Add password change functionality and profile image upload

- Add profile_image field to Profile model with default value
- Update profile edit route to handle profile image file uploads
- Add password change route with validation in auth module
- Create change password template with form
- Update profile template to include image upload with preview
- Add password change link to admin sidebar
- Update homepage to use dynamic profile image from database

init_db.py

@@ -32,7 +32,8 @@ def init_database():
             lead_text="Con oltre 7 Anni di esperienza nello sviluppo di applicazioni web con Python Flask, offro soluzioni complete end-to-end.",
             description_1="La mia doppia specializzazione mi permette di comprendere a fondo l'intero ciclo di vita delle applicazioni, dall'architettura del server fino all'implementazione e al deployment.",
             description_2="Mi piace risolvere problemi complessi e creare soluzioni che siano robuste, scalabili e facili da mantenere.",
-            years_experience=7
+            years_experience=7,
+            profile_image='img/personal.webp'
         )
         db.session.add(profile)
 

models.py

@@ -53,6 +53,7 @@ class Profile(db.Model):
     description_2 = db.Column(db.Text)
     years_experience = db.Column(db.Integer, default=7)
     cv_url = db.Column(db.String(500))
+    profile_image = db.Column(db.String(500), default='img/personal.webp')
     created_at = db.Column(db.DateTime, default=datetime.utcnow)
     updated_at = db.Column(db.DateTime, default=datetime.utcnow, onupdate=datetime.utcnow)
 
@@ -64,7 +65,8 @@ class Profile(db.Model):
             'description_1': self.description_1,
             'description_2': self.description_2,
             'years_experience': self.years_experience,
-            'cv_url': self.cv_url
+            'cv_url': self.cv_url,
+            'profile_image': self.profile_image
         }
 
 

routes/admin.py

@@ -78,12 +78,25 @@ def profile_edit():
         flash('Profilo non trovato.', 'danger')
         return redirect(url_for('admin.profile_manage'))
 
+    # Handle profile image upload
+    profile_image_url = request.form.get('profile_image', profile.profile_image)
+    if 'profile_image_file' in request.files:
+        file = request.files['profile_image_file']
+        if file.filename:
+            uploaded_path = save_uploaded_file(file)
+            if uploaded_path:
+                profile_image_url = uploaded_path
+            else:
+                flash('Formato immagine non valido. Usa: png, jpg, jpeg, gif, webp', 'danger')
+                return redirect(url_for('admin.profile_manage'))
+
     profile.title = request.form.get('title', profile.title)
     profile.lead_text = request.form.get('lead_text', profile.lead_text)
     profile.description_1 = request.form.get('description_1', profile.description_1)
     profile.description_2 = request.form.get('description_2', profile.description_2)
     profile.years_experience = int(request.form.get('years_experience', profile.years_experience))
     profile.cv_url = request.form.get('cv_url', profile.cv_url)
+    profile.profile_image = profile_image_url
 
     db.session.commit()
     flash('Profilo aggiornato con successo!', 'success')

routes/auth.py

@@ -8,7 +8,7 @@ Authentication routes for login/logout
 """
 
 from flask import Blueprint, render_template, request, redirect, url_for, flash
-from flask_login import login_user, logout_user, current_user
+from flask_login import login_user, logout_user, current_user, login_required
 from models import User, db
 from datetime import datetime
 
@@ -60,3 +60,42 @@ def logout():
     logout_user()
     flash('Logout effettuato con successo.', 'info')
     return redirect(url_for('route_home.home'))
+
+
+@route_auth.route('/change-password', methods=['GET', 'POST'])
+@login_required
+def change_password():
+    """Change password page"""
+    if request.method == 'POST':
+        current_password = request.form.get('current_password')
+        new_password = request.form.get('new_password')
+        confirm_password = request.form.get('confirm_password')
+
+        # Validation
+        if not current_password or not new_password or not confirm_password:
+            flash('Tutti i campi sono obbligatori.', 'danger')
+            return render_template('auth/change_password.html')
+
+        # Check current password
+        if not current_user.check_password(current_password):
+            flash('La password attuale non è corretta.', 'danger')
+            return render_template('auth/change_password.html')
+
+        # Check if new passwords match
+        if new_password != confirm_password:
+            flash('Le nuove password non corrispondono.', 'danger')
+            return render_template('auth/change_password.html')
+
+        # Check password length
+        if len(new_password) < 6:
+            flash('La nuova password deve essere di almeno 6 caratteri.', 'danger')
+            return render_template('auth/change_password.html')
+
+        # Update password
+        current_user.set_password(new_password)
+        db.session.commit()
+
+        flash('Password modificata con successo!', 'success')
+        return redirect(url_for('admin.dashboard'))
+
+    return render_template('auth/change_password.html')

templates/admin/base.html

@@ -100,6 +100,9 @@
                 <i class="fas fa-share-alt me-2"></i>Link Social
             </a>
             <hr class="border-white my-3 mx-3">
+            <a href="{{ url_for('auth.change_password') }}" class="{% if request.endpoint == 'auth.change_password' %}active{% endif %}">
+                <i class="fas fa-key me-2"></i>Cambia Password
+            </a>
             <a href="{{ url_for('route_home.home') }}" target="_blank">
                 <i class="fas fa-external-link-alt me-2"></i>Visualizza Sito
             </a>

templates/admin/profile.html

@@ -6,7 +6,7 @@
 {% block content %}
 <div class="card">
     <div class="card-body">
-        <form method="POST" action="{{ url_for('admin.profile_edit') }}">
+        <form method="POST" action="{{ url_for('admin.profile_edit') }}" enctype="multipart/form-data">
             <div class="mb-3">
                 <label for="title" class="form-label">Titolo</label>
                 <input type="text" class="form-control" id="title" name="title"
@@ -40,6 +40,29 @@
                        value="{{ profile.cv_url if profile else '' }}">
             </div>
 
+            <div class="mb-3">
+                <label class="form-label">Immagine di Profilo</label>
+                <div class="row">
+                    <div class="col-md-6">
+                        <label for="profile_image_file" class="form-label text-muted small">Upload Immagine</label>
+                        <input type="file" class="form-control" id="profile_image_file" name="profile_image_file" accept="image/*">
+                        <small class="text-muted">Formati supportati: png, jpg, jpeg, gif, webp (max 16 MB)</small>
+                    </div>
+                    <div class="col-md-6">
+                        <label for="profile_image" class="form-label text-muted small">Oppure inserisci URL manualmente</label>
+                        <input type="text" class="form-control" id="profile_image" name="profile_image"
+                               value="{{ profile.profile_image if profile else '' }}" placeholder="img/personal.webp">
+                        <small class="text-muted">Percorso relativo alla cartella static/</small>
+                    </div>
+                </div>
+                {% if profile and profile.profile_image %}
+                <div class="mt-2">
+                    <small class="text-muted">Immagine attuale:</small><br>
+                    <img src="{{ url_for('static', filename=profile.profile_image) }}" alt="Profile" class="img-thumbnail rounded-circle" style="max-width: 200px; max-height: 200px;">
+                </div>
+                {% endif %}
+            </div>
+
             <div class="d-flex gap-2">
                 <button type="submit" class="btn btn-gradient">
                     <i class="fas fa-save me-2"></i>Salva Modifiche

templates/auth/change_password.html

@@ -0,0 +1,57 @@
+{% extends "admin/base.html" %}
+
+{% block title %}Cambia Password{% endblock %}
+{% block page_title %}Cambia Password{% endblock %}
+
+{% block content %}
+<div class="row justify-content-center">
+    <div class="col-md-6">
+        <div class="card">
+            <div class="card-body">
+                <div class="text-center mb-4">
+                    <i class="fas fa-key fa-3x text-primary mb-3"></i>
+                    <p class="text-muted">Inserisci la tua password attuale e la nuova password</p>
+                </div>
+
+                <form method="POST" action="{{ url_for('auth.change_password') }}">
+                    <div class="mb-3">
+                        <label for="current_password" class="form-label">
+                            <i class="fas fa-lock me-2"></i>Password Attuale *
+                        </label>
+                        <input type="password" class="form-control" id="current_password" name="current_password" required autofocus>
+                    </div>
+
+                    <div class="mb-3">
+                        <label for="new_password" class="form-label">
+                            <i class="fas fa-key me-2"></i>Nuova Password *
+                        </label>
+                        <input type="password" class="form-control" id="new_password" name="new_password" required minlength="6">
+                        <small class="text-muted">Minimo 6 caratteri</small>
+                    </div>
+
+                    <div class="mb-3">
+                        <label for="confirm_password" class="form-label">
+                            <i class="fas fa-check-circle me-2"></i>Conferma Nuova Password *
+                        </label>
+                        <input type="password" class="form-control" id="confirm_password" name="confirm_password" required minlength="6">
+                    </div>
+
+                    <div class="d-flex gap-2">
+                        <button type="submit" class="btn btn-gradient">
+                            <i class="fas fa-save me-2"></i>Cambia Password
+                        </button>
+                        <a href="{{ url_for('admin.dashboard') }}" class="btn btn-outline-secondary">
+                            <i class="fas fa-times me-2"></i>Annulla
+                        </a>
+                    </div>
+                </form>
+            </div>
+        </div>
+
+        <div class="alert alert-info mt-3">
+            <i class="fas fa-info-circle me-2"></i>
+            <strong>Nota:</strong> Dopo aver cambiato la password, verrai reindirizzato alla dashboard.
+        </div>
+    </div>
+</div>
+{% endblock %}

templates/index.html

@@ -19,7 +19,7 @@
                 </div>
                 <div class="col-lg-6 d-flex justify-content-center animate__animated animate__fadeInRight">
                     <div class="text-center">
-                        <img src="{{ url_for('static', filename='img/personal.webp') }}" alt="Profile" class="img-fluid rounded-circle shadow" style="max-width: 350px;">
+                        <img src="{{ url_for('static', filename=profile.profile_image if profile and profile.profile_image else 'img/personal.webp') }}" alt="Profile" class="img-fluid rounded-circle shadow" style="max-width: 350px;">
                     </div>
                 </div>
             </div>