/images/content/${thumbName}`)
+
+          create.cover = imageName;
+          create.thumb = imageName;
+
+          await create.save();
+        } catch (e) {
+          return res500(res, e?.message);
+        }
+      }
+
+      /**
+       * show result
+       */
+      return res.json(create);
+    } catch (error) {
+      res500(res, error.message);
+    }
+  }
+]
+
+module.exports.updateContent = [
+  [
+    body('title')
+       .notEmpty().withMessage(_sr['fa'].required.title),
+
+    body('pageContent')
+       .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('showInMenu')
+        .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+  ],
+  async (req, res) => {
+    const errors = validationResult(req)
+    if (!errors.isEmpty()) return res.status(422).json({
+      validation: errors.mapped()
+    });
+
+    try {
+
+      /**
+       * get data from input
+       */
+      let {
+        title,
+        pageContent,
+        email,
+        showInMenu
+      } = req.body;
+
+      /**
+       * get id
+       */
+      var contentParam = req.params.param;
+
+      /**
+       * check content exist or not
+       */
+      var targetContent = await Content.findOne({param: contentParam});
+
+      if (!targetContent) return res404(res, `صفحه ی مورد نظر پیدا نشد`);
+
+      /**
+       * if we have pic upload to server
+       */
+      if (req.files && req.files.cover) {
+        const image = req.files.cover;
+        if (!_sr.supportedImageFormats.includes(image.mimetype.split('/')[1])) {
+          return res.status(422).json({
+            validation: {
+              cover: {
+                msg: _sr['fa'].format.image
+              }
+            }
+          });
+        }
+        const imageName = `manager_${Date.now()}_${targetContent._id}.${image.mimetype.split('/')[1]}`;
+        const thumbName = 'thumb_' + imageName
+        try {
+          const target = sharp(image.data)
+          await target
+             .resize(profileWidth, profileHeight, {
+               fit: 'cover'
+             })
+             .jpeg({
+               quality: profileQuality
+             })
+             .toFile(`./static/uploads/images/content/${imageName}`)
+          await target
+             .resize(profileThumbWidth, profileThumbHeight, {
+               fit: 'cover'
+             })
+             .jpeg({
+               quality: profileThumbQuality
+             })
+             .toFile(`./static/uploads/images/content/${thumbName}`)
+
+          /**
+           * if exist old pic delete it from file
+           */
+          if (targetContent.cover) {
+            const oldPic = `./static${targetContent.cover}`
+            const oldThumb = `./static${targetContent.thumb}`
+
+            if (fs.existsSync(oldPic)) {
+              fs.unlink(oldPic, (err) => {
+                if (err) return res500(res, err?.message);
+              });
+            }
+            if (fs.existsSync(oldThumb)) {
+              fs.unlink(oldThumb, (err) => {
+                if (err) return res500(res, err?.message);
+              });
+            }
+          }
+
+          targetContent.cover = imageName;
+          targetContent.thumb = thumbName;
+        } catch (e) {
+          return res500(res, e?.message);
+        }
+      }
+
+
+      /**
+       * make update object
+       */
+      targetContent.title = title.trim();
+      targetContent._updatedBy = req.user._id;
+      targetContent.pageContent = pageContent;
+      targetContent.showInMenu = showInMenu || false;
+      if (email) targetContent.email = email
+      await targetContent.save();
+
+      /**
+       * show result
+       */
+      return res.json(targetContent);
+
+    } catch (error) {
+      return res500(res, error?.message);
+    }
+  }
+]
+
+module.exports.getOneContent = [
+  async (req, res) => {
+    try {
+      var contentParam = req.params.param;
+
+      /**
+       * get content
+       */
+      const targetContent = await Content.findOne({param: contentParam});
+
+      /**
+       * show result
+       */
+      return res.json(targetContent);
+    } catch (error) {
+      return res500(res, error?.message);
+    }
+  }
+]
+
+/////////////////////////////////////////////////////////////////////// public
+module.exports.footer = [
+  async (req, res) => {
+    try {
+      var findQuery = {showInFooter: {$ne: 0}};
+
+      var getContents = await Content.find(findQuery).sort({priority: -1});
+
+      return res.json(getContents);
+    } catch (error) {
+      return res500(res, error?.message);
+    }
+  }
+]
+
+module.exports.viewContent = [
+  async (req, res) => {
+    try {
+      var param = req.params.param;
+
+      var getContent = await Content.findOne({param});
+
+      if (!getContent) {
+        return res404(res, `صفحه ی مورد نظر پیدا نشد`);
+      }
+
+      return res.json(getContent);
+    } catch (error) {
+      return res500(res, error?.message);
+    }
+  }
+]

server/controllers/counterDayController.js

@@ -0,0 +1,91 @@
+const CounterDay = require('../models/CounterDay');
+const {body, validationResult} = require('express-validator');
+const {_sr} = require('../plugins/serverResponses');
+const {res404, res500} = require('../plugins/controllersHelperFunctions');
+const fs = require('fs');
+const sharp = require('sharp');
+const moment = require('moment-jalaali');
+
+/////////////////////////////////////////////////////////////////////// admin
+
+module.exports.updateCounterDay = [
+    [
+        body('title')
+            .notEmpty().withMessage(_sr['fa'].required.title),
+
+        body('publish')
+            .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+        body('expireDate')
+            .notEmpty().withMessage(`لطفا یک تاریخ تعیین کنید`),
+
+    ],
+    async (req, res) => {
+        const errors = validationResult(req)
+        if (!errors.isEmpty()) return res.status(422).json({
+            validation: errors.mapped()
+        });
+
+
+        try {
+
+            const {title, publish , expireDate} = req.body;
+
+            const targetCounterDay = await CounterDay.findOne();
+
+            if (targetCounterDay) {
+                targetCounterDay.title = title;
+                targetCounterDay.publish = publish;
+                targetCounterDay.expireDate = moment(expireDate).startOf('days');
+                targetCounterDay._updatedBy = req.user._id;
+
+                await targetCounterDay.save();
+
+                return res.json({message: _sr['fa'].response.success_save});
+            }else {
+                const data = {
+                    title,
+                    publish,
+                    expireDate : moment(expireDate).startOf('days'),
+                    _creator : req.user._id,
+                    _updatedBy: req.user._id
+                }
+
+                await CounterDay.create(data);
+
+                return res.json({message: _sr['fa'].response.success_save});
+            }
+        } catch (error) {
+            return res500(res, `مشکلی در اجرای درخواست پیش آمده است`);
+        }
+    }
+]
+
+module.exports.getCounterDayByAdmin = [
+    async (req, res) => {
+        try {
+            const targetCounterDay = await CounterDay.findOne();
+
+            if (!targetCounterDay) return res.json({title: '', publish: true , expireDate : ''});
+
+            return res.json(targetCounterDay);
+        } catch (error) {
+            return res500(res, `مشکلی در اجرای درخواست شما پیش آمده است`);
+        }
+    }
+]
+
+////////////////////////////////////////////////////////////////// public
+module.exports.getCounterDayByUser = [
+    async (req, res) => {
+        try {
+            const targetCounterDay = await CounterDay.findOne({publish : true , expireDate : {$gte : new Date()}});
+
+            if (!targetCounterDay) return res.json(null);
+
+            return res.json(targetCounterDay);
+        } catch (error) {
+            return res500(res, `مشکلی در اجرای درخواست شما پیش آمده است`);
+        }
+    }
+]

server/controllers/dataBackupController.js

@@ -0,0 +1,187 @@
+const fs = require('fs')
+const archiver = require('archiver')
+const moment = require('moment')
+const jwt = require('jsonwebtoken')
+const {secretKey} = require('../authentication')
+const {_sr} = require('../plugins/serverResponses')
+// models
+const Category = require('../models/Category')
+const Comment = require('../models/Comment')
+const ContactUs = require('../models/ContactUs')
+const Content = require('../models/Content')
+const Gallery = require('../models/Gallery')
+const HomePage = require('../models/HomePage')
+const Links = require('../models/Links')
+const Meeting = require('../models/Meeting')
+const News = require('../models/News')
+const NewsFile = require('../models/NewsFile')
+const Occasion = require('../models/Occasion')
+const Services = require('../models/Services')
+const Slider = require('../models/Slider')
+const User = require('../models/User')
+const YearBanner = require('../models/YearBanner')
+
+module.exports.createBackUp = [
+  // check user token and permission to backup
+  async (req, res, next) => {
+    const token = req.params.token
+    if (!token) return res.status(401).json({message: 'unauthorized'})
+    try {
+      // check if token is not destroyed
+      const user = await User.findOne({token: token})
+      if (!user) return res.status(401).json({message: 'unauthorized'})
+
+      // verify token
+      const checkToken = await jwt.verify(user.token.replace(/^Bearer\s/, ''), secretKey)
+      if (!checkToken) return res.status(401).json({message: 'unauthorized'})
+
+      // check user permissions
+      const permissions = user.permissions
+      if (!permissions.includes('superAdmin')) res.status(401).json({message: 'unauthorized'})
+
+      return next()
+
+    } catch (e) {
+      res.status(401).json({message: 'unauthorized'})
+    }
+  },
+  // do backup :)
+  async (req, res) => {
+    try {
+      console.log('backup started')
+
+      const dataBaseQueries = [
+        // categories
+        Category.find(),
+        // comments
+        Comment.find(),
+        // contact us
+        ContactUs.find(),
+        // content
+        Content.find(),
+        // gallery
+        Gallery.find(),
+        // home page
+        HomePage.find(),
+        // links
+        Links.find(),
+        // meetings
+        Meeting.find(),
+        // news
+        News.find(),
+        // newsFile
+        NewsFile.find(),
+        // services
+        Services.find(),
+        // sliders
+        Slider.find(),
+        // users
+        User.find(),
+        // year banner
+        YearBanner.find(),
+        // occasion
+        Occasion.find()
+      ]
+
+      const [categories, comments, contactus, contents, galleries, homepage, links, meetings, news, newsFiles, services, sliders, users, yearBanner, occasion] = await Promise.all(dataBaseQueries)
+
+      if (await !fs.existsSync('./backup/database')) await fs.mkdirSync('./backup/database')
+
+      await Promise.all([
+        fs.writeFileSync(`./backup/database/categories_${moment(Date.now()).format('YYYY-MM-DD')}.json`, JSON.stringify(categories)),
+        fs.writeFileSync(`./backup/database/comments_${moment(Date.now()).format('YYYY-MM-DD')}.json`, JSON.stringify(comments)),
+        fs.writeFileSync(`./backup/database/contactus_${moment(Date.now()).format('YYYY-MM-DD')}.json`, JSON.stringify(contactus)),
+        fs.writeFileSync(`./backup/database/contents_${moment(Date.now()).format('YYYY-MM-DD')}.json`, JSON.stringify(contents)),
+        fs.writeFileSync(`./backup/database/galleries_${moment(Date.now()).format('YYYY-MM-DD')}.json`, JSON.stringify(galleries)),
+        fs.writeFileSync(`./backup/database/homepage_${moment(Date.now()).format('YYYY-MM-DD')}.json`, JSON.stringify(homepage)),
+        fs.writeFileSync(`./backup/database/links_${moment(Date.now()).format('YYYY-MM-DD')}.json`, JSON.stringify(links)),
+        fs.writeFileSync(`./backup/database/meetings_${moment(Date.now()).format('YYYY-MM-DD')}.json`, JSON.stringify(meetings)),
+        fs.writeFileSync(`./backup/database/news_${moment(Date.now()).format('YYYY-MM-DD')}.json`, JSON.stringify(news)),
+        fs.writeFileSync(`./backup/database/newsFiles_${moment(Date.now()).format('YYYY-MM-DD')}.json`, JSON.stringify(newsFiles)),
+        fs.writeFileSync(`./backup/database/services_${moment(Date.now()).format('YYYY-MM-DD')}.json`, JSON.stringify(services)),
+        fs.writeFileSync(`./backup/database/sliders_${moment(Date.now()).format('YYYY-MM-DD')}.json`, JSON.stringify(sliders)),
+        fs.writeFileSync(`./backup/database/users_${moment(Date.now()).format('YYYY-MM-DD')}.json`, JSON.stringify(users)),
+        fs.writeFileSync(`./backup/database/yearBanner_${moment(Date.now()).format('YYYY-MM-DD')}.json`, JSON.stringify(yearBanner)),
+        fs.writeFileSync(`./backup/database/occasion_${moment(Date.now()).format('YYYY-MM-DD')}.json`, JSON.stringify(occasion))
+      ])
+
+      /////////////////// create backup zip file
+
+      const backupName = 'backup_' + moment(Date.now()).format('YYYY-MM-DD') + '.zip'
+      // create a file to stream archive data to.
+      const output = fs.createWriteStream(`./backup/${backupName}`)
+      const archive = archiver('zip', {
+        zlib: {level: 9} // Sets the compression level.
+      })
+
+
+      // listen for all archive data to be written
+      // 'close' event is fired only when a file descriptor is involved
+      output.on('close', function () {
+        console.log(archive.pointer() + ' total bytes')
+        console.log('archiver has been finalized and the output file descriptor has closed.')
+        return res.download(`./backup/${backupName}`)
+      })
+
+      // This event is fired when the data source is drained no matter what was the data source.
+      // It is not part of this library but rather from the NodeJS Stream API.
+      // @see: https://nodejs.org/api/stream.html#stream_event_end
+      output.on('end', function () {
+        console.log('Data has been drained')
+        return res.status(500).send('<h1 style="margin-top: 150px;text-align: center;direction: rtl;color: red;">فضای هاست پر میباشد.لطفا نسبت به پاک کردن بکاپ های قبلی یا افزایش فضای هاست اقدام فرمایید.</h1>')
+      })
+
+      // good practice to catch warnings (ie stat failures and other non-blocking errors)
+      archive.on('warning', function (err) {
+
+        if (err.code === 'ENOENT') {
+          // log warning
+          console.log('On archiver warning -- ENOENT error code', err)
+        } else {
+          // throw error
+          console.log('On archiver warning -- other error codes ', err)
+        }
+        return res.status(500).send('<h1 style="margin-top: 150px;text-align: center;direction: rtl;color: red;">فضای هاست پر میباشد.لطفا نسبت به پاک کردن بکاپ های قبلی یا افزایش فضای هاست اقدام فرمایید.</h1>')
+      })
+
+      // good practice to catch this error explicitly
+      archive.on('error', function (err) {
+        // throw err
+        console.log(err)
+        return res.status(500).json({message: 'مشکلی پیش آمده'})
+      })
+
+      // pipe archive data to the file
+      await archive.pipe(output)
+
+      // append files from a sub-directory and naming it `new-subdir` within the archive
+      await archive.directory(`./static/uploads/`, 'uploads')
+      await archive.directory(`./backup/database/`, 'database')
+
+      // finalize the archive (ie we are done appending files but streams have to finish yet)
+      // 'close', 'end' or 'finish' may be fired right after calling this method so register to them beforehand
+      await archive.finalize()
+
+      await fs.rmdirSync('./backup/database', {recursive: true})
+    } catch (e) {
+      return res.status(500).send('<h1 style="margin-top: 150px;text-align: center;direction: rtl;color: red;">فضای هاست پر میباشد.لطفا نسبت به پاک کردن بکاپ های قبلی یا افزایش فضای هاست اقدام فرمایید.</h1>')
+    }
+  }
+]
+
+
+module.exports.removeOldBackups = [
+  async (req, res) => {
+    try {
+      const files = await fs.readdirSync('./backup')
+      for await (const file of files) {
+        const isDirectory = await fs.statSync(`./backup/${file}`).isDirectory()
+        if (isDirectory) await fs.rmdirSync(`./backup/${file}`, {recursive: true})
+        else await fs.unlinkSync(`./backup/${file}`)
+      }
+      return res.json({message: _sr['fa'].response.success_remove})
+    } catch (e) {
+      return res.status(500).json({message: e})
+    }
+  }
+]

server/controllers/dynamicController.js

@@ -0,0 +1,51 @@
+
+const mongoose = require('mongoose')
+const dynamicModelSchema = new mongoose.Schema({}, { strict: false });
+
+
+
+module.exports.CreateModel = [
+    async (req, res, next) => {
+        try {
+            const { modelName, fields } = req.body;
+
+            if (!modelName || !fields || !Array.isArray(fields)) {
+                return res.status(400).send('ورودی نامعتبر');
+            }
+
+            if (mongoose.modelNames().includes(modelName)) {
+                return res.status(400).json({ message: "مدل قبلا ایجاد شده" });
+            }
+
+            const schemaDefinition = {};
+            fields.forEach(field => {
+                schemaDefinition[field] = { type: String };
+            });
+
+            const schema = new mongoose.Schema(schemaDefinition);
+            mongoose.model(modelName, schema);
+
+            return res.status(200).json(`مدل ${modelName} ایجاد شد با فیلد های: ${fields.join(', ')}`);
+        } catch (e) {
+            next(e);
+        }
+    }
+];
+
+module.exports.SaveDataModel = [
+    async (req,res,next)=>{
+        const { modelName, data } = req.body;
+
+        if (!modelName || !data || typeof data !== 'object') {
+            return res.status(400).send('ورودی نامعتبر');
+        }
+        try {
+            const DynamicModel = mongoose.model(modelName);
+            const instance = new DynamicModel(data);
+            await instance.save();
+            res.send('داده فرم ذخیره شد');
+        } catch (error) {
+            next(error)
+        }
+    }
+]

server/controllers/electionController.js

@@ -0,0 +1,884 @@
+const Category = require('../models/Category');
+const Election = require('../models/Election');
+const {body, validationResult} = require('express-validator');
+const {_sr} = require('../plugins/serverResponses');
+const {
+  res404,
+  res500,
+  checkValidations,
+  generateRandomDigits,
+  hasWhiteSpaces,
+  isLatinCharactersWithSymbol
+} = require('../plugins/controllersHelperFunctions');
+const fs = require('fs');
+const sharp = require('sharp');
+
+////// variables
+const profileWidth = 300;
+const profileHeight = 400;
+const profileQuality = 100;
+const limit = 20;
+
+//// functions
+const _checkSpecPermission = async (req, category) => {
+  return !req.user.specialPermissions.includes(category._id) && //check parent id exist in special permissions or not
+     !req.user.specialPermissions.some(item => category?.treeCat?.join().includes(item));
+}
+
+const _generatePass = async () => {
+  let pass = generateRandomDigits(8);
+  let checkPass = await Election.findOne({'voters.password': pass});
+
+  if (checkPass) return await _generatePass();
+
+  return pass;
+}
+
+/////////////////////////////////////////////////////////////////////// admin election
+module.exports.addElection = [
+  [
+    body('title')
+       .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('catId')
+       .isMongoId().withMessage(_sr['fa'].required.field)
+       .if((value, {req}) => {
+         return req.body.catId
+       })
+       .custom((value) => {
+         return Category.findOne({
+           _id: value
+         })
+            .then(category => {
+              if (!category) return Promise.reject(_sr['fa'].not_found.category);
+              else return true
+            })
+       }),
+
+    body('startDate')
+       .notEmpty().withMessage(`لطفا یک تاریخ شروع تعیین کنید`),
+
+    body('endDate')
+       .notEmpty().withMessage(`لطفا یک تاریخ پایان تعیین کنید`),
+
+    body('publish')
+       .isBoolean().withMessage(_sr['fa'].format.boolean),
+  ],
+  checkValidations(validationResult),
+  async (req, res) => {
+    try {
+
+      const {
+        title,
+        catId,
+        description,
+        startDate,
+        endDate,
+        publish
+      } = req.body;
+
+      const data = {
+        title: title.trim(),
+        catId,
+        description,
+        startDate,
+        endDate,
+        publish,
+        _creator: req.user._id,
+        _updatedBy: req.user._id
+      }
+
+
+      const category = await Category.findOne({
+        _id: catId
+      }).populate({
+        path: 'parent',
+        populate: {
+          path: 'parent',
+          model: 'Category'
+        }
+      });
+
+      if (!category) return res404(res, 'دسته بندی مورد نظر پیدا نشد');
+
+      /** check special permission */
+      if (req.user.specialPermissions.length && await _checkSpecPermission(req, category)) {
+        return res.status(403).json({
+          message: `شما نمیتوانید این دسته بندی را انتخاب کنید`
+        });
+      }
+
+      data.allCat = category.treeCat;
+      data.rootParent = category.rootParent || category._id;
+
+      const createElection = await Election.create(data);
+
+      if (!createElection) return res500(res, `مشکلی در اجرای درخواست شما پیش آمده است`);
+
+      return res.json(createElection);
+    } catch (error) {
+      return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+    }
+  }
+]
+
+module.exports.updateElection = [
+  [
+    body('title')
+       .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('catId')
+       .isMongoId().withMessage(_sr['fa'].required.field)
+       .if((value, {req}) => {
+         return req.body.catId
+       })
+       .custom((value) => {
+         return Category.findOne({
+           _id: value
+         })
+            .then(category => {
+              if (!category) return Promise.reject(_sr['fa'].not_found.category);
+              else return true
+            })
+       }),
+
+    body('startDate')
+       .notEmpty().withMessage(`لطفا یک تاریخ شروع تعیین کنید`),
+
+    body('endDate')
+       .notEmpty().withMessage(`لطفا یک تاریخ پایان تعیین کنید`),
+
+    body('publish')
+       .isBoolean().withMessage(_sr['fa'].format.boolean),
+  ],
+  checkValidations(validationResult),
+  async (req, res) => {
+    try {
+
+      const electionId = req.params.id;
+
+      const {
+        title,
+        catId,
+        description,
+        startDate,
+        endDate,
+        publish
+      } = req.body;
+
+      //// check election
+      const targetElection = await Election.findById(electionId);
+
+      if (!targetElection) return res404(res, `انتخابات مورد نظر پیدا نشد`);
+
+
+      if (catId && targetElection.catId !== catId) {
+        const category = await Category.findOne({
+          _id: catId
+        }).populate({
+          path: 'parent',
+          populate: {
+            path: 'parent',
+            model: 'Category'
+          }
+        });
+
+        if (!category) return res404(res, 'دسته بندی مورد نظر پیدا نشد');
+
+        /** check special permission */
+        if (req.user.specialPermissions.length && await _checkSpecPermission(req, category)) {
+          return res.status(403).json({
+            message: `شما نمیتوانید این دسته بندی را انتخاب کنید`
+          });
+        }
+
+        targetElection.catId = catId;
+        targetElection.allCat = category.treeCat;
+        targetElection.rootParent = category.rootParent || category._id;
+      }
+
+      targetElection.title = title;
+      targetElection.description = description;
+      targetElection.startDate = startDate;
+      targetElection.endDate = endDate;
+      targetElection.publish = publish;
+      targetElection._updatedBy = req.user._id;
+
+      await targetElection.save();
+
+      return res.json({message: _sr['fa'].response.success_save});
+    } catch (error) {
+      return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+    }
+  }
+]
+
+module.exports.getAllElection = [
+  async (req, res) => {
+    try {
+      let findQuery = {};
+
+      if (req.user.specialPermissions.length) {
+        findQuery.catId = {$in: req.user.specialPermissions}
+      }
+
+      const allElection = await Election.paginate(findQuery, {
+        page: req.query.page || 1,
+        populate: [
+          {path: 'catId'},
+          {
+            path: '_creator',
+            select: {
+              firstName: 1,
+              lastName: 1,
+              profilePic: 1
+            }
+          }
+        ],
+        limit,
+        sort: {created_at: -1}
+      });
+
+      if (!allElection) return res500(res, `مشکلی در گرفتن اطلاعات پیش آمده است`);
+
+      return res.json(allElection);
+
+    } catch (error) {
+      return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+    }
+  }
+]
+
+module.exports.getOneElection = [
+  async (req, res) => {
+    try {
+      const electionId = req.params.id;
+
+      const findQuery = {
+        _id: electionId
+      };
+
+      const election = await Election.findOne(findQuery).populate('catId');
+
+      if (!election) return res404(res, `اطلاعات مورد نظر پیدا نشد`);
+
+      if (req.user.specialPermissions.length && await _checkSpecPermission(req, election.catId)) {
+        return res.status(403).json({
+          message: `شما مجاز به دیدن اطلاعات این انتخابات نمی باشید`
+        });
+      }
+
+      return res.json(election);
+
+    } catch (error) {
+      return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+    }
+  }
+]
+
+module.exports.deletOneElection = [
+  async (req, res) => {
+    try {
+      const electionId = req.params.id;
+
+      const deleteElection = await Election.findById(electionId).populate('catId');
+
+      if (!deleteElection) return res404(res, `انتخابات مورد نظر پیدا نشد`);
+
+      if (req.user.specialPermissions.length && await _checkSpecPermission(req, deleteElection.catId)) {
+        return res.status(403).json({
+          message: `شما اجازه حذف این انتخابات را ندارید`
+        });
+      }
+
+      if (deleteElection.candidates.length) {
+        const targetDir = `./static/uploads/images/election/`;
+
+        const getFiles = fs.readdirSync(targetDir);
+
+        for (const file of getFiles) {
+          if (file.includes(deleteElection._id)) {
+            fs.unlink(`./static/uploads/images/election/${file}`, (err) => {
+              if (err) console.log(err)
+            });
+          }
+        }
+      }
+
+      await deleteElection.deleteOne();
+
+      return res.json({message: _sr['fa'].response.success_remove});
+    } catch (error) {
+      return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+    }
+  }
+]
+
+module.exports.search = [
+  async (req, res) => {
+    try {
+      let query = {};
+      let populate = [
+        {
+          path: '_creator',
+          select: {firstName: 1, lastName: 1, profilePic: 1}
+        },
+        {
+          path: 'catId'
+        }
+      ];
+
+
+      query['$and'] = [];
+
+      const {
+        term,
+        catId,
+        publish,
+        date
+      } = req.body;
+
+      /** search by term */
+      if (term && !_.isEmpty(term)) {
+        query['$and'].push({
+          $or: [{
+            title: {
+              $regex: '.*' + term + '.*'
+            }
+          }]
+        });
+      }
+
+      if (req.user.specialPermissions.length) {
+        query.catId = {$in: req.user.specialPermissions}
+      } else if (catId && !_.isEmpty(catId)) {
+        query['$and'].push({
+          catId
+        });
+      }
+
+      /** search by publish */
+      if (!_.isUndefined(publish) && _.isBoolean(publish)) {
+        query['$and'].push({
+          publish
+        });
+      }
+
+      /** search by date */
+      if (date && !_.isEmpty(date)) {
+        if (date.length === 1) {
+          query['$and'].push({
+            startDate: {$lte: new Date(date[0])},
+            endDate: {$gte: new Date(date[0])}
+          });
+        } else {
+          query['$and'].push({
+            startDate: {$lte: new Date(date[0])},
+            endDate: {$gte: new Date(date[1])}
+          });
+        }
+      }
+
+      _.isEmpty(query['$and']) && delete query['$and'];
+      // _.isEmpty(input['$or']) && delete input['$or'];
+
+      /** get elections */
+      const elections = await Election.paginate(query, {
+        page: req.query.page || 1,
+        limit,
+        populate,
+        sort: {_id: -1}
+      });
+
+      /** show result */
+      return res.json(elections);
+    } catch (error) {
+      return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+    }
+  }
+]
+
+///////////////////////////////////////////////////////////////////// admin candidate
+module.exports.addCandidate = [
+  [
+    body('firstName')
+       .notEmpty().withMessage(_sr['fa'].required.first_name),
+
+    body('lastName')
+       .notEmpty().withMessage(_sr['fa'].required.last_name),
+
+    body('nationalCode')
+       .optional().isNumeric().withMessage(_sr['fa'].required.national_code)
+       .bail()
+       .isLength({min: 10, max: 10}).withMessage('کد ملی 10 رقمی می باشد'),
+  ],
+  checkValidations(validationResult),
+  async (req, res) => {
+    try {
+
+      const electionId = req.params.id;
+
+      const {
+        firstName,
+        lastName,
+        bornDate,
+        education,
+        nationalCode,
+        resume
+      } = req.body;
+
+      const data = {
+        firstName,
+        lastName,
+        bornDate,
+        education,
+        nationalCode,
+        resume,
+        _creator: req.user._id,
+        _updatedBy: req.user._id
+      }
+
+      if (!req?.files?.profilePic) {
+        return res.status(422).json({
+          validation: {profilePic: {msg: `لطفا یک فایل ارسال کنید`}}
+        });
+      }
+
+
+      const targetElection = await Election.findById(electionId);
+
+      if (!targetElection) return res404(res, 'انتخابات مورد نظر پیدا نشد');
+
+
+      /////// add pic
+      const image = req.files.profilePic;
+      if (!_sr.supportedImageFormats.includes(image.mimetype.split('/')[1])) {
+        return res.status(422).json({validation: {profilePic: {msg: _sr['fa'].format.image}}});
+      }
+      const imageName = 'candidate_' + Date.now() + '_' + targetElection._id + '.jpg';
+      data.profilePic = imageName;
+      const target = sharp(image.data)
+      await target
+         .resize(profileWidth, profileHeight, {
+           fit: 'cover'
+         })
+         .toFormat('jpg')
+         .jpeg({
+           quality: profileQuality
+         })
+         .toFile(`./static/uploads/images/election/${imageName}`)
+
+
+      targetElection.candidates.push(data);
+
+      await targetElection.save();
+
+      return res.json({message: _sr['fa'].response.success_save});
+    } catch (error) {
+      console.log(error.message)
+      return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+    }
+  }
+]
+
+module.exports.updateCandidate = [
+  [
+    body('candidateId')
+       .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('firstName')
+       .notEmpty().withMessage(_sr['fa'].required.first_name),
+
+    body('lastName')
+       .notEmpty().withMessage(_sr['fa'].required.last_name),
+
+    body('nationalCode')
+       .optional().isNumeric().withMessage(_sr['fa'].required.national_code)
+       .bail()
+       .isLength({min: 10, max: 10}).withMessage('کد ملی 10 رقمی می باشد'),
+  ],
+  checkValidations(validationResult),
+  async (req, res) => {
+    try {
+
+      const electionId = req.params.id;
+
+      const {
+        candidateId,
+        firstName,
+        lastName,
+        bornDate,
+        education,
+        nationalCode,
+        resume
+      } = req.body;
+
+
+      const targetElection = await Election.findById(electionId);
+
+      if (!targetElection) return res404(res, 'انتخابات مورد نظر پیدا نشد');
+
+      let candidate = targetElection.candidates.id(candidateId);
+
+      if (!candidate) return res404(res, `کاندید مورد نظر پیدا نشد`);
+
+      if (req?.files?.profilePic) {
+        const image = req.files.profilePic;
+        if (!_sr.supportedImageFormats.includes(image.mimetype.split('/')[1])) {
+          return res.status(422).json({validation: {profilePic: {msg: _sr['fa'].format.image}}});
+        }
+        const imageName = 'candidate_' + Date.now() + '_' + targetElection._id + '.jpg';
+        const target = sharp(image.data)
+        await target
+           .resize(profileWidth, profileHeight, {
+             fit: 'cover'
+           })
+           .toFormat('jpg')
+           .jpeg({
+             quality: profileQuality
+           })
+           .toFile(`./static/uploads/images/election/${imageName}`)
+
+        /**
+         * if exist old pic delete it from file
+         */
+        if (candidate.profilePic) {
+          const oldPic = `./static${candidate.profilePic}`;
+
+          if (fs.existsSync(oldPic)) {
+            fs.unlink(oldPic, (err) => {
+              if (err) return res500(res, err?.message);
+            });
+          }
+        }
+        candidate.profilePic = imageName;
+      }
+
+      candidate.firstName = firstName;
+      candidate.lastName = lastName;
+      candidate.bornDate = bornDate;
+      candidate.education = education;
+      candidate.nationalCode = nationalCode;
+      candidate.resume = resume;
+      candidate._updatedBy = req.user._id;
+
+      await targetElection.save();
+
+      return res.json({message: _sr['fa'].response.success_save});
+    } catch (error) {
+      return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+    }
+  }
+]
+
+module.exports.deleteCandidate = [
+  async (req, res) => {
+    try {
+
+      const electionId = req.params.id;
+      const candidateId = req.params.canId;
+
+      const targetElection = await Election.findById(electionId);
+
+      if (!targetElection) return res404(res, 'انتخابات مورد نظر پیدا نشد');
+
+      let candidate = targetElection.candidates.id(candidateId);
+
+      if (!candidate) return res404(res, `کاندید مورد نظر پیدا نشد`);
+
+      if (candidate.profilePic) {
+        const oldPic = `./static${candidate.profilePic}`;
+
+        if (fs.existsSync(oldPic)) {
+          fs.unlink(oldPic, (err) => {
+            if (err) return res500(res, err?.message);
+          });
+        }
+      }
+
+      await targetElection.candidates.id(candidateId).remove();
+
+      await targetElection.save();
+
+      return res.json({message: _sr['fa'].response.success_remove});
+    } catch (error) {
+      return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+    }
+  }
+]
+
+///////////////////////////////////////////////////////////////////// admin voter
+module.exports.addVoter = [
+  [
+    body('firstName')
+       .notEmpty().withMessage(_sr['fa'].required.first_name),
+
+    body('lastName')
+       .notEmpty().withMessage(_sr['fa'].required.last_name),
+
+    body('nationalCode')
+       .notEmpty().withMessage(_sr['fa'].required.national_code)
+       .bail()
+       .isLength({min: 10, max: 10}).withMessage('کد ملی 10 رقمی می باشد'),
+
+    body('username')
+       .isLength({min: 4}).withMessage(_sr['fa'].min_char.min4)
+       .bail()
+       .custom((value, {req}) => {
+         if (hasWhiteSpaces(value)) return Promise.reject(_sr['fa'].response.whiteSpace)
+         else return true
+       })
+       .bail()
+       .custom((value, {req}) => {
+         if (!isLatinCharactersWithSymbol(value)) return Promise.reject(_sr['fa'].response.latinChar)
+         else return true
+       })
+       .bail()
+       .custom((value, {req}) => {
+         return Election.findOne({'voters.username': value})
+            .then(user => {
+              if (user) return Promise.reject(_sr['fa'].duplicated.username)
+              else return true
+            })
+       }),
+  ],
+  checkValidations(validationResult),
+  async (req, res) => {
+    try {
+
+      const electionId = req.params.id;
+
+      const {
+        firstName,
+        lastName,
+        username,
+        nationalCode,
+        mobileNumber,
+        job
+      } = req.body;
+
+      //// generate password
+      // async function generatePass(){
+      //     let pass = generateRandomDigits(8);
+      //     let checkPass = Election.findOne({'voters.password' : pass});
+      //
+      //     console.log(checkPass)
+      //
+      //     if (checkPass) return await generatePass();
+      //
+      //     return pass;
+      // }
+
+      const data = {
+        firstName,
+        lastName,
+        username,
+        password: await _generatePass(),
+        mobileNumber,
+        nationalCode,
+        job,
+        _creator: req.user._id,
+        _updatedBy: req.user._id
+      }
+
+      const targetElection = await Election.findById(electionId);
+
+      if (!targetElection) return res404(res, 'انتخابات مورد نظر پیدا نشد');
+
+      targetElection.voters.push(data);
+
+      await targetElection.save();
+
+      return res.json({message: _sr['fa'].response.success_save});
+    } catch (error) {
+      console.log(error.message)
+      return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+    }
+  }
+]
+
+module.exports.updateVoter = [
+  [
+    body('voterId')
+       .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('firstName')
+       .notEmpty().withMessage(_sr['fa'].required.first_name),
+
+    body('lastName')
+       .notEmpty().withMessage(_sr['fa'].required.last_name),
+
+    body('nationalCode')
+       .notEmpty().withMessage(_sr['fa'].required.national_code),
+  ],
+  checkValidations(validationResult),
+  async (req, res) => {
+    try {
+
+      const electionId = req.params.id;
+
+      const {
+        voterId,
+        firstName,
+        lastName,
+        nationalCode,
+        mobileNumber,
+        job
+      } = req.body;
+
+      const targetElection = await Election.findById(electionId);
+
+      if (!targetElection) return res404(res, 'انتخابات مورد نظر پیدا نشد');
+
+      let voter = targetElection.voters.id(voterId);
+
+      if (!voter) return res404(res, `رای دهنده مورد نظر پیدا نشد`);
+
+      voter.firstName = firstName;
+      voter.lastName = lastName;
+      voter.mobileNumber = mobileNumber;
+      voter.job = job;
+      voter.nationalCode = nationalCode;
+      voter._updatedBy = req.user._id;
+
+      await targetElection.save();
+
+      return res.json({message: _sr['fa'].response.success_save});
+    } catch (error) {
+      return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+    }
+  }
+]
+
+module.exports.deleteVoter = [
+  async (req, res) => {
+    try {
+
+      const electionId = req.params.id;
+      const voterId = req.params.voterId;
+
+      const targetElection = await Election.findById(electionId);
+
+      if (!targetElection) return res404(res, 'انتخابات مورد نظر پیدا نشد');
+
+      let voter = targetElection.voters.id(voterId);
+
+      if (!voter) return res404(res, `کاربر مورد نظر پیدا نشد`);
+
+      await targetElection.voters.id(voterId).remove();
+
+      await targetElection.save();
+
+      return res.json({message: _sr['fa'].response.success_remove});
+
+    } catch (error) {
+      return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+    }
+  }
+]
+
+//////////////////////////////////////////////////////////////////// auth voter
+module.exports.voterLogin = [
+  [
+    body('username')
+       .notEmpty().withMessage(_sr['fa'].required.username),
+
+    body('password')
+       .notEmpty().withMessage(_sr['fa'].required.password)
+  ],
+  checkValidations(validationResult),
+  async (req, res) => {
+    try {
+      const {username, password} = req.body;
+
+      const user = await Election.findOne({voters: {$elemMatch: {username, password, voted: false}}})
+
+      if (!user) return res.status(422).json({validation: {username: {msg: _sr['fa'].not_found.password}}});
+
+      return res.json({token: user.voters.find(item => item.password === password)._id});
+    } catch (error) {
+      return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+    }
+  }
+]
+
+module.exports.getVoterUser = [
+  async (req, res) => {
+    try {
+      const token = req.headers.authorization?.replace(/^Bearer\s/, '');
+      const election = await Election.findOne({'voters._id': token});
+
+      if (!election) return res.status(422).json({validation: {username: {msg: _sr['fa'].not_found.password}}});
+
+      const user = await election.voters.id(token);
+
+      return res.json({user});
+    } catch (error) {
+      return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+    }
+  }
+]
+
+/////////////////////////////////////////////////////////////////////// public
+
+module.exports.getElectionByUser = [
+  async (req, res) => {
+    try {
+      if (!req.voter) return res.status(403).json({message: 'شما اجازه دیدن این صفحه را ندارید'});
+
+      const targetElection = await Election.findOne({voters: {$elemMatch: {_id: req.voter._id, voted: false}}})
+
+      return res.json(targetElection);
+
+    } catch (error) {
+      return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+    }
+  }
+]
+
+module.exports.addVote = [
+  [
+    body('electionId')
+       .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('candidateId')
+       .notEmpty().withMessage(_sr['fa'].required.field)
+  ],
+  checkValidations(validationResult),
+  async (req, res) => {
+    try {
+      if (!req.voter) return res.status(403).json({message: 'شما اجازه رای دادن ندارید'});
+
+      const {electionId, candidateId} = req.body;
+
+      const targetElection = await Election.findById(electionId);
+
+      if (!targetElection) return res404(res, 'انتخابات مورد نظر پیدا نشد');
+
+      const voter = await targetElection.voters.id(req.voter._id);
+
+      if (!voter) return res.status(403).json({message: 'شما اجازه رای دادن ندارید'});
+
+      voter.voted = true;
+
+      const candidate = await targetElection.candidates.id(candidateId);
+
+      if (!candidate) return res404(res, 'کاندیدای انتخاب شده وجود ندارد');
+
+      const voteObj = {
+        voter: voter._id,
+        candidate: candidate._id
+      }
+
+      targetElection.votes.push(voteObj);
+
+      await targetElection.save();
+
+      return res.json({message: 'رای شما با موفقیت ثبت شد'});
+    } catch (error) {
+      return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+    }
+  }
+]
+
+

server/controllers/feedBackController.js

@@ -0,0 +1,461 @@
+const {body, validationResult} = require('express-validator');
+const {_sr} = require('../plugins/serverResponses');
+const {res404, res500} = require('../plugins/controllersHelperFunctions');
+const FeedBack = require('../models/FeedBack');
+const Captcha = require('../models/Captcha');
+const nodemailer = require("nodemailer");
+
+const limit = 20;
+
+
+/////////////////////////////////////////////////////////////////////// admin
+module.exports.updateFeedBack = [
+  [
+    body('name')
+       .notEmpty().withMessage(_sr['fa'].required.title),
+
+    body('description')
+       .notEmpty().withMessage(_sr['fa'].required.description),
+
+    body('twitter').notEmpty()
+        .withMessage(_sr['fa'].required.Twitter),
+
+    body('email')
+       .optional().isEmail().withMessage(_sr['fa'].format.email),
+
+    body('phoneNumber')
+       .if((value, {req}) => {
+         return req.body.phoneNumber
+       })
+       .custom((value, {req}) => {
+         if (!_.isEmpty(value) && !lodash.isNumeric(value)) {
+           return Promise.reject(_sr['fa'].format.number);
+         } else return true;
+       }),
+
+    // body('cptcha')
+    //   .notEmpty().withMessage(_sr['fa'].required.field)
+    //   .custom((value , {req}) => {
+    //     console.log(req.session);
+    //     if(value != req.session.captcha){
+    //       return Promise.reject(`کپچا وارد شده صحیح نمی باشد`);
+    //     }else{
+    //       return true
+    //     }
+    //   }),
+
+  ],
+  async (req, res) => {
+    const errors = validationResult(req)
+    if (!errors.isEmpty()) return res.status(422).json({
+      validation: errors.mapped()
+    });
+
+    try {
+
+      /**
+       * get data from input
+       */
+      const {
+        name,
+        subject,
+        description,
+        phoneNumber,
+        twitter,
+        email,
+        nationalCode
+      } = req.body;
+
+      /**
+       * get id
+       */
+      const meetingId = req.params.id;
+
+      /**
+       * check meeting exist or not
+       */
+      var targetFeedBack = await FeedBack.findById(meetingId);
+
+      if (!targetFeedBack) return res404(res, `درخواست مورد نظر پیدا نشد`);
+
+
+      /**
+       * make update object
+       */
+      targetFeedBack.name = name.trim();
+      targetFeedBack.subject = subject.trim();
+      targetFeedBack.description = description.trim();
+      targetFeedBack.email = email;
+      targetFeedBack.twitter = twitter.trim()
+      targetFeedBack.phoneNumber = phoneNumber;
+      targetFeedBack.nationalCode = nationalCode;
+
+      await targetFeedBack.save();
+
+      /**
+       * show result
+       */
+      return res.json(targetFeedBack);
+
+    } catch (error) {
+      return res500(res, error?.message);
+    }
+  }
+]
+
+module.exports.deletOneFeedBack = [
+  async (req, res) => {
+    try {
+      const meetingId = req.params.id;
+
+      /**
+       * check meeting
+       */
+      let targetFeedBack = await FeedBack.findByIdAndDelete(meetingId);
+
+      if (!targetFeedBack) {
+        return res404(res, `درخواست مورد نظر پیدا نشد`);
+      }
+
+      /**
+       * show result
+       */
+      return res.json(targetFeedBack);
+
+    } catch (error) {
+      /**
+       * if we got unknown error show to client
+       */
+      res500(res, error);
+    }
+  }
+]
+
+module.exports.getOneFeedBack = [
+  async (req, res) => {
+    try {
+      const meetingId = req.params.id;
+
+      /**
+       * get meeting
+       */
+      const targetFeedBack = await FeedBack.findOne({_id: meetingId});
+
+      /**
+       * if not exist
+       */
+      if (!targetFeedBack) {
+        return res404(res, `درخواست مورد نظر پیدا نشد`);
+      }
+
+      if (!targetFeedBack.read) {
+        targetFeedBack.read = true;
+
+        await targetFeedBack.save();
+      }
+
+      /**
+       * show result
+       */
+      return res.json(targetFeedBack);
+    } catch (error) {
+      /**
+       * if we got unknown error show to client
+       */
+      res500(res, error);
+    }
+  }
+]
+
+module.exports.getAll = [
+  async (req, res) => {
+    try {
+
+      let findQuery = {};
+
+      /**
+       * get all meeting
+       */
+      const getAll = await FeedBack.paginate(findQuery,
+         {page: req.query.page || 1, limit, sort: {created_at: -1}});
+
+      /**
+       * show result
+       */
+      return res.json(getAll);
+    } catch (error) {
+      return res500(res, error.message);
+    }
+  }
+]
+
+module.exports.getAllForCount = [
+  async (req, res) => {
+    try {
+
+      /**
+       * get all meeting
+       */
+      const getAll = await FeedBack.find({});
+
+      /**
+       * show result
+       */
+      return res.json(getAll);
+    } catch (error) {
+      return res500(res, error.message);
+    }
+  }
+]
+
+module.exports.search = [
+  async (req, res) => {
+    try {
+      let findQuery = {};
+      findQuery['$and'] = [];
+      findQuery['$or'] = [];
+
+      const {
+        name,
+        email,
+        terms,
+        phoneNumber,
+        nationalCode,
+        read,
+        date
+      } = req.body;
+
+      findQuery.modelName = req.params.model;
+
+      /** search by term */
+      if (terms && !_.isEmpty(terms)) {
+        findQuery['$or'].push(
+           {
+             subject: {
+               $regex: '.*' + name + '.*'
+             },
+             description: {
+               $regex: '.*' + name + '.*'
+             },
+           }
+        );
+      }
+      /** search by name */
+      if (name && !_.isEmpty(name)) {
+        findQuery['$or'].push(
+           {
+             name: {
+               $regex: '.*' + name + '.*'
+             }
+           }
+        );
+      }
+      /** search by email */
+      if (email && !_.isEmpty(email)) {
+        findQuery['$and'].push({
+          email
+        });
+      }
+      /** search by phoneNumber */
+      if (phoneNumber && !_.isEmpty(phoneNumber)) {
+        findQuery['$and'].push({
+          phoneNumber
+        });
+      }
+      /** search by nationalCode */
+      if (nationalCode && !_.isEmpty(nationalCode)) {
+        findQuery['$and'].push({
+          nationalCode
+        });
+      }
+      /** search by read */
+      if (!_.isUndefined(read) && _.isBoolean(read)) {
+        findQuery['$and'].push({
+          read
+        });
+      }
+
+      /** search by date */
+      if (date && !_.isEmpty(date)) {
+        if (date.length === 1) {
+          findQuery['$and'].push({
+            created_at: {
+              $gte: moment(date[0]).startOf('days'),
+              $lt: moment(date[0]).endOf('days')
+            }
+          });
+        } else {
+          findQuery['$and'].push({
+            created_at: {
+              $gte: new Date(date[0]),
+              $lt: new Date(date[1])
+            }
+          });
+        }
+      }
+
+      _.isEmpty(findQuery['$and']) && delete findQuery['$and'];
+      _.isEmpty(findQuery['$or']) && delete findQuery['$or'];
+
+      /** get meetings */
+      var meetings = await FeedBack.paginate(findQuery, {
+        page: req.query.page,
+        limit,
+        sort: {created_at: -1}
+      });
+
+      /** show result */
+      return res.json(meetings);
+    } catch (error) {
+      return res500(res, error?.message)
+    }
+  }
+]
+
+/////////////////////////////////////////////////////////////////////// public
+module.exports.addFeedBack = [
+  [
+    body('name')
+       .notEmpty().withMessage(_sr['fa'].required.title),
+
+    body('description')
+       .notEmpty().withMessage(_sr['fa'].required.description),
+    body('twitter')
+        .notEmpty().withMessage(_sr['fa'].required.Twitter),
+
+    body('email')
+       .optional().isEmail().withMessage(_sr['fa'].format.email),
+
+    body('phoneNumber')
+       .custom((value, {req}) => {
+         if (_.isEmpty(value)) return Promise.reject(_sr['fa'].required.phone_number);
+         if (!_.isEmpty(value) && !lodash.isNumeric(value)) {
+           return Promise.reject(_sr['fa'].format.number);
+         } else return true;
+       }),
+
+    // body('captcha')
+    //    .notEmpty().withMessage(_sr['fa'].required.field)
+    //    .custom((value, {req}) => {
+    //      return Captcha.findOne({code: value}).then(data => {
+    //        if (!data) return Promise.reject(`عبارت وارد شده صحیح نمیباشد`)
+    //        else return true
+    //      })
+    //    }),
+
+  ],
+  async (req, res) => {
+
+    const errors = validationResult(req)
+    if (!errors.isEmpty()) return res.status(422).json({
+      validation: errors.mapped()
+    });
+
+    try {
+      const {
+        name,
+        description,
+        twitter,
+        phoneNumber,
+        email
+      } = req.body;
+
+      const data = {
+        name,
+        description,
+        twitter,
+        phoneNumber,
+        email
+      };
+
+      const createFeedBack = await FeedBack.create(data);
+
+      if (!createFeedBack) return res500(res, `مشکلی در ثبت درخواست پیش آمده است`)
+
+      let transporter = nodemailer.createTransport({
+        host: "mail.ostan-mr.ir",
+        port: 465,
+        secure: true, // true for 465, false for other ports
+        auth: {
+          user: 'feedback@ostan-mr.ir', // generated ethereal user
+          pass: 'danak@ostan1400', // generated ethereal password
+        },
+      });
+
+      let info = await transporter.sendMail({
+        from: 'feedback@ostan-mr.ir', // sender address
+        to: "feedback@ostan-mr.ir", // list of receivers
+        subject: "نظر و پیشنهاد", // Subject line
+        text: data.description, // plain text body
+        html: `<html lang="en" dir="ltr">
+<head>
+<title>نظر و پیشنهاد</title>
+
+<style>
+.view-form{
+justify-content: center;
+/*display: flex;*/
+flex-direction: column;
+align-items: center;
+width: 100%;
+max-width: 600px;
+background-color: #fff;
+border-radius: 10px;
+padding: 30px 40px;
+box-shadow: 0 5px 20px #999;
+direction: rtl;
+}
+
+.formRow{
+margin-bottom: 10px;
+text-align: right;
+}
+
+.input{
+width: 100%;
+margin: 10px 0;
+padding: 15px;
+box-sizing: border-box;
+border: 1px solid #ffffff;
+background-color: #f4f4f4;
+}
+</style>
+</head>
+<body>
+<div class="view-form">
+<div class="formRow">
+<label for="name">نام و نام خانوادگی:</label>
+<input class="input" value="${data.name}" type="text" id="name" disabled/>
+</div>
+<div class="formRow">
+<label for="email">ایمیل:</label>
+<input class="input" value="${data.email}" type="email" id="email" disabled/>
+</div>
+<div class="formRow">
+<label for="phone">شماره تماس:</label>
+<input class="input" value="${data.phoneNumber}" type="text" id="phone" disabled/>
+</div>
+<div class="formRow">
+<label for="description">توضیحات:</label>
+<textarea class="input" id="description" type="text" disabled>
+   ${data.description}
+</textarea>
+</div>
+</div>
+</body>
+</html>`, // html body
+      });
+
+      /**
+       * show result
+       */
+      return res.json({message:_sr['fa'].response.success_save});
+    } catch (error) {
+      /**
+       * if we got unknown error show to client
+       */
+      return res500(res, error?.message);
+    }
+  }
+]
+

server/controllers/homeController.js

@@ -0,0 +1,413 @@
+const {body, validationResult} = require('express-validator');
+const mongoose = require('mongoose');
+const sharp = require('sharp');
+const {_sr} = require('../plugins/serverResponses');
+const allPortals = require('../plugins/portals');
+const {res404, res500} = require('../plugins/controllersHelperFunctions');
+const fs = require('fs');
+const moment = require('moment-jalaali');
+const axios = require('axios');
+
+const HomePage = require('../models/HomePage');
+const News = require('./../models/News');
+const Gallery = require('./../models/Gallery');
+const Category = require('./../models/Category');
+const NewsFile = require('./../models/NewsFile');
+const Slider = require('./../models/Slider');
+const Links = require('./../models/Links');
+const Content = require('./../models/Content');
+const Occasion = require('./../models/Occasion');
+
+/////////////////////////////////////////////////////// admin
+
+module.exports.updateHomePage = [
+  async (req, res) => {
+    try {
+      const {
+        s2,
+        s3,
+        s4,
+        s5,
+        s6,
+        s2Side,
+        s3Side,
+        s4Side,
+        s5Side,
+        s6Side
+      } = req.body;
+
+      const portal = req.query.portal ? 'ostandari' : req.query.portal;
+
+      if (!req.user.portals.includes(portal)) {
+        return res.status(403).json({message: `شما اجازه دسترسی به اطلاعات این صفحه را ندارید`});
+      }
+
+      if (!allPortals.some(item => item.value === portal)) {
+        return res.status(403).json(`پرتال ارسال شده وجود ندارد`);
+      }
+
+      const addHome = await HomePage.findOne({modelType: portal});
+      if (addHome) {
+        const oldData = addHome
+        oldData.s2 = s2 || null
+        oldData.s3 = s3 || null
+        oldData.s4 = s4 || null
+        oldData.s5 = s5 || null
+        oldData.s6 = s6 || null
+        // side bar
+        oldData.s2Side = s2Side || null
+        oldData.s3Side = s3Side || null
+        oldData.s4Side = s4Side || null
+        oldData.s5Side = s5Side || null
+        oldData.s6Side = s6Side || null
+        await oldData.save();
+
+        return res.json({message: _sr['fa'].response.success_save})
+      } else {
+        const data = {
+          s2: s2 || null,
+          s3: s3 || null,
+          s4: s4 || null,
+          s5: s5 || null,
+          s6: s6 || null,
+          s2Side: s2Side || null,
+          s3Side: s3Side || null,
+          s4Side: s4Side || null,
+          s5Side: s5Side || null,
+          s6Side: s6Side || null,
+          modelType: portal
+        }
+
+        const addHome = await HomePage.create(data);
+
+        if (!addHome) return res500(res, `مشکلی در اجرای درخواست شما به وجود آمده است`);
+
+        return res.json({message: _sr['fa'].response.success_save})
+      }
+
+    } catch (e) {
+      console.log(e)
+      return res500(res, 'مشکلی در گرفتن اطلاعات پیش آمده است');
+    }
+  }
+]
+
+module.exports.getHomePage = [
+  async (req, res) => {
+    try {
+      const portal = req?.query?.portal ? req.query.portal : 'ostandari';
+
+      if (!req.user.portals.includes(portal)) {
+        return res.status(403).json(`شما اجازه دسترسی به اطلاعات این صفحه را ندارید`);
+      }
+
+      const getHome = await HomePage.find({modelType: portal});
+      if (getHome.length) return res.json(getHome[0])
+      else return res.json({
+        s2: '',
+        s3: '',
+        s4: '',
+        s5: [],
+        s6: '',
+        s2Side: '',
+        s3Side: '',
+        s4Side: '',
+        s5Side: '',
+        s6Side: ''
+      })
+    } catch (e) {
+      return res500(res, 'مشکلی در گرفتن اطلاعات پیش آمده است');
+    }
+  }
+]
+
+module.exports.changeShowInHome = [
+  [
+    body('id')
+       .notEmpty().withMessage(_sr['fa'].required.title),
+
+    body('modelName')
+       .custom((value, {req}) => {
+         const models = ['news', 'newsFile', 'gallery']
+         if (!models.includes(value)) {
+           return Promise.reject(_sr['fa'].required.field);
+         } else {
+           return true
+         }
+       })
+
+  ],
+  async (req, res) => {
+    const errors = validationResult(req)
+    if (!errors.isEmpty()) return res.status(422).json({
+      validation: errors.mapped()
+    });
+    try {
+      const {id, modelName} = req.body;
+
+      let Model;
+
+      switch (modelName) {
+        case 'news':
+          Model = News;
+          break;
+        case 'newsFile' :
+          Model = NewsFile;
+          break;
+        case 'gallery':
+          Model = Gallery;
+          break;
+      }
+
+      const targetModel = await Model.findById(id)
+
+      if (!targetModel) return res404(res, `اطلاعات مورد یافت نشد`);
+
+      targetModel.showInHome = !targetModel.showInHome;
+
+      await targetModel.save();
+
+      return res.json(targetModel);
+    } catch (e) {
+      return res500(res, 'مشکلی در گرفتن اطلاعات پیش آمده است');
+    }
+  }
+]
+
+module.exports.getAllShowInHomeFalse = [
+  async (req, res) => {
+    try {
+      const portal = req?.query?.portal ? req.query.portal : 'ostandari';
+
+      const requests = [
+        News.find({modelType: portal, showInHome: false}),
+        NewsFile.find({modelType: portal, showInHome: false}),
+        Gallery.find({modelType: portal, showInHome: false}),
+      ]
+
+      let fetch = await Promise.all(requests);
+
+      const [news, newsFile, media] = fetch;
+
+      return res.json({
+        news,
+        newsFile,
+        media
+      })
+    } catch (e) {
+      return res500(res, 'مشکلی در گرفتن اطلاعات پیش آمده است');
+    }
+  }
+]
+
+/////////////////////////////////////////////////////// public
+module.exports.getHomeByUser = [
+  async (req, res) => {
+    try {
+      const homeSetting = await HomePage.find();
+
+      const data = {
+        occasion: [],
+        s1: [],
+        s2: [],
+        s3: [],
+        s4: [],
+        s5: [],
+        s6: [],
+        s2Side: [],
+        s3Side: [],
+        s4Side: [],
+        s5Side: [],
+        s6Side: [],
+      };
+
+      const portal = req?.query?.portal ? req.query.portal : 'ostandari'
+
+      const settings = homeSetting[0]
+      const query = {publish: true, showInHome: true, modelType: portal}
+
+
+      const request = [
+        // Occasion
+        Occasion.find({
+          publish: true,
+          status: true,
+          startDate: {$lte: new Date()},
+          endDate: {$gte: new Date()}
+        }),
+        // s1
+        Slider.find({modelType: portal}),
+        // s2
+        News.find(settings?.s2 ? {
+          ...query,
+          catId: settings?.s2,
+          newsStatus: true
+        } : {...query, newsStatus: true}).populate('catId', 'title').limit(8).sort({customDate: -1}),
+        // s3
+        NewsFile.find(settings?.s3 ? {
+          ...query,
+          catId: settings?.s3
+        } : query).populate('catId', 'title').limit(4).sort({_id: -1}),
+        // s6
+        News.find(settings?.s6 ? {
+          ...query,
+          catId: settings?.s6,
+          newsStatus: true
+        } : {...query, newsStatus: true}).limit(8).sort({userViews: -1}),
+        // s1Side
+        Content.find({param: 'manager'}),
+        // s2Side
+        Gallery.find(settings?.s2Side ? {
+          ...query,
+          catId: settings?.s2Side,
+          galleryType: 'image',
+          galleryStatus: true
+        } : {...query, galleryType: 'image', galleryStatus: true}).populate('catId', 'title').limit(4).sort({customDate: -1}),
+        // s3Side
+        Gallery.find(settings?.s3Side ? {
+          ...query,
+          catId: settings?.s3Side,
+          galleryType: 'video',
+          galleryStatus: true
+        } : {...query, galleryType: 'video', galleryStatus: true}).populate('catId', 'title').limit(4).sort({customDate: -1}),
+        // s4Side
+        Gallery.find(settings?.s4Side ? {
+          ...query,
+          catId: settings?.s4Side,
+          galleryType: 'graphic',
+          galleryStatus: true
+        } : {...query, galleryType: 'graphic', galleryStatus: true}).populate('catId', 'title').limit(4).sort({customDate: -1}),
+        // s5Side
+        News.find(settings?.s5Side ? {
+          ...query,
+          catId: settings?.s5Side,
+          special: true,
+          newsStatus: true
+        } : {...query, newsStatus: true, special: true}).limit(4).sort({customDate: -1}),
+        // s6Side
+        News.find(settings?.s6Side ? {
+          ...query,
+          catId: settings?.s6Side,
+          newsStatus: true
+        } : {...query, newsStatus: true}).limit(6).sort({customDate: -1}),
+        // s7Side
+        Links.find({modelType: portal, showInHome: true}),
+        // notifications-side
+        News.find(settings?.s6Side ? {
+          ...query,
+          catId: settings?.s5Side,
+          newsStatus: true,
+          notifications: true
+        } : {...query, newsStatus: true, notifications: true}).limit(6).sort({customDate: -1}),
+      ]
+
+
+      const fetch = await Promise.all(request)
+
+      const [occasion, s1, s2, s3, s6, s1Side, s2Side, s3Side, s4Side, s5Side, s6Side, s7Side, notificationsSide] = fetch;
+
+      data.occasion = occasion
+      data.s1 = s1
+      data.s2 = s2
+      data.s3 = s3
+      data.s6 = s6
+      data.s1Side = s1Side
+      data.s2Side = s2Side
+      data.s3Side = s3Side
+      data.s4Side = s4Side
+      data.s5Side = s5Side
+      data.s6Side = s6Side
+      data.s7Side = s7Side
+      data.notificationsSide = notificationsSide
+
+      ////////////////// computed main news
+      const nameTag = await Category.findById(settings?.s4);
+      const s4Categories = await Category.find(settings?.s4 ? {parent: settings?.s4} : {})
+
+      const s4Obj = {};
+
+      s4Obj.nameTag = nameTag ? nameTag.title : '';
+
+      let s4News = [];
+      if (settings?.s4) {
+        for await (const cat of s4Categories) {
+          const getNew = await News.find({...query, catId: cat._id , newsStatus : true}).sort({customDate: -1})
+          if (getNew.length) s4News.push(getNew[0])
+        }
+        if (s4Categories.length !== 4) {
+          const getNews = await News.find({...query, catId: settings?.s4 , newsStatus : true}).populate('catId', 'title').limit(4 - s4News.length).sort({customDate: -1})
+          for (const item of getNews) {
+            s4News.push(item);
+          }
+        }
+      } else {
+        s4News = await News.find({...query,newsStatus : true}).populate('catId', 'title').limit(4).sort({customDate: -1});
+      }
+
+      s4Obj.news = s4News
+      data.s4 = s4Obj;
+
+      //// s5
+      if (settings?.s5?.length) {
+        const s5News = []
+        for await (const id of settings?.s5) {
+          const item = {}
+          const nameTag = await Category.findById(id)
+          item.nameTag = nameTag ? nameTag.title : '';
+          item.news = await News.find({...query, rootParent: id , newsStatus : true}).limit(10).sort({_id: -1})
+          s5News.push(item)
+        }
+        data.s5 = s5News
+      }
+
+      return res.json(data);
+    } catch (e) {
+      return res500(res, 'مشکلی در گرفتن اطلاعات پیش آمده است');
+    }
+  }
+]
+
+module.exports.search = [
+  async (req, res) => {
+    const {portal, terms} = req.query;
+
+    try {
+      const requests = [
+        News.find({
+          newsStatus: true, publish: true, $or: [
+            {title: {$regex: terms, $options: 'i'}},
+            {summaryTitle: {$regex: terms, $options: 'i'}},
+            {keywords: {$in: terms}}
+          ]
+        }),
+        Gallery.find({
+          galleryStatus: true, publish: true, $or: [
+            {title: {$regex: terms, $options: 'i'}},
+            {summaryTitle: {$regex: terms, $options: 'i'}},
+            {keywords: {$in: terms}}
+          ]
+        }),
+        Category.find({
+          $or: [
+            {title: {$regex: terms, $options: 'i'}},
+            {pageContent: {$regex: terms, $options: 'i'}}
+          ]
+        })
+      ]
+
+      const getData = await Promise.all(requests);
+
+      let [news, gallery, category] = getData;
+
+      return res.json({
+        news,
+        media: gallery,
+        pages: category
+      });
+
+    } catch (e) {
+      return res500(res, 'مشکلی در گرفتن اطلاعات پیش آمده است');
+    }
+
+  }
+]

server/controllers/linksController.js

@@ -0,0 +1,430 @@
+const Links = require('../models/Links');
+const {
+  body,
+  validationResult
+} = require('express-validator');
+const sharp = require('sharp');
+const {
+  _sr
+} = require('../plugins/serverResponses');
+const {
+  res404,
+  res500,
+  hasWhiteSpaces,
+  isLatinCharactersWithSymbol,
+  generateRandomDigits
+} = require('../plugins/controllersHelperFunctions');
+const fs = require('fs');
+
+////// variables
+const profileWidth = 50;
+const profileHeight = 50;
+const profileQuality = 100;
+
+
+/////////////////////////////////////////////////////////////////////// admin
+module.exports.addLinks = [
+  [
+    body('title')
+    .notEmpty().withMessage(_sr['fa'].required.title),
+
+    body('url')
+    .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('index')
+    .optional().isNumeric().withMessage(_sr['fa'].format.number),
+
+    body('showInHome')
+    .isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    body('siteMap')
+    .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    body('modelType')
+    .custom((value, {
+      req
+    }) => {
+      if (req.user.portals.join() === portal.join()) {
+        if (!portal.includes(value)) {
+          return Promise.reject(_sr['fa'].required.field);
+        } else {
+          return true
+        }
+      } else {
+        return true
+      }
+    })
+  ],
+  async (req, res) => {
+
+    const errors = validationResult(req)
+    if (!errors.isEmpty()) return res.status(422).json({
+      validation: errors.mapped()
+    });
+
+    try {
+      let {
+        title,
+        url,
+        index,
+        showInHome,
+        siteMap,
+        modelType,
+      } = req.body;
+
+      /** set portals */
+      modelType = (req.user.portals.join() === portal.join()) ? modelType : req.user.portals[0];
+
+      const linksData = {
+        title : title.trim(),
+        url : url.trim(),
+        index,
+        showInHome,
+        siteMap,
+        _creator: req.user._id,
+        _updatedBy: req.user._id,
+        modelType,
+      };
+
+      var createLinks = await Links.create(linksData);
+
+      if (!createLinks) {
+        res500(res, `error in add links to data base`);
+      }
+
+      /**
+       * if we have pic upload to server
+       */
+      if (req.files && req.files.icon) {
+        const image = req.files.icon;
+        if (!_sr.supportedImageFormats.includes(image.mimetype.split('/')[1])) {
+          return res.status(422).json({
+            validation: {
+              cover: {
+                msg: _sr['fa'].format.image
+              }
+            }
+          });
+        }
+        const imageName = `links_${Date.now()}_${createLinks._id}.${image.mimetype.split('/')[1]}`;
+        try {
+          const target = sharp(image.data)
+          await target
+            .resize(profileWidth, profileHeight, {
+              fit: 'cover'
+            })
+            .jpeg({
+              quality: profileQuality
+            })
+            .toFile(`./static/uploads/images/links/${imageName}`);
+
+          createLinks.icon = imageName;
+
+          await createLinks.save();
+        } catch (e) {
+          return res500(res, e?.message);
+        }
+      }
+
+
+      /**
+       * show result
+       */
+      return res.json(createLinks);
+    } catch (error) {
+      /**
+       * if we got unkown error show to client
+       */
+      res500(res, error.message);
+    }
+  }
+]
+
+module.exports.updateLinks = [
+  [
+    body('title')
+    .notEmpty().withMessage(_sr['fa'].required.title),
+
+    body('url')
+    .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('index')
+    .optional().isNumeric().withMessage(_sr['fa'].format.number),
+
+    body('showInHome')
+    .isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    body('siteMap')
+    .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    body('modelType')
+    .custom((value, {
+      req
+    }) => {
+      if (req.user.portals.join() === portal.join()) {
+        if (!portal.includes(value)) {
+          return Promise.reject(_sr['fa'].required.field);
+        } else {
+          return true
+        }
+      } else {
+        return true
+      }
+    })
+  ],
+  async (req, res) => {
+    const errors = validationResult(req)
+    if (!errors.isEmpty()) return res.status(422).json({
+      validation: errors.mapped()
+    });
+
+    try {
+
+      /**
+       * get data from input
+       */
+       let {
+        title,
+        url,
+        index,
+        showInHome,
+        siteMap,
+        modelType,
+      } = req.body;
+
+      /**
+       * get id
+       */
+      var linksId = req.params.id;
+
+      var targetLinks = await Links.findOne({
+        _id: linksId
+      });
+
+      /** check links exist or not */
+      if (!targetLinks) {
+        return res404(res, `پیوند مورد نظر پیدا نشد`);
+      }
+
+      /** check access portal */
+      if (!req.user.portals.includes(targetLinks.modelType)) {
+        return res500(res, `شما اجازه آپدیت این پیوند را ندارید`);
+      }
+
+      if (targetLinks.title !== title) {
+        var checkDuppTitle = await Links.findOne({
+          title: title
+        });
+
+        if (checkDuppTitle) {
+          return res.status(422).json({
+            validation: {
+              title: {
+                msg: _sr['fa'].duplicated.title
+              }
+            }
+          });
+        }
+      }
+
+      /**
+       * if we have pic upload to server
+       */
+      if (req.files && req.files.icon) {
+        const image = req.files.icon;
+        if (!_sr.supportedImageFormats.includes(image.mimetype.split('/')[1])) {
+          return res.status(422).json({
+            validation: {
+              cover: {
+                msg: _sr['fa'].format.image
+              }
+            }
+          });
+        }
+        const imageName = `links_${Date.now()}_${targetLinks._id}.${image.mimetype.split('/')[1]}`;
+        try {
+          const target = sharp(image.data)
+          await target
+            .resize(profileWidth, profileHeight, {
+              fit: 'cover'
+            })
+            .jpeg({
+              quality: profileQuality
+            })
+            .toFile(`./static/uploads/images/links/${imageName}`);
+
+          /**
+           * if exist old pic delete it from file
+           */
+          if (targetLinks.icon) {
+            var oldPic = `./static${targetLinks.icon}`;
+
+            if (fs.existsSync(oldPic)) {
+              fs.unlink(oldPic, (err) => {
+                if (err) return res500(res, err?.message);
+              });
+            }
+          }
+
+          targetLinks.icon = imageName;
+          targetLinks.linksStatus = true;
+        } catch (e) {
+          return res500(res, e?.message);
+        }
+      }
+
+      targetLinks.title = title.trim();
+      targetLinks.url = url.trim();
+      targetLinks.index = index;
+      targetLinks.showInHome = showInHome;
+      targetLinks.siteMap = siteMap;
+      targetLinks.modelType = modelType;
+
+      await targetLinks.save();
+
+      /**
+       * show result
+       */
+      return res.json(targetLinks);
+
+    } catch (error) {
+      return res500(res, error.message);
+    }
+  }
+]
+
+module.exports.deletOneLinks = [
+  async (req, res) => {
+    try {
+      var linksId = req.params.id;
+
+      var targetLinks = await Links.findOne({
+        _id: linksId
+      });
+
+      /** check links exist or not */
+      if (!targetLinks) {
+        return res404(res, `پیوند مورد نظر پیدا نشد`);
+      }
+
+      /** check access portal */
+      if (!req.user.portals.includes(targetLinks.modelType)) {
+        return res500(res, `شما اجازه حذف این پیوند را ندارید`);
+      }
+
+      if (targetLinks.icon) {
+        var oldPic = `./static${targetLinks.icon}`;
+
+        if (fs.existsSync(oldPic)) {
+          fs.unlink(oldPic, (error) => {
+            if (error) return res500(res, error?.message);
+          });
+        }
+      }
+
+      /** delete links */
+      await targetLinks.deleteOne();
+
+      /**
+       * show result
+       */
+      return res.json(targetLinks);
+
+    } catch (error) {
+      /**
+       * if we got unkown error show to client
+       */
+      res500(res, error);
+    }
+  }
+]
+
+module.exports.getOneLinks = [
+  async (req, res) => {
+    try {
+      var linksId = req.params.id;
+
+      var findQuery = {
+        _id: linksId
+      };
+
+      var links = await Links.findOne(findQuery);
+
+      if (!links) {
+        return res404(res, `پیوند مورد نظر پیدا نشد`);
+      }
+
+      /** check access portal */
+      if (!req.user.portals.includes(links.modelType)) {
+        return res.status(403).json({
+          message: `شما اجازه دسترسی به اطلاعات این پیوند را ندارید`
+        });
+      }
+
+      /**
+       * show result
+       */
+      return res.json(links);
+    } catch (error) {
+      /**
+       * if we got unkown error show to client
+       */
+      res500(res, error);
+    }
+  }
+]
+
+module.exports.getAll = [
+  async (req, res) => {
+    try {
+
+      var findQuery = {};
+
+      if (req.user.portals.length) {
+        findQuery.modelType = {
+          $in: req.user.portals
+        };
+      }
+
+      /** get all links */
+      const allLinks = await Links.find(findQuery).sort({
+        index: 1
+      });
+
+      /** if null we have error */
+      if (!allLinks) {
+        return res500(res, `مشکلی در گرفتن اطلاعات پیش آمده است`);
+      }
+
+      /** show result to client */
+      return res.json(allLinks);
+    } catch (error) {
+      /** if we have unkown error show it */
+      return res500(res, error?.message);
+    }
+  }
+]
+
+/////////////////////////////////////////////////////////////////////// public
+module.exports.getAllLinks = [
+  async (req, res) => {
+    try {
+      const {
+        portal,
+      } = req.query;
+
+      let findQuery = {};
+
+      const setSort = {index: 1};
+
+      findQuery.modelType = !portal ? 'ostandari' : portal;
+      findQuery.showInHome = true;
+
+      const getLinks = await Links.find(findQuery).sort(setSort);
+
+      return res.json(getLinks);
+    } catch (error) {
+      return res500(res, error?.message);
+    }
+  }
+]

server/controllers/meetingController.js

@@ -0,0 +1,396 @@
+const {body, validationResult} = require('express-validator');
+const {_sr} = require('../plugins/serverResponses');
+const {res404, res500} = require('../plugins/controllersHelperFunctions');
+const Meeting = require('../models/Meeting');
+const Captcha = require('../models/Captcha');
+
+
+const limit = 20;
+
+
+/////////////////////////////////////////////////////////////////////// admin
+module.exports.updateMeeting = [
+    [
+        body('name')
+            .notEmpty().withMessage(_sr['fa'].required.title),
+
+        body('subject')
+            .notEmpty().withMessage(_sr['fa'].required.description),
+
+        body('description')
+            .notEmpty().withMessage(_sr['fa'].required.description),
+
+        body('email')
+            .optional().isEmail().withMessage(_sr['fa'].format.email),
+
+        body('phoneNumber')
+            .if((value, {req}) => {
+                return req.body.phoneNumber
+            })
+            .custom((value, {req}) => {
+                if (!_.isEmpty(value) && !lodash.isNumeric(value)) {
+                    return Promise.reject(_sr['fa'].format.number);
+                } else return true;
+            }),
+
+        body('nationalCode')
+            .notEmpty().withMessage(_sr['fa'].format.national_code)
+
+        // body('cptcha')
+        //   .notEmpty().withMessage(_sr['fa'].required.field)
+        //   .custom((value , {req}) => {
+        //     console.log(req.session);
+        //     if(value != req.session.captcha){
+        //       return Promise.reject(`کپچا وارد شده صحیح نمی باشد`);
+        //     }else{
+        //       return true
+        //     }
+        //   }),
+
+    ],
+    async (req, res) => {
+        const errors = validationResult(req)
+        if (!errors.isEmpty()) return res.status(422).json({
+            validation: errors.mapped()
+        });
+
+        try {
+
+            /**
+             * get data from input
+             */
+            const {
+                name,
+                subject,
+                description,
+                phoneNumber,
+                email,
+                nationalCode
+            } = req.body;
+
+            /**
+             * get id
+             */
+            const meetingId = req.params.id;
+
+            /**
+             * check meeting exist or not
+             */
+            var targetMeeting = await Meeting.findById(meetingId);
+
+            if (!targetMeeting) return res404(res, `درخواست مورد نظر پیدا نشد`);
+
+
+            /**
+             * make update object
+             */
+            targetMeeting.name = name.trim();
+            targetMeeting.subject = subject.trim();
+            targetMeeting.description = description.trim();
+            targetMeeting.email = email;
+            targetMeeting.phoneNumber = phoneNumber;
+            targetMeeting.nationalCode = nationalCode;
+
+            await targetMeeting.save();
+
+            /**
+             * show result
+             */
+            return res.json(targetMeeting);
+
+        } catch (error) {
+            return res500(res, error?.message);
+        }
+    }
+]
+
+module.exports.deletOneMeeting = [
+    async (req, res) => {
+        try {
+            const meetingId = req.params.id;
+
+            /**
+             * check meeting
+             */
+            let targetMeeting = await Meeting.findByIdAndDelete(meetingId);
+
+            if (!targetMeeting) {
+                return res404(res, `درخواست مورد نظر پیدا نشد`);
+            }
+
+            /**
+             * show result
+             */
+            return res.json(targetMeeting);
+
+        } catch (error) {
+            /**
+             * if we got unknown error show to client
+             */
+            res500(res, error);
+        }
+    }
+]
+
+module.exports.getOneMeeting = [
+    async (req, res) => {
+        try {
+            const meetingId = req.params.id;
+
+            /**
+             * get meeting
+             */
+            const targetMeeting = await Meeting.findOne({_id: meetingId});
+
+            /**
+             * if not exist
+             */
+            if (!targetMeeting) {
+                return res404(res, `درخواست مورد نظر پیدا نشد`);
+            }
+
+            if (!targetMeeting.read) {
+                targetMeeting.read = true;
+
+                await targetMeeting.save();
+            }
+
+            /**
+             * show result
+             */
+            return res.json(targetMeeting);
+        } catch (error) {
+            /**
+             * if we got unknown error show to client
+             */
+            res500(res, error);
+        }
+    }
+]
+
+module.exports.getAll = [
+    async (req, res) => {
+        try {
+
+            let findQuery = {};
+
+            /**
+             * get all meeting
+             */
+            const getAll = await Meeting.paginate(findQuery,
+                {page: req.query.page || 1, limit, sort: {created_at: -1}});
+
+            /**
+             * show result
+             */
+            return res.json(getAll);
+        } catch (error) {
+            return res500(res, error.message);
+        }
+    }
+]
+
+module.exports.getAllForCount = [
+    async (req, res) => {
+        try {
+
+            /**
+             * get all meeting
+             */
+            const getAll = await Meeting.find({});
+
+            /**
+             * show result
+             */
+            return res.json(getAll);
+        } catch (error) {
+            return res500(res, error.message);
+        }
+    }
+]
+
+module.exports.search = [
+    async (req, res) => {
+        try {
+            let findQuery = {};
+            findQuery['$and'] = [];
+            findQuery['$or'] = [];
+
+            const {
+                name,
+                email,
+                terms,
+                phoneNumber,
+                nationalCode,
+                read,
+                date
+            } = req.body;
+
+            findQuery.modelName = req.params.model;
+
+            /** search by term */
+            if (terms && !_.isEmpty(terms)) {
+                findQuery['$or'].push(
+                    {
+                        subject: {
+                            $regex: '.*' + name + '.*'
+                        },
+                        description: {
+                            $regex: '.*' + name + '.*'
+                        },
+                    }
+                );
+            }
+            /** search by name */
+            if (name && !_.isEmpty(name)) {
+                findQuery['$or'].push(
+                    {
+                        name: {
+                            $regex: '.*' + name + '.*'
+                        }
+                    }
+                );
+            }
+            /** search by email */
+            if (email && !_.isEmpty(email)) {
+                findQuery['$and'].push({
+                    email
+                });
+            }
+            /** search by phoneNumber */
+            if (phoneNumber && !_.isEmpty(phoneNumber)) {
+                findQuery['$and'].push({
+                    phoneNumber
+                });
+            }
+            /** search by nationalCode */
+            if (nationalCode && !_.isEmpty(nationalCode)) {
+                findQuery['$and'].push({
+                    nationalCode
+                });
+            }
+            /** search by read */
+            if (!_.isUndefined(read) && _.isBoolean(read)) {
+                findQuery['$and'].push({
+                    read
+                });
+            }
+
+            /** search by date */
+            if (date && !_.isEmpty(date)) {
+                if (date.length === 1) {
+                    findQuery['$and'].push({
+                        created_at: {
+                            $gte: moment(date[0]).startOf('days'),
+                            $lt: moment(date[0]).endOf('days')
+                        }
+                    });
+                } else {
+                    findQuery['$and'].push({
+                        created_at: {
+                            $gte: new Date(date[0]),
+                            $lt: new Date(date[1])
+                        }
+                    });
+                }
+            }
+
+            _.isEmpty(findQuery['$and']) && delete findQuery['$and'];
+            _.isEmpty(findQuery['$or']) && delete findQuery['$or'];
+
+            /** get meetings */
+            var meetings = await Meeting.paginate(findQuery, {
+                page: req.query.page,
+                limit,
+                sort: {created_at: -1}
+            });
+
+            /** show result */
+            return res.json(meetings);
+        } catch (error) {
+            return res500(res, error?.message)
+        }
+    }
+]
+
+/////////////////////////////////////////////////////////////////////// public
+module.exports.addMeeting = [
+    [
+        body('name')
+            .notEmpty().withMessage(_sr['fa'].required.title),
+
+        body('subject')
+            .notEmpty().withMessage(_sr['fa'].required.description),
+
+        body('description')
+            .notEmpty().withMessage(_sr['fa'].required.description),
+
+        body('email')
+            .optional().isEmail().withMessage(_sr['fa'].format.email),
+
+        body('phoneNumber')
+            .custom((value, {req}) => {
+                if (_.isEmpty(value)) return Promise.reject(_sr['fa'].required.phone_number);
+                if (!_.isEmpty(value) && !lodash.isNumeric(value)) {
+                    return Promise.reject(_sr['fa'].format.number);
+                } else return true;
+            }),
+
+        body('nationalCode')
+            .notEmpty().withMessage(_sr['fa'].format.national_code),
+
+        body('captcha')
+            .notEmpty().withMessage(_sr['fa'].required.field)
+            .custom((value, {req}) => {
+                return Captcha.findOne({code: value}).then(data => {
+                    if (!data) return Promise.reject(`عبارت وارد شده صحیح نمیباشد`)
+                    else return true
+                })
+            }),
+
+    ],
+    async (req, res) => {
+
+        const errors = validationResult(req)
+        if (!errors.isEmpty()) return res.status(422).json({
+            validation: errors.mapped()
+        });
+
+        try {
+            let {
+                name,
+                subject,
+                description,
+                phoneNumber,
+                email,
+                nationalCode
+            } = req.body;
+
+            const data = {
+                name,
+                subject,
+                description,
+                phoneNumber,
+                email,
+                nationalCode
+            };
+
+            const createMeeting = await Meeting.create(data);
+
+            if (!createMeeting) {
+                return res500(res, `مشکلی در ثبت درخواست پیش آمده است`);
+            }
+
+            /**
+             * show result
+             */
+            return res.json(createMeeting);
+        } catch (error) {
+            /**
+             * if we got unknown error show to client
+             */
+            return res500(res, error?.message);
+        }
+    }
+]
+

server/controllers/newsFileController.js

@@ -0,0 +1,684 @@
+const NewsFile = require('../models/NewsFile')
+const {body, validationResult} = require('express-validator')
+const {_sr} = require('../plugins/serverResponses')
+const {res404, res500} = require('../plugins/controllersHelperFunctions')
+const News = require('../models/News')
+const Category = require('../models/Category')
+const sharp = require('sharp')
+const fs = require('fs')
+
+////// variables
+const noCover = '/img/no-cover.jpg'
+const limit = 5;
+const limitDetails = 11;
+const titleFilterRegex = new RegExp('/', 'g')
+
+////// variables
+const coverNewsWidth = 1000;
+const coverNewsHeight = 600;
+const coverQuality = 100;
+
+const thumbCoverNewsWidth = 600;
+const thumbCoverNewsHeight = 300;
+const thumbCoverQuality = 200;
+
+////// functions
+const changePriority = async (catId, modelType) => {
+  try {
+    const getAllNews = await News.find({
+      catId,
+      modelType,
+      priority: true
+    });
+
+    for (const item of getAllNews) {
+      item.priority = false;
+      await item.save();
+    }
+
+    return true
+  } catch (error) {
+    console.log(error)
+  }
+}
+
+const _checkSpecPermission = async (req, category) => {
+  return !req.user.specialPermissions.includes(category._id) && //check parent id exist in special permissions or not
+     !req.user.specialPermissions.some(item => category?.treeCat?.join().includes(item));
+}
+
+/////////////////////////////////////////////////////////////////////// admin
+module.exports.addNewsFile = [
+  [
+    body('title')
+       .notEmpty().withMessage(_sr['fa'].required.title)
+       .custom((value, {req}) => {
+         return NewsFile.findOne({title: value})
+            .then(newsFile => {
+              if (newsFile) return Promise.reject(_sr['fa'].duplicated.title);
+              else return true
+            })
+       }),
+
+    body('description')
+       .optional().isString().withMessage(`نوع مقدار ارسال شده صحیح نمی باشد`),
+
+    body('catId')
+       .isMongoId().withMessage(_sr['fa'].required.field)
+       .if((value, {
+         req
+       }) => {
+         return req.body.catId
+       })
+       .custom((value) => {
+         return Category.findOne({
+           _id: value
+         })
+            .then(category => {
+              if (!category) return Promise.reject(_sr['fa'].not_found.category);
+              else return true
+            })
+       }),
+
+    body('index')
+       .isNumeric().withMessage(`لطفا ترتیب نمایش را مشخص کنید`),
+
+    body('showInHome')
+       .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    body('siteMap')
+       .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    body('modelType')
+       .custom((value, {req}) => {
+         if (req.user.portals.join() === portal.join()) {
+           if (!portal.includes(value)) {
+             return Promise.reject(_sr['fa'].required.field);
+           } else {
+             return true
+           }
+         } else {
+           return true
+         }
+       })
+  ],
+  async (req, res) => {
+
+    const errors = validationResult(req)
+    if (!errors.isEmpty()) return res.status(422).json({
+      validation: errors.mapped()
+    });
+
+    try {
+      let {
+        title,
+        description,
+        catId,
+        index,
+        showInHome,
+        siteMap,
+        modelType
+      } = req.body;
+
+      /** set portals */
+      modelType = (req.user.portals.join() === portal.join()) ? modelType : req.user.portals[0];
+
+      let newsFileData = {
+        title: title.trim().replace(titleFilterRegex, '-'),
+        description: description.trim(),
+        catId,
+        index,
+        showInHome,
+        siteMap,
+        _creator: req.user._id,
+        _updatedBy: req.user._id,
+        modelType
+      };
+
+      if (catId) {
+        /** get category with populate parent */
+        const category = await Category.findOne({
+          _id: catId
+        })
+           .populate({
+             path: 'parent',
+             populate: {
+               path: 'parent',
+               model: 'Category'
+             }
+           });
+
+        /** if undefined we have error from database */
+        if (!category) return res404(res, `دسته بندی انتخاب شده برای این پرونده خبری پیدا نشد`);
+
+        /** check special permission */
+        if (req.user.specialPermissions.length && await _checkSpecPermission(req, category)) {
+          return res.status(403).json({
+            message: `شما نمیتوانید این دسته بندی را انتخاب کنید`
+          });
+        }
+
+        if (category.modelType !== modelType) {
+          return res.status(403).json({
+            message: `شما اجازه استفاده از این دسته بندی را ندارید`
+          });
+        }
+
+        newsFileData.allCat = category.treeCat;
+        newsFileData.rootParent = category.rootParent || category._id;
+      }
+
+
+      const createNewsFile = await NewsFile.create(newsFileData);
+
+      if (!createNewsFile) res500(res, `مشکلی در اضافه کردن پرونده پرونده خبریی پیش آمده است`)
+
+      /**
+       * if we have pic upload to server
+       */
+      if (req.files?.cover) {
+        const image = req.files.cover;
+        if (!_sr.supportedImageFormats.includes(image.mimetype.split('/')[1])) return res.status(422).json({
+          validation: {
+            cover: {
+              msg: _sr['fa'].format.image
+            }
+          }
+        })
+        const imageName = `news_${Date.now()}_${createNewsFile._id}.${image.mimetype.split('/')[1]}`;
+        try {
+          const target = sharp(image.data)
+          await target
+             .resize(coverNewsWidth, coverNewsHeight, {fit: 'cover'})
+             .jpeg({quality: coverQuality})
+             .toFile(`./static/uploads/images/news/${imageName}`);
+
+          createNewsFile.cover = imageName;
+
+          await target
+             .resize(thumbCoverNewsWidth, thumbCoverNewsHeight, {fit: 'cover'})
+             .jpeg({quality: thumbCoverQuality})
+             .toFile(`./static/uploads/images/news/thumb_${imageName}`);
+
+          createNewsFile.thumbCover = `thumb_${imageName}`;
+
+          await createNewsFile.save();
+        } catch (e) {
+          return res500(res, e?.message);
+        }
+      }
+
+      /**
+       * show result
+       */
+      return res.json(createNewsFile);
+    } catch (error) {
+      res500(res, error.message);
+    }
+  }
+]
+
+module.exports.updateNewsFile = [
+  [
+    body('title')
+       .notEmpty().withMessage(_sr['fa'].required.title),
+
+    body('catId')
+       .isMongoId().withMessage(_sr['fa'].required.field)
+       .if((value, {
+         req
+       }) => {
+         return req.body.catId
+       })
+       .custom((value) => {
+         return Category.findOne({
+           _id: value
+         })
+            .then(category => {
+              if (!category) return Promise.reject(_sr['fa'].not_found.category);
+              else return true
+            })
+       }),
+
+    body('description')
+       .optional().isString().withMessage(`نوع مقدار ارسال شده صحیح نمی باشد`),
+
+    body('index')
+       .isNumeric().withMessage(`لطفا ترتیب نمایش را مشخص کنید`),
+
+    body('showInHome')
+       .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    body('siteMap')
+       .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    body('modelType')
+       .custom((value, {req}) => {
+         if (req.user.portals.join() === portal.join()) {
+           if (!portal.includes(value)) {
+             return Promise.reject(_sr['fa'].required.field);
+           } else {
+             return true
+           }
+         } else {
+           return true
+         }
+       })
+  ],
+  async (req, res) => {
+    const errors = validationResult(req)
+    if (!errors.isEmpty()) return res.status(422).json({
+      validation: errors.mapped()
+    });
+
+    try {
+
+      /**
+       * get data from input
+       */
+      const {
+        title,
+        description,
+        catId,
+        index,
+        showInHome,
+        siteMap,
+        modelType
+      } = req.body;
+
+      /**
+       * get id
+       */
+      var newsFileId = req.params.id;
+
+      var targetNewsFile = await NewsFile.findById(newsFileId);
+
+      /** check newsFile exist or not */
+      if (!targetNewsFile) return res404(res, `پرونده خبری مورد نظر پیدا نشد`);
+
+      /** check access portal */
+      if (!req.user.portals.includes(targetNewsFile.modelType)) return res.status(403).json({message: `شما اجازه آپدیت این پرونده خبری را ندارید`});
+
+      if (targetNewsFile.title !== title) {
+        var checkDuppTitle = await NewsFile.findOne({
+          title: title
+        });
+
+        if (checkDuppTitle) {
+          return res.status(422).json({validation: {title: {msg: _sr['fa'].duplicated.title}}});
+        }
+      }
+
+      if (modelType !== targetNewsFile.modelType) {
+        /** check have news or not */
+        var checkNews = await News.find({newsFileId: targetNewsFile._id});
+
+        if (checkNews.length) {
+          return res.status(403).json({message: `این پرونده خبری دارای خبر می باشد و شما نمی توانید نوع آن را تغییر دهید`});
+        }
+      }
+
+      /** get category with populate parent */
+      var category = await Category.findOne({
+        _id: catId
+      })
+         .populate({
+           path: 'parent',
+           populate: {
+             path: 'parent',
+             model: 'Category'
+           }
+         });
+
+      /** if undefined we have error from database */
+      if (!category) return res404(res, `دسته بندی انتخاب شده برای این خبر پیدا نشد`);
+
+      /** check special permission */
+      if (req.user.specialPermissions.length && await _checkSpecPermission(req, category)) {
+        return res.status(403).json({
+          message: `شما مجاز به انتخاب این دسته بندی نمی باشید`
+        });
+      }
+
+      if (category.modelType !== modelType) return res.status(403).json({
+        message: `محدوده انتخاب شده شما با محدوده دسته بندی همخوانی ندارد`
+      });
+
+
+      if (catId && targetNewsFile.catId !== catId) {
+        targetNewsFile.allCat = category.treeCat;
+        targetNewsFile.rootParent = category.rootParent || category._id;
+      }
+
+      targetNewsFile.title = title.trim().replace(titleFilterRegex, '-')
+      targetNewsFile.description = description.trim();
+      targetNewsFile.catId = catId;
+      targetNewsFile.index = index;
+      targetNewsFile.showInHome = showInHome;
+      targetNewsFile.siteMap = siteMap;
+      targetNewsFile.modelType = modelType;
+
+
+      /**
+       * if we have pic upload to server
+       */
+      if (req.files?.cover) {
+        const image = req.files.cover;
+        if (!_sr.supportedImageFormats.includes(image.mimetype.split('/')[1])) {
+          return res.status(422).json({
+            validation: {
+              cover: {
+                msg: _sr['fa'].format.image
+              }
+            }
+          });
+        }
+        const imageName = `news_${Date.now()}_${targetNewsFile._id}.${image.mimetype.split('/')[1]}`;
+        try {
+          const target = sharp(image.data)
+          await target
+             .resize(coverNewsWidth, coverNewsHeight, {fit: 'cover'})
+             .jpeg({quality: coverQuality})
+             .toFile(`./static/uploads/images/news/${imageName}`);
+
+          await target
+             .resize(thumbCoverNewsWidth, thumbCoverNewsHeight, {fit: 'cover'})
+             .jpeg({quality: thumbCoverQuality})
+             .toFile(`./static/uploads/images/news/thumb_${imageName}`);
+
+          /**
+           * if exist old pic delete it from file
+           */
+          if (targetNewsFile.cover !== noCover) {
+            let oldPic = `./static${targetNewsFile.cover}`;
+
+            if (await fs.existsSync(oldPic)) {
+              fs.unlink(oldPic, (err) => {
+                if (err) return res500(res, err?.message);
+              });
+            }
+          }
+
+          if (targetNewsFile.thumbCover !== noCover) {
+            let oldPic = `./static${targetNewsFile.thumbCover}`;
+
+            if (await fs.existsSync(oldPic)) {
+              fs.unlink(oldPic, (err) => {
+                if (err) return res500(res, err?.message);
+              });
+            }
+          }
+
+          targetNewsFile.cover = imageName;
+          targetNewsFile.thumbCover = `thumb_${imageName}`;
+        } catch (e) {
+          return res500(res, e?.message);
+        }
+      }
+
+      await targetNewsFile.save();
+
+      /**
+       * show result
+       */
+      return res.json(targetNewsFile);
+
+    } catch (error) {
+      return res500(res, error.message);
+    }
+  }
+]
+
+module.exports.deletOneNewsFile = [
+  async (req, res) => {
+    try {
+      var newsFileId = req.params.id;
+
+      var targetNewsFile = await NewsFile.findOne({_id: newsFileId});
+
+      /** check newsFile exist or not */
+      if (!targetNewsFile) {
+        return res404(res, `پرونده خبری مورد نظر پیدا نشد`);
+      }
+
+      /** check access portal */
+      if (!req.user.portals.includes(targetNewsFile.modelType)) {
+        return res.status(403).json({message: `شما اجازه حذف این پرونده خبری را ندارید`});
+      }
+
+      /** check have news or not */
+      var checkNews = await News.find({newsFileId: targetNewsFile._id});
+
+      if (checkNews.length) {
+        return res.status(403).json({message: `این پرونده خبری دارای خبر می باشد و شما نمی توانید آن را حذف دهید`});
+      }
+
+      /** delete newsFile */
+      await targetNewsFile.deleteOne();
+
+      /**
+       * show result
+       */
+      return res.json(targetNewsFile);
+
+    } catch (error) {
+      res500(res, error);
+    }
+  }
+]
+
+module.exports.deleteAllNewsFile = [
+  async (req, res) => {
+    try {
+
+    } catch (error) {
+      /**
+       * if we got unkown error show to client
+       */
+      res500(res, error);
+    }
+  }
+]
+
+module.exports.getOneNewsFile = [
+  async (req, res) => {
+    try {
+      var newsFileId = req.params.id;
+
+      var findQuery = {_id: newsFileId};
+
+      var newsFile = await NewsFile.findOne(findQuery).populate('catId');
+
+      if (!newsFile) {
+        return res404(res, `پرونده خبری مورد نظر پیدا نشد`);
+      }
+
+      /** check access portal */
+      if (!req.user.portals.includes(newsFile.modelType)) {
+        return res.status(403).json({message: `شما اجازه دسترسی به اطلاعات این پرونده خبری را ندارید`});
+      }
+
+      /**
+       * show result
+       */
+      return res.json(newsFile);
+    } catch (error) {
+      res500(res, error);
+    }
+  }
+]
+
+module.exports.getAll = [
+  async (req, res) => {
+    try {
+
+      var findQuery = {};
+
+      // @todo can change it
+      if (req.user.specialPermissions.length) {
+        findQuery.catId = {$in: req.user.specialPermissions}
+      }
+
+      if (req.user.portals.length) {
+        findQuery.modelType = {$in: req.user.portals};
+      }
+
+      /** get all newsFile */
+      const allNewsFile = await NewsFile.find(findQuery).populate('_creator', {
+        firstName: 1,
+        lastName: 1,
+        profilePic: 1
+      })
+         .sort({created_at: -1});
+
+      /** if null we have error */
+      if (!allNewsFile) {
+        return res500(res, `مشکلی در گرفتن اطلاعات پیش آمده است`);
+      }
+
+      /** show result to client */
+      return res.json(allNewsFile);
+    } catch (error) {
+      return res500(res, error?.message);
+    }
+  }
+]
+
+module.exports.search = [
+  async (req, res) => {
+    try {
+      var query = {};
+      let populate = [{
+        path: '_creator',
+        select: {firstName: 1, lastName: 1, profilePic: 1}
+      },
+        {
+          path: 'catId'
+        }];
+
+
+      query['$and'] = [];
+
+      var {
+        term,
+        showInHome,
+        catId,
+        portals
+      } = req.body;
+
+      ///////////// permissions
+
+      /** search by catId */
+      if (req.user.specialPermissions.length) {
+        query.catId = {$in: req.user.specialPermissions}
+      } else if (catId && !_.isEmpty(catId)) {
+        query['$and'].push({
+          catId
+        });
+      }
+
+      /** search by portals */
+      if (portals && !_.isEmpty(portals)) {
+        query['$and'].push({
+          modelType: {
+            $in: portals
+          }
+        })
+      } else {
+        if (req.user.portals.length) {
+          query.modelType = {$in: req.user.portals};
+        }
+      }
+
+      /** search by term */
+      if (term && !_.isEmpty(term)) {
+        query['$and'].push({
+          $or: [{
+            title: {
+              $regex: '.*' + term + '.*'
+            }
+          }]
+        });
+      }
+
+      /** search by showInHome */
+      if (!_.isUndefined(showInHome) && _.isBoolean(showInHome)) {
+        query['$and'].push({
+          showInHome
+        });
+      }
+
+      _.isEmpty(query['$and']) && delete query['$and'];
+      // _.isEmpty(input['$or']) && delete input['$or'];
+
+      /** get news */
+      const news = await NewsFile.paginate(query, {page: req.query.page, limit, populate, sort: {_id: -1}});
+
+      /** show result */
+      return res.json(news);
+    } catch (error) {
+      return res500(res, error?.message)
+    }
+  }
+]
+
+/////////////////////////////////////////////////////////////////////// public
+module.exports.viewNewsFile = [
+  async (req, res) => {
+    try {
+      const newsFileTitle = req.params.title;
+
+      let targetNewsFile = await NewsFile.findOne({
+        title: newsFileTitle
+      })
+         .populate('_creator', {firstName: 1, lastName: 1, profilePic: 1});
+
+      if (!targetNewsFile) {
+        return res404(res, `پرونده خبری مورد نطر پیدا نشد`);
+      }
+
+      ++targetNewsFile.userViews;
+
+      await targetNewsFile.save();
+
+      /** get news */
+      let getNews = await News.paginate({newsFileId: targetNewsFile._id}, {page: req.query.page || 1, limit: limitDetails , sort : {customDate : -1}});
+
+      let result = {
+        newsFile: targetNewsFile,
+        news: getNews
+      };
+
+      return res.json(result);
+    } catch (error) {
+      return res500(res, `مشکلی در اجرای درخواست شما پیش آمده است`);
+    }
+  }
+]
+
+module.exports.getAllNewsFile = [
+  async (req, res) => {
+    try {
+      const {
+        portal,
+        limit,
+        skip
+      } = req.query;
+
+      const findQuery = {};
+
+      const setLimit = parseInt(limit) || 4;
+      const setSort = {index: 1};
+      const setSkip = parseInt(skip) || 0;
+
+      findQuery.modelType = portal;
+      findQuery.publish = true;
+
+      const getNewsFile = await NewsFile.find(findQuery).limit(setLimit).skip(setSkip).sort(setSort);
+
+      return res.json(getNewsFile);
+    } catch (error) {
+      return res500(res, error?.message);
+    }
+  }
+]

server/controllers/occasionController.js

@@ -0,0 +1,341 @@
+const Occasion = require('../models/Occasion');
+const {body, validationResult} = require('express-validator');
+const {_sr} = require('../plugins/serverResponses');
+const {res404, res500} = require('../plugins/controllersHelperFunctions');
+const fs = require('fs');
+const sharp = require('sharp');
+const moment = require('moment-jalaali');
+
+////// variables
+const occasionWidth = 1920
+const occasionHeight = 180
+const occasionQuality = 100
+
+const limit = 5;
+
+/////////////////////////////////////////////////////////////////////// admin
+module.exports.addOccasion = [
+    [
+        body('title')
+            .notEmpty().withMessage(_sr['fa'].required.title),
+
+        body('publish')
+            .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+        body('index')
+            .isNumeric().withMessage(_sr['fa'].format.number),
+
+        body('startDate')
+            .notEmpty().withMessage(`لطفا یک تاریخ شروع تعیین کنید`),
+
+
+        body('endDate')
+            .notEmpty().withMessage(`لطفا یک تاریخ پایان تعیین کنید`),
+    ],
+    async (req, res) => {
+        const errors = validationResult(req)
+        if (!errors.isEmpty()) return res.status(422).json({
+            validation: errors.mapped()
+        });
+
+        try {
+
+            const {title, publish, index, startDate, endDate} = req.body;
+
+            const occasionData = {
+                title,
+                publish,
+                index,
+                startDate,
+                endDate,
+                _creator: req.user._id,
+                _updatedBy: req.user._id,
+            }
+
+            const addOccasion = await Occasion.create(occasionData);
+
+            if (!addOccasion) return res500(res, `مشلی در اجرای درخواست شما پیش امده است`);
+
+            if (req?.files && req.files?.cover) {
+                const image = req.files.cover;
+                if (!_sr.supportedImageFormats.includes(image.mimetype.split('/')[1])) {
+                    return res.status(422).json({validation: {cover: {msg: _sr['fa'].format.image}}});
+                }
+
+                const imageName = `occasion_${addOccasion._id}_${Date.now()}.jpg`;
+                const target = sharp(image.data)
+                await target
+                    .resize(occasionWidth, occasionHeight, {
+                        fit: 'cover'
+                    })
+                    .toFormat('jpg')
+                    .jpeg({
+                        quality: occasionQuality
+                    })
+                    .toFile(`./static/uploads/images/occasion/${imageName}`);
+
+                addOccasion.status = true;
+                addOccasion.mainCover = imageName;
+                await addOccasion.save();
+            }
+
+            /**
+             * show result
+             */
+            return res.json(addOccasion);
+        } catch (error) {
+            return res500(res, `مشکلی در اجرای درخواست پیش آمده است`);
+        }
+    }
+]
+
+module.exports.updateOccasion = [
+    [
+        body('title')
+            .notEmpty().withMessage(_sr['fa'].required.title),
+
+        body('publish')
+            .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+        body('index')
+            .isNumeric().withMessage(_sr['fa'].format.number),
+
+        body('startDate')
+            .notEmpty().withMessage(`لطفا یک تاریخ شروع تعیین کنید`),
+
+        body('endDate')
+            .notEmpty().withMessage(`لطفا یک تاریخ پایان تعیین کنید`),
+    ],
+    async (req, res) => {
+        const errors = validationResult(req)
+        if (!errors.isEmpty()) return res.status(422).json({
+            validation: errors.mapped()
+        });
+
+
+        try {
+
+            const {title, publish, index, startDate, endDate} = req.body;
+
+            const occasionId = req.params.id;
+
+            const targetOccasion = await Occasion.findById(occasionId);
+
+            if (!targetOccasion) {
+                return res404(res, `مناسبت مورد نظر پیدا نشد`);
+            }
+
+            if (req?.files && req.files?.cover) {
+                const image = req.files.cover;
+                if (!_sr.supportedImageFormats.includes(image.mimetype.split('/')[1])) {
+                    return res.status(422).json({validation: {cover: {msg: _sr['fa'].format.image}}});
+                }
+
+                const imageName = `occasion_${targetOccasion._id}_${Date.now()}.jpg`;
+                const target = sharp(image.data)
+                await target
+                    .resize(occasionWidth, occasionHeight, {
+                        fit: 'cover'
+                    })
+                    .toFormat('jpg')
+                    .jpeg({
+                        quality: occasionQuality
+                    })
+                    .toFile(`./static/uploads/images/occasion/${imageName}`);
+
+                if (targetOccasion.mainCover) {
+                    var oldPic = `./static${targetOccasion.mainCover}`;
+
+                    if (fs.existsSync(oldPic)) {
+                        fs.unlink(oldPic, (err) => {
+                            if (err) return res500(res, err?.message);
+                        });
+                    }
+                }
+
+                targetOccasion.status = true;
+                targetOccasion.mainCover = imageName;
+            }
+
+            targetOccasion.title = title;
+            targetOccasion.publish = publish;
+            targetOccasion.index = index;
+            targetOccasion.startDate = startDate;
+            targetOccasion.endDate = endDate;
+            targetOccasion._updatedBy = req.user._id;
+
+            await targetOccasion.save();
+
+            return res.json(targetOccasion);
+        } catch (error) {
+            return res500(res, `مشکلی در اجرای درخواست پیش آمده است`);
+        }
+    }
+]
+
+module.exports.deleteOccasion = [
+    async (req, res) => {
+        try {
+            const occasionId = req.params.id;
+
+            const targetOccasion = await Occasion.findById(occasionId);
+
+            if (!targetOccasion) {
+                return res404(res, `مناسبت مورد نظر پیدا نشد`);
+            }
+
+            if (targetOccasion.mainCover) {
+                var oldPic = `./static${targetOccasion.mainCover}`;
+
+                if (fs.existsSync(oldPic)) {
+                    fs.unlink(oldPic, (err) => {
+                        if (err) return res500(res, err?.message);
+                    });
+                }
+            }
+
+            await targetOccasion.deleteOne();
+
+            return res.json({message: `مناسبت مورد نظر حذف گرید`});
+        } catch (error) {
+            return res500(res, `مشکلی در اجرای درخواست پیش آمده است`);
+        }
+    }
+]
+
+module.exports.getOccasionByAdmin = [
+    async (req, res) => {
+        try {
+            const occasionId = req.params.id;
+            const getOccasion = await Occasion.findById(occasionId);
+
+            /**
+             * if not exist
+             */
+            if (!getOccasion) return res404(res, `اطلاعات مورد نظر پیدا نشد`);
+
+            /**
+             * show result
+             */
+            return res.json(getOccasion);
+        } catch (error) {
+            /**
+             * if we got unkown error show to client
+             */
+            return res500(res, `مشکلی در اجرای درخواست شما پیش آمده است`);
+        }
+    }
+]
+
+module.exports.getAllOccasionByAdmin = [
+    async (req, res) => {
+        try {
+            const getAllOccasion = await Occasion.paginate({}, {
+                page: req.query.page || 1,
+                populate: {path: '_creator', select: 'firstName lastName'},
+                limit,
+                sort: {_id: -1}
+            });
+
+            return res.json(getAllOccasion);
+        } catch (error) {
+            /**
+             * if we got unkown error show to client
+             */
+            return res500(res, `مشکلی در اجرای درخواست شما پیش آمده است`);
+        }
+    }
+]
+
+module.exports.getAllOccasionForIndex = [
+    async (req, res) => {
+        try {
+            const getAllOccasion = await Occasion.find();
+
+            return res.json(getAllOccasion);
+        } catch (error) {
+            /**
+             * if we got unkown error show to client
+             */
+            return res500(res, `مشکلی در اجرای درخواست شما پیش آمده است`);
+        }
+    }
+]
+
+module.exports.search = [
+    async (req, res) => {
+        try {
+            let query = {};
+            let populate = [{
+                path: '_creator',
+                select: {firstName: 1, lastName: 1, profilePic: 1}
+            }];
+
+
+            query['$and'] = [];
+
+            const {
+                term,
+                publish,
+                status,
+                date
+            } = req.body;
+
+            /** search by term */
+            if (term && !_.isEmpty(term)) {
+                query['$and'].push({
+                    $or: [{
+                        title: {
+                            $regex: '.*' + term + '.*'
+                        }
+                    }]
+                });
+            }
+
+            /** search by publish */
+            if (!_.isUndefined(publish) && _.isBoolean(publish)) {
+                query['$and'].push({
+                    publish
+                });
+            }
+
+            /** search by status */
+            if (!_.isUndefined(status) && _.isBoolean(status)) {
+                query['$and'].push({
+                    status
+                });
+            }
+
+            /** search by date */
+            if (date && !_.isEmpty(date)) {
+                if (date.length === 1) {
+                    query['$and'].push({
+                        startDate:{$lte : new Date(date[0])},
+                        endDate: {$gte : new Date(date[0])}
+                    });
+                } else {
+                    query['$and'].push({
+                        startDate: {$lte : new Date(date[0])},
+                        endDate:{$gte : new Date(date[1])}
+                    });
+                }
+            }
+
+            _.isEmpty(query['$and']) && delete query['$and'];
+            // _.isEmpty(input['$or']) && delete input['$or'];
+
+            /** get news */
+            const occasion = await Occasion.paginate(query, {
+                page: req.query.page || 1,
+                limit,
+                populate,
+                sort: {_id: -1}
+            });
+
+            /** show result */
+            return res.json(occasion);
+        } catch (error) {
+            return res500(res, error?.message)
+        }
+    }
+]

server/controllers/pdfController.js

@@ -0,0 +1,109 @@
+const { body, validationResult } = require("express-validator");
+const { _sr } = require("../plugins/serverResponses");
+const { checkValidations } = require("../plugins/controllersHelperFunctions");
+const Book = require("../models/Book");
+var convertapi = require('convertapi')('6zZB0nquI5V3P3Vg');
+
+module.exports.AddPDF = [
+    [
+        body('title')
+            .notEmpty().withMessage(_sr['fa'].required.title)
+    ],
+    checkValidations(validationResult),
+    async (req, res) => {
+        try {
+            const firstbook = [];
+    
+            if (!req.files?.file) {
+                return res.status(422).json({ validation: { file: { msg: _sr['fa'].required.file } } });
+            }
+    
+            if (req.files?.file.mimetype.split('/')[1] !== 'pdf') {
+                return res.status(422).json({ validation: { file: { msg: 'فقط فرمت PDF قابل قبول است' } } });
+            }
+    
+            const book = await Book.findById(req.body.bookId);
+            const bookId = book ? book._id : null;
+    
+            const data = { title: req.body.title };
+            const file = req.files.file;
+            const fileName = req.body.title.replace(Date.now(), '-') + '_' + Date.now() + '.pdf';
+            const imageName = req.body.title.replace(Date.now(), '-') + '_' + Date.now();
+    
+            const filePath = `./static/uploads/pdf/${fileName}`;
+    
+            await file.mv(filePath);
+            data.file = fileName;
+    
+            const convertPromise = convertapi.convert('jpg', {
+                File: filePath
+            }, 'pdf');
+    
+            const result = await convertPromise;
+            const savedFiles = await result.saveFiles(`./static/uploads/books/${imageName}.jpeg`);
+    
+            const imagePath = `https://ostan-mr.ir/uploads/books/${imageName}.jpeg`;
+            firstbook.push(imagePath);
+    
+            if (bookId) {
+                const update = await Book.findByIdAndUpdate(
+                    {_id:bookId}, 
+                    { $push: { slides: imagePath } },
+                    { upsert: true } 
+                );
+                return res.status(201).json({ msg: "اسلاید کتاب اضافه شد", Data: update });
+            } else {
+                const newBook = new Book({
+                    title: req.body.title,
+                    uri: `https://ostan-mr.ir/uploads/pdf/${fileName}`,
+                    slides: firstbook
+                });
+                await newBook.save();
+                return res.status(201).json({ msg: "کتاب ایجاد شد", Data: newBook });
+            }
+    
+        } catch (error) {
+            console.error(error);
+            return res.status(500).json({ msg: "خطایی در پردازش فایل رخ داد", error: error.message });
+        }
+    }
+    
+    
+    
+];
+
+module.exports.GetAll = [
+    async (req, res,next) => {
+        try {
+            const Books = await Book.find({});
+            return res.status(200).json({ Books });
+        } catch (error) {
+            next(error)
+        }
+    }
+];
+
+module.exports.GetOne = [
+    async (req, res,next) => {
+        try {
+            const id = req.params.id
+            const book = await Book.findById(id);
+            return res.status(200).json({ msg: book });
+        } catch (error) {
+            next(error)
+        }
+    }
+];
+module.exports.DeleteOne = [
+    async(req,res,next)=>{
+        try {
+            const book = await Book.deleteOne({_id:req.params.id})
+            if(!book){
+                return res.status(200).json({ msg: 'کتاب وجود ندارد ' });
+            }
+            return res.status(200).json({ msg: 'کتاب حذف شد' });
+        } catch (error) {
+            next(error)
+        }
+    }
+]

server/controllers/permissionsController.js

@@ -0,0 +1,36 @@
+const permissions = require('../plugins/permissions');
+const {body, validationResult} = require('express-validator');
+const sharp = require('sharp');
+const User = require('../models/User')
+const {_sr} = require('../plugins/serverResponses');
+const {res404, res500, hasWhiteSpaces, isLatinCharactersWithSymbol, generateRandomDigits} = require('../plugins/controllersHelperFunctions');
+
+/** @todo add show in footer */
+/////////////////////////////////////////////////////////////////////// admin
+module.exports.getAll = [
+  async (req, res) => {
+    try {
+      return res.json(permissions);
+    } catch (error) {
+      return res500(res , error.message);
+    }
+  }
+]
+
+
+
+module.exports.SetPermission = [
+    async (req,res)=>{
+      try {
+          const {id} = req.params;
+          const lastuser = await User.findById(id)
+          if(lastuser.scope.includes('PublisherNews')){
+            return res.status(200).json({message:"کاربر به عنوان دبیر ثبت شده"})
+          }
+          const user = await User.findByIdAndUpdate({_id:id} , {$push:{scope:"PublisherNews"}} , {new:true});
+          return  res.status(200).json(user)
+      }catch (e) {
+        return res.status(500).json(e.message)
+      }
+    }
+]

server/controllers/pollController.js

@@ -0,0 +1,436 @@
+const Category = require('../models/Category');
+const {body, validationResult} = require('express-validator');
+const {_sr} = require('../plugins/serverResponses');
+const {res404, res500, checkValidations} = require('../plugins/controllersHelperFunctions');
+const Polls = require('../models/Polls');
+const fs = require('fs')
+
+
+// variables
+const titleFilterRegex = new RegExp('/', 'g')
+const limit = 20;
+
+
+//// functions
+const _checkSpecPermission = async (req, category) => {
+    return !req.user.specialPermissions.includes(category._id) && //check parent id exist in special permissions or not
+        !req.user.specialPermissions.some(item => category?.treeCat?.join().includes(item));
+}
+
+/////////////////////////////////////////////////////////////////////// admin
+module.exports.addSurvey = [
+    [
+        body('title')
+            .notEmpty().withMessage(_sr['fa'].required.field),
+
+        body('catId')
+            .isMongoId().withMessage(_sr['fa'].required.field)
+            .if((value, {req}) => {
+                return req.body.catId
+            })
+            .custom((value) => {
+                return Category.findOne({
+                    _id: value
+                })
+                    .then(category => {
+                        if (!category) return Promise.reject(_sr['fa'].not_found.category);
+                        else return true
+                    })
+            }),
+
+        // body('index')
+        //     .isNumeric().withMessage(`لطفا ترتیب نمایش را مشخص کنید`),
+
+        body('surveyType')
+            .notEmpty().withMessage(_sr['fa'].required.field)
+            .bail()
+            .isIn(['check', 'radio']).withMessage(`${_sr['fa'].optional.onlyValid} => 'check' , 'radio'`),
+
+        body('startDate')
+            .notEmpty().withMessage(`لطفا یک تاریخ شروع تعیین کنید`),
+
+        body('endDate')
+            .notEmpty().withMessage(`لطفا یک تاریخ پایان تعیین کنید`),
+
+        body('publish')
+            .isBoolean().withMessage(_sr['fa'].format.boolean),
+
+        body('options')
+            .notEmpty().withMessage(_sr['fa'].required.field)
+            .bail()
+            .isArray().withMessage(`اطلاعات را باید به صورت آرایه بفرستید`),
+
+
+    ],
+    checkValidations(validationResult),
+    async (req, res) => {
+        try {
+
+            const {
+                title,
+                catId,
+                description,
+                // index,
+                surveyType,
+                startDate,
+                endDate,
+                options,
+                publish
+            } = req.body;
+
+            const data = {
+                title: title.trim(),
+                catId,
+                description,
+                // index,
+                surveyType,
+                startDate,
+                endDate,
+                options,
+                publish,
+                _creator: req.user._id,
+                _updatedBy: req.user._id
+            }
+
+
+            const category = await Category.findOne({
+                _id: catId
+            }).populate({
+                path: 'parent',
+                populate: {
+                    path: 'parent',
+                    model: 'Category'
+                }
+            });
+
+            if (!category) return res404(res, 'دسته بندی مورد نظر پیدا نشد');
+
+            /** check special permission */
+            if (req.user.specialPermissions.length && await _checkSpecPermission(req, category)) {
+                return res.status(403).json({
+                    message: `شما نمیتوانید این دسته بندی را انتخاب کنید`
+                });
+            }
+
+            data.allCat = category.treeCat;
+            data.rootParent = category.rootParent || category._id;
+
+            const createPoll = await Polls.create(data);
+
+            if (!createPoll) return res500(res, `مشکلی در اجرای درخواست شما پیش آمده است`);
+
+            return res.json({message: _sr['fa'].response.success_save});
+        } catch (error) {
+            return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+        }
+    }
+]
+
+module.exports.updateSurvey = [
+    [
+        body('title')
+            .notEmpty().withMessage(_sr['fa'].required.field),
+
+        body('catId')
+            .isMongoId().withMessage(_sr['fa'].required.field)
+            .if((value, {req}) => {
+                return req.body.catId
+            })
+            .custom((value) => {
+                return Category.findOne({
+                    _id: value
+                })
+                    .then(category => {
+                        if (!category) return Promise.reject(_sr['fa'].not_found.category);
+                        else return true
+                    })
+            }),
+
+        // body('index')
+        //     .isNumeric().withMessage(`لطفا ترتیب نمایش را مشخص کنید`),
+
+        body('surveyType')
+            .notEmpty().withMessage(_sr['fa'].required.field)
+            .bail()
+            .isIn(['check', 'radio']).withMessage(`${_sr['fa'].optional.onlyValid} => 'check' , 'radio'`),
+
+        body('startDate')
+            .notEmpty().withMessage(`لطفا یک تاریخ شروع تعیین کنید`),
+
+        body('endDate')
+            .notEmpty().withMessage(`لطفا یک تاریخ پایان تعیین کنید`),
+
+        body('options')
+            .notEmpty().withMessage(_sr['fa'].required.field)
+            .bail()
+            .isArray().withMessage(`اطلاعات را باید به صورت آرایه بفرستید`),
+
+        body('publish')
+            .isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    ],
+    checkValidations(validationResult),
+    async (req, res) => {
+        try {
+
+            const pollId = req.params.id;
+
+            const {
+                title,
+                surveyType,
+                description,
+                catId,
+                // index,
+                startDate,
+                endDate,
+                options,
+                publish
+            } = req.body;
+
+            //// check poll
+            const targetPoll = await Polls.findById(pollId);
+
+            if (!targetPoll) return res404(res, `نظر سنجی مورد نظر پیدا نشد`);
+
+
+            if (catId && targetPoll.catId !== catId) {
+                const category = await Category.findOne({
+                    _id: catId
+                }).populate({
+                    path: 'parent',
+                    populate: {
+                        path: 'parent',
+                        model: 'Category'
+                    }
+                });
+
+                if (!category) return res404(res, 'دسته بندی مورد نظر پیدا نشد');
+
+                /** check special permission */
+                if (req.user.specialPermissions.length && await _checkSpecPermission(req, category)) {
+                    return res.status(403).json({
+                        message: `شما نمیتوانید این دسته بندی را انتخاب کنید`
+                    });
+                }
+
+                targetPoll.catId = catId;
+                targetPoll.allCat = category.treeCat;
+                targetPoll.rootParent = category.rootParent || category._id;
+            }
+
+            targetPoll.title = title;
+            targetPoll.surveyType = surveyType;
+            targetPoll.description = description;
+            // targetPoll.index = index;
+            targetPoll.startDate = startDate;
+            targetPoll.endDate = endDate;
+            targetPoll.options = options;
+            targetPoll.publish = publish;
+            targetPoll._updatedBy = req.user._id;
+
+            await targetPoll.save();
+
+            return res.json({message: _sr['fa'].response.success_save});
+        } catch (error) {
+            return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+        }
+    }
+]
+
+module.exports.getAllSurvey = [
+    async (req, res) => {
+        try {
+            let findQuery = {};
+
+            if (req.user.specialPermissions.length) {
+                findQuery.catId = {$in: req.user.specialPermissions}
+            }
+
+            const allPolls = await Polls.paginate(findQuery, {
+                page: req.query.page || 1,
+                populate: {path: 'catId'},
+                limit,
+                sort: {created_at: -1}
+            });
+
+            if (!allPolls) return res500(res, `مشکلی در گرفتن اطلاعات پیش آمده است`);
+
+            return res.json(allPolls);
+
+        } catch (error) {
+            return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+        }
+    }
+]
+
+module.exports.getOneSurvey = [
+    async (req, res) => {
+        try {
+            const pollId = req.params.id;
+
+            const findQuery = {
+                _id: pollId
+            };
+
+            const poll = await Polls.findOne(findQuery).populate('catId');
+
+            if (!poll) return res404(res, `اطلاعات مورد نظر پیدا نشد`);
+
+            if (req.user.specialPermissions.length && await _checkSpecPermission(req, poll.catId)) {
+                return res.status(403).json({
+                    message: `شما مجاز به دیدن اطلاعات این نظرسنجی نمی باشید`
+                });
+            }
+
+            return res.json(poll);
+
+        } catch (error) {
+            return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+        }
+    }
+]
+
+module.exports.deletOneSurvey = [
+    async (req, res) => {
+        try {
+            const pollId = req.params.id;
+
+            const deletePoll = await Polls.findById(pollId).populate('catId');
+
+            if (!deletePoll) return res404(res, `نظرسنجی مورد نظر پیدا نشد`);
+
+            if (req.user.specialPermissions.length && await _checkSpecPermission(req, deletePoll.catId)) {
+                return res.status(403).json({
+                    message: `شما اجازه حذف این نظرسنجی را ندارید`
+                });
+            }
+
+            await deletePoll.deleteOne();
+
+            return res.json({message: _sr['fa'].response.success_remove});
+        } catch (error) {
+            return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+        }
+    }
+]
+
+module.exports.search = [
+    async (req, res) => {
+        try {
+            let query = {};
+            let populate = [{
+                path: '_creator',
+                select: {firstName: 1, lastName: 1, profilePic: 1}
+            }];
+
+
+            query['$and'] = [];
+
+            const {
+                term,
+                catId,
+                publish,
+                date
+            } = req.body;
+
+            /** search by term */
+            if (term && !_.isEmpty(term)) {
+                query['$and'].push({
+                    $or: [{
+                        title: {
+                            $regex: '.*' + term + '.*'
+                        }
+                    }]
+                });
+            }
+
+            if (req.user.specialPermissions.length) {
+                query.catId = {$in: req.user.specialPermissions}
+            } else if (catId && !_.isEmpty(catId)) {
+                query['$and'].push({
+                    catId
+                });
+            }
+
+            /** search by publish */
+            if (!_.isUndefined(publish) && _.isBoolean(publish)) {
+                query['$and'].push({
+                    publish
+                });
+            }
+
+            /** search by date */
+            if (date && !_.isEmpty(date)) {
+                if (date.length === 1) {
+                    query['$and'].push({
+                        startDate: {$lte: new Date(date[0])},
+                        endDate: {$gte: new Date(date[0])}
+                    });
+                } else {
+                    query['$and'].push({
+                        startDate: {$lte: new Date(date[0])},
+                        endDate: {$gte: new Date(date[1])}
+                    });
+                }
+            }
+
+            _.isEmpty(query['$and']) && delete query['$and'];
+            // _.isEmpty(input['$or']) && delete input['$or'];
+
+            /** get polls */
+            const polls = await Polls.paginate(query, {
+                page: req.query.page || 1,
+                limit,
+                populate,
+                sort: {_id: -1}
+            });
+
+            /** show result */
+            return res.json(polls);
+        } catch (error) {
+            return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+        }
+    }
+]
+
+/////////////////////////////////////////////////////////////////////// public
+
+module.exports.answer = [
+    [
+        body('surveyId')
+            .notEmpty().withMessage(_sr['fa'].required.field),
+
+        body('option')
+            .notEmpty().withMessage(_sr['fa'].required.field),
+
+        body('pollToken')
+            .notEmpty().withMessage(_sr['fa'].required.field)
+    ],
+    checkValidations(validationResult),
+    async (req, res) => {
+        try {
+            const {
+                surveyId,
+                option,
+                pollToken
+            } = req.body;
+
+            //// check category
+            const targetPoll = await Polls.findById(surveyId);
+
+            if (!targetPoll) return res404(res, `نظر سنجی مورد نظر پیدا نشد`);
+
+            for (const item of option) {
+                targetPoll.answers.push(item);
+            }
+            targetPoll.userIds.push(pollToken);
+
+            await targetPoll.save();
+
+            return res.json({message: _sr['fa'].response.success_save});
+        } catch (error) {
+            return res500(res, `مشکلی در اجرای درخواست شما بوجود آمده است`);
+        }
+    }
+]
+

server/controllers/portalController.js

@@ -0,0 +1,17 @@
+const portals = require('../plugins/portals');
+const {_sr} = require('../plugins/serverResponses');
+const {res404, res500, hasWhiteSpaces, isLatinCharactersWithSymbol, generateRandomDigits} = require('../plugins/controllersHelperFunctions');
+
+/** @todo add show in footer */
+/////////////////////////////////////////////////////////////////////// admin
+module.exports.getAll = [
+  async (req, res) => {
+    try {
+      var result = portals.filter((item) => req.user.portals.includes(item.value));
+      return res.json(result);
+    } catch (error) {
+      return res500(res , error.message);
+    }
+  }
+]
+

server/controllers/servicesController.js

@@ -0,0 +1,542 @@
+const Slider = require('../models/Slider');
+const {
+  body,
+  validationResult
+} = require('express-validator');
+const sharp = require('sharp');
+const {
+  _sr
+} = require('../plugins/serverResponses');
+const {
+  res404,
+  res500,
+  hasWhiteSpaces,
+  isLatinCharactersWithSymbol,
+  generateRandomDigits
+} = require('../plugins/controllersHelperFunctions');
+const fs = require('fs');
+
+////// variables
+const profileWidth = 600;
+const profileHeight = 400;
+const profileQuality = 100;
+
+
+/////////////////////////////////////////////////////////////////////// admin
+module.exports.addSlider = [
+  [
+    body('title')
+    .notEmpty().withMessage(_sr['fa'].required.title),
+
+    body('summaryTitle')
+    .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('url')
+    .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('index')
+    .optional().isNumeric().withMessage(_sr['fa'].format.number),
+
+    body('isLocal')
+      .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    body('siteMap')
+    .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    body('modelType')
+    .custom((value, {
+      req
+    }) => {
+      if (req.user.portals.join() === portal.join()) {
+        if (!portal.includes(value)) {
+          return Promise.reject(_sr['fa'].required.field);
+        } else {
+          return true
+        }
+      } else {
+        return true
+      }
+    })
+  ],
+  async (req, res) => {
+
+    const errors = validationResult(req)
+    if (!errors.isEmpty()) return res.status(422).json({
+      validation: errors.mapped()
+    });
+
+    try {
+      var {
+        title,
+        summaryTitle,
+        isLocal,
+        url,
+        index,
+        siteMap,
+        modelType,
+      } = req.body;
+
+      /** set portals */
+      modelType = (req.user.portals.join() === portal.join()) ? modelType : req.user.portals[0];
+
+      const sliderData = {
+        title : title.trim(),
+        summaryTitle : summaryTitle.trim(),
+        url : url.trim(),
+        isLocal,
+        index,
+        siteMap,
+        _creator: req.user._id,
+        _updatedBy: req.user._id,
+        modelType,
+      };
+
+      var createSlider = await Slider.create(sliderData);
+
+      if (!createSlider) {
+        res500(res, `error in add slider to data base`);
+      }
+
+      /**
+       * if we have pic upload to server
+       */
+      if (req.files && req.files.cover) {
+        const image = req.files.cover;
+        if (!_sr.supportedImageFormats.includes(image.mimetype.split('/')[1])) {
+          return res.status(422).json({
+            validation: {
+              cover: {
+                msg: _sr['fa'].format.image
+              }
+            }
+          });
+        }
+        const imageName = `slider_${Date.now()}_${createSlider._id}.${image.mimetype.split('/')[1]}`;
+        try {
+          const target = sharp(image.data)
+          await target
+            .resize(profileWidth, profileHeight, {
+              fit: 'cover'
+            })
+            .jpeg({
+              quality: profileQuality
+            })
+            .toFile(`./static/uploads/images/slider/${imageName}`);
+
+          createSlider.cover = imageName;
+
+          await createSlider.save();
+        } catch (e) {
+          return res500(res, e?.message);
+        }
+      }
+
+
+      /**
+       * show result
+       */
+      return res.json(createSlider);
+    } catch (error) {
+      console.log(error);
+      /**
+       * if we got unkown error show to client
+       */
+      res500(res, error.message);
+    }
+  }
+]
+
+module.exports.updateSlider = [
+  [
+    body('title')
+    .notEmpty().withMessage(_sr['fa'].required.title),
+
+    body('summaryTitle')
+    .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('url')
+    .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('isLocal')
+      .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    body('index')
+    .optional().isNumeric().withMessage(_sr['fa'].format.number),
+
+    body('siteMap')
+    .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    body('modelType')
+    .custom((value, {
+      req
+    }) => {
+      if (req.user.portals.join() === portal.join()) {
+        if (!portal.includes(value)) {
+          return Promise.reject(_sr['fa'].required.field);
+        } else {
+          return true
+        }
+      } else {
+        return true
+      }
+    })
+  ],
+  async (req, res) => {
+    const errors = validationResult(req)
+    if (!errors.isEmpty()) return res.status(422).json({
+      validation: errors.mapped()
+    });
+
+    try {
+
+      /**
+       * get data from input
+       */
+       var {
+        title,
+        summaryTitle,
+        url,
+        isLocal,
+        index,
+        siteMap,
+        modelType,
+      } = req.body;
+
+      /**
+       * get id
+       */
+      var sliderId = req.params.id;
+
+      var targetSlider = await Slider.findOne({
+        _id: sliderId
+      });
+
+      /** check slider exist or not */
+      if (!targetSlider) {
+        return res404(res, `اسلایدر مورد نظر پیدا نشد`);
+      }
+
+      /** check access portal */
+      if (!req.user.portals.includes(targetSlider.modelType)) {
+        return res500(res, `شما اجازه آپدیت این اسلایدر را ندارید`);
+      }
+
+      if (targetSlider.title !== title) {
+        var checkDuppTitle = await Slider.findOne({
+          title: title
+        });
+
+        if (checkDuppTitle) {
+          return res.status(422).json({
+            validation: {
+              title: {
+                msg: _sr['fa'].duplicated.title
+              }
+            }
+          });
+        }
+      }
+
+      /**
+       * if we have pic upload to server
+       */
+      if (req.files && req.files.cover) {
+        const image = req.files.cover;
+        if (!_sr.supportedImageFormats.includes(image.mimetype.split('/')[1])) {
+          return res.status(422).json({
+            validation: {
+              cover: {
+                msg: _sr['fa'].format.image
+              }
+            }
+          });
+        }
+        const imageName = `slider_${Date.now()}_${targetSlider._id}.${image.mimetype.split('/')[1]}`;
+        try {
+          const target = sharp(image.data)
+          await target
+            .resize(profileWidth, profileHeight, {
+              fit: 'cover'
+            })
+            .jpeg({
+              quality: profileQuality
+            })
+            .toFile(`./static/uploads/images/slider/${imageName}`);
+
+          /**
+           * if exist old pic delete it from file
+           */
+          if (targetSlider.cover) {
+            var oldPic = `./static${targetSlider.cover}`;
+
+            if (fs.existsSync(oldPic)) {
+              fs.unlink(oldPic, (err) => {
+                if (err) return res500(res, err?.message);
+              });
+            }
+          }
+
+          targetSlider.cover = imageName;
+        } catch (e) {
+          return res500(res, e?.message);
+        }
+      }
+
+      targetSlider.title = title.trim();
+      targetSlider.summaryTitle = summaryTitle.trim();
+      targetSlider.url = url.trim();
+      targetSlider.isLocal = isLocal
+      targetSlider.index = index;
+      targetSlider.siteMap = siteMap;
+      targetSlider.modelType = modelType;
+
+      await targetSlider.save();
+
+      /**
+       * show result
+       */
+      return res.json(targetSlider);
+
+    } catch (error) {
+      return res500(res, error.message);
+    }
+  }
+]
+
+module.exports.deletOneSlider = [
+  async (req, res) => {
+    try {
+      var sliderId = req.params.id;
+
+      var targetSlider = await Slider.findOne({
+        _id: sliderId
+      });
+
+      /** check slider exist or not */
+      if (!targetSlider) {
+        return res404(res, `اسلایدر مورد نظر پیدا نشد`);
+      }
+
+      /** check access portal */
+      if (!req.user.portals.includes(targetSlider.modelType)) {
+        return res500(res, `شما اجازه حذف این اسلایدر را ندارید`);
+      }
+
+      if (targetSlider.cover) {
+        var oldPic = `./static${targetSlider.cover}`;
+
+        if (fs.existsSync(oldPic)) {
+          fs.unlink(oldPic, (error) => {
+            if (error) return res500(res, error?.message);
+          });
+        }
+      }
+
+      /** delete slider */
+      await targetSlider.deleteOne();
+
+      /**
+       * show result
+       */
+      return res.json(targetSlider);
+
+    } catch (error) {
+      /**
+       * if we got unkown error show to client
+       */
+      res500(res, error);
+    }
+  }
+]
+
+module.exports.getOneSlider = [
+  async (req, res) => {
+    try {
+      var sliderId = req.params.id;
+
+      var findQuery = {
+        _id: sliderId
+      };
+
+      var slider = await Slider.findOne(findQuery);
+
+      if (!slider) {
+        return res404(res, `اسلایدر مورد نظر پیدا نشد`);
+      }
+
+      /** check access portal */
+      if (!req.user.portals.includes(slider.modelType)) {
+        return res.status(403).json({
+          message: `شما اجازه دسترسی به اطلاعات این اسلایدر را ندارید`
+        });
+      }
+
+      /**
+       * show result
+       */
+      return res.json(slider);
+    } catch (error) {
+      /**
+       * if we got unkown error show to client
+       */
+      res500(res, error);
+    }
+  }
+]
+
+module.exports.getAllSliderByAdmin = [
+  async (req, res) => {
+    try {
+
+      var findQuery = {};
+
+      if (req.user.portals.length) {
+        findQuery.modelType = {
+          $in: req.user.portals
+        };
+      }
+
+      /** get all slider */
+      var allSlider = await Slider.find(findQuery).sort({
+        _id: -1
+      });
+
+      /** if null we have error */
+      if (!allSlider) {
+        return res500(res, `مشکلی در گرفتن اطلاعات پیش آمده است`);
+      }
+
+      /** show result to client */
+      return res.json(allSlider);
+    } catch (error) {
+      /** if we have unkown error show it */
+      return res500(res, error?.message);
+    }
+  }
+]
+
+module.exports.search = [
+  async (req, res) => {
+    try {
+      var findQuery = {};
+      findQuery['$and'] = [];
+      findQuery['$or'] = [];
+
+      if (req.user.portals.length) {
+        findQuery.modelType = {
+          $in: req.user.portals
+        };
+      }
+
+      var {
+        term,
+        portals,
+        galleryStatus,
+        publish,
+        galleryType,
+        date
+      } = req.body;
+
+      /** search by term */
+      if (term && !_.isEmpty(term)) {
+        findQuery['$or'].push(
+          {
+            title: {
+              $regex: '.*' + term + '.*'
+            },
+          }
+          );
+      }
+      /** search by galleryType */
+      if (galleryType && !_.isEmpty(galleryType)) {
+        findQuery['$and'].push({
+          galleryType
+        });
+      }
+      /** search by publish */
+      if (!_.isUndefined(publish) && _.isBoolean(publish)) {
+        findQuery['$and'].push({
+          publish
+        });
+      }
+      /** search by portals */
+      if (portals && !_.isEmpty(portals)) {
+        findQuery['$and'].push({
+          modelType: {
+            $in: portals
+          }
+        })
+      }
+      /** search by galleryStatus */
+      if (!_.isUndefined(galleryStatus) && _.isBoolean(galleryStatus)) {
+        findQuery['$and'].push({
+          galleryStatus
+        })
+      }
+
+      /** search by date */
+      if (date && !_.isEmpty(date)) {
+        if(date.length === 1){
+          findQuery['$and'].push({
+            created_at: {
+              $gte: moment(date[0]).startOf('days'),
+              $lt: moment(date[0]).endOf('days')
+            }
+          });
+        }else{
+          findQuery['$and'].push({
+            created_at: {
+              $gte: new Date(date[0]),
+              $lt: new Date(date[1])
+            }
+          });
+        }
+      }
+
+      _.isEmpty(findQuery['$and']) && delete findQuery['$and'];
+      _.isEmpty(findQuery['$or']) && delete findQuery['$or'];
+
+      /** get gallery */
+      var gallery = await Gallery.paginate(findQuery , {page : req.query.page , limit, populate : [{
+        path : '_creator',
+        select : {
+          firstName: 1,
+          lastName: 1,
+          profilePic: 1
+        }
+      }],
+      sort :{
+        created_at: -1
+      }
+    });
+
+      /** show result */
+      return res.json(gallery);
+    } catch (error) {
+      return res500(res ,error?.message)
+    }
+  }
+]
+
+/////////////////////////////////////////////////////////////////////// public
+module.exports.getAllSliderByUser = [
+  async (req, res) => {
+    try {
+      var {
+        portal,
+      } = req.query;
+
+      var findQuery = {};
+
+      var setSort = {index : 1};
+
+      findQuery.modelType = !portal ? 'ostandari' : portal;
+
+      var getSlider = await Slider.find(findQuery).sort(setSort);
+
+      return res.json(getSlider);
+    } catch (error) {
+      return res500(res, error?.message);
+    }
+  }
+]

server/controllers/sliderController.js

@@ -0,0 +1,543 @@
+const Slider = require('../models/Slider');
+const {
+  body,
+  validationResult
+} = require('express-validator');
+const sharp = require('sharp');
+const {
+  _sr
+} = require('../plugins/serverResponses');
+const {
+  res404,
+  res500,
+  hasWhiteSpaces,
+  isLatinCharactersWithSymbol,
+  generateRandomDigits
+} = require('../plugins/controllersHelperFunctions');
+const fs = require('fs');
+
+////// variables
+const profileWidth = 880;
+const profileHeight = 450;
+const profileQuality = 100;
+
+
+/////////////////////////////////////////////////////////////////////// admin
+module.exports.addSlider = [
+  [
+    body('title')
+       .notEmpty().withMessage(_sr['fa'].required.title),
+
+    // body('summaryTitle')
+    //    .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('url')
+       .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('index')
+       .optional().isNumeric().withMessage(_sr['fa'].format.number),
+
+    body('isLocal')
+       .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    body('siteMap')
+       .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    body('modelType')
+       .custom((value, {
+         req
+       }) => {
+         if (req.user.portals.join() === portal.join()) {
+           if (!portal.includes(value)) {
+             return Promise.reject(_sr['fa'].required.field);
+           } else {
+             return true
+           }
+         } else {
+           return true
+         }
+       })
+  ],
+  async (req, res) => {
+
+    const errors = validationResult(req)
+    if (!errors.isEmpty()) return res.status(422).json({
+      validation: errors.mapped()
+    });
+
+    try {
+      var {
+        title,
+        summaryTitle,
+        isLocal,
+        url,
+        index,
+        siteMap,
+        modelType,
+      } = req.body;
+
+      /** set portals */
+      modelType = (req.user.portals.join() === portal.join()) ? modelType : req.user.portals[0];
+
+      const sliderData = {
+        title: title.trim(),
+        summaryTitle: summaryTitle.trim(),
+        url: url.trim(),
+        isLocal,
+        index,
+        siteMap,
+        _creator: req.user._id,
+        _updatedBy: req.user._id,
+        modelType,
+      };
+
+      var createSlider = await Slider.create(sliderData);
+
+      if (!createSlider) {
+        res500(res, `error in add slider to data base`);
+      }
+
+      /**
+       * if we have pic upload to server
+       */
+      if (req.files && req.files.cover) {
+        const image = req.files.cover;
+        if (!_sr.supportedImageFormats.includes(image.mimetype.split('/')[1])) {
+          return res.status(422).json({
+            validation: {
+              cover: {
+                msg: _sr['fa'].format.image
+              }
+            }
+          });
+        }
+        const imageName = `slider_${Date.now()}_${createSlider._id}.${image.mimetype.split('/')[1]}`;
+        try {
+          const target = sharp(image.data)
+          await target
+             .resize(profileWidth, profileHeight, {
+               fit: 'cover'
+             })
+             .jpeg({
+               quality: profileQuality
+             })
+             .toFile(`./static/uploads/images/slider/${imageName}`);
+
+          createSlider.cover = imageName;
+
+          await createSlider.save();
+        } catch (e) {
+          return res500(res, e?.message);
+        }
+      }
+
+
+      /**
+       * show result
+       */
+      return res.json(createSlider);
+    } catch (error) {
+      console.log(error);
+      /**
+       * if we got unkown error show to client
+       */
+      res500(res, error.message);
+    }
+  }
+]
+
+module.exports.updateSlider = [
+  [
+    body('title')
+       .notEmpty().withMessage(_sr['fa'].required.title),
+
+    // body('summaryTitle')
+    //    .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('url')
+       .notEmpty().withMessage(_sr['fa'].required.field),
+
+    body('isLocal')
+       .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    body('index')
+       .optional().isNumeric().withMessage(_sr['fa'].format.number),
+
+    body('siteMap')
+       .optional().isBoolean().withMessage(_sr['fa'].format.boolean),
+
+    body('modelType')
+       .custom((value, {
+         req
+       }) => {
+         if (req.user.portals.join() === portal.join()) {
+           if (!portal.includes(value)) {
+             return Promise.reject(_sr['fa'].required.field);
+           } else {
+             return true
+           }
+         } else {
+           return true
+         }
+       })
+  ],
+  async (req, res) => {
+    const errors = validationResult(req)
+    if (!errors.isEmpty()) return res.status(422).json({
+      validation: errors.mapped()
+    });
+
+    try {
+
+      /**
+       * get data from input
+       */
+      var {
+        title,
+        summaryTitle,
+        url,
+        isLocal,
+        index,
+        siteMap,
+        modelType,
+      } = req.body;
+
+      /**
+       * get id
+       */
+      var sliderId = req.params.id;
+
+      var targetSlider = await Slider.findOne({
+        _id: sliderId
+      });
+
+      /** check slider exist or not */
+      if (!targetSlider) {
+        return res404(res, `اسلایدر مورد نظر پیدا نشد`);
+      }
+
+      /** check access portal */
+      if (!req.user.portals.includes(targetSlider.modelType)) {
+        return res500(res, `شما اجازه آپدیت این اسلایدر را ندارید`);
+      }
+
+      if (targetSlider.title !== title) {
+        var checkDuppTitle = await Slider.findOne({
+          title: title
+        });
+
+        if (checkDuppTitle) {
+          return res.status(422).json({
+            validation: {
+              title: {
+                msg: _sr['fa'].duplicated.title
+              }
+            }
+          });
+        }
+      }
+
+      /**
+       * if we have pic upload to server
+       */
+      if (req.files && req.files.cover) {
+        const image = req.files.cover;
+        if (!_sr.supportedImageFormats.includes(image.mimetype.split('/')[1])) {
+          return res.status(422).json({
+            validation: {
+              cover: {
+                msg: _sr['fa'].format.image
+              }
+            }
+          });
+        }
+        const imageName = `slider_${Date.now()}_${targetSlider._id}.${image.mimetype.split('/')[1]}`;
+        try {
+          const target = sharp(image.data)
+          await target
+             .resize(profileWidth, profileHeight, {
+               fit: 'cover'
+             })
+             .jpeg({
+               quality: profileQuality
+             })
+             .toFile(`./static/uploads/images/slider/${imageName}`);
+
+          /**
+           * if exist old pic delete it from file
+           */
+          if (targetSlider.cover) {
+            var oldPic = `./static${targetSlider.cover}`;
+
+            if (fs.existsSync(oldPic)) {
+              fs.unlink(oldPic, (err) => {
+                if (err) return res500(res, err?.message);
+              });
+            }
+          }
+
+          targetSlider.cover = imageName;
+        } catch (e) {
+          return res500(res, e?.message);
+        }
+      }
+
+      targetSlider.title = title.trim();
+      targetSlider.summaryTitle = summaryTitle.trim();
+      targetSlider.url = url.trim();
+      targetSlider.isLocal = isLocal
+      targetSlider.index = index;
+      targetSlider.siteMap = siteMap;
+      targetSlider.modelType = modelType;
+
+      await targetSlider.save();
+
+      /**
+       * show result
+       */
+      return res.json(targetSlider);
+
+    } catch (error) {
+      return res500(res, error.message);
+    }
+  }
+]
+
+module.exports.deletOneSlider = [
+  async (req, res) => {
+    try {
+      var sliderId = req.params.id;
+
+      var targetSlider = await Slider.findOne({
+        _id: sliderId
+      });
+
+      /** check slider exist or not */
+      if (!targetSlider) {
+        return res404(res, `اسلایدر مورد نظر پیدا نشد`);
+      }
+
+      /** check access portal */
+      if (!req.user.portals.includes(targetSlider.modelType)) {
+        return res500(res, `شما اجازه حذف این اسلایدر را ندارید`);
+      }
+
+      if (targetSlider.cover) {
+        var oldPic = `./static${targetSlider.cover}`;
+
+        if (fs.existsSync(oldPic)) {
+          fs.unlink(oldPic, (error) => {
+            if (error) return res500(res, error?.message);
+          });
+        }
+      }
+
+      /** delete slider */
+      await targetSlider.deleteOne();
+
+      /**
+       * show result
+       */
+      return res.json(targetSlider);
+
+    } catch (error) {
+      /**
+       * if we got unkown error show to client
+       */
+      res500(res, error);
+    }
+  }
+]
+
+module.exports.getOneSlider = [
+  async (req, res) => {
+    try {
+      var sliderId = req.params.id;
+
+      var findQuery = {
+        _id: sliderId
+      };
+
+      var slider = await Slider.findOne(findQuery);
+
+      if (!slider) {
+        return res404(res, `اسلایدر مورد نظر پیدا نشد`);
+      }
+
+      /** check access portal */
+      if (!req.user.portals.includes(slider.modelType)) {
+        return res.status(403).json({
+          message: `شما اجازه دسترسی به اطلاعات این اسلایدر را ندارید`
+        });
+      }
+
+      /**
+       * show result
+       */
+      return res.json(slider);
+    } catch (error) {
+      /**
+       * if we got unkown error show to client
+       */
+      res500(res, error);
+    }
+  }
+]
+
+module.exports.getAllSliderByAdmin = [
+  async (req, res) => {
+    try {
+
+      var findQuery = {};
+
+      if (req.user.portals.length) {
+        findQuery.modelType = {
+          $in: req.user.portals
+        };
+      }
+
+      /** get all slider */
+      var allSlider = await Slider.find(findQuery).sort({
+        index: 1
+      });
+
+      /** if null we have error */
+      if (!allSlider) {
+        return res500(res, `مشکلی در گرفتن اطلاعات پیش آمده است`);
+      }
+
+      /** show result to client */
+      return res.json(allSlider);
+    } catch (error) {
+      /** if we have unkown error show it */
+      return res500(res, error?.message);
+    }
+  }
+]
+
+module.exports.search = [
+  async (req, res) => {
+    try {
+      var findQuery = {};
+      findQuery['$and'] = [];
+      findQuery['$or'] = [];
+
+      if (req.user.portals.length) {
+        findQuery.modelType = {
+          $in: req.user.portals
+        };
+      }
+
+      var {
+        term,
+        portals,
+        galleryStatus,
+        publish,
+        galleryType,
+        date
+      } = req.body;
+
+      /** search by term */
+      if (term && !_.isEmpty(term)) {
+        findQuery['$or'].push(
+           {
+             title: {
+               $regex: '.*' + term + '.*'
+             },
+           }
+        );
+      }
+      /** search by galleryType */
+      if (galleryType && !_.isEmpty(galleryType)) {
+        findQuery['$and'].push({
+          galleryType
+        });
+      }
+      /** search by publish */
+      if (!_.isUndefined(publish) && _.isBoolean(publish)) {
+        findQuery['$and'].push({
+          publish
+        });
+      }
+      /** search by portals */
+      if (portals && !_.isEmpty(portals)) {
+        findQuery['$and'].push({
+          modelType: {
+            $in: portals
+          }
+        })
+      }
+      /** search by galleryStatus */
+      if (!_.isUndefined(galleryStatus) && _.isBoolean(galleryStatus)) {
+        findQuery['$and'].push({
+          galleryStatus
+        })
+      }
+
+      /** search by date */
+      if (date && !_.isEmpty(date)) {
+        if (date.length === 1) {
+          findQuery['$and'].push({
+            created_at: {
+              $gte: moment(date[0]).startOf('days'),
+              $lt: moment(date[0]).endOf('days')
+            }
+          });
+        } else {
+          findQuery['$and'].push({
+            created_at: {
+              $gte: new Date(date[0]),
+              $lt: new Date(date[1])
+            }
+          });
+        }
+      }
+
+      _.isEmpty(findQuery['$and']) && delete findQuery['$and'];
+      _.isEmpty(findQuery['$or']) && delete findQuery['$or'];
+
+      /** get gallery */
+      var gallery = await Gallery.paginate(findQuery, {
+        page: req.query.page, limit, populate: [{
+          path: '_creator',
+          select: {
+            firstName: 1,
+            lastName: 1,
+            profilePic: 1
+          }
+        }],
+        sort: {
+          index: -1
+        }
+      });
+
+      /** show result */
+      return res.json(gallery);
+    } catch (error) {
+      return res500(res, error?.message)
+    }
+  }
+]
+
+/////////////////////////////////////////////////////////////////////// public
+module.exports.getAllSliderByUser = [
+  async (req, res) => {
+    try {
+      let {
+        portal,
+      } = req.query;
+
+      let findQuery = {};
+
+      let setSort = {index: -1};
+
+      findQuery.modelType = !portal ? 'ostandari' : portal;
+
+      let getSlider = await Slider.find(findQuery).sort(setSort);
+
+      return res.json(getSlider);
+    } catch (error) {
+      return res500(res, error?.message);
+    }
+  }
+]

server/controllers/yearBannerController.js

@@ -0,0 +1,142 @@
+const YearBanner = require('../models/YearBanner');
+const {body, validationResult, checkSchema} = require('express-validator');
+const {_sr} = require('../plugins/serverResponses');
+const {res404, res500} = require('../plugins/controllersHelperFunctions');
+const fs = require('fs');
+const sharp = require('sharp');
+
+////// variables
+const yearBannerWidth = 1920
+const yearBannerHeight = 160
+const yearBannerQuality = 100
+
+
+module.exports.updateYearBanner = [
+  checkSchema({
+    iranFlag: {
+      optional: true,
+      isBoolean: true,
+      errorMessage: _sr['fa'].format.boolean
+    }
+  }),
+  async (req, res) => {
+    const errors = validationResult(req)
+    if (!errors.isEmpty()) return res.status(422).json({validation: errors.mapped()});
+
+    try {
+      /**
+       * get data from input
+       */
+      const {
+        iranFlag,
+        electionBtn,
+        hasEmail,
+        hasGPlus,
+        hasTweeter,
+        hasInstagram,
+        email,
+        gPlus,
+        tweeter,
+        instagram
+      } = req.body
+
+      const yearBanner = await YearBanner.findOne();
+
+      let imageName
+      if (req.files?.mainCover) {
+        const image = req.files.mainCover;
+        if (!_sr.supportedImageFormats.includes(image.mimetype.split('/')[1])) {
+          return res.status(422).json({validation: {cover: {msg: _sr['fa'].format.image}}});
+        }
+
+        imageName = `mainPage_cover.jpg`;
+
+        const target = sharp(image.data)
+        await target
+           .resize(yearBannerWidth, yearBannerHeight, {fit: 'cover'})
+           .toFormat('jpg')
+           .jpeg({quality: yearBannerQuality})
+           .toFile(`./static/uploads/images/mainCover/${imageName}`);
+      }
+
+      if (yearBanner) {
+        yearBanner.iranFlag = iranFlag;
+        yearBanner.electionBtn = electionBtn;
+        // footerOptions
+        yearBanner.hasEmail = hasEmail;
+        yearBanner.hasGPlus = hasGPlus;
+        yearBanner.hasTweeter = hasTweeter;
+        yearBanner.hasInstagram = hasInstagram;
+        yearBanner.email = email;
+        yearBanner.gPlus = gPlus;
+        yearBanner.tweeter = tweeter;
+        yearBanner.instagram = instagram;
+
+        if (req.files?.mainCover) yearBanner.mainCover = imageName;
+        yearBanner._updatedBy = req.user._id;
+
+        await yearBanner.save();
+
+        return res.json({message: _sr['fa'].response.success_save});
+      } else {
+        const data = {
+          iranFlag,
+          electionBtn,
+          hasEmail,
+          hasGPlus,
+          hasTweeter,
+          hasInstagram,
+          email,
+          gPlus,
+          tweeter,
+          instagram,
+          _updatedBy: req.user._id
+        }
+        if (req.files?.mainCover) data.mainCover = imageName;
+        await YearBanner.create(data);
+        return res.json({message: _sr['fa'].response.success_save});
+      }
+
+    } catch (error) {
+      return res500(res, `مشکلی در اجرای درخواست پیش آمده است`);
+    }
+  }
+]
+
+module.exports.getYearBanner = [
+  async (req, res) => {
+    try {
+      /**
+       * get getYearBanner
+       */
+      const getYearBanner = await YearBanner.findOne();
+
+      /**
+       * if not exist
+       */
+      if (!getYearBanner) return res.json({
+        mainCover: '',
+        iranFlag: true,
+        electionBtn: true,
+        hasEmail: true,
+        hasGPlus: true,
+        hasTweeter: true,
+        hasInstagram: true,
+        email: '',
+        gPlus: '',
+        tweeter: '',
+        instagram: ''
+      });
+
+      /**
+       * show result
+       */
+      return res.json(getYearBanner);
+    } catch (error) {
+      /**
+       * if we got unkown error show to client
+       */
+      return res500(res, `مشکلی در اجرای درخواست شما پیش آمده است`);
+    }
+  }
+]