fix backend output format

fix user profile button disabled status
read secret key from config.json
2022-06-12 18:01:30 +08:00 · 2022-06-12 18:00:58 +08:00 · 2022-06-12 17:17:57 +08:00 · 2022-06-12 17:17:15 +08:00 · 2022-06-12 16:46:19 +08:00 · 2022-06-12 16:39:31 +08:00
84 changed files with 6029 additions and 2278 deletions
--- a/4
+++ b/4
@@ -3,7 +3,7 @@ dist:
 	cd web && npm run build

 linux:
-	go build
+	go build -v -ldflags '-linkmode=external -extldflags=-static' -tags sqlite_omit_load_extension,netgo

 windows:
-	CC=x86_64-w64-mingw32-gcc CGO_ENABLED=1 GOOS=windows GOARCH=amd64 go build
+	CC=x86_64-w64-mingw32-gcc CGO_ENABLED=1 GOOS=windows GOARCH=amd64 go build -v
--- a/README.md
+++ b/README.md
@@ -1,62 +1,47 @@
 # MSW Open Music Project

-## Introduction
-
 A light weight personal music streaming platform.

+## Introduction
+
 ![demo1](demo1.jpg)

-[toc]
+[TOC]

-## TODO
+### What it can do

- Restructure，为多人协作做好准备
+- Traverse the specified folder and index files whose extensions meet the requirements.

-### 前端部分更改
+- Listening network port. Return to the front-end web page and process API requests.

- 修复页面 CSS 溢出问题
- 显示操作执行世界
+- Call ffmpeg to transcode music or video.

-页面数量至少 10 个（目前 5 个），预计添加如下页面
+- Manage files' information in the database, including adding tags, comments, etc.

- 文件详情页，可以修改单个文件的信息
- 文件评论页，可对文件进行评论
- 最新动态页，查看最近播放的曲目、最近的评论
- 登录/注册页，取代现有的 token 逻辑
- FfmpegConfigs 配置页面
- 意见反馈的查看页面
+### What it won't do

-### 后端部分更改
+- Modify your file.

- 返回操作执行时间
+- Read music metadata (for example, composer, album, genre).

- 修复 Prepare 模式转码不完整但仍然被 tmpfs 记录为成功转码的问题
+- Detect file changes (Need to manually update the database).

- FfmpegConfigs 由目前的字典格式改为列表格式
- 为 sqlite3 添加数据库单线程锁
- 添加外键约束
- Update 功能自动检查重复的项目并忽略，只添加新的项目
- Token 验证方法改为 暱称 + 密码 的方法，管理员使用 admin 保留关键字作为暱称。
+## ER Diagram

-需要 8 个 entities 和 6 个 relationship，目前有 3 个 entities，和 1 个 relationship
+Entities Relationship Diagram

-目前有
+![ER Diagram](erdiagram.png)

- files 文件表，数量 50,000
- folders 文件夹表，数量 3,000
- feedbacks 反馈留言表
+- `avatar` entity may change in future rc version.

-计划添加
+- The first time you run the program, the server will create an anonymous user with id 1. All users who are not logged in will be automatically logged in to this account.

- users 用户表
- comments 管理表
- playbacks 播放记录表
- likes 点赞记录表
-
-## 编译 & 构建
+- `tmpfs` is store in memory, which will be empty everytime server restart.

 ## How to build

+Compile software from source code. If you use the pre-compiled version, you don’t need to do this.
+
 ### Build the back-end server

 `make linux` or `make windows`
@@ -73,6 +58,12 @@ To start the development, run `cd web` and `npm start`

 ## Usage

+> Security Warning (v1.2.0-rc1):
+> 
+> The cookie stored in the client browser is encrypted using the environment variable "SESSION_KEY". The server will trust the client's cookie. Leaking this environment variable may cause security problems. This problem will be fixed in a future rc version.
+> 
+> Password is not hashed in database, which will be fixed in next rc version.
+
 Start back-end server. Server will listen on 8080 port.

 Build the font-end web page, then go to <http://127.0.0.1:8080>
@@ -84,6 +75,8 @@ By default:

 ### Run back-end server

+> Token authencation no longer support in v1.2.0 stable version.
+
 Configuration file is  `config.json`， **Please modify your `token`** 。

 Default `ffmpeg_threads` is 1. Seems value larger than 1 will not increase the audio encode speed.
@@ -102,9 +95,15 @@ Default `ffmpeg_threads` is 1. Seems value larger than 1 will not increase the a

 Open your web browser to <http://127.0.0.1:8080> you will see the web pages.

+### Setup the first admin account
+
+The first administrator account will be active automatically, other administrator accounts need active manually.
+
+Go to register page, select the role to admin, and register the first admin account.
+
 ## About tmpfs

-If the `Prepare` mode is enabled in the font-wed player, back-end server will convert the whole file into the temporary folder, then serve file using native method. This can avoid ffmpeg pipe break problem cause by unstable network connection while streaming audio.
+If the `Prepare` mode is enabled in the font-wed player, back-end server will convert the whole file into the temporary folder, then serve file using native method. This cqan avoid ffmpeg pipe break problem cause by unstable network connection while streaming audio.

 The default temporary folder is `/tmp`, which is a `tmpfs` file system in Linux operating system. Default life time for temporary files is 600 seconds (10 minutes). If the temporary file is not accessed for more than this time, back-end server will delete this file.

@@ -112,11 +111,10 @@ The default temporary folder is `/tmp`, which is a `tmpfs` file system in Linux

 - `v1.0.0` First version. Ready to use in production environment.
 - `v1.1.0` Use `React` to rewrite the font-end web pages (Previous using `Vue`).
+- `v1.2.0` Add user, tag, review, video functions for DBMS course work.

 ## Back-end API references

-API named `stream` means it transfer data using `io.Copy`, which **DO NOT** support continue getting a partially-downloaded audio.
-
 API does not need to respond any data will return the following JSON object.

 ```json
@@ -125,296 +123,50 @@ API does not need to respond any data will return the following JSON object.
 }
 ```

-### Anonymous API
-
-Anonymous API can be called by anonymous.
-
- `/api/v1/hello` Just for test purpose.
-
- `/api/v1/get_file` Get a file with `stream` mode.
-
-  - Request example
+Sometime errors happen, server will return the following JSON object, which `error` is the detailed error message.

 ```json
 {
-        "id": 123
+    "error": "Wrong password"
 }
 ```

- `/api/v1/get_file_direct` Get a file with standart `http` methods, implement by `http.ServeFile` method.
+API does not need to send any data should use `GET` method, otherwise use `POST` method.

-  - Request example
+Server use cookies to authencate a user. Any request without cookies will be consider from an anonymouse user.

-    `/api/v1/get_file_direct?id=30`
+Some import source code file:

- `/api/v1/search_files` Search files by filename.
+- `pkg/api/api.go` define URL

-  - Request example
+- `pkg/database/sql_stmt.go` define SQL queries and do the init job.

-    ```json
-    {
-        "filename": "miku",
-        "limit": 10,
-        "offset" 0
-    }
-    ```
+- `pkg/database/struct.go` define JSON structures for database entities.

-    Search all files' name like `%miku%`. `%` is the wildcard in SQL. For example, `"filename": "miku%hatsune"` can match `hatsune miku`.
+## Font-end web pages

-    `limit` Numbers of files in the respond. Should be within 1 - 10;
+- `/#/` Get random files.

-    `offset` It is the offset of the result, related to the page turning function.
+- `/#/files` Search files.

-  - Respond example
+- `/#/files/39` Information of the which id is 39.

-    ```json
-    {
-        "files": [
-            {
-                "id": 30,
-                "folder_id": 100,
-                "folder_name": "wonderful",
-                "filename": "memories.flac",
-                "filesize": 1048576
-            },
-            {
-                "id": 31,
-                "folder_id": 100,
-                "folder_name": "wonderful",
-                "filename": "memories (instrunment).flac",
-                "filesize": 1248531
-            }
-        ]
-    }
-    ```
+- `/#/files/39/review` Reviews of the file with file id 39.

-    `id` Identification of file.
+- `/#/files/39/share` Share page with the file id 39.

-    `folder_id` Identification of folder.
+- `/#/folders` Search folders.

-    `foldername` Folder name where the file in.
+- `/#/folders/2614` Files in folder which id is 2614.

-    `filename` File name.
+- `/#/manage` Manage page.

-    `filesize` File size, unit is byte.
+- `/#/manage/users` List users.

- `/api/v1/search_folders` Search folders.
+- `/#/manage/users/1` Information of user whose id is 1.

-  - Request example.
+- `/#/manage/tags` List tags.

-    ```json
-    {
-        "foldername": "miku",
-        "limit": 10,
-        "offset": 0,
-    }
-    ```
+- `/#/manage/tags/1` Information of tag which id is 1.

-    Search all folders' name like `%miku%`. `%` is the wildcard in SQL. For example, `"filename": "miku%hatsune"` can match `hatsune miku`.
-
-    `limit` Numbers of files in the respond. Should be within 1 - 10;
-
-    `offset` It is the offset of the result, related to the page turning function.
-
-  - Respond example
-
-    ```json
-    {
-        "folders": [
-            {
-                "id": 100,
-                "foldername": "folder name"
-            },
-            {
-                "id": 101,
-                "foldername": "folder name (another)"
-            }
-        ]
-    }
-    ```
-
-    `id` Identification of folder.
-
-    `foldername` Folder name.
-
- `/api/v1/get_files_in_folder` Get files in a specify folder.
-
-  - Request example.
-
-    ```json
-    {
-        "folder_id": 123,
-        "limit": 10,
-        "offset": 0
-    }
-    ```
-
-  - Respond example.
-
-    Same with `/api/v1/search_files`
-
- `/api/v1/get_random_files` Randomly get 10 files.
-
-  - Request example.
-
-    GET `/api/v1/get_random_files`
-
-  - Respond example.
-
-    Same with `/api/v1/search_files`
-
- `/api/v1/get_file_stream`
-
-  Stream file with a ffmpeg config name.
-
-  - Request example.
-
-    GET `/api/v1/get_file_stream?id=123&config=OPUS%20128k`
-
- `/api/v1/get_ffmpeg_config_list`
-
-  Get ffmpeg config list
-
-  - Request example
-
-    GET `/api/v1/get_ffmpeg_config_list`
-
-  - Respond example
-
-    ```json
-    {
-        "ffmpeg_config_list": [
-            {"name": "OPUS 256k", "args": "-c:a libopus -ab 256k"},
-            {"name": "WAV", "args": "-c:a wav"}
-        ]
-    }
-    ```
-
- `/api/v1/feedback` Send a feedback.
-
-  - Request example
-
-    ```json
-    {
-        "feedback": "some suggestions..."
-    }
-    ```
-
-  - Respond OK.
-
- `/api/v1/get_file_info` Get information of a specify file.
-
-  - Request example.
-
-    ```json
-    {
-        "ID": 123
-    }
-    ```
-
-  - Respond example.
-
-    ```json
-    {
-        "id": 30,
-        "folder_id": 100,
-        "folder_name": "wonderful",
-        "filename": "memories.flac",
-        "filesize": 1048576
-    },
-    ```
-
- `/api/v1/get_file_stream_direct` Get a ffmpeg converted file with native http method. This API support continue getting a partially-downloaded audio. Note, you should call `/api/v1/prepare_file_stream_direct` first and wait for its respond, then call this API.
-
-  - Request example
-
-    GET `/api/v1/get_file_stream_direct?id=123&config=OPUS%20128k`
-
- `/api/v1/prepare_file_stream_direct` Ask server to convert a file with specific ffmpeg config name. When the conver process is finished, server will reply with the converted file size.
-
-  - Request example
-
-    ```json
-    {
-        "id": 123,
-        "config_name": "OPUS 128k"
-    }
-    ```
-
-  - Respond example
-
-    ```json
-    {
-        "filesize": 1973241
-    }
-    ```
-
-### API needs token
-
- `/api/v1/walk` Walk directory, add all files and folders to database.
-
-  - Request example
-
-    ```json
-    {
-        "token": "your token",
-        "root": "/path/to/root",
-        "pattern": [".wav", ".flac"]
-    }
-    ```
-
-    `token` The token in `config.json` file.
-
-    `root` Root directory server will walk throught
-
-    `pattern` A list of pattern that files ends with. Only files matched a pattern in list will be add to database.
-
-  - Respond OK
-
- `/api/v1/reset` Rest the **files and folders table**
-
-  - Request example
-
-    ```json
-    {
-        "token": "your token"
-    }
-    ```
-
-  - Respond OK
-
- `/api/v1/add_ffmpeg_config` Add ffmpeg config.
-
-  Will be changed in future.
-
-  - Request example
-
-    ```json
-    {
-        "token": "your token",
-        "name": "OPUS",
-        "ffmpeg_config": {
-            "args": "-c:a libopus -ab 256k"
-        }
-    }
-    ```
-
-    `name` Name of the ffmpeg config.
-
-    `ffmpeg_config`
-
-    `args`
-
-  - Respond OK
-
-## Font-end API references
-
-Currently only few APIs in font-end.
-
- `/#/share/39`
-
-  Share a specific file.
-
- `/#/search-folders/2614`
-
-  Show files in a specific folder.
+- `/#/manage/feedbacks` List feedbacks.
--- a/config.json
+++ b/config.json
@@ -1,18 +1,44 @@
 {
  "api": {
+    "secret": "CHANGE_YOUR_SECRET_HERE",
    "database_name": "music.sqlite3",
+    "single_thread": true,
    "addr": ":8080",
-		"token": "!! config your very strong token here !!",
    "ffmpeg_threads": 1,
    "ffmpeg_config_list": [
-			{"name": "OPUS 128k", "args": "-c:a libopus -ab 128k"},
-			{"name": "OPUS 96k", "args": "-c:a libopus -ab 96k"},
-			{"name": "OPUS 256k", "args": "-c:a libopus -ab 256k"},
-			{"name": "OPUS 320k", "args": "-c:a libopus -ab 320k"},
-			{"name": "OPUS 512k", "args": "-c:a libopus -ab 512k"},
-			{"name": "AAC 128k", "args": "-c:a aac -ab 128k"},
-			{"name": "AAC 256k", "args": "-c:a aac -ab 256k"},
-			{"name": "全损音质 32k", "args": "-c:a libopus -ab 32k"}
+      {
+        "name": "WEBM OPUS 128k",
+        "args": "-c:a libopus -ab 128k -vn",
+        "format": "webm"
+      },
+      {
+        "name": "WEBM OPUS 96k",
+        "args": "-c:a libopus -ab 96k -vn",
+        "format": "webm"
+      },
+      {
+        "name": "WEBM OPUS 256k",
+        "args": "-c:a libopus -ab 256k -vn",
+        "format": "webm"
+      },
+      {
+        "name": "WEBM OPUS 512k",
+        "args": "-c:a libopus -ab 512k -vn",
+        "format": "webm"
+      },
+      {
+        "name": "AAC 128k",
+        "args": "-c:a aac -ab 128k -vn",
+        "format": "adts"
+      },
+      {
+        "name": "AAC 256k",
+        "args": "-c:a aac -ab 256k -vn",
+        "format": "adts"
+      },
+      { "name": "MP3 128k", "args": "-c:a mp3 -ab 128k -vn", "format": "mp3" },
+      { "name": "MP3 320k", "args": "-c:a mp3 -ab 320k -vn", "format": "mp3" },
+      { "name": "全损音质 8k", "args": "-c:a libopus -ab 8k -vn", "format": "webm" }
    ]
  },
  "tmpfs": {
--- a/Diagram.drawio
+++ b/Diagram.drawio
--- a/erdiagram.png
+++ b/erdiagram.png
--- a/go.mod
+++ b/go.mod
@@ -2,4 +2,7 @@ module msw-open-music

 go 1.16

-require github.com/mattn/go-sqlite3 v1.14.7 // indirect
+require (
+	github.com/gorilla/sessions v1.2.1
+	github.com/mattn/go-sqlite3 v1.14.7
+)
--- a/go.sum
+++ b/go.sum
@@ -1,2 +1,6 @@
+github.com/gorilla/securecookie v1.1.1 h1:miw7JPhV+b/lAHSXz4qd/nN9jRiAFV5FwjeKyCS8BvQ=
+github.com/gorilla/securecookie v1.1.1/go.mod h1:ra0sb63/xPlUeL+yeDciTfxMRAA+MP+HVt/4epWDjd4=
+github.com/gorilla/sessions v1.2.1 h1:DHd3rPN5lE3Ts3D8rKkQ8x/0kqfeNmBAaiSi+o7FsgI=
+github.com/gorilla/sessions v1.2.1/go.mod h1:dk2InVEVJ0sfLlnXv9EAgkf6ecYs/i80K/zI+bUmuGM=
 github.com/mattn/go-sqlite3 v1.14.7 h1:fxWBnXkxfM6sRiuH3bqJ4CfzZojMOLVc0UTsTglEghA=
 github.com/mattn/go-sqlite3 v1.14.7/go.mod h1:NyWgC/yNuGj7Q9rpYnZvas74GogHl5/Z4A/KQRfk6bU=
--- a/internal/pkg/api/api.go
+++ b/internal/pkg/api/api.go
@@ -1,750 +0,0 @@
-package api
-
-import (
-	"bytes"
-	"encoding/json"
-	"errors"
-	"io"
-	"log"
-	"msw-open-music/internal/pkg/database"
-	"msw-open-music/internal/pkg/tmpfs"
-	"net/http"
-	"os"
-	"os/exec"
-	"strconv"
-	"strings"
-	"time"
-)
-
-type API struct {
-	Db *database.Database
-	Server http.Server
-	token string
-	APIConfig APIConfig
-	Tmpfs *tmpfs.Tmpfs
-}
-
-type FfmpegConfigList struct {
-	FfmpegConfigList []FfmpegConfig `json:"ffmpeg_config_list"`
-}
-
-type AddFfmpegConfigRequest struct {
-	Token string `json:"token"`
-	Name string `json:"name"`
-	FfmpegConfig FfmpegConfig `json:"ffmpeg_config"`
-}
-
-type FfmpegConfig struct {
-	Name string `json:"name"`
-	Args string `json:"args"`
-}
-
-type Status struct {
-	Status string `json:"status,omitempty"`
-}
-var ok Status = Status{
-	Status: "OK",
-}
-
-type WalkRequest struct {
-	Token string `json:"token"`
-	Root string `json:"root"`
-	Pattern []string `json:"pattern"`
-}
-
-type ResetRequest struct {
-	Token string `json:"token"`
-}
-
-type SearchFilesRequest struct {
-	Filename string `json:"filename"`
-	Limit int64 `json:"limit"`
-	Offset int64 `json:"offset"`
-}
-
-type SearchFoldersRequest struct {
-	Foldername string `json:"foldername"`
-	Limit int64 `json:"limit"`
-	Offset int64 `json:"offset"`
-}
-
-type SearchFilesResponse struct {
-	Files []database.File `json:"files"`
-}
-
-type SearchFoldersResponse struct {
-	Folders []database.Folder `json:"folders"`
-}
-
-type GetFilesInFolderRequest struct {
-	Folder_id int64 `json:"folder_id"`
-	Limit int64 `json:"limit"`
-	Offset int64 `json:"offset"`
-}
-
-type GetFilesInFolderResponse struct {
-	Files *[]database.File `json:"files"`
-}
-
-type GetRandomFilesResponse struct {
-	Files *[]database.File `json:"files"`
-}
-
-func (api *API) HandleGetRandomFiles(w http.ResponseWriter, r *http.Request) {
-	files, err := api.Db.GetRandomFiles(10);
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-	getRandomFilesResponse := &GetRandomFilesResponse{
-		Files: &files,
-	}
-	log.Println("[api] Get random files")
-	json.NewEncoder(w).Encode(getRandomFilesResponse)
-}
-
-func (api *API) HandleGetFilesInFolder(w http.ResponseWriter, r *http.Request) {
-	getFilesInFolderRequest := &GetFilesInFolderRequest{
-		Folder_id: -1,
-	}
-
-	err := json.NewDecoder(r.Body).Decode(getFilesInFolderRequest)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	// check empyt
-	if getFilesInFolderRequest.Folder_id < 0 {
-		api.HandleErrorString(w, r, `"folder_id" can't be none or negative`)
-		return
-	}
-
-	files, err := api.Db.GetFilesInFolder(getFilesInFolderRequest.Folder_id, getFilesInFolderRequest.Limit, getFilesInFolderRequest.Offset)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	getFilesInFolderResponse := &GetFilesInFolderResponse{
-		Files: &files,
-	}
-
-	log.Println("[api] Get files in folder", getFilesInFolderRequest.Folder_id)
-
-	json.NewEncoder(w).Encode(getFilesInFolderResponse)
-}
-
-func (api *API) CheckToken(w http.ResponseWriter, r *http.Request, token string) (error) {
-	if token != api.token {
-		err := errors.New("token not matched")
-		log.Println("[api] [Warning] Token not matched", token)
-		api.HandleErrorCode(w, r, err, 403)
-		return err
-	}
-	log.Println("[api] Token passed")
-	return nil
-}
-
-func (api *API) HandleError(w http.ResponseWriter, r *http.Request, err error) {
-	api.HandleErrorString(w, r, err.Error())
-}
-
-func (api *API) HandleErrorCode(w http.ResponseWriter, r *http.Request, err error, code int) {
-	api.HandleErrorStringCode(w, r, err.Error(), code)
-}
-
-func (api *API) HandleErrorString(w http.ResponseWriter, r *http.Request, errorString string) {
-	api.HandleErrorStringCode(w, r, errorString, 500)
-}
-
-func (api *API) HandleErrorStringCode(w http.ResponseWriter, r *http.Request, errorString string, code int) {
-	log.Println("[api] [Error]", code, errorString)
-	errStatus := &Status{
-		Status: errorString,
-	}
-	w.WriteHeader(code)
-	json.NewEncoder(w).Encode(errStatus)
-}
-
-func (api *API) HandleReset(w http.ResponseWriter, r *http.Request) {
-	resetRequest := &ResetRequest{}
-	err := json.NewDecoder(r.Body).Decode(resetRequest)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	// check token
-	err = api.CheckToken(w, r, resetRequest.Token)
-	if err != nil {
-		return
-	}
-
-	// reset
-	err = api.Db.ResetFiles()
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-	err = api.Db.ResetFolder()
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	api.HandleStatus(w, r, "Database reseted")
-}
-
-func (api *API) HandleWalk(w http.ResponseWriter, r *http.Request) {
-	walkRequest := &WalkRequest{}
-	err := json.NewDecoder(r.Body).Decode(walkRequest)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	// check token match
-	err = api.CheckToken(w, r, walkRequest.Token)
-	if err != nil {
-		return
-	}
-
-	// check root empty
-	if walkRequest.Root == "" {
-		api.HandleErrorString(w, r, `key "root" can't be empty`)
-		return
-	}
-
-	// check pattern empty
-	if len(walkRequest.Pattern) == 0 {
-		api.HandleErrorString(w, r, `"[]pattern" can't be empty`)
-		return
-	}
-
-	// walk
-	err = api.Db.Walk(walkRequest.Root, walkRequest.Pattern)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	api.HandleStatus(w, r, "Database udpated")
-}
-
-func (api *API) HandleOK(w http.ResponseWriter, r *http.Request) {
-	json.NewEncoder(w).Encode(&ok)
-}
-
-func (api *API) HandleStatus(w http.ResponseWriter, r *http.Request, status string) {
-	s := &Status{
-		Status: status,
-	}
-
-	json.NewEncoder(w).Encode(s)
-}
-
-func (api *API) HandleSearchFiles(w http.ResponseWriter, r *http.Request) {
-	searchFilesRequest := &SearchFilesRequest{}
-	err := json.NewDecoder(r.Body).Decode(searchFilesRequest)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	// check empty
-	if searchFilesRequest.Filename == "" {
-		api.HandleErrorString(w, r, `"filename" can't be empty`)
-		return
-	}
-	if api.CheckLimit(w, r, searchFilesRequest.Limit) != nil {
-		return
-	}
-
-	searchFilesResponse := &SearchFilesResponse{}
-
-	searchFilesResponse.Files, err = api.Db.SearchFiles(searchFilesRequest.Filename, searchFilesRequest.Limit, searchFilesRequest.Offset)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	log.Println("[api] Search files", searchFilesRequest.Filename, searchFilesRequest.Limit, searchFilesRequest.Offset)
-
-	json.NewEncoder(w).Encode(searchFilesResponse)
-}
-
-func (api *API) CheckLimit(w http.ResponseWriter, r *http.Request, limit int64) (error) {
-	if limit <= 0 || limit > 10 {
-		log.Println("[api] [Warning] Limit error", limit)
-		err := errors.New(`"limit" can't be zero or more than 10`)
-		api.HandleError(w, r, err)
-		return err
-	}
-	return nil
-}
-
-func (api *API) HandleSearchFolders(w http.ResponseWriter, r *http.Request) {
-	searchFoldersRequest := &SearchFoldersRequest{}
-	err := json.NewDecoder(r.Body).Decode(searchFoldersRequest)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	// check empty
-	if searchFoldersRequest.Foldername == "" {
-		api.HandleErrorString(w, r, `"foldername" can't be empty`)
-		return
-	}
-	if api.CheckLimit(w, r, searchFoldersRequest.Limit) != nil {
-		return
-	}
-
-	searchFoldersResponse := &SearchFoldersResponse{}
-
-	searchFoldersResponse.Folders, err = api.Db.SearchFolders(searchFoldersRequest.Foldername, searchFoldersRequest.Limit, searchFoldersRequest.Offset)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	log.Println("[api] Search folders", searchFoldersRequest.Foldername, searchFoldersRequest.Limit, searchFoldersRequest.Offset)
-
-	json.NewEncoder(w).Encode(searchFoldersResponse)
-}
-
-type GetFileRequest struct {
-	ID int64 `json:"id"`
-}
-
-func (api *API) HandleGetFileInfo(w http.ResponseWriter, r *http.Request) {
-	getFileRequest := &GetFileRequest{
-		ID: -1,
-	}
-
-	err := json.NewDecoder(r.Body).Decode(getFileRequest)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	// check empty
-	if getFileRequest.ID < 0 {
-		api.HandleErrorString(w, r, `"id" can't be none or negative`)
-		return
-	}
-
-	file, err := api.Db.GetFile(getFileRequest.ID)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	err = json.NewEncoder(w).Encode(file)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-}
-
-func (api *API) CheckGetFileStream(w http.ResponseWriter, r *http.Request) (error) {
-	var err error
-	q := r.URL.Query()
-	ids := q["id"]
-	if len(ids) == 0 {
-		err = errors.New(`parameter "id" can't be empty`)
-		api.HandleError(w, r, err)
-		return err
-	}
-	_, err = strconv.Atoi(ids[0])
-	if err != nil {
-		err = errors.New(`parameter "id" should be an integer`)
-		api.HandleError(w, r, err)
-		return err
-	}
-	configs := q["config"]
-	if len(configs) == 0 {
-		err = errors.New(`parameter "config" can't be empty`)
-		api.HandleError(w, r, err)
-		return err
-	}
-	return nil
-}
-
-func (api *API) GetFfmpegConfig(configName string) (FfmpegConfig, bool) {
-	ffmpegConfig := FfmpegConfig{}
-	for _, f := range api.APIConfig.FfmpegConfigList {
-		if f.Name == configName {
-			ffmpegConfig = f
-		}
-	}
-	if ffmpegConfig.Name == "" {
-		return ffmpegConfig, false
-	}
-	return ffmpegConfig, true
-}
-
-func (api *API) HandleGetFileStream(w http.ResponseWriter, r *http.Request) {
-	err := api.CheckGetFileStream(w, r)
-	if err != nil {
-		return
-	}
-	q := r.URL.Query()
-	ids := q["id"]
-	id, err := strconv.Atoi(ids[0])
-	configs := q["config"]
-	configName := configs[0]
-	file, err := api.Db.GetFile(int64(id))
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	path, err := file.Path()
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	log.Println("[api] Stream file", path, configName)
-
-	ffmpegConfig, ok := api.GetFfmpegConfig(configName)
-	if !ok {
-		api.HandleErrorStringCode(w, r, `ffmpeg config not found`, 404)
-		return
-	}
-	args := strings.Split(ffmpegConfig.Args, " ")
-	startArgs := []string {"-threads", strconv.FormatInt(api.APIConfig.FfmpegThreads, 10), "-i", path}
-	endArgs := []string {"-vn", "-f", "ogg", "-"}
-	ffmpegArgs := append(startArgs, args...)
-	ffmpegArgs = append(ffmpegArgs, endArgs...)
-	cmd := exec.Command("ffmpeg", ffmpegArgs...)
-	cmd.Stdout = w
-	err = cmd.Run()
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-}
-
-type PrepareFileStreamDirectRequest struct {
-	ID int64 `json:"id"`
-	ConfigName string `json:"config_name"`
-}
-
-type PrepareFileStreamDirectResponse struct {
-	Filesize int64 `json:"filesize"`
-}
-
-func (api *API) HandlePrepareFileStreamDirect(w http.ResponseWriter, r *http.Request) {
-	prepareFileStreamDirectRequst := &PrepareFileStreamDirectRequest{
-		ID: -1,
-	}
-	err := json.NewDecoder(r.Body).Decode(prepareFileStreamDirectRequst)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	// check empty
-	if prepareFileStreamDirectRequst.ID < 0 {
-		api.HandleErrorString(w, r, `"id" can't be none or negative`)
-		return
-	}
-	if prepareFileStreamDirectRequst.ConfigName == "" {
-		api.HandleErrorString(w, r, `"config_name" can't be empty`)
-		return
-	}
-
-	file, err := api.Db.GetFile(prepareFileStreamDirectRequst.ID)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-	srcPath, err := file.Path()
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	log.Println("[api] Prepare stream direct file", srcPath, prepareFileStreamDirectRequst.ConfigName)
-	ffmpegConfig, ok := api.GetFfmpegConfig(prepareFileStreamDirectRequst.ConfigName)
-	if !ok {
-		api.HandleErrorStringCode(w, r, `ffmpeg config not found`, 404)
-		return
-	}
-	objPath := api.Tmpfs.GetObjFilePath(prepareFileStreamDirectRequst.ID, prepareFileStreamDirectRequst.ConfigName)
-
-	// check obj file exists
-	exists := api.Tmpfs.Exits(objPath)
-	if exists {
-		fileInfo, err := os.Stat(objPath)
-		if err != nil {
-			api.HandleError(w, r, err)
-			return
-		}
-		prepareFileStreamDirectResponse := &PrepareFileStreamDirectResponse{
-			Filesize: fileInfo.Size(),
-		}
-		json.NewEncoder(w).Encode(prepareFileStreamDirectResponse)
-			return
-	}
-
-	api.Tmpfs.Record(objPath)
-	args := strings.Split(ffmpegConfig.Args, " ")
-	startArgs := []string {"-threads", strconv.FormatInt(api.APIConfig.FfmpegThreads, 10), "-i", srcPath}
-	endArgs := []string {"-vn", "-y", objPath}
-	ffmpegArgs := append(startArgs, args...)
-	ffmpegArgs = append(ffmpegArgs, endArgs...)
-	cmd := exec.Command("ffmpeg", ffmpegArgs...)
-	err = cmd.Run()
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	fileInfo, err := os.Stat(objPath)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-	prepareFileStreamDirectResponse := &PrepareFileStreamDirectResponse{
-		Filesize: fileInfo.Size(),
-	}
-	json.NewEncoder(w).Encode(prepareFileStreamDirectResponse)
-}
-
-func (api *API) HandleGetFileStreamDirect(w http.ResponseWriter, r *http.Request) {
-	err := api.CheckGetFileStream(w, r)
-	if err != nil {
-		return
-	}
-	q := r.URL.Query()
-	ids := q["id"]
-	id, err := strconv.Atoi(ids[0])
-	configs := q["config"]
-	configName := configs[0]
-
-	path := api.Tmpfs.GetObjFilePath(int64(id), configName)
-	if api.Tmpfs.Exits(path) {
-		api.Tmpfs.Record(path)
-	}
-
-	log.Println("[api] Get direct cached file", path)
-
-	http.ServeFile(w, r, path)
-}
-
-func (api *API) HandleGetFileDirect(w http.ResponseWriter, r *http.Request) {
-	q := r.URL.Query()
-	ids := q["id"]
-	if len(ids) == 0 {
-		api.HandleErrorString(w, r, `parameter "id" can't be empty`)
-		return
-	}
-	id, err := strconv.Atoi(ids[0])
-	if err != nil {
-		api.HandleErrorString(w, r, `parameter "id" should be an integer`)
-		return
-	}
-	file, err := api.Db.GetFile(int64(id))
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	path, err := file.Path()
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	log.Println("[api] Get direct raw file", path)
-
-	http.ServeFile(w, r, path)
-}
-
-func (api *API) HandleGetFile(w http.ResponseWriter, r *http.Request) {
-	getFileRequest := &GetFileRequest{
-		ID: -1,
-	}
-
-	err := json.NewDecoder(r.Body).Decode(getFileRequest)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	// check empty
-	if getFileRequest.ID < 0 {
-		api.HandleErrorString(w, r, `"id" can't be none or negative`)
-		return
-	}
-
-	file, err := api.Db.GetFile(getFileRequest.ID)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	path, err := file.Path()
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	log.Println("[api] Get pipe raw file", path)
-
-	src, err := os.Open(path)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-	defer src.Close()
-	io.Copy(w, src)
-}
-
-func (api *API) HandleGetFfmpegConfigs(w http.ResponseWriter, r *http.Request) {
-	log.Println("[api] Get ffmpeg config list")
-	ffmpegConfigList:= &FfmpegConfigList{
-		FfmpegConfigList: api.APIConfig.FfmpegConfigList,
-	}
-	json.NewEncoder(w).Encode(&ffmpegConfigList)
-}
-
-func (api *API) HandleAddFfmpegConfig(w http.ResponseWriter, r *http.Request) {
-	addFfmpegConfigRequest := AddFfmpegConfigRequest{}
-	err := json.NewDecoder(r.Body).Decode(&addFfmpegConfigRequest)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	// check token
-	err = api.CheckToken(w, r, addFfmpegConfigRequest.Token)
-	if err != nil {
-		return
-	}
-
-	// check name and args not null
-	if addFfmpegConfigRequest.Name == "" {
-		api.HandleErrorString(w, r, `"ffmpeg_config.name" can't be empty`)
-		return
-	}
-	if addFfmpegConfigRequest.FfmpegConfig.Args == "" {
-		api.HandleErrorString(w, r, `"ffmpeg_config.args" can't be empty`)
-		return
-	}
-
-	log.Println("[api] Add ffmpeg config")
-
-	api.APIConfig.FfmpegConfigList = append(api.APIConfig.FfmpegConfigList, addFfmpegConfigRequest.FfmpegConfig)
-
-	api.HandleOK(w, r)
-}
-
-type FeedbackRequest struct {
-	Feedback string `json:"feedback"`
-}
-
-func (api *API) HandleFeedback(w http.ResponseWriter, r *http.Request) {
-	feedbackRequest := &FeedbackRequest{}
-	err :=json.NewDecoder(r.Body).Decode(feedbackRequest)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-
-	// check empty feedback
-	if feedbackRequest.Feedback == "" {
-		api.HandleErrorString(w, r, `"feedback" can't be empty`)
-		return
-	}
-
-	log.Println("[api] Feedback", feedbackRequest.Feedback)
-
-	headerBuff := &bytes.Buffer{}
-	err = r.Header.Write(headerBuff)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-	header := headerBuff.String()
-
-	err = api.Db.InsertFeedback(time.Now().Unix(), feedbackRequest.Feedback, header)
-	if err != nil {
-		api.HandleError(w, r, err)
-		return
-	}
-	api.HandleOK(w, r)
-}
-
-func NewAPIConfig() (APIConfig) {
-	apiConfig := APIConfig{}
-	return apiConfig
-}
-
-type APIConfig struct {
-	DatabaseName string `json:"database_name"`
-	Addr string `json:"addr"`
-	Token string `json:"token"`
-	FfmpegThreads int64 `json:"ffmpeg_threads"`
-	FfmpegConfigList []FfmpegConfig `json:"ffmpeg_config_list"`
-}
-
-type Config struct {
-	APIConfig APIConfig `json:"api"`
-	TmpfsConfig tmpfs.TmpfsConfig `json:"tmpfs"`
-}
-
-func NewAPI(config Config) (*API, error) {
-	var err error
-
-	apiConfig := config.APIConfig
-	tmpfsConfig := config.TmpfsConfig
-
-	db, err := database.NewDatabase(apiConfig.DatabaseName)
-	if err != nil {
-		return nil, err
-	}
-
-	mux := http.NewServeMux()
-	apiMux := http.NewServeMux()
-
-	api := &API{
-		Db: db,
-		Server: http.Server{
-			Addr: apiConfig.Addr,
-			Handler: mux,
-		},
-		APIConfig: apiConfig,
-	}
-	api.Tmpfs = tmpfs.NewTmpfs(tmpfsConfig)
-
-	// mount api
-	apiMux.HandleFunc("/hello", api.HandleOK)
-	apiMux.HandleFunc("/get_file", api.HandleGetFile)
-	apiMux.HandleFunc("/get_file_direct", api.HandleGetFileDirect)
-	apiMux.HandleFunc("/search_files", api.HandleSearchFiles)
-	apiMux.HandleFunc("/search_folders", api.HandleSearchFolders)
-	apiMux.HandleFunc("/get_files_in_folder", api.HandleGetFilesInFolder)
-	apiMux.HandleFunc("/get_random_files", api.HandleGetRandomFiles)
-	apiMux.HandleFunc("/get_file_stream", api.HandleGetFileStream)
-	apiMux.HandleFunc("/get_ffmpeg_config_list", api.HandleGetFfmpegConfigs)
-	apiMux.HandleFunc("/feedback", api.HandleFeedback)
-	apiMux.HandleFunc("/get_file_info", api.HandleGetFileInfo)
-	apiMux.HandleFunc("/get_file_stream_direct", api.HandleGetFileStreamDirect)
-	apiMux.HandleFunc("/prepare_file_stream_direct", api.HandlePrepareFileStreamDirect)
-	// below needs token
-	apiMux.HandleFunc("/walk", api.HandleWalk)
-	apiMux.HandleFunc("/reset", api.HandleReset)
-	apiMux.HandleFunc("/add_ffmpeg_config", api.HandleAddFfmpegConfig)
-
-	mux.Handle("/api/v1/", http.StripPrefix("/api/v1", apiMux))
-	mux.Handle("/", http.StripPrefix("/", http.FileServer(http.Dir("web/build"))))
-
-	api.token = apiConfig.Token
-
-	return api, nil
-}
--- a/internal/pkg/database/database.go
+++ b/internal/pkg/database/database.go
@@ -1,441 +0,0 @@
-package database
-
-import (
-	"database/sql"
-	"errors"
-	"log"
-	"os"
-	"path/filepath"
-
-	_ "github.com/mattn/go-sqlite3"
-)
-
-var initFilesTableQuery = `CREATE TABLE IF NOT EXISTS files (
-	id INTEGER PRIMARY KEY,
-	folder_id INTEGER NOT NULL,
-	filename TEXT NOT NULL,
-	filesize INTEGER NOT NULL
-);`
-var initFoldersTableQuery = `CREATE TABLE IF NOT EXISTS folders (
-	id INTEGER PRIMARY KEY,
-	folder TEXT NOT NULL,
-	foldername TEXT NOT NULL
-);`
-var initFeedbacksTableQuery = `CREATE TABLE IF NOT EXISTS feedbacks (
-	id INTEGER PRIMARY KEY,
-	time INTEGER NOT NULL,
-	feedback TEXT NOT NULL,
-	header TEXT NOT NULL
-);`
-var insertFolderQuery = `INSERT INTO folders (folder, foldername) VALUES (?, ?);`
-var findFolderQuery = `SELECT id FROM folders WHERE folder = ? LIMIT 1;`
-var insertFileQuery = `INSERT INTO files (folder_id, filename, filesize) VALUES (?, ?, ?);`
-var searchFilesQuery = `SELECT files.id, files.folder_id, files.filename, folders.foldername, files.filesize FROM files JOIN folders ON files.folder_id = folders.id WHERE filename LIKE ? LIMIT ? OFFSET ?;`
-var getFolderQuery = `SELECT folder FROM folders WHERE id = ? LIMIT 1;`
-var dropFilesQuery = `DROP TABLE files;`
-var dropFolderQuery = `DROP TABLE folders;`
-var getFileQuery = `SELECT files.id, files.folder_id, files.filename, folders.foldername, files.filesize FROM files JOIN folders ON files.folder_id = folders.id WHERE files.id = ? LIMIT 1;`
-var searchFoldersQuery = `SELECT id, folder, foldername FROM folders WHERE foldername LIKE ? LIMIT ? OFFSET ?;`
-var getFilesInFolderQuery = `SELECT files.id, files.filename, files.filesize, folders.foldername FROM files JOIN folders ON files.folder_id = folders.id WHERE folder_id = ? LIMIT ? OFFSET ?;`
-var getRandomFilesQuery = `SELECT files.id, files.folder_id, files.filename, folders.foldername, files.filesize FROM files JOIN folders on files.folder_id = folders.id ORDER BY RANDOM() LIMIT ?;`
-var insertFeedbackQuery = `INSERT INTO feedbacks (time, feedback, header) VALUES (?, ?, ?);`
-
-type Database struct {
-	sqlConn *sql.DB
-	stmt *Stmt
-}
-
-type Stmt struct {
-	initFilesTable *sql.Stmt
-	initFoldersTable *sql.Stmt
-	initFeedbacksTable *sql.Stmt
-	insertFolder *sql.Stmt
-	insertFile *sql.Stmt
-	findFolder *sql.Stmt
-	searchFiles *sql.Stmt
-	getFolder *sql.Stmt
-	dropFiles *sql.Stmt
-	dropFolder *sql.Stmt
-	getFile *sql.Stmt
-	searchFolders *sql.Stmt
-	getFilesInFolder *sql.Stmt
-	getRandomFiles *sql.Stmt
-	insertFeedback *sql.Stmt
-}
-
-type File struct {
-	Db *Database `json:"-"`
-	ID int64 `json:"id"`
-	Folder_id int64 `json:"folder_id"`
-	Foldername string `json:"foldername"`
-	Filename string `json:"filename"`
-	Filesize int64 `json:"filesize"`
-}
-
-type Folder struct {
-	Db *Database `json:"-"`
-	ID int64 `json:"id"`
-	Folder string `json:"-"`
-	Foldername string `json:"foldername"`
-}
-
-func (database *Database) InsertFeedback(time int64, feedback string, header string) (error) {
-	_, err := database.stmt.insertFeedback.Exec(time, feedback, header)
-	if err != nil {
-		return err
-	}
-	return nil
-}
-
-func (database *Database) GetRandomFiles(limit int64) ([]File, error) {
-	rows, err := database.stmt.getRandomFiles.Query(limit)
-	if err != nil {
-		return nil, err
-	}
-	defer rows.Close()
-	files := make([]File, 0)
-	for rows.Next() {
-		file := File{
-			Db: database,
-		}
-		err = rows.Scan(&file.ID, &file.Folder_id, &file.Filename, &file.Foldername, &file.Filesize)
-		if err != nil {
-			return nil, err
-		}
-		files = append(files, file)
-	}
-	return files, nil
-}
-
-func (database *Database) GetFilesInFolder(folder_id int64, limit int64, offset int64) ([]File, error) {
-	rows, err := database.stmt.getFilesInFolder.Query(folder_id, limit, offset)
-	if err != nil {
-		return nil, err
-	}
-	defer rows.Close()
-	files := make([]File, 0)
-	for rows.Next() {
-		file := File{
-			Db: database,
-			Folder_id: folder_id,
-		}
-		err = rows.Scan(&file.ID, &file.Filename, &file.Filesize, &file.Foldername)
-		if err != nil {
-			return nil, err
-		}
-		files = append(files, file)
-	}
-	return files, nil
-}
-
-func (database *Database) SearchFolders(foldername string, limit int64, offset int64) ([]Folder, error) {
-	rows, err := database.stmt.searchFolders.Query("%"+foldername+"%", limit, offset)
-	if err != nil {
-		return nil, errors.New("Error searching folders at query " + err.Error())
-	}
-	defer rows.Close()
-	folders := make([]Folder, 0)
-	for rows.Next() {
-		folder := Folder{
-			Db: database,
-		}
-		err = rows.Scan(&folder.ID, &folder.Folder, &folder.Foldername)
-		if err != nil {
-			return nil, errors.New("Error scanning SearchFolders" + err.Error())
-		}
-		folders = append(folders, folder)
-	}
-	return folders, nil
-}
-
-func (database *Database) GetFile(id int64) (*File, error) {
-	file := &File{
-		Db: database,
-	}
-	err := database.stmt.getFile.QueryRow(id).Scan(&file.ID, &file.Folder_id, &file.Filename, &file.Foldername, &file.Filesize)
-	if err != nil {
-		return nil, err
-	}
-	return file, nil
-}
-
-func (database *Database) ResetFiles() (error) {
-	log.Println("[db] Reset files")
-	var err error
-	_, err = database.stmt.dropFiles.Exec()
-	if err != nil {
-		return err
-	}
-	_, err = database.stmt.initFilesTable.Exec()
-	if err != nil {
-		return err
-	}
-	return err
-}
-
-func (database *Database) ResetFolder() (error) {
-	log.Println("[db] Reset folders")
-	var err error
-	_, err = database.stmt.dropFolder.Exec()
-	if err != nil {
-		return err
-	}
-	_, err = database.stmt.initFoldersTable.Exec()
-	if err != nil {
-		return err
-	}
-	return err
-}
-
-func (database *Database) Walk(root string, pattern []string) (error) {
-	patternDict := make(map[string]bool)
-	for _, v := range pattern {
-		patternDict[v] = true
-	}
-	log.Println("[db] Walk", root, patternDict)
-	return filepath.Walk(root, func (path string, info os.FileInfo, err error) (error) {
-		if err != nil {
-			return err
-		}
-
-		if info.IsDir() {
-			return nil
-		}
-
-		// check pattern
-		ext := filepath.Ext(info.Name())
-		if _, ok := patternDict[ext]; !ok {
-			return nil
-		}
-
-		// insert file, folder will aut created
-		err = database.Insert(path, info.Size())
-		if err != nil {
-			return err
-		}
-		return nil
-	})
-}
-
-func (f *File) Path() (string, error) {
-	folder, err := f.Db.GetFolder(f.Folder_id)
-	if err != nil {
-		return "", err
-	}
-	return filepath.Join(folder.Folder, f.Filename), nil
-}
-
-func (database *Database) GetFolder(folderId int64) (*Folder, error) {
-	folder := &Folder{
-		Db: database,
-	}
-	err := database.stmt.getFolder.QueryRow(folderId).Scan(&folder.Folder)
-	if err != nil {
-		return nil, err
-	}
-	return folder, nil
-}
-
-func (database *Database) SearchFiles(filename string, limit int64, offset int64) ([]File, error) {
-	rows, err := database.stmt.searchFiles.Query("%"+filename+"%", limit, offset)
-	if err != nil {
-		return nil, errors.New("Error searching files at query " + err.Error())
-	}
-	defer rows.Close()
-	files := make([]File, 0)
-	for rows.Next() {
-		var file File = File{
-			Db: database,
-		}
-		err = rows.Scan(&file.ID, &file.Folder_id, &file.Filename, &file.Foldername, &file.Filesize)
-		if err != nil {
-			return nil, errors.New("Error scanning SearchFiles " + err.Error())
-		}
-		files = append(files, file)
-	}
-	if err = rows.Err(); err != nil {
-		return nil, errors.New("Error scanning SearchFiles exit without full result" + err.Error())
-	}
-	return files, nil
-}
-
-func (database *Database) FindFolder(folder string) (int64, error) {
-	var id int64
-	err := database.stmt.findFolder.QueryRow(folder).Scan(&id)
-	if err != nil {
-		return 0, err
-	}
-	return id, nil
-}
-
-func (database *Database) InsertFolder(folder string) (int64, error) {
-	result, err := database.stmt.insertFolder.Exec(folder, filepath.Base(folder))
-	if err != nil {
-		return 0, err
-	}
-	lastInsertId, err := result.LastInsertId()
-	if err != nil {
-		return 0, err
-	}
-	return lastInsertId, nil
-}
-
-func (database *Database) InsertFile(folderId int64, filename string, filesize int64) (error) {
-	_, err := database.stmt.insertFile.Exec(folderId, filename, filesize)
-	if err != nil {
-		return err
-	}
-	return nil
-}
-
-func (database *Database) Insert(path string, filesize int64) (error) {
-	folder, filename := filepath.Split(path)
-	folderId, err := database.FindFolder(folder)
-	if err != nil {
-		folderId, err = database.InsertFolder(folder)
-		if err != nil {
-			return err
-		}
-	}
-	err = database.InsertFile(folderId, filename, filesize)
-	if err != nil {
-		return err
-	}
-	return nil
-}
-
-func NewPreparedStatement(sqlConn *sql.DB) (*Stmt, error) {
-	var err error
-
-	stmt := &Stmt{}
-
-	// init files table
-	stmt.initFilesTable, err = sqlConn.Prepare(initFilesTableQuery)
-	if err != nil {
-		return nil, err
-	}
-
-	// init folders table
-	stmt.initFoldersTable, err = sqlConn.Prepare(initFoldersTableQuery)
-	if err != nil {
-		return nil, err
-	}
-
-	// init feedbacks tables
-	stmt.initFeedbacksTable, err = sqlConn.Prepare(initFeedbacksTableQuery)
-	if err != nil {
-		return nil, err
-	}
-
-	// run init statement
-	_, err = stmt.initFilesTable.Exec()
-	if err != nil {
-		return nil, err
-	}
-	_, err = stmt.initFoldersTable.Exec()
-	if err != nil {
-		return nil, err
-	}
-	_, err = stmt.initFeedbacksTable.Exec()
-	if err != nil {
-		return nil, err
-	}
-
-	// init insert folder statement
-	stmt.insertFolder, err = sqlConn.Prepare(insertFolderQuery)
-	if err != nil {
-		return nil, err
-	}
-
-	// init findFolder statement
-	stmt.findFolder, err = sqlConn.Prepare(findFolderQuery)
-	if err != nil {
-		return nil, err
-	}
-
-	// init insertFile stmt
-	stmt.insertFile, err = sqlConn.Prepare(insertFileQuery)
-	if err != nil {
-		return nil, err
-	}
-
-	// init searchFile stmt
-	stmt.searchFiles, err = sqlConn.Prepare(searchFilesQuery)
-	if err != nil {
-		return nil, err
-	}
-
-	// init getFolder stmt
-	stmt.getFolder, err = sqlConn.Prepare(getFolderQuery)
-	if err != nil {
-		return nil, err
-	}
-
-	// init dropFolder stmt
-	stmt.dropFolder, err = sqlConn.Prepare(dropFolderQuery)
-	if err != nil {
-		return nil, err
-	}
-
-	// init dropFiles stmt
-	stmt.dropFiles, err = sqlConn.Prepare(dropFilesQuery)
-	if err != nil {
-		return nil, err
-	}
-
-	// init getFile stmt
-	stmt.getFile, err = sqlConn.Prepare(getFileQuery)
-	if err != nil {
-		return nil, err
-	}
-
-	// init searchFolder stmt
-	stmt.searchFolders, err = sqlConn.Prepare(searchFoldersQuery)
-	if err != nil {
-		return nil, err
-	}
-
-	// init getFilesInFolder stmt
-	stmt.getFilesInFolder, err = sqlConn.Prepare(getFilesInFolderQuery)
-	if err != nil {
-		return nil, err
-	}
-
-	// init getRandomFiles
-	stmt.getRandomFiles, err = sqlConn.Prepare(getRandomFilesQuery)
-	if err != nil {
-		return nil, err
-	}
-
-	// init insertFeedback
-	stmt.insertFeedback, err = sqlConn.Prepare(insertFeedbackQuery)
-	if err != nil {
-		return nil, err
-	}
-
-	return stmt, err
-}
-
-func NewDatabase(dbName string) (*Database, error) {
-	var err error
-
-	// open database
-	sqlConn, err := sql.Open("sqlite3", dbName)
-	if err != nil {
-		return nil, err
-	}
-
-	// prepare statement
-	stmt, err := NewPreparedStatement(sqlConn)
-	if err != nil {
-		return nil, err
-	}
-
-	// new database
-	database := &Database{
-		sqlConn: sqlConn,
-		stmt: stmt,
-	}
-
-	return database, nil
-}
--- a/internal/pkg/tmpfs/tmpfs.go
+++ b/internal/pkg/tmpfs/tmpfs.go
@@ -1,69 +0,0 @@
-package tmpfs
-
-import (
-	"log"
-	"os"
-	"path/filepath"
-	"strconv"
-	"sync"
-	"time"
-)
-
-type Tmpfs struct {
-	record map[string]int64
-	Config TmpfsConfig
-	wg sync.WaitGroup
-}
-
-func (tmpfs *Tmpfs) GetObjFilePath(id int64, configName string) (string) {
-	return filepath.Join(tmpfs.Config.Root, strconv.FormatInt(id, 10) + "." + configName + ".ogg")
-}
-
-type TmpfsConfig struct {
-	FileLifeTime int64 `json:"file_life_time"`
-	CleanerInternal int64 `json:"cleaner_internal"`
-	Root string `json:"root"`
-}
-
-func NewTmpfsConfig() (*TmpfsConfig) {
-	config := &TmpfsConfig{}
-	return config
-}
-
-func NewTmpfs(config TmpfsConfig) *Tmpfs {
-	tmpfs := &Tmpfs{
-		record: make(map[string]int64),
-		Config: config,
-	}
-	tmpfs.wg.Add(1)
-	go tmpfs.Cleaner()
-	return tmpfs
-}
-
-func (tmpfs *Tmpfs) Record(filename string) {
-	tmpfs.record[filename] = time.Now().Unix()
-}
-
-func (tmpfs *Tmpfs) Exits(filename string) (bool) {
-	_, ok := tmpfs.record[filename]
-	return ok
-}
-
-func (tmpfs *Tmpfs) Cleaner() {
-	var err error
-	for {
-		now := time.Now().Unix()
-		for key, value := range tmpfs.record {
-			if now - value > tmpfs.Config.FileLifeTime {
-				err = os.Remove(key)
-				if err != nil {
-					log.Println("[tmpfs] Failed to remove file", err)
-				}
-				log.Println("[tmpfs] Deleted file", key)
-				delete(tmpfs.record, key)
-			}
-		}
-
-		time.Sleep(time.Second)
-	}
-}
--- a/main.go
+++ b/main.go
@@ -4,7 +4,8 @@ import (
 	"encoding/json"
 	"flag"
 	"log"
-	"msw-open-music/internal/pkg/api"
+	"msw-open-music/pkg/api"
+	"msw-open-music/pkg/commonconfig"
 	"os"
 )

@@ -14,12 +15,11 @@ func init() {
 	flag.StringVar(&ConfigFilePath, "config", "config.json", "backend config file path")
 }

-
 func main() {
 	var err error
 	flag.Parse()

-	config := api.Config{}
+	config := commonconfig.Config{}
 	configFile, err := os.Open(ConfigFilePath)
 	if err != nil {
 		log.Fatal(err)
@@ -37,7 +37,6 @@ func main() {
 	log.Println("Starting",
 		config.APIConfig.DatabaseName,
 		config.APIConfig.Addr,
-		config.APIConfig.Token,
 	)
 	log.Fatal(api.Server.ListenAndServe())
 }
--- a/pkg/api/api.go
+++ b/pkg/api/api.go
@@ -0,0 +1,105 @@
+package api
+
+import (
+	"github.com/gorilla/sessions"
+	"msw-open-music/pkg/commonconfig"
+	"msw-open-music/pkg/database"
+	"msw-open-music/pkg/tmpfs"
+	"net/http"
+)
+
+type API struct {
+	Db                 *database.Database
+	Server             http.Server
+	APIConfig          commonconfig.APIConfig
+	Tmpfs              *tmpfs.Tmpfs
+	store              *sessions.CookieStore
+	defaultSessionName string
+}
+
+func NewAPI(config commonconfig.Config) (*API, error) {
+	var err error
+
+	apiConfig := config.APIConfig
+	tmpfsConfig := config.TmpfsConfig
+
+	db, err := database.NewDatabase(apiConfig.DatabaseName, apiConfig.SingleThread)
+	if err != nil {
+		return nil, err
+	}
+
+	store := sessions.NewCookieStore([]byte(config.APIConfig.SECRET))
+
+	mux := http.NewServeMux()
+	apiMux := http.NewServeMux()
+
+	api := &API{
+		Db: db,
+		Server: http.Server{
+			Addr:    apiConfig.Addr,
+			Handler: mux,
+		},
+		APIConfig:          apiConfig,
+		store:              store,
+		defaultSessionName: "msw-open-music",
+	}
+	api.Tmpfs = tmpfs.NewTmpfs(tmpfsConfig)
+
+	// mount api
+	apiMux.HandleFunc("/hello", api.HandleOK)
+	apiMux.HandleFunc("/get_file", api.HandleGetFile)
+	apiMux.HandleFunc("/get_file_direct", api.HandleGetFileDirect)
+	apiMux.HandleFunc("/search_files", api.HandleSearchFiles)
+	apiMux.HandleFunc("/search_folders", api.HandleSearchFolders)
+	apiMux.HandleFunc("/get_files_in_folder", api.HandleGetFilesInFolder)
+	apiMux.HandleFunc("/get_random_files", api.HandleGetRandomFiles)
+	apiMux.HandleFunc("/get_random_files_with_tag", api.HandleGetRandomFilesWithTag)
+	apiMux.HandleFunc("/get_file_stream", api.HandleGetFileStream)
+	apiMux.HandleFunc("/get_ffmpeg_config_list", api.HandleGetFfmpegConfigs)
+	apiMux.HandleFunc("/get_file_info", api.HandleGetFileInfo)
+	apiMux.HandleFunc("/get_file_stream_direct", api.HandleGetFileStreamDirect)
+	apiMux.HandleFunc("/prepare_file_stream_direct", api.HandlePrepareFileStreamDirect)
+	apiMux.HandleFunc("/delete_file", api.HandleDeleteFile)
+	apiMux.HandleFunc("/update_filename", api.HandleUpdateFilename)
+	apiMux.HandleFunc("/reset_filename", api.HandleResetFilename)
+	apiMux.HandleFunc("/reset_foldername", api.HandleResetFoldername)
+	// feedback
+	apiMux.HandleFunc("/feedback", api.HandleFeedback)
+	apiMux.HandleFunc("/get_feedbacks", api.HandleGetFeedbacks)
+	apiMux.HandleFunc("/delete_feedback", api.HandleDeleteFeedback)
+	// user
+	apiMux.HandleFunc("/login", api.HandleLogin)
+	apiMux.HandleFunc("/register", api.HandleRegister)
+	apiMux.HandleFunc("/logout", api.LoginAsAnonymous)
+	apiMux.HandleFunc("/get_user_info", api.HandleGetUserInfo)
+	apiMux.HandleFunc("/get_users", api.HandleGetUsers)
+	apiMux.HandleFunc("/update_user_active", api.HandleUpdateUserActive)
+	apiMux.HandleFunc("/update_username", api.HandleUpdateUsername)
+	apiMux.HandleFunc("/update_user_password", api.HandleUpdateUserPassword)
+	// tag
+	apiMux.HandleFunc("/get_tags", api.HandleGetTags)
+	apiMux.HandleFunc("/get_tag_info", api.HandleGetTagInfo)
+	apiMux.HandleFunc("/insert_tag", api.HandleInsertTag)
+	apiMux.HandleFunc("/update_tag", api.HandleUpdateTag)
+	apiMux.HandleFunc("/put_tag_on_file", api.HandlePutTagOnFile)
+	apiMux.HandleFunc("/get_tags_on_file", api.HandleGetTagsOnFile)
+	apiMux.HandleFunc("/delete_tag_on_file", api.HandleDeleteTagOnFile)
+	apiMux.HandleFunc("/delete_tag", api.HandleDeleteTag)
+	// folder
+	apiMux.HandleFunc("/update_foldername", api.HandleUpdateFoldername)
+	// review
+	apiMux.HandleFunc("/insert_review", api.HandleInsertReview)
+	apiMux.HandleFunc("/get_reviews_on_file", api.HandleGetReviewsOnFile)
+	apiMux.HandleFunc("/get_review", api.HandleGetReview)
+	apiMux.HandleFunc("/update_review", api.HandleUpdateReview)
+	apiMux.HandleFunc("/delete_review", api.HandleDeleteReview)
+	apiMux.HandleFunc("/get_reviews_by_user", api.HandleGetReviewsByUser)
+	// below needs admin
+	apiMux.HandleFunc("/walk", api.HandleWalk)
+	apiMux.HandleFunc("/reset", api.HandleReset)
+
+	mux.Handle("/api/v1/", http.StripPrefix("/api/v1", apiMux))
+	mux.Handle("/", http.StripPrefix("/", http.FileServer(http.Dir("web/build"))))
+
+	return api, nil
+}
--- a/internal/pkg/api/api_test.go
+++ b/internal/pkg/api/api_test.go
--- a/pkg/api/check.go
+++ b/pkg/api/check.go
@@ -0,0 +1,17 @@
+package api
+
+import (
+	"errors"
+	"log"
+	"net/http"
+)
+
+func (api *API) CheckLimit(w http.ResponseWriter, r *http.Request, limit int64) error {
+	if limit <= 0 || limit > 10 {
+		log.Println("[api] [Warning] Limit error", limit)
+		err := errors.New(`"limit" can't be zero or more than 10`)
+		api.HandleError(w, r, err)
+		return err
+	}
+	return nil
+}
--- a/pkg/api/handle_common.go
+++ b/pkg/api/handle_common.go
@@ -0,0 +1,26 @@
+package api
+
+import (
+	"encoding/json"
+	"net/http"
+)
+
+type Status struct {
+	Status string `json:"status,omitempty"`
+}
+
+func (api *API) HandleStatus(w http.ResponseWriter, r *http.Request, status string) {
+	s := &Status{
+		Status: status,
+	}
+
+	json.NewEncoder(w).Encode(s)
+}
+
+var ok Status = Status{
+	Status: "OK",
+}
+
+func (api *API) HandleOK(w http.ResponseWriter, r *http.Request) {
+	json.NewEncoder(w).Encode(&ok)
+}
--- a/pkg/api/handle_database_manage.go
+++ b/pkg/api/handle_database_manage.go
@@ -0,0 +1,85 @@
+package api
+
+import (
+	"encoding/json"
+	"log"
+	"net/http"
+)
+
+type WalkRequest struct {
+	Root    string   `json:"root"`
+	Pattern []string `json:"pattern"`
+	TagIDs  []int64  `json:"tag_ids"`
+}
+
+func (api *API) HandleReset(w http.ResponseWriter, r *http.Request) {
+	var err error
+	// check admin
+	err = api.CheckAdmin(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] Reset database")
+
+	// reset
+	err = api.Db.ResetFiles()
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+	err = api.Db.ResetFolder()
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	api.HandleStatus(w, r, "Database reseted")
+}
+
+func (api *API) HandleWalk(w http.ResponseWriter, r *http.Request) {
+	walkRequest := &WalkRequest{}
+	err := json.NewDecoder(r.Body).Decode(walkRequest)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	// check admin
+	err = api.CheckAdmin(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	// check root empty
+	if walkRequest.Root == "" {
+		api.HandleErrorString(w, r, `key "root" can't be empty`)
+		return
+	}
+
+	// check pattern empty
+	if len(walkRequest.Pattern) == 0 {
+		api.HandleErrorString(w, r, `"[]pattern" can't be empty`)
+		return
+	}
+
+	// get userID
+	userID, err := api.GetUserID(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] Walk", walkRequest.Root, walkRequest.Pattern, walkRequest.TagIDs)
+
+	// walk
+	err = api.Db.Walk(walkRequest.Root, walkRequest.Pattern, walkRequest.TagIDs, userID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	api.HandleStatus(w, r, "Database udpated")
+}
--- a/pkg/api/handle_error.go
+++ b/pkg/api/handle_error.go
@@ -0,0 +1,42 @@
+package api
+
+import (
+	"encoding/json"
+	"log"
+	"net/http"
+	"errors"
+)
+
+var (
+	ErrNotLoggedIn = errors.New("not logged in")
+	ErrNotAdmin = errors.New("not admin")
+	ErrEmpty = errors.New("Empty field detected, please fill in all fields")
+	ErrAnonymous = errors.New("Anonymous user detected, please login")
+	ErrNotActive = errors.New("User is not active")
+	ErrWrongPassword = errors.New("Wrong password")
+)
+
+type Error struct {
+  Error string `json:"error,omitempty"`
+}
+
+func (api *API) HandleError(w http.ResponseWriter, r *http.Request, err error) {
+	api.HandleErrorString(w, r, err.Error())
+}
+
+func (api *API) HandleErrorCode(w http.ResponseWriter, r *http.Request, err error, code int) {
+	api.HandleErrorStringCode(w, r, err.Error(), code)
+}
+
+func (api *API) HandleErrorString(w http.ResponseWriter, r *http.Request, errorString string) {
+	api.HandleErrorStringCode(w, r, errorString, 500)
+}
+
+func (api *API) HandleErrorStringCode(w http.ResponseWriter, r *http.Request, errorString string, code int) {
+	log.Println("[api] [Error]", code, errorString)
+	errStatus := &Error{
+		Error: errorString,
+	}
+	w.WriteHeader(code)
+	json.NewEncoder(w).Encode(errStatus)
+}
--- a/pkg/api/handle_feedback.go
+++ b/pkg/api/handle_feedback.go
@@ -0,0 +1,110 @@
+package api
+
+import (
+	"bytes"
+	"encoding/json"
+	"log"
+	"msw-open-music/pkg/database"
+	"net/http"
+	"time"
+)
+
+type FeedbackRequest struct {
+	Content string `json:"content"`
+}
+
+func (api *API) HandleFeedback(w http.ResponseWriter, r *http.Request) {
+	feedbackRequest := &FeedbackRequest{}
+	err := json.NewDecoder(r.Body).Decode(feedbackRequest)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	// check empty feedback
+	if feedbackRequest.Content == "" {
+		api.HandleErrorString(w, r, `"feedback" can't be empty`)
+		return
+	}
+
+	log.Println("[api] Feedback", feedbackRequest.Content)
+
+	headerBuff := &bytes.Buffer{}
+	err = r.Header.Write(headerBuff)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+	header := headerBuff.String()
+
+	userID, err := api.GetUserID(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	err = api.Db.InsertFeedback(time.Now().Unix(), feedbackRequest.Content, userID, header)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+	api.HandleOK(w, r)
+}
+
+type GetFeedbacksResponse struct {
+	Feedbacks []*database.Feedback `json:"feedbacks"`
+}
+
+func (api *API) HandleGetFeedbacks(w http.ResponseWriter, r *http.Request) {
+	// check if admin
+	err := api.CheckAdmin(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	feedbacks, err := api.Db.GetFeedbacks()
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	resp := &GetFeedbacksResponse{
+		Feedbacks: feedbacks,
+	}
+
+	err = json.NewEncoder(w).Encode(resp)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+}
+
+type DeleteFeedbackRequest struct {
+	ID int64 `json:"id"`
+}
+
+func (api *API) HandleDeleteFeedback(w http.ResponseWriter, r *http.Request) {
+	// check if admin
+	err := api.CheckAdmin(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	req := &DeleteFeedbackRequest{}
+	err = json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	err = api.Db.DeleteFeedback(req.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+
+	api.HandleOK(w, r)
+}
--- a/pkg/api/handle_ffmpeg_config.go
+++ b/pkg/api/handle_ffmpeg_config.go
@@ -0,0 +1,29 @@
+package api
+
+import (
+	"encoding/json"
+	"log"
+	"msw-open-music/pkg/commonconfig"
+	"net/http"
+)
+
+func (api *API) GetFfmpegConfig(configName string) (commonconfig.FfmpegConfig, bool) {
+	ffmpegConfig := commonconfig.FfmpegConfig{}
+	for _, f := range api.APIConfig.FfmpegConfigList {
+		if f.Name == configName {
+			ffmpegConfig = f
+		}
+	}
+	if ffmpegConfig.Name == "" {
+		return ffmpegConfig, false
+	}
+	return ffmpegConfig, true
+}
+
+func (api *API) HandleGetFfmpegConfigs(w http.ResponseWriter, r *http.Request) {
+	log.Println("[api] Get ffmpeg config list")
+	ffmpegConfigList := &commonconfig.FfmpegConfigList{
+		FfmpegConfigList: api.APIConfig.FfmpegConfigList,
+	}
+	json.NewEncoder(w).Encode(&ffmpegConfigList)
+}
--- a/pkg/api/handle_get_file_info.go
+++ b/pkg/api/handle_get_file_info.go
@@ -0,0 +1,126 @@
+package api
+
+import (
+	"encoding/json"
+	"io"
+	"log"
+	"net/http"
+	"net/url"
+	"os"
+	"strconv"
+)
+
+type GetFileRequest struct {
+	ID int64 `json:"id"`
+}
+
+func (api *API) HandleGetFileInfo(w http.ResponseWriter, r *http.Request) {
+	getFileRequest := &GetFileRequest{
+		ID: -1,
+	}
+
+	err := json.NewDecoder(r.Body).Decode(getFileRequest)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	// check empty
+	if getFileRequest.ID < 0 {
+		api.HandleErrorString(w, r, `"id" can't be none or negative`)
+		return
+	}
+
+	log.Println("[api] Get file info", getFileRequest.ID)
+
+	file, err := api.Db.GetFile(getFileRequest.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	err = json.NewEncoder(w).Encode(file)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+}
+
+// /get_file
+// get raw file with io.Copy method
+func (api *API) HandleGetFile(w http.ResponseWriter, r *http.Request) {
+	getFileRequest := &GetFileRequest{
+		ID: -1,
+	}
+
+	err := json.NewDecoder(r.Body).Decode(getFileRequest)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	// check empty
+	if getFileRequest.ID < 0 {
+		api.HandleErrorString(w, r, `"id" can't be none or negative`)
+		return
+	}
+
+	file, err := api.Db.GetFile(getFileRequest.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	path, err := file.Path()
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] Get pipe raw file", path)
+
+	src, err := os.Open(path)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+	defer src.Close()
+	io.Copy(w, src)
+}
+
+// /get_file_direct?id=1
+// get raw file with http.ServeFile method
+func (api *API) HandleGetFileDirect(w http.ResponseWriter, r *http.Request) {
+	q := r.URL.Query()
+	ids := q["id"]
+	if len(ids) == 0 {
+		api.HandleErrorString(w, r, `parameter "id" can't be empty`)
+		return
+	}
+	id, err := strconv.Atoi(ids[0])
+	if err != nil {
+		api.HandleErrorString(w, r, `parameter "id" should be an integer`)
+		return
+	}
+	file, err := api.Db.GetFile(int64(id))
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	path, err := file.Path()
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	// set header for filename
+	filename := file.Filename
+	// encode filename to URL
+	filename = url.PathEscape(filename)
+	w.Header().Set("Content-Disposition", "inline; filename*=UTF-8''"+filename)
+
+	log.Println("[api] Get direct raw file", path)
+
+	http.ServeFile(w, r, path)
+}
--- a/pkg/api/handle_get_files_in_folder.go
+++ b/pkg/api/handle_get_files_in_folder.go
@@ -0,0 +1,50 @@
+package api
+
+import (
+	"encoding/json"
+	"log"
+	"msw-open-music/pkg/database"
+	"net/http"
+)
+
+type GetFilesInFolderRequest struct {
+	Folder_id int64 `json:"folder_id"`
+	Limit     int64 `json:"limit"`
+	Offset    int64 `json:"offset"`
+}
+
+type GetFilesInFolderResponse struct {
+	Files *[]database.File `json:"files"`
+}
+
+func (api *API) HandleGetFilesInFolder(w http.ResponseWriter, r *http.Request) {
+	getFilesInFolderRequest := &GetFilesInFolderRequest{
+		Folder_id: -1,
+	}
+
+	err := json.NewDecoder(r.Body).Decode(getFilesInFolderRequest)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	// check empyt
+	if getFilesInFolderRequest.Folder_id < 0 {
+		api.HandleErrorString(w, r, `"folder_id" can't be none or negative`)
+		return
+	}
+
+	files, err := api.Db.GetFilesInFolder(getFilesInFolderRequest.Folder_id, getFilesInFolderRequest.Limit, getFilesInFolderRequest.Offset)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	getFilesInFolderResponse := &GetFilesInFolderResponse{
+		Files: &files,
+	}
+
+	log.Println("[api] Get files in folder", getFilesInFolderRequest.Folder_id)
+
+	json.NewEncoder(w).Encode(getFilesInFolderResponse)
+}
--- a/pkg/api/handle_get_random_files.go
+++ b/pkg/api/handle_get_random_files.go
@@ -0,0 +1,51 @@
+package api
+
+import (
+	"encoding/json"
+	"log"
+	"msw-open-music/pkg/database"
+	"net/http"
+)
+
+type GetRandomFilesResponse struct {
+	Files *[]database.File `json:"files"`
+}
+
+func (api *API) HandleGetRandomFiles(w http.ResponseWriter, r *http.Request) {
+	files, err := api.Db.GetRandomFiles(10)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+	getRandomFilesResponse := &GetRandomFilesResponse{
+		Files: &files,
+	}
+	log.Println("[api] Get random files")
+	json.NewEncoder(w).Encode(getRandomFilesResponse)
+}
+
+type GetRandomFilesWithTagRequest struct {
+	ID int64 `json:"id"`
+}
+
+func (api *API) HandleGetRandomFilesWithTag(w http.ResponseWriter, r *http.Request) {
+	req := &GetRandomFilesWithTagRequest{}
+	err := json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	files, err := api.Db.GetRandomFilesWithTag(req.ID, 10)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	getRandomFilesResponse := &GetRandomFilesResponse{
+		Files: &files,
+	}
+
+	log.Println("[api] Get random files with tag", req.ID)
+	json.NewEncoder(w).Encode(getRandomFilesResponse)
+}
--- a/pkg/api/handle_manage_file.go
+++ b/pkg/api/handle_manage_file.go
@@ -0,0 +1,98 @@
+package api
+
+import (
+	"encoding/json"
+	"net/http"
+	"log"
+)
+
+type DeleteFileRequest struct {
+	ID int64 `json:"id"`
+}
+
+func (api *API) HandleDeleteFile(w http.ResponseWriter, r *http.Request) {
+	// check admin
+	err := api.CheckAdmin(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	req := &DeleteFileRequest{}
+	err = json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] delete file", req.ID)
+
+	err = api.Db.DeleteFile(req.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	api.HandleOK(w, r)
+}
+
+type UpdateFilenameRequest struct {
+	ID       int64  `json:"id"`
+	Filename string `json:"filename"`
+}
+
+func (api *API) HandleUpdateFilename(w http.ResponseWriter, r *http.Request) {
+	// check admin
+	err := api.CheckAdmin(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	req := &UpdateFilenameRequest{}
+	err = json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] update filename", req.ID, req.Filename)
+
+	err = api.Db.UpdateFilename(req.ID, req.Filename)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	api.HandleOK(w, r)
+}
+
+type ResetFilenameRequest struct {
+	ID int64 `json:"id"`
+}
+
+func (api *API) HandleResetFilename(w http.ResponseWriter, r *http.Request) {
+	// check admin
+	err := api.CheckAdmin(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	req := &ResetFilenameRequest{}
+	err = json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] reset filename", req.ID)
+
+	err = api.Db.ResetFilename(req.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	api.HandleOK(w, r)
+}
--- a/pkg/api/handle_manage_folder.go
+++ b/pkg/api/handle_manage_folder.go
@@ -0,0 +1,68 @@
+package api
+
+import (
+	"encoding/json"
+	"log"
+	"net/http"
+)
+
+type ResetFoldernameRequest struct {
+	ID int64 `json:"id"`
+}
+
+func (api *API) HandleResetFoldername(w http.ResponseWriter, r *http.Request) {
+	// check admin
+	err := api.CheckAdmin(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	req := &ResetFoldernameRequest{}
+	err = json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		http.Error(w, err.Error(), http.StatusBadRequest)
+		return
+	}
+
+	log.Println("[api] Reset foldername folderID", req.ID)
+
+	err = api.Db.ResetFoldername(req.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	api.HandleOK(w, r)
+}
+
+type UpdateFoldernameRequest struct {
+	ID         int64  `json:"id"`
+	Foldername string `json:"foldername"`
+}
+
+func (api *API) HandleUpdateFoldername(w http.ResponseWriter, r *http.Request) {
+	req := &UpdateFoldernameRequest{}
+	err := json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		http.Error(w, err.Error(), http.StatusBadRequest)
+		return
+	}
+
+	// check is admin
+	err = api.CheckAdmin(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] Update foldername folderID", req.ID, req.Foldername)
+
+	err = api.Db.UpdateFoldername(req.ID, req.Foldername)
+	if err != nil {
+		http.Error(w, err.Error(), http.StatusInternalServerError)
+		return
+	}
+
+	api.HandleOK(w, r)
+}
--- a/pkg/api/handle_review.go
+++ b/pkg/api/handle_review.go
@@ -0,0 +1,220 @@
+package api
+
+import (
+	"encoding/json"
+	"errors"
+	"log"
+	"msw-open-music/pkg/database"
+	"net/http"
+	"time"
+)
+
+// review.FileId, review.Content
+func (api *API) HandleInsertReview(w http.ResponseWriter, r *http.Request) {
+	review := &database.Review{}
+
+	err := json.NewDecoder(r.Body).Decode(review)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	review.UserId, err = api.GetUserID(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] Insert review by", review.UserId, review.Content)
+
+	review.CreatedAt = time.Now().Unix()
+
+	err = api.Db.InsertReview(review)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	api.HandleOK(w, r)
+}
+
+type GetReviewsOnFileRequest struct {
+	ID int64 `json:"id"`
+}
+
+type GetReviewsOnFileResponse struct {
+	Reviews []*database.Review `json:"reviews"`
+}
+
+func (api *API) HandleGetReviewsOnFile(w http.ResponseWriter, r *http.Request) {
+	req := &GetReviewsOnFileRequest{}
+
+	err := json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	reviews, err := api.Db.GetReviewsOnFile(req.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] Get reviews on fileID", req.ID)
+
+	resp := &GetReviewsOnFileResponse{
+		Reviews: reviews,
+	}
+
+	err = json.NewEncoder(w).Encode(resp)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+}
+
+type GetReviewRequest struct {
+	ID int64 `json:"id"`
+}
+
+type GetReviewResponse struct {
+	Review *database.Review `json:"review"`
+}
+
+func (api *API) HandleGetReview(w http.ResponseWriter, r *http.Request) {
+	req := &GetReviewRequest{}
+
+	err := json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	review, err := api.Db.GetReview(req.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] Get review ID", req.ID)
+
+	ret := &GetReviewResponse{
+		Review: review,
+	}
+
+	err = json.NewEncoder(w).Encode(ret)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+}
+
+func (api *API) CheckUserCanModifyReview(w http.ResponseWriter, r *http.Request, reviewID int64) error {
+	review, err := api.Db.GetReview(reviewID)
+	if err != nil {
+		return err
+	}
+
+	err = api.CheckNotAnonymous(w, r)
+	if err != nil {
+		return err
+	}
+
+	err = api.CheckAdmin(w, r)
+	if err != nil {
+		userID, err := api.GetUserID(w, r)
+		if err != nil {
+			return err
+		}
+
+		if review.UserId != userID {
+			return errors.New("you are not allowed to modify this review")
+		}
+	}
+
+	return nil
+}
+
+func (api *API) HandleUpdateReview(w http.ResponseWriter, r *http.Request) {
+	req := &database.Review{}
+
+	err := json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	err = api.CheckUserCanModifyReview(w, r, req.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] Update review", req.ID, req.Content)
+
+	req.UpdatedAt = time.Now().Unix()
+
+	err = api.Db.UpdateReview(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	api.HandleOK(w, r)
+}
+
+type DeleteReviewRequest struct {
+	ID int64 `json:"id"`
+}
+
+func (api *API) HandleDeleteReview(w http.ResponseWriter, r *http.Request) {
+	req := &DeleteReviewRequest{}
+
+	err := json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	err = api.CheckUserCanModifyReview(w, r, req.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] Delete review ID", req.ID)
+
+	err = api.Db.DeleteReview(req.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	api.HandleOK(w, r)
+}
+
+type GetReviewsByUserRequest struct {
+	ID int64 `json:"id"`
+}
+
+func (api *API) HandleGetReviewsByUser(w http.ResponseWriter, r *http.Request) {
+	req := &GetReviewsByUserRequest{}
+	err := json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	reviews, err := api.Db.GetReviewsByUser(req.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	err = json.NewEncoder(w).Encode(reviews)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+}
--- a/pkg/api/handle_search_files.go
+++ b/pkg/api/handle_search_files.go
@@ -0,0 +1,48 @@
+package api
+
+import (
+	"encoding/json"
+	"log"
+	"msw-open-music/pkg/database"
+	"net/http"
+)
+
+type SearchFilesRequest struct {
+	Filename string `json:"filename"`
+	Limit    int64  `json:"limit"`
+	Offset   int64  `json:"offset"`
+}
+
+type SearchFilesResponse struct {
+	Files []database.File `json:"files"`
+}
+
+func (api *API) HandleSearchFiles(w http.ResponseWriter, r *http.Request) {
+	searchFilesRequest := &SearchFilesRequest{}
+	err := json.NewDecoder(r.Body).Decode(searchFilesRequest)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	// check empty
+	if searchFilesRequest.Filename == "" {
+		api.HandleErrorString(w, r, `"filename" can't be empty`)
+		return
+	}
+	if api.CheckLimit(w, r, searchFilesRequest.Limit) != nil {
+		return
+	}
+
+	searchFilesResponse := &SearchFilesResponse{}
+
+	searchFilesResponse.Files, err = api.Db.SearchFiles(searchFilesRequest.Filename, searchFilesRequest.Limit, searchFilesRequest.Offset)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] Search files", searchFilesRequest.Filename, searchFilesRequest.Limit, searchFilesRequest.Offset)
+
+	json.NewEncoder(w).Encode(searchFilesResponse)
+}
--- a/pkg/api/handle_search_folders.go
+++ b/pkg/api/handle_search_folders.go
@@ -0,0 +1,48 @@
+package api
+
+import (
+	"encoding/json"
+	"log"
+	"msw-open-music/pkg/database"
+	"net/http"
+)
+
+type SearchFoldersRequest struct {
+	Foldername string `json:"foldername"`
+	Limit      int64  `json:"limit"`
+	Offset     int64  `json:"offset"`
+}
+
+type SearchFoldersResponse struct {
+	Folders []database.Folder `json:"folders"`
+}
+
+func (api *API) HandleSearchFolders(w http.ResponseWriter, r *http.Request) {
+	searchFoldersRequest := &SearchFoldersRequest{}
+	err := json.NewDecoder(r.Body).Decode(searchFoldersRequest)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	// check empty
+	if searchFoldersRequest.Foldername == "" {
+		api.HandleErrorString(w, r, `"foldername" can't be empty`)
+		return
+	}
+	if api.CheckLimit(w, r, searchFoldersRequest.Limit) != nil {
+		return
+	}
+
+	searchFoldersResponse := &SearchFoldersResponse{}
+
+	searchFoldersResponse.Folders, err = api.Db.SearchFolders(searchFoldersRequest.Foldername, searchFoldersRequest.Limit, searchFoldersRequest.Offset)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] Search folders", searchFoldersRequest.Foldername, searchFoldersRequest.Limit, searchFoldersRequest.Offset)
+
+	json.NewEncoder(w).Encode(searchFoldersResponse)
+}
--- a/pkg/api/handle_stream.go
+++ b/pkg/api/handle_stream.go
@@ -0,0 +1,211 @@
+package api
+
+import (
+	"encoding/json"
+	"errors"
+	"log"
+	"msw-open-music/pkg/database"
+	"net/http"
+	"net/url"
+	"os"
+	"os/exec"
+	"strconv"
+	"strings"
+)
+
+func (api *API) CheckGetFileStream(w http.ResponseWriter, r *http.Request) error {
+	var err error
+	q := r.URL.Query()
+	ids := q["id"]
+	if len(ids) == 0 {
+		err = errors.New(`parameter "id" can't be empty`)
+		api.HandleError(w, r, err)
+		return err
+	}
+	_, err = strconv.Atoi(ids[0])
+	if err != nil {
+		err = errors.New(`parameter "id" should be an integer`)
+		api.HandleError(w, r, err)
+		return err
+	}
+	configs := q["config"]
+	if len(configs) == 0 {
+		err = errors.New(`parameter "config" can't be empty`)
+		api.HandleError(w, r, err)
+		return err
+	}
+	return nil
+}
+
+// /get_file_stream?id=1&config=ffmpeg_config_name
+func (api *API) HandleGetFileStream(w http.ResponseWriter, r *http.Request) {
+	err := api.CheckGetFileStream(w, r)
+	if err != nil {
+		return
+	}
+	q := r.URL.Query()
+	ids := q["id"]
+	id, err := strconv.Atoi(ids[0])
+	configs := q["config"]
+	configName := configs[0]
+	file, err := api.Db.GetFile(int64(id))
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	path, err := file.Path()
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] Stream file", path, configName)
+
+	ffmpegConfig, ok := api.GetFfmpegConfig(configName)
+	if !ok {
+		api.HandleErrorStringCode(w, r, `ffmpeg config not found`, 404)
+		return
+	}
+
+	// set headers for filename
+	filename := file.Filename + "." + ffmpegConfig.Name + "." + ffmpegConfig.Format
+	filename = url.PathEscape(filename)
+	// replace invalid characters
+	w.Header().Set("Content-Disposition", "inline; filename*=UTF-8''"+filename)
+
+	args := strings.Split(ffmpegConfig.Args, " ")
+	startArgs := []string{"-threads", strconv.FormatInt(api.APIConfig.FfmpegThreads, 10), "-i", path}
+	endArgs := []string{"-f", ffmpegConfig.Format, "-"}
+	ffmpegArgs := append(startArgs, args...)
+	ffmpegArgs = append(ffmpegArgs, endArgs...)
+	cmd := exec.Command("ffmpeg", ffmpegArgs...)
+	cmd.Stdout = w
+	// cmd.Stderr = os.Stderr
+	err = cmd.Run()
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+}
+
+type PrepareFileStreamDirectRequest struct {
+	ID         int64  `json:"id"`
+	ConfigName string `json:"config_name"`
+}
+
+type PrepareFileStreamDirectResponse struct {
+	File *database.File `json:"file"`
+}
+
+// /prepare_file_stream_direct?id=1&config=ffmpeg_config_name
+func (api *API) HandlePrepareFileStreamDirect(w http.ResponseWriter, r *http.Request) {
+	prepareFileStreamDirectRequst := &PrepareFileStreamDirectRequest{
+		ID: -1,
+	}
+	err := json.NewDecoder(r.Body).Decode(prepareFileStreamDirectRequst)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	// check empty
+	if prepareFileStreamDirectRequst.ID < 0 {
+		api.HandleErrorString(w, r, `"id" can't be none or negative`)
+		return
+	}
+	if prepareFileStreamDirectRequst.ConfigName == "" {
+		api.HandleErrorString(w, r, `"config_name" can't be empty`)
+		return
+	}
+
+	file, err := api.Db.GetFile(prepareFileStreamDirectRequst.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+	srcPath, err := file.Path()
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] Prepare stream direct file", srcPath, prepareFileStreamDirectRequst.ConfigName)
+	ffmpegConfig, ok := api.GetFfmpegConfig(prepareFileStreamDirectRequst.ConfigName)
+	if !ok {
+		api.HandleErrorStringCode(w, r, `ffmpeg config not found`, 404)
+		return
+	}
+	objPath := api.Tmpfs.GetObjFilePath(prepareFileStreamDirectRequst.ID, ffmpegConfig)
+
+	// check obj file exists
+	exists := api.Tmpfs.Exits(objPath)
+	if !exists {
+		// lock the object
+		api.Tmpfs.Lock(objPath)
+
+		args := strings.Split(ffmpegConfig.Args, " ")
+		startArgs := []string{"-threads", strconv.FormatInt(api.APIConfig.FfmpegThreads, 10), "-i", srcPath}
+		endArgs := []string{"-y", objPath}
+		ffmpegArgs := append(startArgs, args...)
+		ffmpegArgs = append(ffmpegArgs, endArgs...)
+		cmd := exec.Command("ffmpeg", ffmpegArgs...)
+		err = cmd.Run()
+		if err != nil {
+			api.HandleError(w, r, err)
+			return
+		}
+
+		api.Tmpfs.Record(objPath)
+		api.Tmpfs.Unlock(objPath)
+
+	}
+
+	fileInfo, err := os.Stat(objPath)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	file.Filesize = fileInfo.Size()
+
+	prepareFileStreamDirectResponse := &PrepareFileStreamDirectResponse{
+		File: file,
+	}
+	json.NewEncoder(w).Encode(prepareFileStreamDirectResponse)
+}
+
+// /get_file_stream_direct?id=1&config=ffmpeg_config_name
+// return converted file with http.ServeFile method
+func (api *API) HandleGetFileStreamDirect(w http.ResponseWriter, r *http.Request) {
+	err := api.CheckGetFileStream(w, r)
+	if err != nil {
+		return
+	}
+	q := r.URL.Query()
+	ids := q["id"]
+	id, err := strconv.Atoi(ids[0])
+	configs := q["config"]
+	configName := configs[0]
+
+	ffmpegConfig, ok := api.GetFfmpegConfig(configName)
+	if !ok {
+		api.HandleErrorStringCode(w, r, `ffmpeg config not found`, 404)
+		return
+	}
+
+	path := api.Tmpfs.GetObjFilePath(int64(id), ffmpegConfig)
+	if api.Tmpfs.Exits(path) {
+		api.Tmpfs.Record(path)
+	}
+
+	// set headers for filename
+	filename := ids[0] + "." + ffmpegConfig.Name + "." + ffmpegConfig.Format
+	filename = url.PathEscape(filename)
+	// replace invalid characters
+	w.Header().Set("Content-Disposition", "inline; filename*=UTF-8''"+filename)
+
+	log.Println("[api] Get direct cached file", path)
+
+	http.ServeFile(w, r, path)
+}
--- a/pkg/api/handle_tag.go
+++ b/pkg/api/handle_tag.go
@@ -0,0 +1,162 @@
+package api
+
+import (
+	"encoding/json"
+	"log"
+	"msw-open-music/pkg/database"
+	"net/http"
+)
+
+type getTagsResponse struct {
+	Tags []*database.Tag `json:"tags"`
+}
+
+func (api *API) HandleGetTags(w http.ResponseWriter, r *http.Request) {
+	tags, err := api.Db.GetTags()
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] Successfully got tags")
+
+	resp := &getTagsResponse{Tags: tags}
+
+	err = json.NewEncoder(w).Encode(resp)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+}
+
+type InsertTagResponse struct {
+	Tag *database.Tag `json:"tag"`
+}
+
+func (api *API) HandleInsertTag(w http.ResponseWriter, r *http.Request) {
+	// check if user is admin
+	err := api.CheckAdmin(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	req := &database.Tag{}
+	err = json.NewDecoder(r.Body).Decode(&req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	req.CreatedByUserId, err = api.GetUserID(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	tagID, err := api.Db.InsertTag(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	tag, err := api.Db.GetTag(tagID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	resp := &InsertTagResponse{Tag: tag}
+	
+	err = json.NewEncoder(w).Encode(resp)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+}
+
+type GetTagInfoRequest struct {
+	ID int64 `json:"id"`
+}
+
+type GetTagInfoResponse struct {
+	Tag *database.Tag `json:"tag"`
+}
+
+func (api *API) HandleGetTagInfo(w http.ResponseWriter, r *http.Request) {
+	var req GetTagInfoRequest
+	err := json.NewDecoder(r.Body).Decode(&req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	tag, err := api.Db.GetTag(req.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	resp := &GetTagInfoResponse{Tag: tag}
+
+	err = json.NewEncoder(w).Encode(resp)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+}
+
+func (api *API) HandleUpdateTag(w http.ResponseWriter, r *http.Request) {
+	// check if user is admin
+	err := api.CheckAdmin(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	req := &database.Tag{}
+	err = json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	err = api.Db.UpdateTag(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	api.HandleOK(w, r)
+}
+
+type DeleteTagRequest struct {
+	ID int64 `json:"id"`
+}
+
+func (api *API) HandleDeleteTag(w http.ResponseWriter, r *http.Request) {
+	// check if user is admin
+	err := api.CheckAdmin(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	req := &DeleteTagRequest{}
+	err = json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	err = api.Db.DeleteTag(req.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] Successfully deleted tag and its references", req.ID)
+
+	api.HandleOK(w, r)
+}
+
--- a/pkg/api/handle_tag_and_file.go
+++ b/pkg/api/handle_tag_and_file.go
@@ -0,0 +1,119 @@
+package api
+
+import (
+	"encoding/json"
+	"log"
+	"msw-open-music/pkg/database"
+	"net/http"
+)
+
+type PutTagOnFileRequest struct {
+	TagID  int64 `json:"tag_id"`
+	FileID int64 `json:"file_id"`
+}
+
+func (api *API) HandlePutTagOnFile(w http.ResponseWriter, r *http.Request) {
+	// check if the user is admin
+	err := api.CheckAdmin(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	req := &PutTagOnFileRequest{}
+	err = json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	userID, err := api.GetUserID(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	// check empty
+	if req.TagID == 0 || req.FileID == 0 {
+		api.HandleError(w, r, ErrEmpty)
+		return
+	}
+
+	log.Println("[api] Put tag on file request:", req, "userID:", userID)
+
+	api.Db.PutTagOnFile(req.TagID, req.FileID, userID)
+
+	api.HandleOK(w, r)
+}
+
+type GetTagsOnFileRequest struct {
+	ID int64 `json:"id"`
+}
+
+type GetTagsOnFileResponse struct {
+	Tags []*database.Tag `json:"tags"`
+}
+
+func (api *API) HandleGetTagsOnFile(w http.ResponseWriter, r *http.Request) {
+	req := &GetTagsOnFileRequest{}
+	err := json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+	
+	log.Println("[api] Get tags on file request:", req)
+
+	tags, err := api.Db.GetTagsOnFile(req.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	resp := &GetTagsOnFileResponse{
+		Tags: tags,
+	}
+
+	err = json.NewEncoder(w).Encode(resp)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+}
+
+type DeleteTagOnFileRequest struct {
+	TagID  int64 `json:"tag_id"`
+	FileID int64 `json:"file_id"`
+}
+
+func (api *API) HandleDeleteTagOnFile(w http.ResponseWriter, r *http.Request) {
+	// check if the user is admin
+	err := api.CheckAdmin(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	req := &DeleteTagOnFileRequest{}
+	err = json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	// check empty
+	if req.TagID == 0 || req.FileID == 0 {
+		api.HandleError(w, r, ErrEmpty)
+		return
+	}
+
+	log.Println("[api] Delete tag on file request:", req)
+
+	err = api.Db.DeleteTagOnFile(req.TagID, req.FileID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	api.HandleOK(w, r)
+}
--- a/pkg/api/handle_user.go
+++ b/pkg/api/handle_user.go
@@ -0,0 +1,376 @@
+package api
+
+import (
+	"database/sql"
+	"encoding/json"
+	"log"
+	"msw-open-music/pkg/database"
+	"net/http"
+)
+
+type LoginRequest struct {
+	Username string `json:"username"`
+	Password string `json:"password"`
+}
+
+type LoginResponse struct {
+	User *database.User `json:"user"`
+}
+
+func (api *API) LoginAsAnonymous(w http.ResponseWriter, r *http.Request) {
+	user, err := api.Db.LoginAsAnonymous()
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	session, _ := api.store.Get(r, api.defaultSessionName)
+
+	// save session
+	session.Values["userId"] = user.ID
+	err = session.Save(r, w)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	resp := &LoginResponse{
+		User: user,
+	}
+
+	err = json.NewEncoder(w).Encode(resp)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+}
+
+func (api *API) HandleLogin(w http.ResponseWriter, r *http.Request) {
+	var user *database.User
+	var err error
+	session, _ := api.store.Get(r, api.defaultSessionName)
+
+	// Get method will login current or anonymous user
+	if r.Method == "GET" {
+
+		// if user already logged in
+		if userId, ok := session.Values["userId"]; ok {
+			user, err = api.Db.GetUserById(userId.(int64))
+			if err != nil {
+				if err != sql.ErrNoRows {
+					api.HandleError(w, r, err)
+					return
+				}
+				log.Println("[api] Warning: User not found")
+				// login as anonymous user
+				api.LoginAsAnonymous(w, r)
+				return
+			}
+			log.Println("[api] User already logged in:", user)
+
+		} else {
+			// login as anonymous user
+			log.Println("[api] Login as anonymous user")
+			api.LoginAsAnonymous(w, r)
+			return
+		}
+
+	} else {
+
+		var request LoginRequest
+		err := json.NewDecoder(r.Body).Decode(&request)
+		if err != nil {
+			api.HandleError(w, r, err)
+			return
+		}
+
+		log.Println("Login as user", request.Username)
+
+		user, err = api.Db.Login(request.Username, request.Password)
+		if err != nil {
+			api.HandleError(w, r, err)
+			return
+		}
+	}
+
+	// if user is not active
+	if !user.Active {
+		api.HandleError(w, r, ErrNotActive)
+		return
+	}
+
+	// save session
+	session.Values["userId"] = user.ID
+	err = session.Save(r, w)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	resp := &LoginResponse{
+		User: user,
+	}
+	err = json.NewEncoder(w).Encode(resp)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+}
+
+type RegisterRequest struct {
+	Username string `json:"username"`
+	Password string `json:"password"`
+	Role     int64  `json:"role"`
+}
+
+func (api *API) HandleRegister(w http.ResponseWriter, r *http.Request) {
+	var request RegisterRequest
+	err := json.NewDecoder(r.Body).Decode(&request)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	log.Println("[api] Register user", request.Username)
+
+	err = api.Db.Register(request.Username, request.Password, request.Role)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	api.HandleOK(w, r)
+}
+
+func (api *API) CheckAdmin(w http.ResponseWriter, r *http.Request) error {
+	session, _ := api.store.Get(r, api.defaultSessionName)
+	userId, ok := session.Values["userId"]
+	if !ok {
+		return ErrNotLoggedIn
+	}
+
+	user, err := api.Db.GetUserById(userId.(int64))
+	if err != nil {
+		return err
+	}
+
+	if user.Role != database.RoleAdmin {
+		return ErrNotAdmin
+	}
+
+	return nil
+}
+
+func (api *API) CheckNotAnonymous(w http.ResponseWriter, r *http.Request) error {
+	session, _ := api.store.Get(r, api.defaultSessionName)
+	userId, ok := session.Values["userId"]
+	if !ok {
+		return ErrNotLoggedIn
+	}
+
+	user, err := api.Db.GetUserById(userId.(int64))
+	if err != nil {
+		return err
+	}
+
+	if user.Role == database.RoleAnonymous {
+		return ErrAnonymous
+	}
+
+	return nil
+}
+
+func (api *API) GetUserID(w http.ResponseWriter, r *http.Request) (int64, error) {
+	session, _ := api.store.Get(r, api.defaultSessionName)
+	userId, ok := session.Values["userId"]
+	if !ok {
+		return 0, ErrNotLoggedIn
+	}
+
+	return userId.(int64), nil
+}
+
+type GetUsersResponse struct {
+	Users []*database.User `json:"users"`
+}
+
+func (api *API) HandleGetUsers(w http.ResponseWriter, r *http.Request) {
+	users, err := api.Db.GetUsers()
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	ret := &GetUsersResponse{
+		Users: users,
+	}
+
+	err = json.NewEncoder(w).Encode(ret)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+}
+
+type UpdateUserActiveRequest struct {
+	ID     int64 `json:"id"`
+	Active bool  `json:"active"`
+}
+
+func (api *API) HandleUpdateUserActive(w http.ResponseWriter, r *http.Request) {
+	err := api.CheckAdmin(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	req := &UpdateUserActiveRequest{}
+	err = json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	err = api.Db.UpdateUserActive(req.ID, req.Active)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+	api.HandleOK(w, r)
+}
+
+type UpdateUsernameRequest struct {
+	ID       int64  `json:"id"`
+	Username string `json:"username"`
+}
+
+func (api *API) HandleUpdateUsername(w http.ResponseWriter, r *http.Request) {
+	// reject anonymous user
+	err := api.CheckNotAnonymous(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	req := &UpdateUsernameRequest{}
+
+	err = json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	user, err := api.Db.GetUserById(req.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	userID, err := api.GetUserID(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	if user.ID != userID && user.Role != database.RoleAdmin {
+		api.HandleError(w, r, ErrNotAdmin)
+		return
+	}
+
+	err = api.Db.UpdateUsername(req.ID, req.Username)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	api.HandleOK(w, r)
+}
+
+type GetUserInfoRequest struct {
+	ID int64 `json:"id"`
+}
+
+type GetUserInfoResponse struct {
+	User *database.User `json:"user"`
+}
+
+func (api *API) HandleGetUserInfo(w http.ResponseWriter, r *http.Request) {
+	req := &GetUserInfoRequest{}
+	err := json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	user, err := api.Db.GetUserById(req.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	ret := &GetUserInfoResponse{
+		User: user,
+	}
+
+	err = json.NewEncoder(w).Encode(ret)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+}
+
+type UpdateUserPasswordRequest struct {
+	ID          int64  `json:"id"`
+	OldPassword string `json:"old_password"`
+	NewPassword string `json:"new_password"`
+}
+
+func (api *API) HandleUpdateUserPassword(w http.ResponseWriter, r *http.Request) {
+	// reject anonymous user
+	err := api.CheckNotAnonymous(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	req := &UpdateUserPasswordRequest{}
+	err = json.NewDecoder(r.Body).Decode(req)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	user, err := api.Db.GetUserById(req.ID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	userID, err := api.GetUserID(w, r)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	currentUser, err := api.Db.GetUserById(userID)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	if currentUser.Role != database.RoleAdmin {
+		_, err := api.Db.Login(user.Username, req.OldPassword)
+		if err != nil {
+			api.HandleError(w, r, ErrWrongPassword)
+			return
+		}
+	}
+
+	err = api.Db.UpdateUserPassword(req.ID, req.NewPassword)
+	if err != nil {
+		api.HandleError(w, r, err)
+		return
+	}
+
+	api.HandleOK(w, r)
+}
--- a/pkg/commonconfig/config.go
+++ b/pkg/commonconfig/config.go
@@ -0,0 +1,43 @@
+package commonconfig
+
+type Config struct {
+	APIConfig   APIConfig   `json:"api"`
+	TmpfsConfig TmpfsConfig `json:"tmpfs"`
+}
+
+type APIConfig struct {
+	DatabaseName     string         `json:"database_name"`
+	SingleThread     bool           `json:"single_thread,default=true"`
+	Addr             string         `json:"addr"`
+	FfmpegThreads    int64          `json:"ffmpeg_threads"`
+	FfmpegConfigList []FfmpegConfig `json:"ffmpeg_config_list"`
+	SECRET           string         `json:"secret"`
+}
+
+type FfmpegConfigList struct {
+	FfmpegConfigList []FfmpegConfig `json:"ffmpeg_config_list"`
+}
+
+type FfmpegConfig struct {
+	Name   string `json:"name"`
+	Args   string `json:"args"`
+	Format string `json:"format"`
+}
+
+type TmpfsConfig struct {
+	FileLifeTime    int64  `json:"file_life_time"`
+	CleanerInternal int64  `json:"cleaner_internal"`
+	Root            string `json:"root"`
+}
+
+// Constructors for Config
+
+func NewAPIConfig() APIConfig {
+	apiConfig := APIConfig{}
+	return apiConfig
+}
+
+func NewTmpfsConfig() *TmpfsConfig {
+	config := &TmpfsConfig{}
+	return config
+}
--- a/pkg/database/database.go
+++ b/pkg/database/database.go
@@ -0,0 +1,63 @@
+package database
+
+import (
+	"database/sql"
+	"sync"
+
+	_ "github.com/mattn/go-sqlite3"
+)
+
+type Database struct {
+	sqlConn *sql.DB
+	stmt    *Stmt
+	singleThreadLock SingleThreadLock
+}
+
+func NewSingleThreadLock(enabled bool) SingleThreadLock {
+	return SingleThreadLock{
+		lock: sync.Mutex{},
+		enabled: enabled,
+	}
+}
+
+type SingleThreadLock struct {
+	lock sync.Mutex
+	enabled bool
+}
+
+func (stl *SingleThreadLock) Lock() {
+	if stl.enabled {
+		stl.lock.Lock()
+	}
+}
+
+func (stl *SingleThreadLock) Unlock() {
+	if stl.enabled {
+		stl.lock.Unlock()
+	}
+}
+
+func NewDatabase(dbName string, singleThread bool) (*Database, error) {
+	var err error
+
+	// open database
+	sqlConn, err := sql.Open("sqlite3", dbName)
+	if err != nil {
+		return nil, err
+	}
+
+	// prepare statement
+	stmt, err := NewPreparedStatement(sqlConn)
+	if err != nil {
+		return nil, err
+	}
+
+	// new database
+	database := &Database{
+		sqlConn: sqlConn,
+		stmt:    stmt,
+		singleThreadLock: NewSingleThreadLock(singleThread),
+	}
+
+	return database, nil
+}
--- a/internal/pkg/database/database_test.go
+++ b/internal/pkg/database/database_test.go
--- a/pkg/database/error.go
+++ b/pkg/database/error.go
@@ -0,0 +1,10 @@
+package database
+
+import (
+	"errors"
+)
+
+var (
+	ErrNotFound = errors.New("object not found")
+	ErrTagNotFound = errors.New("tag not found")
+)
--- a/pkg/database/method.go
+++ b/pkg/database/method.go
@@ -0,0 +1,399 @@
+package database
+
+import (
+	"errors"
+	"log"
+	"os"
+	"path/filepath"
+)
+
+func (database *Database) GetRandomFiles(limit int64) ([]File, error) {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	rows, err := database.stmt.getRandomFiles.Query(limit)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	files := make([]File, 0)
+	for rows.Next() {
+		file := File{
+			Db: database,
+		}
+		err = rows.Scan(&file.ID, &file.Folder_id, &file.Filename, &file.Foldername, &file.Filesize)
+		if err != nil {
+			return nil, err
+		}
+		files = append(files, file)
+	}
+	return files, nil
+}
+
+func (database *Database) GetRandomFilesWithTag(tagID, limit int64) ([]File, error) {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	rows, err := database.stmt.getRandomFilesWithTag.Query(tagID, limit)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	files := make([]File, 0)
+	for rows.Next() {
+		file := File{
+			Db: database,
+		}
+		err = rows.Scan(&file.ID, &file.Folder_id, &file.Filename, &file.Foldername, &file.Filesize)
+		if err != nil {
+			return nil, err
+		}
+		files = append(files, file)
+	}
+	return files, nil
+}
+
+func (database *Database) GetFilesInFolder(folder_id int64, limit int64, offset int64) ([]File, error) {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	rows, err := database.stmt.getFilesInFolder.Query(folder_id, limit, offset)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	files := make([]File, 0)
+	for rows.Next() {
+		file := File{
+			Db:        database,
+			Folder_id: folder_id,
+		}
+		err = rows.Scan(&file.ID, &file.Filename, &file.Filesize, &file.Foldername)
+		if err != nil {
+			return nil, err
+		}
+		files = append(files, file)
+	}
+	return files, nil
+}
+
+func (database *Database) SearchFolders(foldername string, limit int64, offset int64) ([]Folder, error) {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	rows, err := database.stmt.searchFolders.Query("%"+foldername+"%", limit, offset)
+	if err != nil {
+		return nil, errors.New("Error searching folders at query " + err.Error())
+	}
+	defer rows.Close()
+	folders := make([]Folder, 0)
+	for rows.Next() {
+		folder := Folder{
+			Db: database,
+		}
+		err = rows.Scan(&folder.ID, &folder.Folder, &folder.Foldername)
+		if err != nil {
+			return nil, errors.New("Error scanning SearchFolders" + err.Error())
+		}
+		folders = append(folders, folder)
+	}
+	return folders, nil
+}
+
+func (database *Database) GetFile(id int64) (*File, error) {
+	file := &File{
+		Db: database,
+	}
+
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	err := database.stmt.getFile.QueryRow(id).Scan(&file.ID, &file.Folder_id, &file.Realname, &file.Filename, &file.Foldername, &file.Filesize)
+	if err != nil {
+		return nil, err
+	}
+	return file, nil
+}
+
+func (database *Database) ResetFiles() error {
+	log.Println("[db] Reset files")
+	var err error
+	_, err = database.stmt.dropFiles.Exec()
+	if err != nil {
+		return err
+	}
+	_, err = database.stmt.initFilesTable.Exec()
+	if err != nil {
+		return err
+	}
+	return err
+}
+
+func (database *Database) ResetFolder() error {
+	log.Println("[db] Reset folders")
+	var err error
+	_, err = database.stmt.dropFolder.Exec()
+	if err != nil {
+		return err
+	}
+	_, err = database.stmt.initFoldersTable.Exec()
+	if err != nil {
+		return err
+	}
+	return err
+}
+
+func (database *Database) Walk(root string, pattern []string, tagIDs []int64, userID int64) error {
+	patternDict := make(map[string]bool)
+	for _, v := range pattern {
+		patternDict[v] = true
+	}
+	log.Println("[db] Walk", root, patternDict)
+
+	tags := make([]*Tag, 0)
+	for _, tagID := range tagIDs {
+		tag, err := database.GetTag(tagID)
+		if err != nil {
+			return err
+		}
+		tags = append(tags, tag)
+	}
+
+	return filepath.Walk(root, func(path string, info os.FileInfo, err error) error {
+		if err != nil {
+			return err
+		}
+
+		if info.IsDir() {
+			return nil
+		}
+
+		// check pattern
+		ext := filepath.Ext(info.Name())
+		if _, ok := patternDict[ext]; !ok {
+			return nil
+		}
+
+		// insert file, folder will aut created
+		fileID, err := database.Insert(path, info.Size())
+		if err != nil {
+			return err
+		}
+
+		for _, tag := range tags {
+			err = database.PutTagOnFile(tag.ID, fileID, userID)
+			if err != nil {
+				return err
+			}
+		}
+		return nil
+	})
+}
+
+func (database *Database) GetFolder(folderId int64) (*Folder, error) {
+	folder := &Folder{
+		Db: database,
+	}
+
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	err := database.stmt.getFolder.QueryRow(folderId).Scan(&folder.Folder)
+	if err != nil {
+		return nil, err
+	}
+	return folder, nil
+}
+
+func (database *Database) SearchFiles(filename string, limit int64, offset int64) ([]File, error) {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	rows, err := database.stmt.searchFiles.Query("%"+filename+"%", limit, offset)
+	if err != nil {
+		return nil, errors.New("Error searching files at query " + err.Error())
+	}
+	defer rows.Close()
+	files := make([]File, 0)
+	for rows.Next() {
+		var file File = File{
+			Db: database,
+		}
+		err = rows.Scan(&file.ID, &file.Folder_id, &file.Filename, &file.Foldername, &file.Filesize)
+		if err != nil {
+			return nil, errors.New("Error scanning SearchFiles " + err.Error())
+		}
+		files = append(files, file)
+	}
+	if err = rows.Err(); err != nil {
+		return nil, errors.New("Error scanning SearchFiles exit without full result" + err.Error())
+	}
+	return files, nil
+}
+
+func (database *Database) FindFolder(folder string) (int64, error) {
+	var id int64
+
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	err := database.stmt.findFolder.QueryRow(folder).Scan(&id)
+	if err != nil {
+		return 0, err
+	}
+	return id, nil
+}
+
+func (database *Database) FindFile(folderId int64, filename string) (int64, error) {
+	var id int64
+
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	err := database.stmt.findFile.QueryRow(folderId, filename).Scan(&id)
+	if err != nil {
+		return 0, err
+	}
+	return id, nil
+}
+
+func (database *Database) InsertFolder(folder string) (int64, error) {
+
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	result, err := database.stmt.insertFolder.Exec(folder, filepath.Base(folder))
+	if err != nil {
+		return 0, err
+	}
+	lastInsertId, err := result.LastInsertId()
+	if err != nil {
+		return 0, err
+	}
+	return lastInsertId, nil
+}
+
+func (database *Database) InsertFile(folderId int64, filename string, filesize int64) (int64, error) {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	result, err := database.stmt.insertFile.Exec(folderId, filename, filename, filesize)
+	if err != nil {
+		return 0, err
+	}
+	lastInsertId, err := result.LastInsertId()
+	if err != nil {
+		return 0, err
+	}
+	return lastInsertId, nil
+}
+
+func (database *Database) Insert(path string, filesize int64) (int64, error) {
+	folder, filename := filepath.Split(path)
+	folderId, err := database.FindFolder(folder)
+	if err != nil {
+		folderId, err = database.InsertFolder(folder)
+		if err != nil {
+			return 0, err
+		}
+	}
+
+	// if file exists, skip it
+	lastInsertId, err := database.FindFile(folderId, filename)
+	if err == nil {
+		return lastInsertId, nil
+	}
+
+	lastInsertId, err = database.InsertFile(folderId, filename, filesize)
+	if err != nil {
+		return 0, err
+	}
+	return lastInsertId, nil
+}
+
+func (database *Database) UpdateFoldername(folderId int64, foldername string) error {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	_, err := database.stmt.updateFoldername.Exec(foldername, folderId)
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+func (database *Database) DeleteFile(fileId int64) error {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	// begin transaction
+	tx, err := database.sqlConn.Begin()
+	if err != nil {
+		return err
+	}
+
+	// delete file
+	_, err = tx.Stmt(database.stmt.deleteFile).Exec(fileId)
+	if err != nil {
+		tx.Rollback()
+		return err
+	}
+
+	// delete tag on file
+	_, err = tx.Stmt(database.stmt.deleteFileReferenceInFileHasTag).Exec(fileId)
+	if err != nil {
+		tx.Rollback()
+		return err
+	}
+
+	// delete reviews on file
+	_, err = tx.Stmt(database.stmt.deleteFileReferenceInReviews).Exec(fileId)
+	if err != nil {
+		tx.Rollback()
+		return err
+	}
+
+	// commit transaction
+	err = tx.Commit()
+	if err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (database *Database) UpdateFilename(fileId int64, filename string) error {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	_, err := database.stmt.updateFilename.Exec(filename, fileId)
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+func (database *Database) ResetFilename(fileId int64) error {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	_, err := database.stmt.resetFilename.Exec(fileId)
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+func (database *Database) ResetFoldername(folderId int64) error {
+	folder, err := database.GetFolder(folderId)
+	if err != nil {
+		return err
+	}
+
+	foldername := filepath.Base(folder.Folder)
+	err = database.UpdateFoldername(folderId, foldername)
+	if err != nil {
+		return err
+	}
+	return nil
+}
--- a/pkg/database/method_feedback.go
+++ b/pkg/database/method_feedback.go
@@ -0,0 +1,49 @@
+package database
+
+func (database *Database) InsertFeedback(time int64, content string, userID int64, header string) error {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	_, err := database.stmt.insertFeedback.Exec(time, content, userID, header)
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+func (database *Database) GetFeedbacks() ([]*Feedback, error) {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	rows, err := database.stmt.getFeedbacks.Query()
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+
+	feedbacks := make([]*Feedback, 0)
+	for rows.Next() {
+		feedback := &Feedback{
+			User: &User{},
+		}
+		err := rows.Scan(
+			&feedback.ID, &feedback.Time, &feedback.Content, &feedback.Header,
+			&feedback.User.ID, &feedback.User.Username, &feedback.User.Role, &feedback.User.Active, &feedback.User.AvatarId)
+		if err != nil {
+			return nil, err
+		}
+		feedbacks = append(feedbacks, feedback)
+	}
+	return feedbacks, nil
+}
+
+func (database *Database) DeleteFeedback(id int64) error {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	_, err := database.stmt.deleteFeedback.Exec(id)
+	if err != nil {
+		return err
+	}
+	return nil
+}
--- a/pkg/database/method_review.go
+++ b/pkg/database/method_review.go
@@ -0,0 +1,123 @@
+package database
+
+func (database *Database) InsertReview(review *Review) error {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	_, err := database.stmt.insertReview.Exec(
+		review.UserId,
+		review.FileId,
+		review.CreatedAt,
+		review.Content)
+	return err
+}
+
+func (database *Database) GetReviewsOnFile(fileId int64) ([]*Review, error) {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	rows, err := database.stmt.getReviewsOnFile.Query(fileId)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+
+	reviews := make([]*Review, 0)
+	for rows.Next() {
+		review := &Review{
+			User: &User{},
+			File: &File{},
+		}
+		err := rows.Scan(
+			&review.ID,
+			&review.CreatedAt,
+			&review.UpdatedAt,
+			&review.Content,
+			&review.User.ID,
+			&review.User.Username,
+			&review.User.Role,
+			&review.User.AvatarId,
+			&review.File.ID,
+			&review.File.Filename)
+		if err != nil {
+			return nil, err
+		}
+		reviews = append(reviews, review)
+	}
+	return reviews, nil
+}
+
+func (database *Database) GetReview(reviewId int64) (*Review, error) {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	row := database.stmt.getReview.QueryRow(reviewId)
+
+	review := &Review{}
+	err := row.Scan(
+		&review.ID,
+		&review.FileId,
+		&review.UserId,
+		&review.CreatedAt,
+		&review.UpdatedAt,
+		&review.Content)
+	if err != nil {
+		return nil, err
+	}
+
+	return review, nil
+}
+
+func (database *Database) UpdateReview(review *Review) error {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	_, err := database.stmt.updateReview.Exec(
+		review.Content,
+		review.UpdatedAt,
+		review.ID)
+	return err
+}
+
+func (database *Database) DeleteReview(reviewId int64) error {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	_, err := database.stmt.deleteReview.Exec(reviewId)
+	return err
+}
+
+func (database *Database) GetReviewsByUser(userId int64) ([]*Review, error) {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	rows, err := database.stmt.getReviewsByUser.Query(userId)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+
+	reviews := make([]*Review, 0)
+	for rows.Next() {
+		review := &Review{
+			User: &User{},
+			File: &File{},
+		}
+		err := rows.Scan(
+			&review.ID,
+			&review.CreatedAt,
+			&review.UpdatedAt,
+			&review.Content,
+			&review.User.ID,
+			&review.User.Username,
+			&review.User.Role,
+			&review.User.AvatarId,
+			&review.File.ID,
+			&review.File.Filename)
+		if err != nil {
+			return nil, err
+		}
+		reviews = append(reviews, review)
+	}
+	return reviews, nil
+}
--- a/pkg/database/method_tag.go
+++ b/pkg/database/method_tag.go
@@ -0,0 +1,110 @@
+package database
+
+import "errors"
+
+func (database *Database) InsertTag(tag *Tag) (int64, error) {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	result, err := database.stmt.insertTag.Exec(tag.Name, tag.Description, tag.CreatedByUserId)
+	if err != nil {
+		return 0, err
+	}
+	id, err := result.LastInsertId()
+	if err != nil {
+		return 0, err
+	}
+
+	return id, nil
+}
+
+func (database *Database) GetTag(id int64) (*Tag, error) {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	tag := &Tag{CreatedByUser: &User{}}
+	err := database.stmt.getTag.QueryRow(id).Scan(
+		&tag.ID, &tag.Name, &tag.Description,
+		&tag.CreatedByUser.ID, &tag.CreatedByUser.Username, &tag.CreatedByUser.Role, &tag.CreatedByUser.AvatarId)
+	if err != nil {
+		return nil, err
+	}
+	return tag, nil
+}
+
+func (database *Database) GetTags() ([]*Tag, error) {
+	tags := []*Tag{}
+
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	rows, err := database.stmt.getTags.Query()
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+	for rows.Next() {
+		tag := &Tag{CreatedByUser: &User{}}
+		err := rows.Scan(
+			&tag.ID, &tag.Name, &tag.Description,
+			&tag.CreatedByUser.ID, &tag.CreatedByUser.Username, &tag.CreatedByUser.Role, &tag.CreatedByUser.AvatarId)
+
+		if err != nil {
+			return nil, err
+		}
+		tags = append(tags, tag)
+	}
+	return tags, nil
+}
+
+func (database *Database) UpdateTag(tag *Tag) (error) {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	result, err := database.stmt.updateTag.Exec(tag.Name, tag.Description, tag.ID)
+	if err != nil {
+		return err
+	}
+	rowsAffected, err := result.RowsAffected()
+	if err != nil {
+		return err
+	}
+	if rowsAffected == 0 {
+		return errors.New("No rows affected")
+	}
+
+	return nil
+}
+
+// delete tag and all its references in file_has_tag
+func (database *Database) DeleteTag(id int64) error {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	// begin transaction
+	tx, err := database.sqlConn.Begin()
+	if err != nil {
+		return err
+	}
+
+	// delete tag
+	_, err = tx.Stmt(database.stmt.deleteTag).Exec(id)
+	if err != nil {
+		tx.Rollback()
+		return err
+	}
+
+	// delete file_has_tag
+	_, err = tx.Stmt(database.stmt.deleteTagReferenceInFileHasTag).Exec(id)
+	if err != nil {
+		tx.Rollback()
+		return err
+	}
+
+	// commit transaction
+	err = tx.Commit()
+	if err != nil {
+		return err
+	}
+	return nil
+}
--- a/pkg/database/method_tag_and_file.go
+++ b/pkg/database/method_tag_and_file.go
@@ -0,0 +1,48 @@
+package database
+
+func (database *Database) PutTagOnFile(tagID, fileID, userID int64) error {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	_, err := database.stmt.putTagOnFile.Exec(tagID, fileID, userID)
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+func (database *Database) GetTagsOnFile(fileID int64) ([]*Tag, error) {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	rows, err := database.stmt.getTagsOnFile.Query(fileID)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+
+	tags := make([]*Tag, 0)
+	for rows.Next() {
+		tag := &Tag{}
+		err = rows.Scan(&tag.ID, &tag.Name, &tag.Description, &tag.CreatedByUserId)
+		if err != nil {
+			return nil, err
+		}
+		tags = append(tags, tag)
+	}
+	return tags, nil
+}
+
+func (database *Database) DeleteTagOnFile(tagID, fileID int64) error {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	result, err := database.stmt.deleteTagOnFile.Exec(tagID, fileID)
+	if err != nil {
+		return err
+	}
+	if rows, _ := result.RowsAffected(); rows == 0 {
+		return ErrTagNotFound
+	}
+	return nil
+}
--- a/pkg/database/method_user.go
+++ b/pkg/database/method_user.go
@@ -0,0 +1,138 @@
+package database
+
+func (database *Database) Login(username string, password string) (*User, error) {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	user := &User{}
+
+	// get user from database
+	err := database.stmt.getUser.QueryRow(username, password).Scan(&user.ID, &user.Username, &user.Role, &user.Active, &user.AvatarId)
+	if err != nil {
+		return user, err
+	}
+	return user, nil
+}
+
+func (database *Database) LoginAsAnonymous() (*User, error) {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	user := &User{}
+
+	// get user from database
+	err := database.stmt.getAnonymousUser.QueryRow().Scan(&user.ID, &user.Username, &user.Role, &user.AvatarId)
+	if err != nil {
+		return user, err
+	}
+	return user, nil
+}
+
+func (database *Database) Register(username string, password string, usertype int64) error {
+	countAdmin, err := database.CountAdmin()
+	if err != nil {
+		return err
+	}
+
+	active := false
+	if countAdmin == 0 {
+		active = true
+	}
+
+	// active normal user by default
+	if usertype == 2 {
+		active = true
+	}
+
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	_, err = database.stmt.insertUser.Exec(username, password, usertype, active, 0)
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+func (database *Database) GetUserById(id int64) (*User, error) {
+	user := &User{}
+
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	// get user from database
+	err := database.stmt.getUserById.QueryRow(id).Scan(&user.ID, &user.Username, &user.Role, &user.Active, &user.AvatarId)
+	if err != nil {
+		return user, err
+	}
+	return user, nil
+}
+
+func (database *Database) CountAdmin() (int64, error) {
+	var count int64
+
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	err := database.stmt.countAdmin.QueryRow().Scan(&count)
+	if err != nil {
+		return 0, err
+	}
+	return count, nil
+}
+
+func (database *Database) GetUsers() ([]*User, error) {
+	users := make([]*User, 0)
+
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	rows, err := database.stmt.getUsers.Query()
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+
+	for rows.Next() {
+		user := &User{}
+		err = rows.Scan(&user.ID, &user.Username, &user.Role, &user.Active, &user.AvatarId)
+		if err != nil {
+			return nil, err
+		}
+		users = append(users, user)
+	}
+	return users, nil
+}
+
+func (database *Database) UpdateUserActive(id int64, active bool) error {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	_, err := database.stmt.updateUserActive.Exec(active, id)
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+func (database *Database) UpdateUsername(id int64, username string) error {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	_, err := database.stmt.updateUsername.Exec(username, id)
+	if err != nil {
+		return err
+	}
+	return nil
+}
+
+func (database *Database) UpdateUserPassword(id int64, password string) error {
+	database.singleThreadLock.Lock()
+	defer database.singleThreadLock.Unlock()
+
+	_, err := database.stmt.updateUserPassword.Exec(password, id)
+	if err != nil {
+		return err
+	}
+	return nil
+}
--- a/pkg/database/sql_stmt.go
+++ b/pkg/database/sql_stmt.go
@@ -0,0 +1,776 @@
+package database
+
+import (
+	"database/sql"
+)
+
+var initFilesTableQuery = `CREATE TABLE IF NOT EXISTS files (
+	id INTEGER PRIMARY KEY,
+	folder_id INTEGER NOT NULL,
+	realname TEXT NOT NULL,
+	filename TEXT NOT NULL,
+	filesize INTEGER NOT NULL,
+	FOREIGN KEY(folder_id) REFERENCES folders(id)
+);`
+
+var initFoldersTableQuery = `CREATE TABLE IF NOT EXISTS folders (
+	id INTEGER PRIMARY KEY,
+	folder TEXT NOT NULL,
+	foldername TEXT NOT NULL
+);`
+
+var initFeedbacksTableQuery = `CREATE TABLE IF NOT EXISTS feedbacks (
+	id INTEGER PRIMARY KEY,
+	time INTEGER NOT NULL,
+	content TEXT NOT NULL,
+	user_id INTEGER NOT NULL,
+	header TEXT NOT NULL
+);`
+
+// User table schema definition
+// role: 0 - Anonymous User, 1 - Admin, 2 - User
+var initUsersTableQuery = `CREATE TABLE IF NOT EXISTS users (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	username TEXT NOT NULL UNIQUE,
+	password TEXT NOT NULL,
+	role INTEGER NOT NULL,
+	active BOOLEAN NOT NULL,
+	avatar_id INTEGER NOT NULL,
+	FOREIGN KEY(avatar_id) REFERENCES avatars(id)
+);`
+
+var initAvatarsTableQuery = `CREATE TABLE IF NOT EXISTS avatars (
+	id INTEGER PRIMARY KEY,
+	avatarname TEXT NOT NULL,
+	avatar BLOB NOT NULL
+);`
+
+var initTagsTableQuery = `CREATE TABLE IF NOT EXISTS tags (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	name TEXT NOT NULL UNIQUE,
+	description TEXT NOT NULL,
+	created_by_user_id INTEGER NOT NULL,
+	FOREIGN KEY(created_by_user_id) REFERENCES users(id)
+);`
+
+var initFileHasTagTableQuery = `CREATE TABLE IF NOT EXISTS file_has_tag (
+	file_id INTEGER NOT NULL,
+	tag_id INTEGER NOT NULL,
+	user_id INTEGER NOT NULL,
+	PRIMARY KEY (file_id, tag_id),
+	FOREIGN KEY(user_id) REFERENCES users(id)
+	FOREIGN KEY (file_id) REFERENCES files(id),
+	FOREIGN KEY (tag_id) REFERENCES tags(id)
+);`
+
+var initLikesTableQuery = `CREATE TABLE IF NOT EXISTS likes (
+	user_id INTEGER NOT NULL,
+	file_id INTEGER NOT NULL,
+	PRIMARY KEY (user_id, file_id),
+	FOREIGN KEY (user_id) REFERENCES users(id),
+	FOREIGN KEY (file_id) REFERENCES files(id)
+);`
+
+var initReviewsTableQuery = `CREATE TABLE IF NOT EXISTS reviews (
+	id INTEGER PRIMARY KEY,
+	user_id INTEGER NOT NULL,
+	file_id INTEGER NOT NULL,
+	created_at INTEGER NOT NULL,
+	updated_at INTEGER NOT NULL DEFAULT 0,
+	content TEXT NOT NULL,
+	FOREIGN KEY (user_id) REFERENCES users(id),
+	FOREIGN KEY (file_id) REFERENCES files(id)
+);`
+
+var initPlaybacksTableQuery = `CREATE TABLE IF NOT EXISTS playbacks (
+	id INTEGER PRIMARY KEY,
+	user_id INTEGER NOT NULL,
+	file_id INTEGER NOT NULL,
+	time INTEGER NOT NULL,
+	mothod INTEGER NOT NULL,
+	FOREIGN KEY (user_id) REFERENCES users(id),
+	FOREIGN KEY (file_id) REFERENCES files(id)
+);`
+
+var initLogsTableQuery = `CREATE TABLE IF NOT EXISTS logs (
+	id INTEGER PRIMARY KEY,
+	time INTEGER NOT NULL,
+	message TEXT NOT NULL,
+	user_id INTEGER NOT NULL,
+	FOREIGN KEY (user_id) REFERENCES users(id)
+);`
+
+var initTmpfsTableQuery = `CREATE TABLE IF NOT EXISTS tmpfs (
+	id INTEGER PRIMARY KEY,
+	path TEXT NOT NULL,
+	size INTEGER NOT NULL,
+	file_id INTEGER NOT NULL,
+	ffmpeg_config TEXT NOT NULL,
+	created_time INTEGER NOT NULL,
+	accessed_time INTEGER NOT NULL,
+	FOREIGN KEY (file_id) REFERENCES files(id)
+);`
+
+var insertFolderQuery = `INSERT INTO folders (folder, foldername)
+VALUES (?, ?);`
+
+var findFolderQuery = `SELECT id FROM folders WHERE folder = ? LIMIT 1;`
+
+var findFileQuery = `SELECT id FROM files WHERE folder_id = ? AND realname = ? LIMIT 1;`
+
+var insertFileQuery = `INSERT INTO files (folder_id, realname, filename, filesize)
+VALUES (?, ?, ?, ?);`
+
+var searchFilesQuery = `SELECT
+files.id, files.folder_id, files.filename, folders.foldername, files.filesize
+FROM files
+JOIN folders ON files.folder_id = folders.id
+WHERE filename LIKE ?
+ORDER BY folders.foldername, files.filename
+LIMIT ? OFFSET ?;`
+
+var getFolderQuery = `SELECT folder FROM folders WHERE id = ? LIMIT 1;`
+
+var dropFilesQuery = `DROP TABLE files;`
+
+var dropFolderQuery = `DROP TABLE folders;`
+
+var getFileQuery = `SELECT
+files.id, files.folder_id, files.realname, files.filename, folders.foldername, files.filesize
+FROM files
+JOIN folders ON files.folder_id = folders.id
+WHERE files.id = ?
+LIMIT 1;`
+
+var searchFoldersQuery = `SELECT
+id, folder, foldername
+FROM folders
+WHERE foldername LIKE ?
+ORDER BY foldername
+LIMIT ? OFFSET ?;`
+
+var getFilesInFolderQuery = `SELECT
+files.id, files.filename, files.filesize, folders.foldername
+FROM files
+JOIN folders ON files.folder_id = folders.id
+WHERE folder_id = ?
+ORDER BY files.filename
+LIMIT ? OFFSET ?;`
+
+var getRandomFilesQuery = `SELECT
+files.id, files.folder_id, files.filename, folders.foldername, files.filesize
+FROM files
+JOIN folders ON files.folder_id = folders.id
+ORDER BY RANDOM()
+LIMIT ?;`
+
+var getRandomFilesWithTagQuery = `SELECT
+files.id, files.folder_id, files.filename, folders.foldername, files.filesize
+FROM file_has_tag
+JOIN files ON file_has_tag.file_id = files.id
+JOIN folders ON files.folder_id = folders.id
+WHERE file_has_tag.tag_id = ?
+ORDER BY RANDOM()
+LIMIT ?;`
+
+var insertFeedbackQuery = `INSERT INTO feedbacks (time, content, user_id, header)
+VALUES (?, ?, ?, ?);`
+
+var getFeedbacksQuery = `SELECT
+feedbacks.id, feedbacks.time, feedbacks.content, feedbacks.header,
+users.id, users.username, users.role, users.active, users.avatar_id
+FROM feedbacks
+JOIN users ON feedbacks.user_id = users.id
+ORDER BY feedbacks.time
+;`
+
+var deleteFeedbackQuery = `DELETE FROM feedbacks WHERE id = ?;`
+
+var insertUserQuery = `INSERT INTO users (username, password, role, active, avatar_id)
+VALUES (?, ?, ?, ?, ?);`
+
+var countUserQuery = `SELECT count(*) FROM users;`
+
+var countAdminQuery = `SELECT count(*) FROM users WHERE role= 1;`
+
+var getUserQuery = `SELECT id, username, role, active, avatar_id FROM users WHERE username = ? AND password = ? LIMIT 1;`
+
+var getUsersQuery = `SELECT id, username, role, active, avatar_id FROM users;`
+
+var getUserByIdQuery = `SELECT id, username, role, active, avatar_id FROM users WHERE id = ? LIMIT 1;`
+
+var updateUserActiveQuery = `UPDATE users SET active = ? WHERE id = ?;`
+
+var updateUsernameQuery = `UPDATE users SET username = ? WHERE id = ?;`
+
+var updateUserPasswordQuery = `UPDATE users SET password = ? WHERE id = ?;`
+
+var getAnonymousUserQuery = `SELECT id, username, role, avatar_id FROM users WHERE role = 0 LIMIT 1;`
+
+var insertTagQuery = `INSERT INTO tags (name, description, created_by_user_id) VALUES (?, ?, ?);`
+
+var deleteTagQuery = `DELETE FROM tags WHERE id = ?;`
+
+var getTagQuery = `SELECT
+tags.id, tags.name, tags.description,
+users.id, users.username, users.role, users.avatar_id
+FROM tags
+JOIN users ON tags.created_by_user_id = users.id
+WHERE tags.id = ? LIMIT 1;`
+
+var getTagsQuery = `SELECT
+tags.id, tags.name, tags.description,
+users.id, users.username, users.role, users.avatar_id
+FROM tags
+JOIN users ON tags.created_by_user_id = users.id
+ORDER BY tags.name
+;`
+
+var updateTagQuery = `UPDATE tags SET name = ?, description = ? WHERE id = ?;`
+
+var putTagOnFileQuery = `INSERT OR IGNORE INTO file_has_tag (tag_id, file_id, user_id) VALUES (?, ?, ?);`
+
+var getTagsOnFileQuery = `SELECT
+tags.id, tags.name, tags.description, tags.created_by_user_id
+FROM file_has_tag
+JOIN tags ON file_has_tag.tag_id = tags.id
+WHERE file_has_tag.file_id = ?
+ORDER BY tags.name
+;`
+
+var deleteTagOnFileQuery = `DELETE FROM file_has_tag WHERE tag_id = ? AND file_id = ?;`
+
+var deleteTagReferenceInFileHasTagQuery = `DELETE FROM file_has_tag WHERE tag_id = ?;`
+
+var updateFoldernameQuery = `UPDATE folders SET foldername = ? WHERE id = ?;`
+
+var insertReviewQuery = `INSERT INTO reviews (user_id, file_id, created_at, content)
+VALUES (?, ?, ?, ?);`
+
+var getReviewsOnFileQuery = `SELECT
+reviews.id, reviews.created_at, reviews.updated_at, reviews.content,
+users.id, users.username, users.role, users.avatar_id,
+files.id, files.filename
+FROM reviews
+JOIN users ON reviews.user_id = users.id
+JOIN files ON reviews.file_id = files.id
+WHERE reviews.file_id = ?
+ORDER BY reviews.created_at
+;`
+
+var getReviewQuery = `SELECT id, file_id, user_id, created_at, updated_at, content FROM reviews WHERE id = ? LIMIT 1;`
+
+var updateReviewQuery = `UPDATE reviews SET content = ?, updated_at = ? WHERE id = ?;`
+
+var deleteReviewQuery = `DELETE FROM reviews WHERE id = ?;`
+
+var getReviewsByUserQuery = `SELECT
+reviews.id, reviews.created_at, reviews.updated_at, reviews.content,
+users.id, users.username, users.role, users.avatar_id,
+files.id, files.filename
+FROM reviews
+JOIN users ON reviews.user_id = users.id
+JOIN files ON reviews.file_id = files.id
+WHERE reviews.user_id = ?
+ORDER BY reviews.created_at
+;`
+
+var deleteFileQuery = `DELETE FROM files WHERE id = ?;`
+
+var deleteFileReferenceInFileHasTagQuery = `DELETE FROM file_has_tag WHERE file_id = ?;`
+
+var deleteFileReferenceInReviewsQuery = `DELETE FROM reviews WHERE file_id = ?;`
+
+var updateFilenameQuery = `UPDATE files SET filename = ? WHERE id = ?;`
+
+var resetFilenameQuery = `UPDATE files SET filename = realname WHERE id = ?;`
+
+type Stmt struct {
+	initFilesTable                  *sql.Stmt
+	initFoldersTable                *sql.Stmt
+	initFeedbacksTable              *sql.Stmt
+	initUsersTable                  *sql.Stmt
+	initAvatarsTable                *sql.Stmt
+	initTagsTable                   *sql.Stmt
+	initFileHasTag                  *sql.Stmt
+	initLikesTable                  *sql.Stmt
+	initReviewsTable                *sql.Stmt
+	initPlaybacksTable              *sql.Stmt
+	initLogsTable                   *sql.Stmt
+	initTmpfsTable                  *sql.Stmt
+	insertFolder                    *sql.Stmt
+	insertFile                      *sql.Stmt
+	findFolder                      *sql.Stmt
+	findFile                        *sql.Stmt
+	searchFiles                     *sql.Stmt
+	getFolder                       *sql.Stmt
+	dropFiles                       *sql.Stmt
+	dropFolder                      *sql.Stmt
+	getFile                         *sql.Stmt
+	searchFolders                   *sql.Stmt
+	getFilesInFolder                *sql.Stmt
+	getRandomFiles                  *sql.Stmt
+	getRandomFilesWithTag           *sql.Stmt
+	insertFeedback                  *sql.Stmt
+	getFeedbacks                    *sql.Stmt
+	deleteFeedback                  *sql.Stmt
+	insertUser                      *sql.Stmt
+	countUser                       *sql.Stmt
+	countAdmin                      *sql.Stmt
+	getUser                         *sql.Stmt
+	getUsers                        *sql.Stmt
+	getUserById                     *sql.Stmt
+	updateUserActive                *sql.Stmt
+	updateUsername                  *sql.Stmt
+	updateUserPassword              *sql.Stmt
+	getAnonymousUser                *sql.Stmt
+	insertTag                       *sql.Stmt
+	deleteTag                       *sql.Stmt
+	getTag                          *sql.Stmt
+	getTags                         *sql.Stmt
+	updateTag                       *sql.Stmt
+	putTagOnFile                    *sql.Stmt
+	getTagsOnFile                   *sql.Stmt
+	deleteTagOnFile                 *sql.Stmt
+	deleteTagReferenceInFileHasTag  *sql.Stmt
+	updateFoldername                *sql.Stmt
+	insertReview                    *sql.Stmt
+	getReviewsOnFile                *sql.Stmt
+	getReview                       *sql.Stmt
+	updateReview                    *sql.Stmt
+	deleteReview                    *sql.Stmt
+	getReviewsByUser                *sql.Stmt
+	deleteFile                      *sql.Stmt
+	deleteFileReferenceInFileHasTag *sql.Stmt
+	deleteFileReferenceInReviews    *sql.Stmt
+	updateFilename                  *sql.Stmt
+	resetFilename                   *sql.Stmt
+}
+
+func NewPreparedStatement(sqlConn *sql.DB) (*Stmt, error) {
+	var err error
+
+	stmt := &Stmt{}
+
+	// init files table
+	stmt.initFilesTable, err = sqlConn.Prepare(initFilesTableQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init folders table
+	stmt.initFoldersTable, err = sqlConn.Prepare(initFoldersTableQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init feedbacks tables
+	stmt.initFeedbacksTable, err = sqlConn.Prepare(initFeedbacksTableQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init users table
+	stmt.initUsersTable, err = sqlConn.Prepare(initUsersTableQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init avatars table
+	stmt.initAvatarsTable, err = sqlConn.Prepare(initAvatarsTableQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init tags table
+	stmt.initTagsTable, err = sqlConn.Prepare(initTagsTableQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init file_has_tag table
+	stmt.initFileHasTag, err = sqlConn.Prepare(initFileHasTagTableQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init likes table
+	stmt.initLikesTable, err = sqlConn.Prepare(initLikesTableQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init reviews table
+	stmt.initReviewsTable, err = sqlConn.Prepare(initReviewsTableQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init playbacks table
+	stmt.initPlaybacksTable, err = sqlConn.Prepare(initPlaybacksTableQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init logs table
+	stmt.initLogsTable, err = sqlConn.Prepare(initLogsTableQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init tmpfs table
+	stmt.initTmpfsTable, err = sqlConn.Prepare(initTmpfsTableQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// run init statement
+	_, err = stmt.initFilesTable.Exec()
+	if err != nil {
+		return nil, err
+	}
+	_, err = stmt.initFoldersTable.Exec()
+	if err != nil {
+		return nil, err
+	}
+	_, err = stmt.initFeedbacksTable.Exec()
+	if err != nil {
+		return nil, err
+	}
+	_, err = stmt.initUsersTable.Exec()
+	if err != nil {
+		return nil, err
+	}
+	_, err = stmt.initAvatarsTable.Exec()
+	if err != nil {
+		return nil, err
+	}
+	_, err = stmt.initTagsTable.Exec()
+	if err != nil {
+		return nil, err
+	}
+	_, err = stmt.initFileHasTag.Exec()
+	if err != nil {
+		return nil, err
+	}
+	_, err = stmt.initLikesTable.Exec()
+	if err != nil {
+		return nil, err
+	}
+	_, err = stmt.initReviewsTable.Exec()
+	if err != nil {
+		return nil, err
+	}
+	_, err = stmt.initPlaybacksTable.Exec()
+	if err != nil {
+		return nil, err
+	}
+	_, err = stmt.initLogsTable.Exec()
+	if err != nil {
+		return nil, err
+	}
+	_, err = stmt.initTmpfsTable.Exec()
+	if err != nil {
+		return nil, err
+	}
+
+	// init insert folder statement
+	stmt.insertFolder, err = sqlConn.Prepare(insertFolderQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init findFolder statement
+	stmt.findFolder, err = sqlConn.Prepare(findFolderQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init findFile statement
+	stmt.findFile, err = sqlConn.Prepare(findFileQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init insertFile stmt
+	stmt.insertFile, err = sqlConn.Prepare(insertFileQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init searchFile stmt
+	stmt.searchFiles, err = sqlConn.Prepare(searchFilesQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init getFolder stmt
+	stmt.getFolder, err = sqlConn.Prepare(getFolderQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init dropFolder stmt
+	stmt.dropFolder, err = sqlConn.Prepare(dropFolderQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init dropFiles stmt
+	stmt.dropFiles, err = sqlConn.Prepare(dropFilesQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init getFile stmt
+	stmt.getFile, err = sqlConn.Prepare(getFileQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init searchFolder stmt
+	stmt.searchFolders, err = sqlConn.Prepare(searchFoldersQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init getFilesInFolder stmt
+	stmt.getFilesInFolder, err = sqlConn.Prepare(getFilesInFolderQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init getRandomFiles
+	stmt.getRandomFiles, err = sqlConn.Prepare(getRandomFilesQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init getRandomFilesWithTag
+	stmt.getRandomFilesWithTag, err = sqlConn.Prepare(getRandomFilesWithTagQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init insertFeedback
+	stmt.insertFeedback, err = sqlConn.Prepare(insertFeedbackQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init getFeedbacks
+	stmt.getFeedbacks, err = sqlConn.Prepare(getFeedbacksQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init deleteFeedback
+	stmt.deleteFeedback, err = sqlConn.Prepare(deleteFeedbackQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init insertUser
+	stmt.insertUser, err = sqlConn.Prepare(insertUserQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init countUser
+	stmt.countUser, err = sqlConn.Prepare(countUserQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init countAdmin
+	stmt.countAdmin, err = sqlConn.Prepare(countAdminQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init getUser
+	stmt.getUser, err = sqlConn.Prepare(getUserQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init getUsers
+	stmt.getUsers, err = sqlConn.Prepare(getUsersQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init getUserById
+	stmt.getUserById, err = sqlConn.Prepare(getUserByIdQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init updateUserActive
+	stmt.updateUserActive, err = sqlConn.Prepare(updateUserActiveQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init updateUsername
+	stmt.updateUsername, err = sqlConn.Prepare(updateUsernameQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init updateUserPassword
+	stmt.updateUserPassword, err = sqlConn.Prepare(updateUserPasswordQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init getAnonymousUser
+	stmt.getAnonymousUser, err = sqlConn.Prepare(getAnonymousUserQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// insert Anonymous user if users is empty
+	userCount := 0
+	err = stmt.countUser.QueryRow().Scan(&userCount)
+	if err != nil {
+		return nil, err
+	}
+	if userCount == 0 {
+		_, err = stmt.insertUser.Exec("Anonymous user", "", 0, 1, 0)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	// init insertTag
+	stmt.insertTag, err = sqlConn.Prepare(insertTagQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init deleteTag
+	stmt.deleteTag, err = sqlConn.Prepare(deleteTagQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init getTag
+	stmt.getTag, err = sqlConn.Prepare(getTagQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init getTags
+	stmt.getTags, err = sqlConn.Prepare(getTagsQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init updateTag
+	stmt.updateTag, err = sqlConn.Prepare(updateTagQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init putTagOnFile
+	stmt.putTagOnFile, err = sqlConn.Prepare(putTagOnFileQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init getTagsOnFile
+	stmt.getTagsOnFile, err = sqlConn.Prepare(getTagsOnFileQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init deleteTagOnFile
+	stmt.deleteTagOnFile, err = sqlConn.Prepare(deleteTagOnFileQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init deleteTagReferenceInFileHasTag
+	stmt.deleteTagReferenceInFileHasTag, err = sqlConn.Prepare(
+		deleteTagReferenceInFileHasTagQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init updateFoldername
+	stmt.updateFoldername, err = sqlConn.Prepare(updateFoldernameQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init insertReview
+	stmt.insertReview, err = sqlConn.Prepare(insertReviewQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init getReviewsOnFile
+	stmt.getReviewsOnFile, err = sqlConn.Prepare(getReviewsOnFileQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init getReview
+	stmt.getReview, err = sqlConn.Prepare(getReviewQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init updateReview
+	stmt.updateReview, err = sqlConn.Prepare(updateReviewQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init deleteReview
+	stmt.deleteReview, err = sqlConn.Prepare(deleteReviewQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init getReviewsByUser
+	stmt.getReviewsByUser, err = sqlConn.Prepare(getReviewsByUserQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init deleteFile
+	stmt.deleteFile, err = sqlConn.Prepare(deleteFileQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init deleteFileReferenceInFileHasTag
+	stmt.deleteFileReferenceInFileHasTag, err = sqlConn.Prepare(
+		deleteFileReferenceInFileHasTagQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init deleteFileReferenceInReviews
+	stmt.deleteFileReferenceInReviews, err = sqlConn.Prepare(
+		deleteFileReferenceInReviewsQuery)
+	if err != nil {
+		return nil, err
+	}
+	
+	// init updateFilename
+	stmt.updateFilename, err = sqlConn.Prepare(updateFilenameQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	// init resetFilename
+	stmt.resetFilename, err = sqlConn.Prepare(resetFilenameQuery)
+	if err != nil {
+		return nil, err
+	}
+
+	return stmt, err
+}
--- a/pkg/database/struct.go
+++ b/pkg/database/struct.go
@@ -0,0 +1,73 @@
+package database
+
+import (
+	"path/filepath"
+)
+
+type File struct {
+	Db         *Database `json:"-"`
+	ID         int64     `json:"id"`
+	Folder_id  int64     `json:"folder_id"`
+	Foldername string    `json:"foldername"`
+	Realname   string    `json:"-"`
+	Filename   string    `json:"filename"`
+	Filesize   int64     `json:"filesize"`
+}
+
+type Folder struct {
+	Db         *Database `json:"-"`
+	ID         int64     `json:"id"`
+	Folder     string    `json:"-"`
+	Foldername string    `json:"foldername"`
+}
+
+type User struct {
+	ID       int64  `json:"id"`
+	Username string `json:"username"`
+	Password string `json:"-"`
+	Role     int64  `json:"role"`
+	Active   bool   `json:"active"`
+	AvatarId int64  `json:"avatar_id"`
+}
+
+type Tag struct {
+	ID              int64  `json:"id"`
+	Name            string `json:"name"`
+	Description     string `json:"description"`
+	CreatedByUserId int64  `json:"created_by_user_id"`
+	CreatedByUser   *User  `json:"created_by_user"`
+}
+
+type Review struct {
+	ID        int64  `json:"id"`
+	FileId    int64  `json:"file_id"`
+	File      *File  `json:"file"`
+	UserId    int64  `json:"user_id"`
+	User      *User  `json:"user"`
+	CreatedAt int64  `json:"created_at"`
+	UpdatedAt int64  `json:"updated_at"`
+	Content   string `json:"content"`
+}
+
+type Feedback struct {
+	ID      int64  `json:"id"`
+	UserId  int64  `json:"user_id"`
+	User    *User  `json:"user"`
+	Content string `json:"content"`
+	Header  string `json:"header"`
+	Time    int64  `json:"time"`
+}
+
+var (
+	RoleAnonymous = int64(0)
+	RoleAdmin     = int64(1)
+	RoleUser      = int64(2)
+)
+
+func (f *File) Path() (string, error) {
+	folder, err := f.Db.GetFolder(f.Folder_id)
+	if err != nil {
+		return "", err
+	}
+	return filepath.Join(folder.Folder, f.Realname), nil
+}
--- a/pkg/tmpfs/tmpfs.go
+++ b/pkg/tmpfs/tmpfs.go
@@ -0,0 +1,91 @@
+package tmpfs
+
+import (
+	"log"
+	"msw-open-music/pkg/commonconfig"
+	"os"
+	"path/filepath"
+	"strconv"
+	"sync"
+	"time"
+)
+
+type Tmpfs struct {
+	record      map[string]int64
+	Config      commonconfig.TmpfsConfig
+	wg          sync.WaitGroup
+	recordLocks map[string]*sync.Mutex
+}
+
+func (tmpfs *Tmpfs) GetObjFilePath(id int64, ffmpegConfig commonconfig.FfmpegConfig) string {
+	return filepath.Join(tmpfs.Config.Root, strconv.FormatInt(id, 10)+"."+ffmpegConfig.Name+"."+ffmpegConfig.Format)
+}
+
+func (tmpfs *Tmpfs) GetLock(filename string) *sync.Mutex {
+	if _, ok := tmpfs.recordLocks[filename]; !ok {
+		tmpfs.recordLocks[filename] = &sync.Mutex{}
+	}
+	return tmpfs.recordLocks[filename]
+}
+
+func (tmpfs *Tmpfs) Lock(filename string) {
+	tmpfs.GetLock(filename).Lock()
+}
+
+func (tmpfs *Tmpfs) Unlock(filename string) {
+	tmpfs.GetLock(filename).Unlock()
+}
+
+func NewTmpfs(config commonconfig.TmpfsConfig) *Tmpfs {
+	tmpfs := &Tmpfs{
+		record:      make(map[string]int64),
+		Config:      config,
+		recordLocks: make(map[string]*sync.Mutex),
+	}
+	// check if the directory exists
+	if _, err := os.Stat(tmpfs.Config.Root); os.IsNotExist(err) {
+		err = os.MkdirAll(tmpfs.Config.Root, 0755)
+		if err != nil {
+			log.Fatalln("[tmpfs] Failed to create directory", tmpfs.Config.Root)
+		}
+	}
+	tmpfs.wg.Add(1)
+	go tmpfs.Cleaner()
+	return tmpfs
+}
+
+func (tmpfs *Tmpfs) Record(filename string) {
+	tmpfs.record[filename] = time.Now().Unix()
+}
+
+func (tmpfs *Tmpfs) Exits(filename string) bool {
+	_, ok := tmpfs.record[filename]
+	return ok
+}
+
+func (tmpfs *Tmpfs) Cleaner() {
+	var err error
+	for {
+		now := time.Now().Unix()
+		for path, lock := range tmpfs.recordLocks {
+			lock.Lock()
+			recordTime, ok := tmpfs.record[path]
+			if !ok {
+				lock.Unlock()
+				continue
+			}
+			if now-recordTime > tmpfs.Config.FileLifeTime {
+				err = os.Remove(path)
+				if err != nil {
+					log.Println("[tmpfs] Failed to remove file", err)
+				}
+				log.Println("[tmpfs] Deleted file", path)
+				delete(tmpfs.record, path)
+				delete(tmpfs.recordLocks, path)
+			}
+			lock.Unlock()
+		}
+
+		time.Sleep(time.Second)
+	}
+}
--- a/internal/pkg/tmpfs/tmpfs_test.go
+++ b/internal/pkg/tmpfs/tmpfs_test.go
--- a/web/README.md
+++ b/web/README.md
@@ -1,39 +1,6 @@
-# msw-open-music web font-end
+# Getting Started with Create React App

-This msw-open-music project was bootstrapped with `Create React App`
-
-## Group 9 information
-
-| Name   | Name (EN)     | No         |
-| ------ | ------------- | ---------- |
-| 陈永源 | CHEN Yongyuan | 1930006025 |
-| 鲁雷   | Lu Lei        | 2030026101 |
-| 张滨玮 | Zhang Binwei  | 2030026197 |
-| 丁俊超 | Ding Junchao  | 2030026258 |
-| 邱星越 | Qiu Xingyue   | 2030026119 |
-| 李真晔 | Li Zhenye     | 2030006104 |
-
-
-
-## URL References
-
- `/#/` Default home page. Generate random files.
- `/#/search-files` Search files
- `/#/search-folders` Search folders
- `/#/folder/:id` Show files in the folder
- `/#/file/:id` Show file's information
- `/#/file/:id/share` Share a specific file
- `/#/file/:id/review` Review a file
- `/#/manage` Manage system setting and status
- `/#/login` Login
- `/#/register/` Register
- `/#/profile/:id` Profile of a user
-
-## HOW TO DEPLOY?
-
-Welcome to visit the demo <https://demo.uicbbs.com>
-
-Put the files under `build` folder to your HTTP server (Apache, nginx, caddy, etc.) root folder.
+This project was bootstrapped with [Create React App](https://github.com/facebook/create-react-app).

 ## Available Scripts

@@ -47,6 +14,11 @@ Open [http://localhost:3000](http://localhost:3000) to view it in the browser.
 The page will reload if you make edits.\
 You will also see any lint errors in the console.

+### `npm test`
+
+Launches the test runner in the interactive watch mode.\
+See the section about [running tests](https://facebook.github.io/create-react-app/docs/running-tests) for more information.
+
 ### `npm run build`

 Builds the app for production to the `build` folder.\
@@ -56,3 +28,43 @@ The build is minified and the filenames include the hashes.\
 Your app is ready to be deployed!

 See the section about [deployment](https://facebook.github.io/create-react-app/docs/deployment) for more information.
+
+### `npm run eject`
+
+**Note: this is a one-way operation. Once you `eject`, you can’t go back!**
+
+If you aren’t satisfied with the build tool and configuration choices, you can `eject` at any time. This command will remove the single build dependency from your project.
+
+Instead, it will copy all the configuration files and the transitive dependencies (webpack, Babel, ESLint, etc) right into your project so you have full control over them. All of the commands except `eject` will still work, but they will point to the copied scripts so you can tweak them. At this point you’re on your own.
+
+You don’t have to ever use `eject`. The curated feature set is suitable for small and middle deployments, and you shouldn’t feel obligated to use this feature. However we understand that this tool wouldn’t be useful if you couldn’t customize it when you are ready for it.
+
+## Learn More
+
+You can learn more in the [Create React App documentation](https://facebook.github.io/create-react-app/docs/getting-started).
+
+To learn React, check out the [React documentation](https://reactjs.org/).
+
+### Code Splitting
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/code-splitting](https://facebook.github.io/create-react-app/docs/code-splitting)
+
+### Analyzing the Bundle Size
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/analyzing-the-bundle-size](https://facebook.github.io/create-react-app/docs/analyzing-the-bundle-size)
+
+### Making a Progressive Web App
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/making-a-progressive-web-app](https://facebook.github.io/create-react-app/docs/making-a-progressive-web-app)
+
+### Advanced Configuration
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/advanced-configuration](https://facebook.github.io/create-react-app/docs/advanced-configuration)
+
+### Deployment
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/deployment](https://facebook.github.io/create-react-app/docs/deployment)
+
+### `npm run build` fails to minify
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/troubleshooting#npm-run-build-fails-to-minify](https://facebook.github.io/create-react-app/docs/troubleshooting#npm-run-build-fails-to-minify)
--- a/web/package-lock.json
+++ b/web/package-lock.json
@@ -13,9 +13,9 @@
        "@testing-library/user-event": "^12.8.3",
        "react": "^17.0.2",
        "react-dom": "^17.0.2",
-        "react-router": "^6.0.2",
-        "react-router-dom": "^6.0.2",
-        "react-scripts": "4.0.3",
+        "react-router": "^6.3.0",
+        "react-router-dom": "^6.3.0",
+        "react-scripts": "^4.0.3",
        "water.css": "^2.1.1",
        "web-vitals": "^1.1.2"
      },
@@ -5687,13 +5687,9 @@
      }
    },
    "node_modules/caniuse-lite": {
-      "version": "1.0.30001280",
-      "resolved": "https://registry.npmmirror.com/caniuse-lite/download/caniuse-lite-1.0.30001280.tgz?cache=0&sync_timestamp=1636700110747&other_urls=https%3A%2F%2Fregistry.npmmirror.com%2Fcaniuse-lite%2Fdownload%2Fcaniuse-lite-1.0.30001280.tgz",
-      "integrity": "sha512-kFXwYvHe5rix25uwueBxC569o53J6TpnGu0BEEn+6Lhl2vsnAumRFWEBhDft1fwyo6m1r4i+RqA4+163FpeFcA==",
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/browserslist"
-      }
+      "version": "1.0.30001352",
+      "resolved": "https://registry.npmmirror.com/caniuse-lite/-/caniuse-lite-1.0.30001352.tgz",
+      "integrity": "sha512-GUgH8w6YergqPQDGWhJGt8GDRnY0L/iJVQcU3eJ46GYf52R8tk0Wxp0PymuFVZboJYXGiCqwozAYZNRjVj6IcA=="
    },
    "node_modules/capture-exit": {
      "version": "2.0.0",
@@ -9672,10 +9668,9 @@
      "integrity": "sha1-TAb8y0YC/iYCs8k9+C1+fb8aio4="
    },
    "node_modules/history": {
-      "version": "5.1.0",
-      "resolved": "https://registry.npmmirror.com/history/download/history-5.1.0.tgz",
-      "integrity": "sha1-LpPAnAZBlNONUu1ir9CvydmwHs4=",
-      "license": "MIT",
+      "version": "5.3.0",
+      "resolved": "https://registry.npmmirror.com/history/-/history-5.3.0.tgz",
+      "integrity": "sha512-ZqaKwjjrAYUYfLG+htGaIIZ4nioX2L70ZUMIFysS3xvBsSG4x/n1V6TXV3N8ZYNuFGlDirFg32T7B6WOUPDYcQ==",
      "dependencies": {
        "@babel/runtime": "^7.7.6"
      }
@@ -15707,8 +15702,8 @@
    },
    "node_modules/react": {
      "version": "17.0.2",
-      "resolved": "https://registry.npmmirror.com/react/download/react-17.0.2.tgz?cache=0&sync_timestamp=1636647716894&other_urls=https%3A%2F%2Fregistry.npmmirror.com%2Freact%2Fdownload%2Freact-17.0.2.tgz",
-      "integrity": "sha1-0LXMUW0p6z7uOD91tihkz7aAADc=",
+      "resolved": "https://registry.npmmirror.com/react/-/react-17.0.2.tgz",
+      "integrity": "sha512-gnhPt75i/dq/z3/6q/0asP78D0u592D5L1pd7M8P+dck6Fu/jJeL6iVVK23fptSUZj8Vjf++7wXA8UNclGQcbA==",
      "dependencies": {
        "loose-envify": "^1.1.0",
        "object-assign": "^4.1.1"
@@ -15848,8 +15843,8 @@
    },
    "node_modules/react-dom": {
      "version": "17.0.2",
-      "resolved": "https://registry.npmmirror.com/react-dom/download/react-dom-17.0.2.tgz",
-      "integrity": "sha1-7P+2hF462Nv83EmPDQqTlzZQLCM=",
+      "resolved": "https://registry.npmmirror.com/react-dom/-/react-dom-17.0.2.tgz",
+      "integrity": "sha512-s4h96KtLDUQlsENhMn1ar8t2bEa+q/YAtj8pPPdIjPDGBDIVNsrD9aXNWqspUe6AzKCIG0C1HZZLqLV7qpOBGA==",
      "dependencies": {
        "loose-envify": "^1.1.0",
        "object-assign": "^4.1.1",
@@ -15878,23 +15873,23 @@
      }
    },
    "node_modules/react-router": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmmirror.com/react-router/download/react-router-6.0.2.tgz",
-      "integrity": "sha512-8/Wm3Ed8t7TuedXjAvV39+c8j0vwrI5qVsYqjFr5WkJjsJpEvNSoLRUbtqSEYzqaTUj1IV+sbPJxvO+accvU0Q==",
+      "version": "6.3.0",
+      "resolved": "https://registry.npmmirror.com/react-router/-/react-router-6.3.0.tgz",
+      "integrity": "sha512-7Wh1DzVQ+tlFjkeo+ujvjSqSJmkt1+8JO+T5xklPlgrh70y7ogx75ODRW0ThWhY7S+6yEDks8TYrtQe/aoboBQ==",
      "dependencies": {
-        "history": "^5.1.0"
+        "history": "^5.2.0"
      },
      "peerDependencies": {
        "react": ">=16.8"
      }
    },
    "node_modules/react-router-dom": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmmirror.com/react-router-dom/download/react-router-dom-6.0.2.tgz?cache=0&sync_timestamp=1636500332816&other_urls=https%3A%2F%2Fregistry.npmmirror.com%2Freact-router-dom%2Fdownload%2Freact-router-dom-6.0.2.tgz",
-      "integrity": "sha512-cOpJ4B6raFutr0EG8O/M2fEoyQmwvZWomf1c6W2YXBZuFBx8oTk/zqjXghwScyhfrtnt0lANXV2182NQblRxFA==",
+      "version": "6.3.0",
+      "resolved": "https://registry.npmmirror.com/react-router-dom/-/react-router-dom-6.3.0.tgz",
+      "integrity": "sha512-uaJj7LKytRxZNQV8+RbzJWnJ8K2nPsOOEuX7aQstlMZKQT0164C+X2w6bnkqU3sjtLvpd5ojrezAyfZ1+0sStw==",
      "dependencies": {
-        "history": "^5.1.0",
-        "react-router": "6.0.2"
+        "history": "^5.2.0",
+        "react-router": "6.3.0"
      },
      "peerDependencies": {
        "react": ">=16.8",
@@ -15903,8 +15898,8 @@
    },
    "node_modules/react-scripts": {
      "version": "4.0.3",
-      "resolved": "https://registry.npmmirror.com/react-scripts/download/react-scripts-4.0.3.tgz",
-      "integrity": "sha1-scr+18P6YD52KLoPGHeHlky100U=",
+      "resolved": "https://registry.npmmirror.com/react-scripts/-/react-scripts-4.0.3.tgz",
+      "integrity": "sha512-S5eO4vjUzUisvkIPB7jVsKtuH2HhWcASREYWHAQ1FP5HyCv3xgn+wpILAEWkmy+A+tTNbSZClhxjT3qz6g4L1A==",
      "dependencies": {
        "@babel/core": "7.12.3",
        "@pmmmwh/react-refresh-webpack-plugin": "0.4.3",
@@ -19445,8 +19440,8 @@
    },
    "node_modules/water.css": {
      "version": "2.1.1",
-      "resolved": "https://registry.npmmirror.com/water.css/download/water.css-2.1.1.tgz",
-      "integrity": "sha1-7m/oM6MTo6LttYilftYrPjHe3Rg="
+      "resolved": "https://registry.npmmirror.com/water.css/-/water.css-2.1.1.tgz",
+      "integrity": "sha512-gkO5byC+pZ7ndEV18hs/RmxKoDtEZXx06tZU4ocI3IBdv4xV64tlhjIFbDjurysRnNkiy2oQTr8PakRyzZWPJw=="
    },
    "node_modules/wbuf": {
      "version": "1.7.3",
@@ -19458,8 +19453,8 @@
    },
    "node_modules/web-vitals": {
      "version": "1.1.2",
-      "resolved": "https://registry.npmmirror.com/web-vitals/download/web-vitals-1.1.2.tgz",
-      "integrity": "sha1-BlNTCBaJhgliOaqEcW5otMaubRw="
+      "resolved": "https://registry.npmmirror.com/web-vitals/-/web-vitals-1.1.2.tgz",
+      "integrity": "sha512-PFMKIY+bRSXlMxVAQ+m2aw9c/ioUYfDgrYot0YUa+/xa0sakubWhSDyxAKwzymvXVdF4CZI71g06W+mqhzu6ig=="
    },
    "node_modules/webidl-conversions": {
      "version": "6.1.0",
@@ -25227,9 +25222,9 @@
      }
    },
    "caniuse-lite": {
-      "version": "1.0.30001280",
-      "resolved": "https://registry.npmmirror.com/caniuse-lite/download/caniuse-lite-1.0.30001280.tgz?cache=0&sync_timestamp=1636700110747&other_urls=https%3A%2F%2Fregistry.npmmirror.com%2Fcaniuse-lite%2Fdownload%2Fcaniuse-lite-1.0.30001280.tgz",
-      "integrity": "sha512-kFXwYvHe5rix25uwueBxC569o53J6TpnGu0BEEn+6Lhl2vsnAumRFWEBhDft1fwyo6m1r4i+RqA4+163FpeFcA=="
+      "version": "1.0.30001352",
+      "resolved": "https://registry.npmmirror.com/caniuse-lite/-/caniuse-lite-1.0.30001352.tgz",
+      "integrity": "sha512-GUgH8w6YergqPQDGWhJGt8GDRnY0L/iJVQcU3eJ46GYf52R8tk0Wxp0PymuFVZboJYXGiCqwozAYZNRjVj6IcA=="
    },
    "capture-exit": {
      "version": "2.0.0",
@@ -28381,9 +28376,9 @@
      "integrity": "sha1-TAb8y0YC/iYCs8k9+C1+fb8aio4="
    },
    "history": {
-      "version": "5.1.0",
-      "resolved": "https://registry.npmmirror.com/history/download/history-5.1.0.tgz",
-      "integrity": "sha1-LpPAnAZBlNONUu1ir9CvydmwHs4=",
+      "version": "5.3.0",
+      "resolved": "https://registry.npmmirror.com/history/-/history-5.3.0.tgz",
+      "integrity": "sha512-ZqaKwjjrAYUYfLG+htGaIIZ4nioX2L70ZUMIFysS3xvBsSG4x/n1V6TXV3N8ZYNuFGlDirFg32T7B6WOUPDYcQ==",
      "requires": {
        "@babel/runtime": "^7.7.6"
      }
@@ -33188,8 +33183,8 @@
    },
    "react": {
      "version": "17.0.2",
-      "resolved": "https://registry.npmmirror.com/react/download/react-17.0.2.tgz?cache=0&sync_timestamp=1636647716894&other_urls=https%3A%2F%2Fregistry.npmmirror.com%2Freact%2Fdownload%2Freact-17.0.2.tgz",
-      "integrity": "sha1-0LXMUW0p6z7uOD91tihkz7aAADc=",
+      "resolved": "https://registry.npmmirror.com/react/-/react-17.0.2.tgz",
+      "integrity": "sha512-gnhPt75i/dq/z3/6q/0asP78D0u592D5L1pd7M8P+dck6Fu/jJeL6iVVK23fptSUZj8Vjf++7wXA8UNclGQcbA==",
      "requires": {
        "loose-envify": "^1.1.0",
        "object-assign": "^4.1.1"
@@ -33303,8 +33298,8 @@
    },
    "react-dom": {
      "version": "17.0.2",
-      "resolved": "https://registry.npmmirror.com/react-dom/download/react-dom-17.0.2.tgz",
-      "integrity": "sha1-7P+2hF462Nv83EmPDQqTlzZQLCM=",
+      "resolved": "https://registry.npmmirror.com/react-dom/-/react-dom-17.0.2.tgz",
+      "integrity": "sha512-s4h96KtLDUQlsENhMn1ar8t2bEa+q/YAtj8pPPdIjPDGBDIVNsrD9aXNWqspUe6AzKCIG0C1HZZLqLV7qpOBGA==",
      "requires": {
        "loose-envify": "^1.1.0",
        "object-assign": "^4.1.1",
@@ -33327,26 +33322,26 @@
      "integrity": "sha1-ch1GV2ctQAxePHXQY8SoX7LV1o8="
    },
    "react-router": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmmirror.com/react-router/download/react-router-6.0.2.tgz",
-      "integrity": "sha512-8/Wm3Ed8t7TuedXjAvV39+c8j0vwrI5qVsYqjFr5WkJjsJpEvNSoLRUbtqSEYzqaTUj1IV+sbPJxvO+accvU0Q==",
+      "version": "6.3.0",
+      "resolved": "https://registry.npmmirror.com/react-router/-/react-router-6.3.0.tgz",
+      "integrity": "sha512-7Wh1DzVQ+tlFjkeo+ujvjSqSJmkt1+8JO+T5xklPlgrh70y7ogx75ODRW0ThWhY7S+6yEDks8TYrtQe/aoboBQ==",
      "requires": {
-        "history": "^5.1.0"
+        "history": "^5.2.0"
      }
    },
    "react-router-dom": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmmirror.com/react-router-dom/download/react-router-dom-6.0.2.tgz?cache=0&sync_timestamp=1636500332816&other_urls=https%3A%2F%2Fregistry.npmmirror.com%2Freact-router-dom%2Fdownload%2Freact-router-dom-6.0.2.tgz",
-      "integrity": "sha512-cOpJ4B6raFutr0EG8O/M2fEoyQmwvZWomf1c6W2YXBZuFBx8oTk/zqjXghwScyhfrtnt0lANXV2182NQblRxFA==",
+      "version": "6.3.0",
+      "resolved": "https://registry.npmmirror.com/react-router-dom/-/react-router-dom-6.3.0.tgz",
+      "integrity": "sha512-uaJj7LKytRxZNQV8+RbzJWnJ8K2nPsOOEuX7aQstlMZKQT0164C+X2w6bnkqU3sjtLvpd5ojrezAyfZ1+0sStw==",
      "requires": {
-        "history": "^5.1.0",
-        "react-router": "6.0.2"
+        "history": "^5.2.0",
+        "react-router": "6.3.0"
      }
    },
    "react-scripts": {
      "version": "4.0.3",
-      "resolved": "https://registry.npmmirror.com/react-scripts/download/react-scripts-4.0.3.tgz",
-      "integrity": "sha1-scr+18P6YD52KLoPGHeHlky100U=",
+      "resolved": "https://registry.npmmirror.com/react-scripts/-/react-scripts-4.0.3.tgz",
+      "integrity": "sha512-S5eO4vjUzUisvkIPB7jVsKtuH2HhWcASREYWHAQ1FP5HyCv3xgn+wpILAEWkmy+A+tTNbSZClhxjT3qz6g4L1A==",
      "requires": {
        "@babel/core": "7.12.3",
        "@pmmmwh/react-refresh-webpack-plugin": "0.4.3",
@@ -36257,8 +36252,8 @@
    },
    "water.css": {
      "version": "2.1.1",
-      "resolved": "https://registry.npmmirror.com/water.css/download/water.css-2.1.1.tgz",
-      "integrity": "sha1-7m/oM6MTo6LttYilftYrPjHe3Rg="
+      "resolved": "https://registry.npmmirror.com/water.css/-/water.css-2.1.1.tgz",
+      "integrity": "sha512-gkO5byC+pZ7ndEV18hs/RmxKoDtEZXx06tZU4ocI3IBdv4xV64tlhjIFbDjurysRnNkiy2oQTr8PakRyzZWPJw=="
    },
    "wbuf": {
      "version": "1.7.3",
@@ -36270,8 +36265,8 @@
    },
    "web-vitals": {
      "version": "1.1.2",
-      "resolved": "https://registry.npmmirror.com/web-vitals/download/web-vitals-1.1.2.tgz",
-      "integrity": "sha1-BlNTCBaJhgliOaqEcW5otMaubRw="
+      "resolved": "https://registry.npmmirror.com/web-vitals/-/web-vitals-1.1.2.tgz",
+      "integrity": "sha512-PFMKIY+bRSXlMxVAQ+m2aw9c/ioUYfDgrYot0YUa+/xa0sakubWhSDyxAKwzymvXVdF4CZI71g06W+mqhzu6ig=="
    },
    "webidl-conversions": {
      "version": "6.1.0",
--- a/web/package.json
+++ b/web/package.json
@@ -8,9 +8,9 @@
    "@testing-library/user-event": "^12.8.3",
    "react": "^17.0.2",
    "react-dom": "^17.0.2",
-    "react-router": "^6.0.2",
-    "react-router-dom": "^6.0.2",
-    "react-scripts": "4.0.3",
+    "react-router": "^6.3.0",
+    "react-router-dom": "^6.3.0",
+    "react-scripts": "^4.0.3",
    "water.css": "^2.1.1",
    "web-vitals": "^1.1.2"
  },
--- a/web/src/App.css
+++ b/web/src/App.css
@@ -15,18 +15,13 @@ body {
  box-shadow: 0 0 8px #393939;
  border-radius: 6px 6px 0 0;
 }
-.avatar {
-  border-radius: 50%;
-  background-color: lightpink;
-  padding: 0.39rem;
-}
 .title {
  margin-left: 1em;
  margin-right: 1em;
  display: flex;
  align-items: center;
-  vertical-align: middle;
  justify-content: space-between;
+  color: white;
 }
 .title-text {
  margin-left: 1em;
@@ -100,3 +95,19 @@ dialog {
  display: flex;
  justify-content: space-between;
 }
+.horizontal {
+  display: flex;
+  flex-direction: row;
+  flex-wrap: wrap;
+}
+.vertical {
+  display: flex;
+  flex-direction: column;
+  flex-wrap: wrap;
+}
+.warp-word {
+  overflow-wrap: anywhere;
+}
+.number-input {
+  width: 5em;
+}
--- a/web/src/App.js
+++ b/web/src/App.js
@@ -4,21 +4,26 @@ import "./App.css";
 import GetRandomFiles from "./component/GetRandomFiles";
 import SearchFiles from "./component/SearchFiles";
 import SearchFolders from "./component/SearchFolders";
-import Manage from "./component/Manage";
-import Share from "./component/Share";
-import AudioPlayer from "./component/AudioPlayer";
 import FilesInFolder from "./component/FilesInFolder";
+import Manage from "./component/Manage";
+import ManageUser from "./component/ManageUser";
 import FileInfo from "./component/FileInfo";
-import Review from "./component/Review";
-import Profile from "./component/Profile";
-import User from "./component/User";
+import Share from "./component/Share";
 import Login from "./component/Login";
 import Register from "./component/Register";
+import Tags from "./component/Tags";
+import EditTag from "./component/EditTag";
+import EditReview from "./component/EditReview";
+import AudioPlayer from "./component/AudioPlayer";
+import UserStatus from "./component/UserStatus";
+import ReviewPage from "./component/ReviewPage";
+import UserProfile from "./component/UserProfile";
+import FeedbackPage from "./component/FeedbackPage";
 import { useState } from "react";

 function App() {
  const [playingFile, setPlayingFile] = useState({});
-  const [user, setUser] = useState(null);
+  const [user, setUser] = useState({});
  return (
    <div className="base">
      <Router>
@@ -26,16 +31,16 @@ function App() {
          <h3 className="title">
            <img src="favicon.png" alt="logo" className="logo" />
            <span className="title-text">MSW Open Music Project</span>
-            <User user={user} setUser={setUser} />
+            <UserStatus user={user} setUser={setUser} />
          </h3>
          <nav className="nav">
            <NavLink to="/" className="nav-link">
              Feeling luckly
            </NavLink>
-            <NavLink to="/search-files" className="nav-link">
+            <NavLink to="/files" className="nav-link">
              Files
            </NavLink>
-            <NavLink to="/search-folders" className="nav-link">
+            <NavLink to="/folders" className="nav-link">
              Folders
            </NavLink>
            <NavLink to="/manage" className="nav-link">
@@ -51,38 +56,67 @@ function App() {
              element={<GetRandomFiles setPlayingFile={setPlayingFile} />}
            />
            <Route
-              path="/search-files"
+              path="/files"
              element={<SearchFiles setPlayingFile={setPlayingFile} />}
            />
            <Route
-              path="/search-folders"
+              path="/folders"
              element={<SearchFolders setPlayingFile={setPlayingFile} />}
            />
            <Route
-              path="/folder/:id"
+              path="/folders/:id"
              element={<FilesInFolder setPlayingFile={setPlayingFile} />}
            />
-            <Route path="/manage" element={<Manage />} />
            <Route
-              path="/file/:id/share"
+              path="/manage"
+              element={<Manage user={user} setUser={setUser} />}
+            />
+            <Route
+              path="/manage/feedbacks"
+              element={<FeedbackPage user={user} />}
+            />
+            <Route
+              path="/manage/login"
+              element={<Login user={user} setUser={setUser} />}
+            />
+            <Route
+              path="/manage/register"
+              element={<Register user={user} setUser={setUser} />}
+            />
+            <Route path="/manage/tags" element={<Tags user={user} />} />
+            <Route path="/manage/tags/:id" element={<EditTag user={user} />} />
+            <Route
+              path="/manage/reviews/:id"
+              element={<EditReview user={user} />}
+            />
+            <Route
+              path="/manage/users"
+              element={<ManageUser user={user} setUser={setUser} />}
+            />
+            <Route
+              path="/manage/users/:id"
+              element={<UserProfile user={user} setUser={setUser} />}
+            />
+            <Route
+              path="/files/:id"
+              element={<FileInfo setPlayingFile={setPlayingFile} />}
+            />
+            <Route
+              path="/files/:id/share"
              element={<Share setPlayingFile={setPlayingFile} />}
            />
-            <Route path="/file/:id/review" element={<Review />} />
            <Route
-              path="/profile/:id"
-              element={<Profile user={user} setUser={setUser} />}
+              path="/files/:id/review"
+              element={
+                <ReviewPage user={user} setPlayingFile={setPlayingFile} />
+              }
            />
-            <Route path="/login" element={<Login setUser={setUser} />} />
-            <Route path="/register" element={<Register setUser={setUser} />} />
-            <Route path="/file/:id" element={<FileInfo />} />
          </Routes>
        </main>
-        <footer>
        <AudioPlayer
          playingFile={playingFile}
          setPlayingFile={setPlayingFile}
        />
-        </footer>
      </Router>
    </div>
  );
--- a/web/src/component/AudioPlayer.js
+++ b/web/src/component/AudioPlayer.js
@@ -12,10 +12,14 @@ function AudioPlayer(props) {
  const [loop, setLoop] = useState(true);
  const [raw, setRaw] = useState(false);
  const [prepare, setPrepare] = useState(false);
-  const [selectedFfmpegConfig, setSelectedFfmpegConfig] = useState({});
+  const [selectedFfmpegConfig, setSelectedFfmpegConfig] = useState({
+    name: "",
+    args: "",
+  });
  const [playingURL, setPlayingURL] = useState("");
  const [isPreparing, setIsPreparing] = useState(false);
-  const [preparedFilesize, setPreparedFilesize] = useState(null);
+  const [timerCount, setTimerCount] = useState(0);
+  const [timerID, setTimerID] = useState(null);

  useEffect(() => {
    // no playing file
@@ -40,7 +44,12 @@ function AudioPlayer(props) {
        })
          .then((response) => response.json())
          .then((data) => {
-            setPreparedFilesize(data.filesize);
+            if (data.error) {
+              alert(data.error);
+              setIsPreparing(false);
+              return;
+            }
+            props.setPlayingFile(data.file);
            setIsPreparing(false);
            setPlayingURL(
              `/api/v1/get_file_stream_direct?id=${props.playingFile.id}&config=${selectedFfmpegConfig.name}`
@@ -57,7 +66,7 @@ function AudioPlayer(props) {
  let navigate = useNavigate();

  return (
-    <div>
+    <footer className="vertical">
      <h5>Player status</h5>
      {props.playingFile.id && (
        <span>
@@ -79,17 +88,13 @@ function AudioPlayer(props) {
          </button>

          <button
-            onClick={() =>
-              navigate(`search-folders/${props.playingFile.folder_id}`)
-            }
+            onClick={() => navigate(`/folders/${props.playingFile.folder_id}`)}
          >
            {props.playingFile.foldername}
          </button>

          <button disabled>
-            {prepare
-              ? CalcReadableFilesizeDetail(preparedFilesize)
-              : CalcReadableFilesizeDetail(props.playingFile.filesize)}
+            {CalcReadableFilesizeDetail(props.playingFile.filesize)}
          </button>

          {isPreparing && <button disabled>Preparing...</button>}
@@ -108,19 +113,53 @@ function AudioPlayer(props) {

      <br />

+      <span className="horizontal">
+        <input
+          className="number-input"
+          disabled={timerID !== null}
+          type="number"
+          value={timerCount}
+          onChange={(e) => {
+            setTimerCount(e.target.value);
+          }}
+        />
+        <button
+          onClick={() => {
+            if (timerID != null) {
+              clearInterval(timerID);
+              setTimerID(null);
+              return;
+            }
+            setTimerID(
+              setTimeout(() => {
+                props.setPlayingFile({});
+                setTimerID(null);
+              }, timerCount * 1000 * 60)
+            );
+          }}
+        >
+          Stop Timer
+        </button>
+      </span>
+
+      <span>
+        <span>
          <input
            checked={loop}
            onChange={(event) => setLoop(event.target.checked)}
            type="checkbox"
          />
          <label>Loop</label>
+        </span>

+        <span>
          <input
            checked={raw}
            onChange={(event) => setRaw(event.target.checked)}
            type="checkbox"
          />
          <label>Raw</label>
+        </span>

        {!raw && (
          <span>
@@ -132,9 +171,11 @@ function AudioPlayer(props) {
            <label>Prepare</label>
          </span>
        )}
+      </span>

      {playingURL !== "" && (
        <audio
+          id="dom-player"
          controls
          autoPlay
          loop={loop}
@@ -147,7 +188,7 @@ function AudioPlayer(props) {
        selectedFfmpegConfig={selectedFfmpegConfig}
        setSelectedFfmpegConfig={setSelectedFfmpegConfig}
      />
-    </div>
+    </footer>
  );
 }

--- a/web/src/component/Common.js
+++ b/web/src/component/Common.js
@@ -1,3 +1,11 @@
+import { useMemo } from "react";
+import { useLocation } from "react-router-dom";
+
+export function useQuery() {
+  const { search } = useLocation();
+  return useMemo(() => new URLSearchParams(search), [search]);
+}
+
 export function CalcReadableFilesize(filesize) {
  if (filesize < 1024) {
    return filesize;
@@ -35,6 +43,30 @@ function numberWithCommas(x) {
  return x;
 }

+// convert unix timestamp to %Y-%m-%d %H:%M:%S
+export function convertIntToDateTime(timestamp) {
+  var date = new Date(timestamp * 1000);
+  var year = date.getFullYear();
+  var month = date.getMonth() + 1;
+  var day = date.getDate();
+  var hour = date.getHours();
+  var minute = date.getMinutes();
+  var second = date.getSeconds();
+  var time =
+    year +
+    "-" +
+    (month < 10 ? "0" + month : month) +
+    "-" +
+    (day < 10 ? "0" + day : day) +
+    " " +
+    (hour < 10 ? "0" + hour : hour) +
+    ":" +
+    (minute < 10 ? "0" + minute : minute) +
+    ":" +
+    (second < 10 ? "0" + second : second);
+  return time;
+}
+
 export function SayHello() {
  return "Hello";
 }
--- a/web/src/component/Database.js
+++ b/web/src/component/Database.js
@@ -0,0 +1,110 @@
+import { useState, useEffect } from "react";
+
+function Database() {
+  const [walkPath, setWalkPath] = useState("");
+  const [patternString, setPatternString] = useState("wav flac mp3 ogg m4a mka");
+  const [tags, setTags] = useState([]);
+  const [selectedTags, setSelectedTags] = useState([]);
+  const [updating, setUpdating] = useState(false);
+
+  function getTags() {
+    fetch("/api/v1/get_tags")
+      .then((response) => response.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          setTags(data.tags);
+        }
+      });
+  }
+
+  useEffect(() => {
+    getTags();
+  }, []);
+
+  function updateDatabase() {
+    // split pattern string into array
+    let patternArray = patternString.split(" ");
+    // remove whitespace from array
+    patternArray = patternArray.map((item) => item.trim());
+    // remove empty strings from array
+    patternArray = patternArray.filter((item) => item !== "");
+    // add dot before item array
+    patternArray = patternArray.map((item) => "." + item);
+
+    setUpdating(true);
+
+    fetch("/api/v1/walk", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        root: walkPath,
+        pattern: patternArray,
+        tag_ids: selectedTags,
+      }),
+    })
+      .then((res) => res.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          alert("Database updated");
+        }
+      })
+      .finally(() => {
+        setUpdating(false);
+      });
+  }
+  return (
+    <div>
+      <h3>Update Database</h3>
+      <input
+        type="text"
+        value={walkPath}
+        placeholder="walk path"
+        onChange={(e) => setWalkPath(e.target.value)}
+      />
+      <input
+        type="text"
+        value={patternString}
+        placeholder="pattern wav flac mp3"
+        onChange={(e) => setPatternString(e.target.value)}
+      />
+      <div>
+        <h4>Tags</h4>
+        {tags.map((tag) => (
+          <div key={tag.id}>
+            <input
+              id={tag.id}
+              type="checkbox"
+              value={tag.id}
+              onChange={(e) => {
+                if (e.target.checked) {
+                  setSelectedTags([...selectedTags, tag.id]);
+                } else {
+                  setSelectedTags(
+                    selectedTags.filter((item) => item !== tag.id)
+                  );
+                }
+              }}
+            />
+            <label htmlFor={tag.id}>{tag.name}</label>
+          </div>
+        ))}
+      </div>
+      <button
+        onClick={() => {
+          updateDatabase();
+        }}
+        disabled={updating}
+      >
+        {updating ? "Updating..." : "Update Database"}
+      </button>
+    </div>
+  );
+}
+
+export default Database;
--- a/web/src/component/EditReview.js
+++ b/web/src/component/EditReview.js
@@ -0,0 +1,99 @@
+import { useEffect, useState } from "react";
+import { useParams, useNavigate } from "react-router";
+
+function SingleReview() {
+  let params = useParams();
+  let navigate = useNavigate();
+
+  const [review, setReview] = useState({
+    id: "",
+    user_id: "",
+    file_id: "",
+    content: "",
+    created_at: "",
+    updated_at: "",
+  });
+
+  function refresh() {
+    fetch("/api/v1/get_review", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        id: parseInt(params.id),
+      }),
+    })
+      .then((response) => response.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          setReview(data.review);
+        }
+      });
+  }
+
+  function save() {
+    fetch("/api/v1/update_review", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        id: parseInt(params.id),
+        content: review.content,
+      }),
+    })
+      .then((response) => response.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          alert("Review updated!");
+          navigate(-1);
+        }
+      });
+  }
+
+  function deleteReview() {
+    fetch("/api/v1/delete_review", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        id: parseInt(params.id),
+      }),
+    })
+      .then((response) => response.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          alert("Review deleted!");
+          navigate(-1);
+        }
+      });
+  }
+
+  useEffect(() => {
+    refresh();
+  }, []);
+
+  return (
+    <div className="page">
+      <h3>Edit Review</h3>
+      <textarea
+        value={review.content}
+        onChange={(e) => setReview({ ...review, content: e.target.value })}
+      ></textarea>
+      <div>
+        <button onClick={() => deleteReview()}>Delete</button>
+        <button onClick={() => save()}>Save</button>
+      </div>
+    </div>
+  );
+}
+
+export default SingleReview;
--- a/web/src/component/EditTag.js
+++ b/web/src/component/EditTag.js
@@ -0,0 +1,140 @@
+import { useState, useEffect } from "react";
+import { useParams, useNavigate } from "react-router";
+
+function EditTag() {
+  let params = useParams();
+  let navigate = useNavigate();
+
+  const [tag, setTag] = useState({
+    id: "",
+    name: "",
+    description: "",
+    created_by_user: {
+      id: "",
+      username: "",
+      role: "",
+      avatar_id: "",
+    },
+  });
+
+  function refreshTagInfo() {
+    fetch("/api/v1/get_tag_info", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        id: parseInt(params.id),
+      }),
+    })
+      .then((res) => res.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          setTag(data.tag);
+        }
+      });
+  }
+
+  function updateTagInfo() {
+    fetch("/api/v1/update_tag", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        id: parseInt(params.id),
+        name: tag.name,
+        description: tag.description,
+      }),
+    })
+      .then((res) => res.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          alert("Tag updated successfully");
+          refreshTagInfo();
+        }
+      });
+  }
+
+  useEffect(() => {
+    refreshTagInfo();
+  }, []);
+
+  function deleteTag() {
+    fetch("/api/v1/delete_tag", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        id: parseInt(params.id),
+      }),
+    })
+      .then((res) => res.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          alert("Tag deleted successfully");
+          navigate(-1);
+        }
+      });
+  }
+
+  return (
+    <div className="page">
+      <h3>Edit Tag</h3>
+      <div>
+        <label htmlFor="id">ID</label>
+        <input
+          type="text"
+          disabled
+          name="id"
+          id="id"
+          value={tag.id}
+          onChange={(e) => setTag({ ...tag, id: e.target.value })}
+        />
+        <label htmlFor="name">Created By</label>
+        <input
+          type="text"
+          disabled
+          name="created_by_user_username"
+          id="created_by_user_username"
+          value={tag.created_by_user.username}
+          onChange={(e) =>
+            setTag({
+              ...tag,
+              created_by_user: {
+                ...tag.created_by_user,
+                username: e.target.value,
+              },
+            })
+          }
+        />
+        <label htmlFor="name">Name</label>
+        <input
+          type="text"
+          name="name"
+          id="name"
+          value={tag.name}
+          onChange={(e) => setTag({ ...tag, name: e.target.value })}
+        />
+        <label htmlFor="description">Description</label>
+        <textarea
+          name="description"
+          id="description"
+          value={tag.description}
+          onChange={(e) => setTag({ ...tag, description: e.target.value })}
+        />
+        <button onClick={deleteTag}>Delete</button>
+        <button onClick={() => updateTagInfo()}>Save</button>
+      </div>
+    </div>
+  );
+}
+
+export default EditTag;
--- a/web/src/component/FeedbackPage.js
+++ b/web/src/component/FeedbackPage.js
@@ -0,0 +1,105 @@
+import { useState, useEffect } from "react";
+import { Link } from "react-router-dom";
+import { convertIntToDateTime } from "./Common";
+
+function FeedbackPage() {
+  const [content, setContext] = useState("");
+  const [feedbacks, setFeedbacks] = useState([]);
+
+  function getFeedbacks() {
+    fetch("/api/v1/get_feedbacks")
+      .then((res) => res.json())
+      .then((data) => {
+        if (data.error) {
+          console.log(data.error);
+        } else {
+          setFeedbacks(data.feedbacks);
+        }
+      });
+  }
+
+  function submitFeedback() {
+    fetch("/api/v1/feedback", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        content: content,
+      }),
+    })
+      .then((res) => res.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          setContext("");
+          getFeedbacks();
+        }
+      });
+  }
+
+  useEffect(() => {
+    getFeedbacks();
+  }, []);
+
+  return (
+    <div className="page">
+      <h3>Feedback</h3>
+      <textarea value={content} onChange={(e) => setContext(e.target.value)} />
+      <button onClick={() => submitFeedback()}>Submit</button>
+      <div>
+        <table>
+          <thead>
+            <tr>
+              <th>User</th>
+              <th>Feedback</th>
+              <th>Date</th>
+              <th>Action</th>
+            </tr>
+          </thead>
+          <tbody>
+            {feedbacks.map((feedback) => (
+              <tr key={feedback._id}>
+                <td>
+                  <Link to={`/manage/users/${feedback.user.id}`}>
+                    @{feedback.user.username}
+                  </Link>
+                </td>
+                <td>{feedback.content}</td>
+                <td>{convertIntToDateTime(feedback.time)}</td>
+                <td>
+                  <button
+                    onClick={() => {
+                      fetch("/api/v1/delete_feedback", {
+                        method: "POST",
+                        headers: {
+                          "Content-Type": "application/json",
+                        },
+                        body: JSON.stringify({
+                          id: feedback.id,
+                        }),
+                      })
+                        .then((res) => res.json())
+                        .then((data) => {
+                          if (data.error) {
+                            alert(data.error);
+                          } else {
+                            getFeedbacks();
+                          }
+                        });
+                    }}
+                  >
+                    Delete
+                  </button>
+                </td>
+              </tr>
+            ))}
+          </tbody>
+        </table>
+      </div>
+    </div>
+  );
+}
+
+export default FeedbackPage;
--- a/web/src/component/FfmpegConfig.js
+++ b/web/src/component/FfmpegConfig.js
@@ -1,5 +1,4 @@
 import { useEffect, useState } from "react";
-import getFfmpegConfigListRespondExample from "../example-respond/get_ffmpeg_config_list.json"

 function FfmpegConfig(props) {
  // props.setSelectedFfmpegConfig
@@ -8,8 +7,17 @@ function FfmpegConfig(props) {
  const [ffmpegConfigList, setFfmpegConfigList] = useState([]);

  useEffect(() => {
-    setFfmpegConfigList(getFfmpegConfigListRespondExample.ffmpeg_config_list);
-    props.setSelectedFfmpegConfig(getFfmpegConfigListRespondExample.ffmpeg_config_list[0]);
+    fetch("/api/v1/get_ffmpeg_config_list")
+      .then((response) => response.json())
+      .then((data) => {
+        setFfmpegConfigList(data.ffmpeg_config_list);
+        if (data.ffmpeg_config_list.length > 0) {
+          props.setSelectedFfmpegConfig(data.ffmpeg_config_list[0]);
+        }
+      })
+      .catch((error) => {
+        alert("get_ffmpeg_config_list error: " + error);
+      });
  }, []);

  return (
@@ -25,7 +33,7 @@ function FfmpegConfig(props) {
          <option key={ffmpegConfig.name}>{ffmpegConfig.name}</option>
        ))}
      </select>
-      <span>{props.selectedFfmpegConfig.args}</span>
+      <span className="warp-word">{props.selectedFfmpegConfig.args}</span>
    </div>
  );
 }
--- a/web/src/component/FileDialog.js
+++ b/web/src/component/FileDialog.js
@@ -9,17 +9,32 @@ function FileDialog(props) {

  let navigate = useNavigate();

-  const downloadURL = "/api/v1/get_file_direct?id=" + props.file.id;
-
  return (
    <dialog open={props.showStatus}>
-      <p>{props.file.filename}</p>
-      <p>
-        Download using browser
-        <br />
-        Play on the web page
-        <br />
+      <p
+        style={{
+          cursor: "pointer",
+        }}
+        onClick={() => {
+          props.setPlayingFile(props.file);
+          props.setShowStatus(false);
+        }}
+      >
+        {props.file.filename}
      </p>
+      <p>
+        Play: play using browser player.
+        <br />
+        Info for more actions.
+      </p>
+      <button
+        onClick={() => {
+          navigate(`/files/${props.file.id}`);
+          props.setShowStatus(false);
+        }}
+      >
+        Info
+      </button>
      <button
        onClick={() => {
          props.setPlayingFile(props.file);
@@ -28,13 +43,6 @@ function FileDialog(props) {
      >
        Play
      </button>
-      <button
-        onClick={() => {
-          navigate(`/file/${props.file.id}`);
-        }}
-      >
-        Info
-      </button>
      <button onClick={() => props.setShowStatus(false)}>Close</button>
    </dialog>
  );
--- a/web/src/component/FileEntry.js
+++ b/web/src/component/FileEntry.js
@@ -25,7 +25,7 @@ function FileEntry(props) {
      </td>
      <td
        className="clickable"
-        onClick={() => navigate(`/folder/${props.file.folder_id}`)}
+        onClick={() => navigate(`/folders/${props.file.folder_id}`)}
      >
        {props.file.foldername}
      </td>
--- a/web/src/component/FileInfo.js
+++ b/web/src/component/FileInfo.js
@@ -1,67 +1,302 @@
-import { useParams, Link, useNavigate } from "react-router-dom";
+import { useNavigate, useParams } from "react-router";
+import { useEffect, useState } from "react";

-function FileInfo() {
-  let params = useParams();
+function FileInfo(props) {
  let navigate = useNavigate();
+  let params = useParams();
+  const [file, setFile] = useState({
+    id: "",
+    folder_id: "",
+    foldername: "",
+    filename: "",
+    filesize: "",
+  });
+  const [tags, setTags] = useState([]);
+  const [tagsOnFile, setTagsOnFile] = useState([]);
+  const [selectedTagID, setSelectedTagID] = useState("");
+
+  function refresh() {
+    fetch(`/api/v1/get_file_info`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        id: parseInt(params.id),
+      }),
+    })
+      .then((res) => res.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          setFile(data);
+        }
+      });
+  }
+
+  function getTags() {
+    fetch(`/api/v1/get_tags`)
+      .then((res) => res.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          setTags(data.tags);
+        }
+      });
+  }
+
+  function getTagsOnFile() {
+    fetch(`/api/v1/get_tags_on_file`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        id: parseInt(params.id),
+      }),
+    })
+      .then((res) => res.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          setTagsOnFile(data.tags);
+        }
+      });
+  }
+
+  function removeTagOnFile(tag_id) {
+    fetch(`/api/v1/delete_tag_on_file`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        file_id: parseInt(params.id),
+        tag_id: tag_id,
+      }),
+    })
+      .then((res) => res.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          getTagsOnFile();
+        }
+      });
+  }
+
+  function deleteFile() {
+    // show Warning
+    if (window.confirm("Are you sure you want to delete this file?")) {
+      fetch(`/api/v1/delete_file`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+        },
+        body: JSON.stringify({
+          id: parseInt(params.id),
+        }),
+      })
+        .then((res) => res.json())
+        .then((data) => {
+          if (data.error) {
+            alert(data.error);
+          } else {
+            navigate(-1);
+          }
+        });
+    }
+  }
+
+  function updateFilename() {
+    fetch(`/api/v1/update_filename`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        id: parseInt(params.id),
+        filename: file.filename,
+      }),
+    })
+      .then((res) => res.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          alert("Filename updated");
+          refresh();
+        }
+      });
+  }
+
+  function resetFilename() {
+    fetch(`/api/v1/reset_filename`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        id: parseInt(params.id),
+      }),
+    })
+      .then((res) => res.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          refresh();
+        }
+      });
+  }
+
+  useEffect(() => {
+    refresh();
+    getTags();
+    getTagsOnFile();
+  }, []);
+
+  const downloadURL = "/api/v1/get_file_direct?id=" + file.id;
+
  return (
    <div className="page">
-      <h3>File Information</h3>
-      <span>
+      <h3>File Details</h3>
+      <div>
+        <a href={downloadURL} download>
          <button>Download</button>
+        </a>
        <button
          onClick={() => {
-            navigate("/file/" + params.id + '/share');
+            props.setPlayingFile(file);
+          }}
+        >
+          Play
+        </button>
+        <button
+          onClick={() => {
+            navigate(`/files/${params.id}/review`);
+          }}
+        >
+          Review
+        </button>
+        <button
+          onClick={() => {
+            navigate(`/files/${params.id}/share`);
          }}
        >
          Share
        </button>
        <button
          onClick={() => {
-      navigate("/file/" + params.id + '/review');
+            deleteFile();
          }}
-    >Review</button>
-      </span>
-      <table>
-        <thead>
-          <tr>
-            <th>Name</th>
-            <th>Value</th>
-          </tr>
-        </thead>
-        <tbody>
-          <tr>
-            <td>File Name</td>
-            <td>{params.id}</td>
-          </tr>
-          <tr>
-            <td>File Size</td>
-            <td>123456</td>
-          </tr>
-          <tr>
-            <td>File Type</td>
-            <td>media/aac</td>
-          </tr>
-          <tr>
-            <td>Last Modified</td>
-            <td>2020-01-01</td>
-          </tr>
-          <tr>
-            <td>Import by</td>
-            <td>
-              <Link to="/profile/3">@admin</Link>
-            </td>
-          </tr>
-          <tr>
-            <td>Import Date</td>
-            <td>2020-01-01</td>
-          </tr>
-          <tr>
-            <td>Location</td>
-            <td>/data/media/aac</td>
-          </tr>
-        </tbody>
-      </table>
-      <button>Update</button>
+        >
+          Delete
+        </button>
+      </div>
+      <div>
+        <label htmlFor="foldername">Folder Name:</label>
+        <input
+          type="text"
+          id="foldername"
+          value={file.foldername}
+          onClick={() => {
+            navigate(`/folders/${file.folder_id}`);
+          }}
+          readOnly
+        />
+        <label htmlFor="filename">File Name:</label>
+        <input
+          type="text"
+          id="filename"
+          value={file.filename}
+          onChange={(event) => {
+            setFile({
+              ...file,
+              filename: event.target.value,
+            });
+          }}
+        />
+        <label htmlFor="filesize">File Size:</label>
+        <input type="text" id="filesize" value={file.filesize} readOnly />
+      </div>
+      <div className="horizontal">
+        <button onClick={updateFilename}>Save</button>
+        <button onClick={resetFilename}>Reset</button>
+      </div>
+      <div>
+        <label>Tags:</label>
+        <ul>
+          {tagsOnFile.map((tag) => {
+            return (
+              <li key={tag.id}>
+                <button
+                  onClick={() => {
+                    navigate(`/manage/tags/${tag.id}`);
+                  }}
+                >
+                  {tag.name}
+                </button>
+                <button
+                  onClick={() => {
+                    removeTagOnFile(tag.id);
+                  }}
+                >
+                  Remove
+                </button>
+              </li>
+            );
+          })}
+        </ul>
+        <div>
+          <select
+            onChange={(e) => {
+              setSelectedTagID(e.target.value);
+            }}
+          >
+            <option value="">Select a tag</option>
+            {tags.map((tag) => {
+              return (
+                <option key={tag.id} value={tag.id}>
+                  {tag.name}
+                </option>
+              );
+            })}
+          </select>
+          <button
+            onClick={() => {
+              // check empty
+              if (selectedTagID === "") {
+                alert("Please select a tag");
+                return;
+              }
+              fetch(`/api/v1/put_tag_on_file`, {
+                method: "POST",
+                headers: {
+                  "Content-Type": "application/json",
+                },
+                body: JSON.stringify({
+                  file_id: parseInt(params.id),
+                  tag_id: parseInt(selectedTagID),
+                }),
+              })
+                .then((res) => res.json())
+                .then((data) => {
+                  if (data.error) {
+                    alert(data.error);
+                  } else {
+                    getTagsOnFile();
+                  }
+                });
+            }}
+          >
+            Add Tag
+          </button>
+        </div>
+      </div>
    </div>
  );
 }
--- a/web/src/component/FilesInFolder.js
+++ b/web/src/component/FilesInFolder.js
@@ -1,13 +1,132 @@
-import FilesTable from "./FilesTable";
-import searchFilesRespondExample from "../example-respond/search_files.json"
 import { useParams } from "react-router";
+import { useState, useEffect } from "react";
+import { useNavigate } from "react-router-dom";
+import { useQuery } from "./Common";
+import FilesTable from "./FilesTable";

 function FilesInFolder(props) {
  let params = useParams();
+  const query = useQuery();
+  const navigator = useNavigate();
+  const [files, setFiles] = useState([]);
+  const [isLoading, setIsLoading] = useState(false);
+  const offset = parseInt(query.get("o")) || 0;
+  const [newFoldername, setNewFoldername] = useState("");
+  const limit = 10;
+
+  function refresh() {
+    setIsLoading(true);
+    fetch("/api/v1/get_files_in_folder", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        folder_id: parseInt(params.id),
+        offset: offset,
+        limit: limit,
+      }),
+    })
+      .then((response) => response.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          setFiles(data.files);
+          if (data.files.length > 0) {
+            setNewFoldername(data.files[0].foldername);
+          }
+        }
+      })
+      .catch((error) => alert(error))
+      .finally(() => {
+        setIsLoading(false);
+      });
+  }
+
+  useEffect(() => {
+    refresh();
+  }, [params.id, offset]);
+
+  function nextPage() {
+    navigator(`/folders/${params.id}?o=${offset + limit}`);
+  }
+
+  function lastPage() {
+    const offsetValue = offset - limit;
+    if (offsetValue < 0) {
+      return;
+    }
+    navigator(`/folders/${params.id}?o=${offsetValue}`);
+  }
+
+  function updateFoldername() {
+    setIsLoading(true);
+    fetch("/api/v1/update_foldername", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        id: parseInt(params.id),
+        foldername: newFoldername,
+      }),
+    })
+      .then((response) => response.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          refresh();
+        }
+      })
+      .catch((error) => alert(error))
+      .finally(() => {
+        setIsLoading(false);
+      });
+  }
+
+  function resetFoldername() {
+    setIsLoading(true);
+    fetch("/api/v1/reset_foldername", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        id: parseInt(params.id),
+      }),
+    })
+      .then((response) => response.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          refresh();
+        }
+      })
+      .catch((error) => alert(error))
+      .finally(() => {
+        setIsLoading(false);
+      });
+  }
+
  return (
+    <div className="page">
+      <h3>Files in Folder</h3>
+      <div className="search_toolbar">
+        <button onClick={lastPage}>Last page</button>
+        <button disabled>
+          {isLoading ? "Loading..." : `${offset} - ${offset + files.length}`}
+        </button>
+        <button onClick={nextPage}>Next page</button>
+      </div>
+      <FilesTable setPlayingFile={props.setPlayingFile} files={files} />
      <div>
-      <h3>Files in folder id {params.id}</h3>
-      <FilesTable setPlayingFile={props.setPlayingFile} files={searchFilesRespondExample.files} />
+        <input
+          type="text"
+          value={newFoldername}
+          onChange={(e) => setNewFoldername(e.target.value)}
+        />
+        <div>
+          <button onClick={() => updateFoldername()}>Save</button>
+          <button onClick={() => resetFoldername()}>Reset</button>
+        </div>
+      </div>
    </div>
  );
 }
--- a/web/src/component/FilesTable.js
+++ b/web/src/component/FilesTable.js
@@ -1,6 +1,9 @@
 import FileEntry from "./FileEntry";

 function FilesTable(props) {
+  if (props.files.length === 0) {
+    return null;
+  }
  return (
    <table>
      <thead>
--- a/web/src/component/FoldersTable.js
+++ b/web/src/component/FoldersTable.js
@@ -2,6 +2,9 @@ import { useNavigate } from "react-router";

 function FoldersTable(props) {
  let navigate = useNavigate();
+  if (props.folders.length === 0) {
+    return null;
+  }
  return (
    <table>
      <thead>
@@ -14,12 +17,12 @@ function FoldersTable(props) {
        {props.folders.map((folder) => (
          <tr key={folder.id}>
            <td
-              onClick={() => navigate(`/folder/${folder.id}`)}
+              onClick={() => navigate(`/folders/${folder.id}`)}
              className="clickable"
            >
              {folder.foldername}
            </td>
-            <td onClick={() => navigate(`/folder/${folder.id}`)}>
+            <td onClick={() => navigate(`/folders/${folder.id}`)}>
              <button>View</button>
            </td>
          </tr>
--- a/web/src/component/GetRandomFiles.js
+++ b/web/src/component/GetRandomFiles.js
@@ -1,24 +1,105 @@
 import { useEffect, useState } from "react";
+import { useNavigate } from "react-router-dom";
+import { useQuery } from "./Common";
 import FilesTable from "./FilesTable";
-import getRandomFilesRespondExample from "../example-respond/get_random_files.json"

 function GetRandomFiles(props) {
  const [files, setFiles] = useState([]);
  const [isLoading, setIsLoading] = useState(false);
+  const [tags, setTags] = useState([]);
+  const navigator = useNavigate();
+  const query = useQuery();
+  const selectedTag = query.get("t") || "";

-  function refresh(setFiles) {
-    setFiles(getRandomFilesRespondExample.files);
+  function getRandomFiles() {
+    setIsLoading(true);
+    fetch("/api/v1/get_random_files")
+      .then((response) => response.json())
+      .then((data) => {
+        setFiles(data.files);
+      })
+      .catch((error) => {
+        alert("get_random_files error: " + error);
+      })
+      .finally(() => {
+        setIsLoading(false);
+      });
+  }
+
+  function getRandomFilesWithTag() {
+    setIsLoading(true);
+    fetch("/api/v1/get_random_files_with_tag", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        id: parseInt(selectedTag),
+      }),
+    })
+      .then((response) => response.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          setFiles(data.files);
+        }
+      })
+      .catch((error) => {
+        alert("get_random_files_with_tag error: " + error);
+      })
+      .finally(() => {
+        setIsLoading(false);
+      });
+  }
+
+  function refresh() {
+    if (selectedTag === "") {
+      getRandomFiles();
+    } else {
+      getRandomFilesWithTag();
+    }
+  }
+
+  function getTags() {
+    fetch("/api/v1/get_tags")
+      .then((response) => response.json())
+      .then((data) => {
+        setTags(data.tags);
+      })
+      .catch((error) => {
+        alert("get_tags error: " + error);
+      });
  }

  useEffect(() => {
-    refresh(setFiles);
+    getTags();
  }, []);
+
+  useEffect(() => {
+    refresh();
+  }, [selectedTag]);
+
  return (
    <div className="page">
      <div className="search_toolbar">
        <button className="refresh" onClick={() => refresh(setFiles)}>
          {isLoading ? "Loading..." : "Refresh"}
        </button>
+        <select
+          className="tag_select"
+          onChange={(event) => {
+            navigator(`/?t=${event.target.value}`);
+          }}
+          value={selectedTag}
+        >
+          <option value="">All</option>
+          {tags.map((tag) => (
+            <option key={tag.id} value={tag.id}>
+              {tag.name}
+            </option>
+          ))}
+        </select>
      </div>
      <FilesTable setPlayingFile={props.setPlayingFile} files={files} />
    </div>
--- a/web/src/component/Login.js
+++ b/web/src/component/Login.js
@@ -5,10 +5,37 @@ function Login(props) {
  let navigate = useNavigate();
  let [username, setUsername] = useState("");
  let [password, setPassword] = useState("");
+
+  function login() {
+    if (!username || !password) {
+      alert("Please enter username and password");
+      return;
+    }
+    fetch("/api/v1/login", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        username,
+        password,
+      }),
+    })
+      .then((res) => res.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+          return;
+        }
+        props.setUser(data.user);
+        navigate("/");
+      });
+  }
+
  return (
-    <div>
-      <h1>Login</h1>
-      <label htmlFor="username"></label>
+    <div className="page">
+      <h2>Login</h2>
+      <label htmlFor="username">Username</label>
      <input
        type="text"
        id="username"
@@ -21,25 +48,22 @@ function Login(props) {
        id="password"
        value={password}
        onChange={(e) => setPassword(e.target.value)}
+        onKeyPress={(e) => {
+          if (e.key === "Enter") {
+            e.preventDefault();
+            login();
+          }
+        }}
      />
      <span>
+        <button onClick={login}>Login</button>
        <button
          onClick={() => {
-            if (!username || !password) {
-              alert("Please enter username and password");
-              return;
-            }
-            props.setUser({ id: 123, username: username, password: password });
-            navigate("/");
+            navigate("/manage/register");
          }}
        >
-          Login
+          Register
        </button>
-        <button
-    onClick={() => {
-      navigate("/register");
-    }}
-    >Register</button>
      </span>
    </div>
  );
--- a/web/src/component/Manage.js
+++ b/web/src/component/Manage.js
@@ -1,102 +1,64 @@
-import getFfmpegConfigListRespondExample from "../example-respond/get_ffmpeg_config_list.json";
+import { useNavigate } from "react-router";
+import Database from "./Database";
+
+function Manage(props) {
+  let navigate = useNavigate();

-function Manage() {
  return (
    <div className="page">
      <h2>Manage</h2>
-      <h3>Server status</h3>
-      <table>
-        <thead>
-          <tr>
-            <th>Name</th>
-            <th>Value</th>
-          </tr>
-        </thead>
-        <tbody>
-          <tr>
-            <td>Server status</td>
-            <td>
-              <span className="status-ok">OK</span>
-            </td>
-          </tr>
-          <tr>
-            <td>Server uptime</td>
-            <td>
-              <span>1 day, 23 hours, 59 minutes and 59 seconds</span>
-            </td>
-          </tr>
-          <tr>
-            <td>Server load</td>
-            <td>
-              <span>0.00 / 0.00 / 0.00</span>
-            </td>
-          </tr>
-          <tr>
-            <td>Server memory usage</td>
-            <td>
-              <span>0.00 MB</span>
-            </td>
-          </tr>
-          <tr>
-            <td>Server disk usage</td>
-            <td>
-              <span>0.00 MB</span>
-            </td>
-          </tr>
-          <tr>
-            <td>Server uptime</td>
-            <td>
-              <span>1 day, 23 hours, 59 minutes and 59 seconds</span>
-            </td>
-          </tr>
-          <tr>
-            <td>Server load</td>
-            <td>
-              <span>0.00 / 0.00 / 0.00</span>
-            </td>
-          </tr>
-          <tr>
-            <td>Server memory usage</td>
-            <td>
-              <span>0.00 MB</span>
-            </td>
-          </tr>
-          <tr>
-            <td>Server disk usage</td>
-            <td>
-              <span>0.00 MB</span>
-            </td>
-          </tr>
-        </tbody>
-      </table>
-      <h3>Database opeartions</h3>
-      <ul>
-        <li>.mp3</li>
-        <li>.flac</li>
-        <li>.wav</li>
-        <li>.ogg</li>
-        <li>.aac</li>
-        <li>.m4a</li>
-      </ul>
-      <input type="text" placeholder=".mp3" />
-      <button>Add Pattern</button>
-      <input type="text" placeholder="/path/to/root" />
-      <button>Import</button>
-      <h3>Ffmpeg Settings</h3>
-      <ol>
-        {getFfmpegConfigListRespondExample.ffmpeg_config_list.map(
-          (item, index) => (
-            <li>
-              {item.name} {item.args}
-            </li>
-          )
+      <p>Hi, {props.user.username}</p>
+      {props.user.role === 0 && (
+        <div>
+          <button
+            onClick={() => {
+              navigate("/manage/login");
+            }}
+          >
+            Login
+          </button>
+          <button
+            onClick={() => {
+              navigate("/manage/register");
+            }}
+          >
+            Register
+          </button>
+        </div>
      )}
-      </ol>
-      <span>
-        <input type="text" placeholder="name" />
-        <input type="text" placeholder="args" />
-        <button>Add</button>
-      </span>
+      {props.user.role !== 0 && (
+        <div className="horizontal">
+          <button
+            onClick={() => {
+              navigate(`/manage/users/${props.user.id}`);
+            }}
+          >
+            Profile
+          </button>
+          <button
+            onClick={() => {
+              fetch("/api/v1/logout")
+                .then((res) => res.json())
+                .then((data) => {
+                  if (data.error) {
+                    alert(data.error);
+                  } else {
+                    props.setUser(data.user);
+                  }
+                });
+            }}
+          >
+            Logout
+          </button>
+        </div>
+      )}
+      <hr />
+      <div className="horizontal">
+        <button onClick={() => navigate("/manage/tags")}>Tags</button>
+        <button onClick={() => navigate("/manage/users")}>Users</button>
+        <button onClick={() => navigate("/manage/feedbacks")}>Feedbacks</button>
+      </div>
+      <Database />
    </div>
  );
 }
--- a/web/src/component/ManageUser.js
+++ b/web/src/component/ManageUser.js
@@ -0,0 +1,78 @@
+import { useState, useEffect } from "react";
+import { Link } from "react-router-dom";
+
+function ManageUser() {
+  const [users, setUsers] = useState([]);
+  const roleDict = {
+    0: "Anonymous",
+    1: "Admin",
+    2: "Normal User",
+  };
+
+  function getUsers() {
+    fetch("/api/v1/get_users")
+      .then((res) => res.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          setUsers(data.users);
+        }
+      });
+  }
+
+  useEffect(() => {
+    getUsers();
+  }, []);
+
+  return (
+    <div className="page">
+      <h3>Manage User</h3>
+      <table>
+        <thead>
+          <tr>
+            <th>Name</th>
+            <th>Role</th>
+            <th>Active</th>
+          </tr>
+        </thead>
+        <tbody>
+          {users.map((user) => (
+            <tr key={user.id}>
+              <td>
+                <Link to={`/manage/users/${user.id}`}>@{user.username}</Link>
+              </td>
+              <td>{roleDict[user.role]}</td>
+              <td>
+                <input
+                  type="checkbox"
+                  defaultChecked={user.active}
+                  onClick={(e) => {
+                    fetch("/api/v1/update_user_active", {
+                      method: "POST",
+                      headers: {
+                        "Content-Type": "application/json",
+                      },
+                      body: JSON.stringify({
+                        id: user.id,
+                        active: e.target.checked,
+                      }),
+                    }).then((res) => res.json()).then((data) => {
+                      if (data.error) {
+                        alert(data.error);
+                      } else {
+                        getUsers();
+                      }
+                    });
+                  }}
+                />
+              </td>
+            </tr>
+          ))}
+        </tbody>
+      </table>
+    </div>
+  );
+}
+
+export default ManageUser;
--- a/web/src/component/Profile.js
+++ b/web/src/component/Profile.js
@@ -1,37 +0,0 @@
-import { useParams, useNavigate } from "react-router-dom";
-import ReviewEntry from "./ReviewEntry";
-import SearchFiles from "./SearchFiles";
-import getRandomFilesRespondExample from "../example-respond/get_random_files.json";
-
-function Profile(props) {
-  let params = useParams();
-  let navigate = useNavigate();
-
-  return (
-    <div>
-      <h1>Profile of user {params.id}</h1>
-      {props.user && props.user.id === parseInt(params.id) && (
-        <button
-          onClick={() => {
-            props.setUser(null);
-            navigate("/");
-          }}
-        >
-          Logout
-        </button>
-      )}
-      <p>
-        Lorem ipsum dolor sit amet consectetur adipisicing elit. Quisquam
-        doloremque, quidem quisquam, quisquam quisquam quisquam quisquam
-        dignissimos.
-      </p>
-      <h3>Reviews</h3>
-      <ReviewEntry />
-      <ReviewEntry />
-      <h3>Liked music</h3>
-      <SearchFiles folder={{}} />
-    </div>
-  );
-}
-
-export default Profile;
--- a/web/src/component/Register.js
+++ b/web/src/component/Register.js
@@ -1,49 +1,78 @@
 import { useNavigate } from "react-router-dom";
 import { useState } from "react";

-function Register(props) {
+function Register() {
  let navigate = useNavigate();
  const [username, setUsername] = useState("");
  const [password, setPassword] = useState("");
  const [password2, setPassword2] = useState("");
+  const [role, setRole] = useState("");
+
+  function register() {
+    if (!username || !password || !password2 || !role) {
+      alert("Please fill out all fields");
+    } else if (password !== password2) {
+      alert("Passwords do not match");
+    } else {
+      fetch("/api/v1/register", {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+        },
+        body: JSON.stringify({
+          username: username,
+          password: password,
+          role: parseInt(role),
+        }),
+      })
+        .then((res) => res.json())
+        .then((data) => {
+          if (data.error) {
+            alert(data.error);
+          } else {
+            navigate("/manage/login");
+          }
+        });
+    }
+  }
+
  return (
-    <div>
-      <h1>Register</h1>
-      <label htmlFor="username">Username:</label>
+    <div className="page">
+      <h2>Register</h2>
+      <label htmlFor="username">Username</label>
      <input
        type="text"
        id="username"
        value={username}
        onChange={(e) => setUsername(e.target.value)}
      />
-      <label htmlFor="password">Password:</label>
+      <label htmlFor="password">Password</label>
      <input
        type="password"
        id="password"
        value={password}
        onChange={(e) => setPassword(e.target.value)}
      />
-      <label htmlFor="password2">Confirm Password:</label>
+      <label htmlFor="password2">Confirm Password</label>
      <input
        type="password"
        id="password2"
        value={password2}
        onChange={(e) => setPassword2(e.target.value)}
-      />
-      <button
-        onClick={() => {
-          if (!username || !password || !password2) {
-            alert("Please fill out all fields");
-          } else if (password !== password2) {
-            alert("Passwords do not match");
-          } else {
-            props.setUser({ id: 39, username: username, password: password });
-            navigate("/");
+        onKeyPress={(e) => {
+          if (e.key === "Enter") {
+            e.preventDefault();
+            register();
          }
        }}
-      >
-        Register
-      </button>
+      />
+      <label htmlFor="role">Role</label>
+      <select value={role} onChange={(e) => setRole(e.target.value)}>
+        <option value="">Select a role</option>
+        <option value="2">User</option>
+        <option value="1">Admin</option>
+      </select>
+      <button onClick={register}>Register</button>
    </div>
  );
 }
--- a/web/src/component/Review.js
+++ b/web/src/component/Review.js
@@ -1,35 +0,0 @@
-import { useParams } from "react-router";
-import { Link } from "react-router-dom";
-import ReviewEntry from "./ReviewEntry";
-
-function Review() {
-  let params = useParams();
-
-  return (
-    <div className="page">
-      <h3>Review on music ID {params.id}</h3>
-      <textarea
-        className="review-text"
-        placeholder="Write your review here"
-      ></textarea>
-      <span>
-        <button>Submit</button>
-        <button>Add to fav</button>
-      </span>
-      <details open>
-        <summary>Liked by</summary>
-        <p>
-          <Link to="/profile/1">@User 1</Link>&nbsp;
-          <Link to="/profile/2">@User 2</Link>&nbsp;
-          <Link to="/profile/3">@User 3</Link>&nbsp;
-          <Link to="/profile/4">@User 4</Link>&nbsp;
-        </p>
-      </details>
-      <ReviewEntry />
-      <ReviewEntry />
-      <ReviewEntry />
-    </div>
-  );
-}
-
-export default Review;
--- a/web/src/component/ReviewEntry.js
+++ b/web/src/component/ReviewEntry.js
@@ -1,17 +1,29 @@
 import { Link } from "react-router-dom";
+import { convertIntToDateTime } from "./Common";

-function ReviewEntry() {
+function ReviewEntry(props) {
  return (
-    <p>
-      <h5>
-        <Link to="/profile/2">@rin</Link> comment music ID 39 at
-        2019-01-01 12:23:45
-      </h5>
-      Agree with <Link to="/profile/1">@hmsy</Link>. I also like how well the
-      musician plays the guitar. They are all very good. They really make the
-      song sound better. I like the way the bass plays and the way the guitar
-      sounds. I like the way the drums sound.
-    </p>
+    <div>
+      <h4>
+        <Link to={`/manage/users/${props.review.user.id}`}>
+          @{props.review.user.username}
+        </Link>{" "}
+        review{" "}
+        <Link to={`/files/${props.review.file.id}`}>
+          {props.review.file.filename}
+        </Link>{" "}
+        on {convertIntToDateTime(props.review.created_at)}{" "}
+        {props.review.updated_at !== 0 &&
+          "(modified on " +
+            convertIntToDateTime(props.review.updated_at) +
+            ")"}{" "}
+        {(props.user.role === 1 || props.review.user.id === props.user.id) &&
+          props.user.role !== 0 && (
+            <Link to={`/manage/reviews/${props.review.id}`}>Edit</Link>
+          )}
+      </h4>
+      <p>{props.review.content}</p>
+    </div>
  );
 }

--- a/web/src/component/ReviewPage.js
+++ b/web/src/component/ReviewPage.js
@@ -0,0 +1,75 @@
+import { useState, useEffect } from "react";
+import { useParams } from "react-router";
+import ReviewEntry from "./ReviewEntry";
+
+function ReviewPage(props) {
+  let params = useParams();
+  const [newReview, setNewReview] = useState("");
+  const [reviews, setReviews] = useState([]);
+
+  function refresh() {
+    fetch("/api/v1/get_reviews_on_file", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        id: parseInt(params.id),
+      }),
+    })
+      .then((response) => response.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          setReviews(data.reviews);
+        }
+      });
+  }
+
+  useEffect(() => {
+    refresh();
+  }, []);
+
+  function submitReview() {
+    fetch("/api/v1/insert_review", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        content: newReview,
+        file_id: parseInt(params.id),
+      }),
+    })
+      .then((res) => res.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          setNewReview("");
+          refresh();
+        }
+      });
+  }
+
+  return (
+    <div className="page">
+      <h3>Review Page</h3>
+      <div>
+        {reviews.map((review) => (
+          <ReviewEntry key={review.id} review={review} user={props.user} />
+        ))}
+      </div>
+      <div>
+        <textarea
+          value={newReview}
+          onChange={(e) => setNewReview(e.target.value)}
+        />
+        <button onClick={() => submitReview()}>Submit</button>
+      </div>
+    </div>
+  );
+}
+
+export default ReviewPage;
--- a/web/src/component/SearchFiles.js
+++ b/web/src/component/SearchFiles.js
@@ -1,20 +1,48 @@
 import { useState, useEffect } from "react";
+import { useNavigate } from "react-router-dom";
+import { useQuery } from "./Common";
 import FilesTable from "./FilesTable";
-import searchFilesRespondExample from "../example-respond/search_files.json"

 function SearchFiles(props) {
+  const navigator = useNavigate();
  const [files, setFiles] = useState([]);
-  const [filename, setFilename] = useState("");
-  const [offset, setOffset] = useState(0);
+  const query = useQuery();
+  const filename = query.get("q") || "";
+  const [filenameInput, setFilenameInput] = useState(filename);
+  const offset = parseInt(query.get("o")) || 0;
  const [isLoading, setIsLoading] = useState(false);
  const limit = 10;

  function searchFiles() {
-    setFiles(searchFilesRespondExample.files);
+    // check empty filename
+    if (filename === "") {
+      return;
+    }
+    setIsLoading(true);
+    fetch("/api/v1/search_files", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        filename: filename,
+        limit: limit,
+        offset: offset,
+      }),
+    })
+      .then((response) => response.json())
+      .then((data) => {
+        const files = data.files ? data.files : [];
+        setFiles(files);
+      })
+      .catch((error) => {
+        alert("search_files error: " + error);
+      })
+      .finally(() => {
+        setIsLoading(false);
+      });
  }

  function nextPage() {
-    setOffset(offset + limit);
+    navigator(`/files?q=${filenameInput}&o=${offset + limit}`);
  }

  function lastPage() {
@@ -22,38 +50,33 @@ function SearchFiles(props) {
    if (offsetValue < 0) {
      return;
    }
-    setOffset(offsetValue);
+    navigator(`/files?q=${filenameInput}&o=${offsetValue}`);
  }

-  useEffect(() => searchFiles(), [offset, props.folder]); // eslint-disable-line react-hooks/exhaustive-deps
+  useEffect(() => searchFiles(), [offset, filename]); // eslint-disable-line react-hooks/exhaustive-deps

  return (
    <div className="page">
      <h3>Search Files</h3>
      <div className="search_toolbar">
-        {!props.folder && (
        <input
-            onChange={(event) => setFilename(event.target.value)}
+          onChange={(event) => setFilenameInput(event.target.value)}
          onKeyDown={(event) => {
            if (event.key === "Enter") {
-                searchFiles();
+              navigator(`/files?q=${filenameInput}&o=0`);
            }
          }}
          type="text"
          placeholder="Enter filename"
+          value={filenameInput}
        />
-        )}
        <button
-          disabled={!!props.folder}
          onClick={() => {
-            searchFiles();
+            navigator(`/files?q=${filenameInput}&o=0`);
          }}
        >
          {isLoading ? "Loading..." : "Search"}
        </button>
-        {props.folder && props.folder.foldername && (
-          <button onClick={searchFiles}>{props.folder.foldername}</button>
-        )}
        <button onClick={lastPage}>Last page</button>
        <button disabled>
          {offset} - {offset + files.length}
--- a/web/src/component/SearchFolders.js
+++ b/web/src/component/SearchFolders.js
@@ -1,23 +1,46 @@
 import { useEffect, useState } from "react";
-import { useParams } from "react-router";
+import { useNavigate } from "react-router-dom";
+import { useQuery } from "./Common";
 import FoldersTable from "./FoldersTable";
-import SearchFiles from "./SearchFiles";
-import searchFoldersRespondExample from "../example-respond/search_folders.json";

-function SearchFolders(props) {
-  const [foldername, setFoldername] = useState("");
+function SearchFolders() {
+  const navigator = useNavigate();
+  const query = useQuery();
+  const foldername = query.get("q") || "";
+  const [foldernameInput, setFoldernameInput] = useState(foldername);
  const [folders, setFolders] = useState([]);
-  const [folder, setFolder] = useState({});
-  const [offset, setOffset] = useState(0);
+  const offset = parseInt(query.get("o")) || 0;
  const [isLoading, setIsLoading] = useState(false);
  const limit = 10;

  function searchFolder() {
-    setFolders(searchFoldersRespondExample.folders);
+    if (foldername === "") {
+      return;
+    }
+    setIsLoading(true);
+    fetch("/api/v1/search_folders", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        foldername: foldername,
+        limit: limit,
+        offset: offset,
+      }),
+    })
+      .then((response) => response.json())
+      .then((data) => {
+        setFolders(data.folders ? data.folders : []);
+      })
+      .catch((error) => {
+        alert("search_folders error: " + error);
+      })
+      .finally(() => {
+        setIsLoading(false);
+      });
  }

  function nextPage() {
-    setOffset(offset + limit);
+    navigator(`/folders?q=${foldername}&o=${offset + limit}`);
  }

  function lastPage() {
@@ -25,36 +48,31 @@ function SearchFolders(props) {
    if (offsetValue < 0) {
      return;
    }
-    setOffset(offsetValue);
+    navigator(`/folders?q=${foldername}&o=${offsetValue}`);
  }

-  function viewFolder(folder) {
-    setFolder(folder);
-  }
-
-  let params = useParams();
-  useEffect(() => searchFolder(), [offset]); // eslint-disable-line react-hooks/exhaustive-deps
-  useEffect(() => {
-    if (params.id !== undefined) {
-      setFolder({ id: parseInt(params.id) });
-    }
-  }, [params.id]);
+  useEffect(() => searchFolder(), [offset, foldername]); // eslint-disable-line react-hooks/exhaustive-deps

  return (
    <div className="page">
      <h3>Search Folders</h3>
      <div className="search_toolbar">
        <input
-          onChange={(event) => setFoldername(event.target.value)}
+          onChange={(event) => setFoldernameInput(event.target.value)}
          onKeyDown={(event) => {
            if (event.key === "Enter") {
-              searchFolder();
+              navigator(`/folders?q=${foldernameInput}&o=0`);
            }
          }}
          type="text"
          placeholder="Enter folder name"
+          value={foldernameInput}
        />
-        <button onClick={searchFolder}>
+        <button
+          onClick={() => {
+            navigator(`/folders?q=${foldernameInput}&o=0`);
+          }}
+        >
          {isLoading ? "Loading..." : "Search"}
        </button>
        <button onClick={lastPage}>Last page</button>
@@ -63,8 +81,7 @@ function SearchFolders(props) {
        </button>
        <button onClick={nextPage}>Next page</button>
      </div>
-      <FoldersTable viewFolder={viewFolder} folders={folders} />
-      <SearchFiles setPlayingFile={props.setPlayingFile} folder={folder} />
+      <FoldersTable folders={folders} />
    </div>
  );
 }
--- a/web/src/component/Share.js
+++ b/web/src/component/Share.js
@@ -1,13 +1,25 @@
 import { useEffect, useState } from "react";
 import { useParams } from "react-router";
 import FilesTable from "./FilesTable";
-import GetFileInfoRespondExample from "../example-respond/get_file_info.json";

 function Share(props) {
  let params = useParams();
  const [file, setFile] = useState([]);
  useEffect(() => {
-    setFile([GetFileInfoRespondExample]);
+    fetch("/api/v1/get_file_info", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        id: parseInt(params.id),
+      }),
+    })
+      .then((response) => response.json())
+      .then((data) => {
+        setFile([data]);
+      })
+      .catch((error) => {
+        alert("get_file_info error: " + error);
+      });
  }, [params]);
  return (
    <div className="page">
--- a/web/src/component/Tags.js
+++ b/web/src/component/Tags.js
@@ -0,0 +1,105 @@
+import { useEffect, useState } from "react";
+import { Link } from "react-router-dom";
+
+function Tags() {
+  const [tags, setTags] = useState([]);
+  const [newTagName, setNewTagName] = useState("");
+  const [newTagDescription, setNewTagDescription] = useState("");
+  const [showAddTag, setShowAddTag] = useState(false);
+
+  function refresh() {
+    fetch("/api/v1/get_tags")
+      .then((res) => res.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          setTags(data.tags);
+        }
+      });
+  }
+
+  useEffect(() => {
+    refresh();
+  }, []);
+
+  return (
+    <div className="page">
+      <h3>Tags</h3>
+      <table>
+        <thead>
+          <tr>
+            <th>Name</th>
+            <th>Description</th>
+            <th>Created By</th>
+            <th>Actions</th>
+          </tr>
+        </thead>
+        <tbody>
+          {tags.map((tag) => (
+            <tr key={tag.id}>
+              <td>{tag.name}</td>
+              <td>{tag.description}</td>
+              <td>
+                <Link to={`/manage/users/${tag.created_by_user.id}`}>
+                  @{tag.created_by_user.username}
+                </Link>
+              </td>
+              <td>
+                <Link to={`/manage/tags/${tag.id}`}>Edit</Link>
+              </td>
+            </tr>
+          ))}
+        </tbody>
+      </table>
+      {!showAddTag && (
+        <button onClick={() => setShowAddTag(true)}>Add Tag</button>
+      )}
+      {showAddTag && (
+        <div>
+          <label htmlFor="newTagName">New Tag Name</label>
+          <input
+            type="text"
+            id="newTagName"
+            value={newTagName}
+            onChange={(e) => setNewTagName(e.target.value)}
+          />
+          <label htmlFor="newTagDescription">New Tag Description</label>
+          <textarea
+            id="newTagDescription"
+            value={newTagDescription}
+            onChange={(e) => setNewTagDescription(e.target.value)}
+          />
+          <button
+            onClick={() => {
+              fetch("/api/v1/insert_tag", {
+                method: "POST",
+                headers: {
+                  "Content-Type": "application/json",
+                },
+                body: JSON.stringify({
+                  name: newTagName,
+                  description: newTagDescription,
+                }),
+              })
+                .then((res) => res.json())
+                .then((data) => {
+                  if (data.error) {
+                    alert(data.error);
+                  } else {
+                    setNewTagName("");
+                    setNewTagDescription("");
+                    refresh();
+                  }
+                });
+            }}
+          >
+            Create Tag
+          </button>
+        </div>
+      )}
+    </div>
+  );
+}
+
+export default Tags;
--- a/web/src/component/User.js
+++ b/web/src/component/User.js
@@ -1,23 +0,0 @@
-import { useNavigate } from "react-router";
-
-function User(props) {
-  // props.user
-  // props.setUser
-  let navigate = useNavigate();
-  return (
-    <div
-      className="avatar"
-      onClick={() => {
-        if (props.user) {
-          navigate("/profile/" + props.user.id);
-        } else {
-          navigate("/login");
-        }
-      }}
-    >
-      {props.user ? props.user.username : "Login"}
-    </div>
-  );
-}
-
-export default User;
--- a/web/src/component/UserProfile.js
+++ b/web/src/component/UserProfile.js
@@ -0,0 +1,168 @@
+import { useState, useEffect } from "react";
+import { useParams } from "react-router";
+import ReviewEntry from "./ReviewEntry";
+
+function UserProfile(props) {
+  let params = useParams();
+  const [reviews, setReviews] = useState([]);
+  const [oldPassword, setOldPassword] = useState("");
+  const [newPassword, setNewPassword] = useState("");
+  const [newPasswordConfirm, setNewPasswordConfirm] = useState("");
+  const [user, setUser] = useState({
+    id: 0,
+    username: "",
+    role: 0,
+    active: false,
+    avatar_id: 0,
+  });
+
+  function getReviews() {
+    fetch("/api/v1/get_reviews_by_user", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        id: parseInt(params.id),
+      }),
+    })
+      .then((response) => response.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          setReviews(data);
+        }
+      });
+  }
+
+  function getUserInfo() {
+    fetch("/api/v1/get_user_info", {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({
+        id: parseInt(params.id),
+      }),
+    })
+      .then((response) => response.json())
+      .then((data) => {
+        if (data.error) {
+          alert(data.error);
+        } else {
+          setUser(data.user);
+        }
+      });
+  }
+
+  useEffect(() => {
+    getReviews();
+    getUserInfo();
+  }, []);
+
+  return (
+    <div className="page">
+      <h3>User Profile</h3>
+      <div className="horizontal">
+        <input
+          type="text"
+          value={user.username}
+          onChange={(e) => {
+            setUser({
+              ...user,
+              username: e.target.value,
+            });
+          }}
+        />
+        <button
+          onClick={() => {
+            fetch("/api/v1/update_username", {
+              method: "POST",
+              headers: {
+                "Content-Type": "application/json",
+              },
+              body: JSON.stringify({
+                id: parseInt(params.id),
+                username: user.username,
+              }),
+            })
+              .then((response) => response.json())
+              .then((data) => {
+                if (data.error) {
+                  alert(data.error);
+                } else {
+                  props.setUser({
+                    ...props.user,
+                    username: user.username,
+                  });
+                  alert("Username updated successfully!");
+                  getUserInfo();
+                }
+              });
+          }}
+          disabled={props.user.id !== user.id && props.user.role !== 1}
+        >
+          Save Username
+        </button>
+      </div>
+      <div>
+        <input
+          type="password"
+          value={oldPassword}
+          placeholder="Old Password"
+          onChange={(e) => setOldPassword(e.target.value)}
+        />
+        <input
+          type="password"
+          value={newPassword}
+          placeholder="New Password"
+          onChange={(e) => setNewPassword(e.target.value)}
+        />
+        <input
+          type="password"
+          value={newPasswordConfirm}
+          placeholder="Confirm New Password"
+          onChange={(e) => setNewPasswordConfirm(e.target.value)}
+        />
+        <button
+          onClick={() => {
+            fetch("/api/v1/update_user_password", {
+              method: "POST",
+              headers: {
+                "Content-Type": "application/json",
+              },
+              body: JSON.stringify({
+                id: parseInt(params.id),
+                old_password: oldPassword,
+                new_password: newPassword,
+                new_password_confirm: newPasswordConfirm,
+              }),
+            })
+              .then((response) => response.json())
+              .then((data) => {
+                if (data.error) {
+                  alert(data.error);
+                } else {
+                  alert("Password updated successfully!");
+                }
+              });
+          }}
+          disabled={
+            (props.user.id !== user.id && props.user.role !== 1) ||
+            newPassword !== newPasswordConfirm ||
+            newPassword.length === 0
+          }
+        >
+          Change Password
+        </button>
+      </div>
+      <h4>Reviews</h4>
+      {reviews.map((review) => (
+        <ReviewEntry key={review.id} review={review} user={props.user} />
+      ))}
+    </div>
+  );
+}
+
+export default UserProfile;
--- a/web/src/component/UserStatus.js
+++ b/web/src/component/UserStatus.js
@@ -0,0 +1,16 @@
+import { useEffect } from 'react';
+
+function UserStatus(props) {
+  // props.user
+  // props.setUser
+  useEffect(() => {
+    fetch("/api/v1/login")
+      .then(res => res.json())
+      .then(data => {
+        props.setUser(data.user);
+      });
+  }, []);
+  return <div>{props.user.username}</div>;
+}
+
+export default UserStatus;
--- a/web/src/example-respond/get_ffmpeg_config_list.json
+++ b/web/src/example-respond/get_ffmpeg_config_list.json
@@ -1,12 +0,0 @@
-{
-  "ffmpeg_config_list": [
-    { "name": "OPUS 128k", "args": "-c:a libopus -ab 128k" },
-    { "name": "OPUS 96k", "args": "-c:a libopus -ab 96k" },
-    { "name": "OPUS 256k", "args": "-c:a libopus -ab 256k" },
-    { "name": "OPUS 320k", "args": "-c:a libopus -ab 320k" },
-    { "name": "OPUS 512k", "args": "-c:a libopus -ab 512k" },
-    { "name": "AAC 128k", "args": "-c:a aac -ab 128k" },
-    { "name": "AAC 256k", "args": "-c:a aac -ab 256k" },
-    { "name": "全损音质 32k", "args": "-c:a libopus -ab 32k" }
-  ]
-}
--- a/web/src/example-respond/get_file_info.json
+++ b/web/src/example-respond/get_file_info.json
@@ -1,7 +0,0 @@
-{
-  "id": 9856,
-  "folder_id": 898,
-  "foldername": "[2021.05.12] TVアニメ「シャドーハウス」EDテーマ「ないない」／ReoNa [スペシャルエディション] [FLAC 96kHz／24bit]",
-  "filename": "03. 生きてるだけでえらいよ.flac",
-  "filesize": 122761032
-}
--- a/web/src/example-respond/get_random_files.json
+++ b/web/src/example-respond/get_random_files.json
@@ -1,74 +0,0 @@
-{
-  "files": [
-    {
-      "id": 9727,
-      "folder_id": 958,
-      "foldername": "garnet (narry) — emerald [GARN-0002] (flac)",
-      "filename": "06. narry — malachite.flac",
-      "filesize": 28228112
-    },
-    {
-      "id": 4785,
-      "folder_id": 457,
-      "foldername": "Winter (FLAC)",
-      "filename": "08 - 恋.flac",
-      "filesize": 33576086
-    },
-    {
-      "id": 13943,
-      "folder_id": 1368,
-      "foldername": "[mikudb] 融合YELLOWS",
-      "filename": "10. カレーライスのうた.mp3",
-      "filesize": 2524925
-    },
-    {
-      "id": 21743,
-      "folder_id": 2207,
-      "foldername": "Tsumanne＼(^o^)／",
-      "filename": "08.スーパートルコ行進曲 - オワタ＼(^o^)／.mp3",
-      "filesize": 7677985
-    },
-    {
-      "id": 35918,
-      "folder_id": 3758,
-      "foldername": "2008 - Higurashi 2 - Ano hi, Ano Basho, Subete ni ' Arigatou",
-      "filename": "06 - Thanks (Bashee Arenge Version).flac",
-      "filesize": 39545977
-    },
-    {
-      "id": 32394,
-      "folder_id": 3341,
-      "foldername": "[彩音 ～xi-on～] Eyes",
-      "filename": "08 - 少女さとり　～ 3rd Eye.mp3",
-      "filesize": 7538525
-    },
-    {
-      "id": 16934,
-      "folder_id": 1671,
-      "foldername": "Explorism",
-      "filename": "14.Please, My Producer (feat. SAK).mp3",
-      "filesize": 6099717
-    },
-    {
-      "id": 1381,
-      "folder_id": 131,
-      "foldername": "Garakuta Live (FLAC)",
-      "filename": "(09) [しけもく] 愛染エピローグ.flac",
-      "filesize": 25173829
-    },
-    {
-      "id": 18066,
-      "folder_id": 1791,
-      "foldername": "Jailbreak from the Sunday Morning!!",
-      "filename": "05. Good bye!! Melancory Sunday Morning!!.mp3",
-      "filesize": 10197778
-    },
-    {
-      "id": 41261,
-      "folder_id": 4305,
-      "foldername": "[KSLA-0124~6] Modification of Key Sounds Label [CD-FLAC]",
-      "filename": "3-01. Trigger (MUZIK SERVANT vs Freezer Remix).flac",
-      "filesize": 42772516
-    }
-  ]
-}
--- a/web/src/example-respond/search_files.json
+++ b/web/src/example-respond/search_files.json
@@ -1,25 +0,0 @@
-{
-  "files": [
-    {
-      "id": 26555,
-      "folder_id": 2579,
-      "foldername": "[mikudb] SEB presents SUPER HATSUNE BEAT Vol. 1",
-      "filename": "02. White Letter (ゆうゆP Euro Arrange).mp3",
-      "filesize": 4252006
-    },
-    {
-      "id": 40891,
-      "folder_id": 4121,
-      "foldername": "初音ミクベスト ～memories～",
-      "filename": "10.White letter.mp3",
-      "filesize": 6723982
-    },
-    {
-      "id": 43289,
-      "folder_id": 4384,
-      "foldername": "Hatsune Miku Best ~memories~",
-      "filename": "10.White Letter.flac",
-      "filesize": 20817678
-    }
-  ]
-}
--- a/web/src/example-respond/search_folders.json
+++ b/web/src/example-respond/search_folders.json
@@ -1,32 +0,0 @@
-{
-  "folders": [
-    {
-      "id": 2037,
-      "foldername": "P∴Rhythmatiq — 七色リミックス [OSLA-0005] (flac+scans)"
-    },
-    {
-      "id": 2130,
-      "foldername": " P∴Rhythmatiq — P∴Rhythmatiq act：09 [PRTQ-0017] (flac+scans)"
-    },
-    {
-      "id": 2176,
-      "foldername": "P∴Rhythmatiq — P∴Rhythmatiq act：02 [PRTQ-0002] (flac)"
-    },
-    {
-      "id": 2184,
-      "foldername": "P∴Rhythmatiq — P∴Rhythmatiq act：04 [PRTQ-0005] (flac)"
-    },
-    {
-      "id": 2190,
-      "foldername": "P∴Rhythmatiq — P∴Rhythmatiq Rock!! [PQPC-0001] (flac)"
-    },
-    {
-      "id": 2360,
-      "foldername": "P∴Rhythmatiq — P∴Rhythmatiq act：11 [PRTQ-0025] (flac)"
-    },
-    { "id": 3443, "foldername": "P∴Rhythmatiq EXTRA" },
-    { "id": 3444, "foldername": "P∴Rhythmatiq He：arts" },
-    { "id": 3445, "foldername": "P∴Rhythmatiq Re act" },
-    { "id": 3446, "foldername": "P∴Rhythmatiq Rock!!" }
-  ]
-}
Author	SHA1	Message	Date
heimoshuiyu	edc42248ee	fix backend output format	2022-06-12 18:01:30 +08:00
heimoshuiyu	d7b6b3849c	fix user profile button disabled status	2022-06-12 18:00:58 +08:00
heimoshuiyu	4fcd962cc9	read secret key from config.json	2022-06-12 17:17:57 +08:00
heimoshuiyu	c7382a1561	remove token auth method	2022-06-12 17:17:15 +08:00
heimoshuiyu	4199caa5ef	create tmpfs root directory if not exists	2022-06-12 16:46:19 +08:00
heimoshuiyu	1cf8df7524	delete 'vodeo test' config	2022-06-12 16:39:31 +08:00
heimoshuiyu	9ea21fa7f6	fix config.json 8k	2022-06-12 16:38:57 +08:00
heimoshuiyu	8859640411	fix handle delete tmpfs file failed	2022-06-12 16:36:08 +08:00
heimoshuiyu	d07df60b5d	set default database index file pattern	2022-06-12 16:23:58 +08:00
heimoshuiyu	02e5a39814	add routes for getRandomFiles "t": string, the tagID, empty string stand for all tags	2022-06-12 16:14:47 +08:00
heimoshuiyu	522844a447	update npm browserslist	2022-06-12 16:08:19 +08:00
heimoshuiyu	32521e1178	add routes for FilesInFolder "o": string, offset of the result	2022-06-12 16:06:02 +08:00
heimoshuiyu	9f4c606b28	fix route get search files initial filename	2022-06-12 16:02:20 +08:00
heimoshuiyu	58bb37fede	add route for search folders "q": string, foldername to search "o": int, offset of search result	2022-06-12 16:00:28 +08:00
heimoshuiyu	ff9774b806	move useQuery() to Common.js	2022-06-12 15:52:13 +08:00
heimoshuiyu	7cb1a5d02f	add frontend route for search files "q": string, filename to search "o": int, offset of search result	2022-06-12 02:48:17 +08:00
heimoshuiyu	a9c2c2d7f9	fix access undefined when no files in folder	2022-06-12 00:24:28 +08:00
heimoshuiyu	212ab56722	format	2022-06-12 00:23:53 +08:00
heimoshuiyu	c2269ac0fc	fix reset offset after search button clicked	2022-06-12 00:19:52 +08:00
heimoshuiyu	14e9ff5a95	add: click filename in dialog to play	2022-06-12 00:11:39 +08:00
heimoshuiyu	544b5afc0d	Fix: add filename when download file	2022-04-18 02:32:42 +08:00
heimoshuiyu	6e9e7252b2	Revert "Add: support video" This reverts commit `465517e5cc`.	2022-04-18 01:33:02 +08:00
heimoshuiyu	61d85bba97	Add: support customized ffmpeg container format	2022-04-18 01:32:35 +08:00
heimoshuiyu	e4c59fd539	Format: config.json	2022-04-17 22:20:49 +08:00
heimoshuiyu	25205c0c0d	Update npm dependencies	2022-04-17 21:55:34 +08:00
heimoshuiyu	1655962e85	Merge tag 'v1.1.0' into dbms	2022-01-23 23:56:17 +08:00
heimoshuiyu	2d85244ced	Update: Makefile for external static lib	2022-01-22 11:40:41 +08:00
heimoshuiyu	0897fcc9f8	Fix: more file pattern at update	2022-01-22 10:45:33 +08:00
heimoshuiyu	2dab5cd109	Revert "Update: README.md for dbms" flow chart This reverts commit `a367b9253e`.	2022-01-15 01:09:12 +08:00
heimoshuiyu	a84dfe8178	Add: sleep stop timer	2022-01-15 00:53:42 +08:00
heimoshuiyu	a367b9253e	Update: README.md for dbms	2022-01-03 17:19:16 +08:00
heimoshuiyu	b295707a05	Update: README.md for dbms	2022-01-03 17:19:16 +08:00
heimoshuiyu	82da1aa48b	Revert "Add: README.md DBMS TODO" This reverts commit `2358335d4e`.	2022-01-03 17:19:16 +08:00
heimoshuiyu	359416ea44	Add: support reset foldername	2022-01-03 17:19:15 +08:00
heimoshuiyu	5608693c06	Add: register button on manage page	2022-01-03 17:19:05 +08:00
heimoshuiyu	d6f9a03786	SQL ORDER and IGNORE tag exists	2021-12-16 22:34:18 +08:00
heimoshuiyu	7188e73783	Add: link to tag on fileinfo page	2021-12-16 22:33:32 +08:00
heimoshuiyu	027aef4070	Move: play button after info button in dialog	2021-12-16 14:50:38 +08:00
heimoshuiyu	14f3c1c8da	Move: download button from dialog to file page	2021-12-16 13:27:11 +08:00
heimoshuiyu	80802f95f8	Add: handle enter press	2021-12-16 13:22:18 +08:00
heimoshuiyu	214ad6c285	Add: support reset filename	2021-12-16 13:22:18 +08:00
heimoshuiyu	64d1e3ff78	Show detailed compile information	2021-12-16 13:22:17 +08:00
heimoshuiyu	297643ad91	Change: manage page Edit to Profile	2021-12-16 13:22:17 +08:00
heimoshuiyu	7efde3cf6f	Add: support change filename Fix: path method use realname	2021-12-16 13:22:10 +08:00
heimoshuiyu	b0e57099ba	Fix: manage page button horizontal	2021-12-16 12:04:15 +08:00
heimoshuiyu	435e3605f7	Add: support delete file	2021-12-16 12:03:05 +08:00
heimoshuiyu	0edc7f7141	Add: show file in ReviewEntry	2021-12-16 10:59:12 +08:00
heimoshuiyu	6fdd0d2a9e	Fix: insert or replace file_has_tag when it exists	2021-12-16 01:53:46 +08:00
heimoshuiyu	465517e5cc	Add: support video (still in test), change ogg to webm	2021-12-16 01:34:34 +08:00
heimoshuiyu	fc735c88d3	Fix: center Login and Manage page	2021-12-15 16:23:40 +08:00
heimoshuiyu	82c198d45b	Reject anonymous user for some action	2021-12-15 11:34:01 +08:00
heimoshuiyu	73828c547c	Add: support config single thread	2021-12-15 09:11:03 +08:00
heimoshuiyu	97083114fb	Add: singleThreadLock for sqlite performance, and change Db.Tag method	2021-12-15 02:53:41 +08:00
heimoshuiyu	1c14997b85	Change: title text to white	2021-12-14 10:43:39 +08:00
heimoshuiyu	d59e40c6fa	Fix: play another file while current file is preparing	2021-12-14 01:30:28 +08:00
heimoshuiyu	47b178ac90	Add: tmpfs lock and fix bug	2021-12-14 01:19:50 +08:00
heimoshuiyu	922b2370ee	Update: review entry edit button to Link	2021-12-14 00:47:46 +08:00
heimoshuiyu	83ab1a91b2	Add: support delete tag and its references	2021-12-14 00:33:31 +08:00
heimoshuiyu	4bfcf460c9	Add: support show modified review time	2021-12-13 23:32:29 +08:00
heimoshuiyu	28127f6138	Add: support delete feedback	2021-12-13 23:23:57 +08:00
heimoshuiyu	0c9048072f	Add: support feedback	2021-12-13 23:18:46 +08:00
heimoshuiyu	22f7ea8476	Update: title space evenly	2021-12-13 22:27:01 +08:00
heimoshuiyu	e1d9eac514	Add: updating database..	2021-12-13 22:21:24 +08:00
heimoshuiyu	1b0688e523	Add: User can change their password	2021-12-13 16:18:02 +08:00
heimoshuiyu	f1e8dcfad4	Add: handle not active user	2021-12-13 14:28:24 +08:00
heimoshuiyu	ab67575976	Add: set user acitve	2021-12-13 14:20:36 +08:00
heimoshuiyu	adee9bcb65	Simplify: register not return user object	2021-12-13 13:47:02 +08:00
heimoshuiyu	d7ca68aad1	Add: support insert active user	2021-12-13 13:43:09 +08:00
heimoshuiyu	a826e4bf29	Add: support walk database with tags	2021-12-13 13:24:25 +08:00
heimoshuiyu	d4718ac120	Add: support select ramdom files by tag	2021-12-13 07:07:43 +08:00
heimoshuiyu	7a10922ec4	Add: link to user on tags page	2021-12-13 06:23:32 +08:00
heimoshuiyu	164dd0f282	Add: show reviews created by user	2021-12-13 06:18:14 +08:00
heimoshuiyu	f32c922faf	Add: delete review	2021-12-13 05:52:10 +08:00
heimoshuiyu	80462efebc	Add: modify review	2021-12-13 05:27:12 +08:00
heimoshuiyu	12739be2f5	Add: get reviews and fix bug	2021-12-13 04:47:00 +08:00
heimoshuiyu	6b8bfedb9b	Add: insert review	2021-12-13 04:17:00 +08:00
heimoshuiyu	e87b4823d9	Add: update foldername	2021-12-13 03:43:09 +08:00
heimoshuiyu	a2cb098330	Fix: bug login as anonymouse user null pointer	2021-12-12 18:28:47 +08:00
heimoshuiyu	93a0fe7a31	Add: delete tag on file	2021-12-12 17:39:08 +08:00
heimoshuiyu	003f8cace2	Fix: empty filename search	2021-12-12 17:23:27 +08:00
heimoshuiyu	2c802ca807	Add: put tag on file	2021-12-12 17:19:14 +08:00
heimoshuiyu	f71544caab	Add: File info page	2021-12-12 16:21:43 +08:00
heimoshuiyu	dfc0b43bdd	Finished: tag	2021-12-12 15:41:33 +08:00
heimoshuiyu	5a68cea2f3	Add: tag created_by_user_id column	2021-12-12 15:16:02 +08:00
heimoshuiyu	047f15426b	Fix: Handel error of checkAdmin	2021-12-12 15:08:44 +08:00
heimoshuiyu	d2c852d57a	Fix: Add tag only by admin	2021-12-12 13:03:36 +08:00
heimoshuiyu	af444f0bbb	Add: update tag info	2021-12-12 13:02:10 +08:00
heimoshuiyu	1bbcecfb2e	Add: simple get tags and create tag	2021-12-12 03:23:21 +08:00
heimoshuiyu	b96daa07c6	Change: Update Database auth to user method	2021-12-12 01:57:54 +08:00
heimoshuiyu	1f960f8f64	Add: Handle logout	2021-12-12 01:26:46 +08:00
heimoshuiyu	e608a6b1df	Add: backend session support and bug fix	2021-12-12 01:14:42 +08:00
heimoshuiyu	f3a95973e9	Add: Simple user login/register function	2021-12-11 18:47:25 +08:00
heimoshuiyu	c580ca245f	Merge branch 'master' into dbms	2021-12-11 00:46:38 +08:00
heimoshuiyu	9b4c0b24ef	Update: README.md RESTful API	2021-12-11 00:37:43 +08:00
heimoshuiyu	c418634515	Change: RESTful API	2021-12-11 00:22:41 +08:00
heimoshuiyu	87ac0cecb7	Add: FilesInFolder page	2021-12-11 00:19:53 +08:00
heimoshuiyu	1d49689171	Hide files/folders table if not need	2021-12-11 00:03:07 +08:00
heimoshuiyu	fdd41397bf	Update: skip file when exists in database	2021-12-10 20:46:26 +08:00
heimoshuiyu	7e5c92dd63	Add: simple update database function	2021-12-10 15:17:51 +08:00
heimoshuiyu	83f2b76cbc	Re-struct pkg/api, pkg/database	2021-12-10 15:17:50 +08:00
heimoshuiyu	05a569e395	Fix: feedbacks's column header	2021-12-09 11:21:23 +08:00
heimoshuiyu	e961c10d4e	Add: ER Diagram (draw.io)	2021-12-07 23:23:43 +08:00
heimoshuiyu	2d7ac69db5	Update: init SQL feedbacks tags tmpfs	2021-12-07 14:15:46 +08:00
heimoshuiyu	47a60ae671	Fix: SQL init user avatar	2021-12-07 10:42:18 +08:00
heimoshuiyu	ca8b6cb893	Add SQL create table statement	2021-12-07 10:26:50 +08:00
heimoshuiyu	258bf9869f	Re-struct pkg/api, pkg/database	2021-12-07 00:25:18 +08:00