from flask import Flask, request, jsonify
import re

app = Flask(__name__)

def check_vulnerabilities(url):
    """Fake vulnerability check based on simple patterns."""
    vulnerabilities = []
    if "admin" in url.lower():
        vulnerabilities.append("Admin Panel Found")
    if re.search(r'\?.*=.*', url):
        vulnerabilities.append("Potential SQL Injection Risk")
    if url.startswith("http://"):
        vulnerabilities.append("Insecure Protocol (HTTP detected)")

    return vulnerabilities if vulnerabilities else ["No obvious vulnerabilities detected"]

@app.route("/scan", methods=["POST"])
def scan():
    data = request.get_json()
    url = data.get("url")
    if not url:
        return jsonify({"error": "No URL provided"}), 400

    scan_result = check_vulnerabilities(url)
    return jsonify({"result": scan_result})

if __name__ == "__main__":
    app.run(debug=True)