forum/views/writers.py

   1 # encoding:utf-8
   2 import os.path
   3 import time, datetime, random
   4 import logging
   5 from django.core.files.storage import FileSystemStorage
   6 from django.shortcuts import render_to_response, get_object_or_404
   7 from django.contrib.auth.decorators import login_required
   8 from django.http import HttpResponseRedirect, HttpResponse, HttpResponseForbidden, Http404
   9 from django.template import RequestContext
  10 from django.utils.html import *
  11 from django.utils import simplejson
  12 from django.utils.translation import ugettext as _
  13 from django.core.urlresolvers import reverse
  14 from django.core.exceptions import PermissionDenied
  15
  16 from forum.actions import AskAction, AnswerAction, ReviseAction, RollbackAction, RetagAction
  17 from forum.forms import *
  18 from forum.models import *
  19 from forum.const import *
  20 from forum.utils.forms import get_next_url
  21 from forum.views.commands import SpamNotAllowedException
  22
  23
  24 def upload(request):#ajax upload file to a question or answer
  25     class FileTypeNotAllow(Exception):
  26         pass
  27     class FileSizeNotAllow(Exception):
  28         pass
  29     class UploadPermissionNotAuthorized(Exception):
  30         pass
  31
  32     #<result><msg><![CDATA[%s]]></msg><error><![CDATA[%s]]></error><file_url>%s</file_url></result>
  33     xml_template = "<result><msg><![CDATA[%s]]></msg><error><![CDATA[%s]]></error><file_url>%s</file_url></result>"
  34
  35     try:
  36         f = request.FILES['file-upload']
  37         # check upload permission
  38         if not request.user.can_upload_files():
  39             raise UploadPermissionNotAuthorized()
  40
  41         # check file type
  42         file_name_suffix = os.path.splitext(f.name)[1].lower()
  43
  44         if not file_name_suffix in ('.jpg', '.jpeg', '.gif', '.png', '.bmp', '.tiff', '.ico'):
  45             raise FileTypeNotAllow()
  46
  47         storage = FileSystemStorage(str(settings.UPFILES_FOLDER), str(settings.UPFILES_ALIAS))
  48         new_file_name = storage.save(f.name, f)
  49         # check file size
  50         # byte
  51         size = storage.size(new_file_name)
  52
  53         if size > float(settings.ALLOW_MAX_FILE_SIZE) * 1024 * 1024:
  54             storage.delete(new_file_name)
  55             raise FileSizeNotAllow()
  56
  57         result = xml_template % ('Good', '', str(settings.UPFILES_ALIAS) + new_file_name)
  58     except UploadPermissionNotAuthorized:
  59         result = xml_template % ('', _('uploading images is limited to users with >60 reputation points'), '')
  60     except FileTypeNotAllow:
  61         result = xml_template % ('', _("allowed file types are 'jpg', 'jpeg', 'gif', 'bmp', 'png', 'tiff'"), '')
  62     except FileSizeNotAllow:
  63         result = xml_template % ('', _("maximum upload file size is %sM") % settings.ALLOW_MAX_FILE_SIZE, '')
  64     except Exception, e:
  65         result = xml_template % ('', _('Error uploading file. Please contact the site administrator. Thank you. %s' % e), '')
  66
  67     return HttpResponse(result, mimetype="application/xml")
  68
  69
  70 def ask(request):
  71     if request.method == "POST" and "text" in request.POST:
  72         form = AskForm(request.POST)
  73         if form.is_valid():
  74             if request.user.is_authenticated():
  75                 data = {
  76                     "user_ip":request.META["REMOTE_ADDR"],
  77                     "user_agent":request.environ['HTTP_USER_AGENT'],
  78                     "comment_author":request.user.username,
  79                     "comment_author_email":request.user.email,
  80                     "comment_author_url":request.user.website,
  81                     "comment":request.POST['text']
  82                 }
  83                 if Node.isSpam(request.POST['text'], data):
  84                     raise SpamNotAllowedException("question")
  85
  86                 question = AskAction(user=request.user).save(data=form.cleaned_data).node
  87                 return HttpResponseRedirect(question.get_absolute_url())
  88             else:
  89                 return HttpResponseRedirect(reverse('auth_action_signin', kwargs={'action': 'newquestion'}))
  90     elif request.method == "POST" and "go" in request.POST:
  91         form = AskForm({'title': request.POST['q']})
  92     else:
  93         form = AskForm()
  94
  95     #tags = _get_tags_cache_json()
  96     return render_to_response('ask.html', {
  97         'form' : form,
  98         #'tags' : tags,
  99         'email_validation_faq_url':reverse('faq') + '#validate',
 100         }, context_instance=RequestContext(request))
 101
 102 @login_required
 103 def edit_question(request, id):
 104     question = get_object_or_404(Question, id=id)
 105     if question.deleted and not request.user.can_view_deleted_post(question):
 106         raise Http404
 107     if request.user.can_edit_post(question):
 108         return _edit_question(request, question)
 109     elif request.user.can_retag_questions():
 110         return _retag_question(request, question)
 111     else:
 112         raise Http404
 113
 114 def _retag_question(request, question):
 115     if request.method == 'POST':
 116         form = RetagQuestionForm(question, request.POST)
 117         if form.is_valid():
 118             if form.has_changed():
 119                 RetagAction(user=request.user, node=question).save(data=dict(tagnames=form.cleaned_data['tags']))
 120
 121             return HttpResponseRedirect(question.get_absolute_url())
 122     else:
 123         form = RetagQuestionForm(question)
 124     return render_to_response('question_retag.html', {
 125         'question': question,
 126         'form' : form,
 127         #'tags' : _get_tags_cache_json(),
 128     }, context_instance=RequestContext(request))
 129
 130 def _edit_question(request, question):
 131     if request.method == 'POST':
 132         revision_form = RevisionForm(question, data=request.POST)
 133         revision_form.is_valid()
 134         revision = question.revisions.get(revision=revision_form.cleaned_data['revision'])
 135
 136         if 'select_revision' in request.POST:
 137             form = EditQuestionForm(question, revision)
 138         else:
 139             form = EditQuestionForm(question, revision, data=request.POST)
 140
 141         if not 'select_revision' in request.POST and form.is_valid():
 142             if form.has_changed():
 143                 ReviseAction(user=request.user, node=question).save(data=form.cleaned_data)
 144             else:
 145                 if not revision == question.active_revision:
 146                     RollbackAction(user=request.user, node=question).save(data=dict(activate=revision))
 147
 148             return HttpResponseRedirect(question.get_absolute_url())
 149     else:
 150         revision_form = RevisionForm(question)
 151         form = EditQuestionForm(question)
 152
 153     return render_to_response('question_edit.html', {
 154         'question': question,
 155         'revision_form': revision_form,
 156         'form' : form,
 157         #'tags' : _get_tags_cache_json()
 158     }, context_instance=RequestContext(request))
 159
 160 @login_required
 161 def edit_answer(request, id):
 162     answer = get_object_or_404(Answer, id=id)
 163     if answer.deleted and not request.user.can_view_deleted_post(answer):
 164         raise Http404
 165     elif not request.user.can_edit_post(answer):
 166         raise Http404
 167
 168     if request.method == "POST":
 169         revision_form = RevisionForm(answer, data=request.POST)
 170         revision_form.is_valid()
 171         revision = answer.revisions.get(revision=revision_form.cleaned_data['revision'])
 172
 173         if 'select_revision' in request.POST:
 174             form = EditAnswerForm(answer, revision)
 175         else:
 176             form = EditAnswerForm(answer, revision, data=request.POST)
 177
 178         if not 'select_revision' in request.POST and form.is_valid():
 179             if form.has_changed():
 180                 ReviseAction(user=request.user, node=answer).save(data=form.cleaned_data)
 181             else:
 182                 if not revision == answer.active_revision:
 183                     RollbackAction(user=request.user, node=answer).save(data=dict(activate=revision))
 184
 185             return HttpResponseRedirect(answer.get_absolute_url())
 186
 187     else:
 188         revision_form = RevisionForm(answer)
 189         form = EditAnswerForm(answer)
 190     return render_to_response('answer_edit.html', {
 191                               'answer': answer,
 192                               'revision_form': revision_form,
 193                               'form': form,
 194                               }, context_instance=RequestContext(request))
 195
 196 def answer(request, id):
 197     question = get_object_or_404(Question, id=id)
 198     if request.method == "POST":
 199         form = AnswerForm(question, request.POST)
 200         if form.is_valid():
 201             if request.user.is_authenticated():
 202                 data = {
 203                     "user_ip":request.META["REMOTE_ADDR"],
 204                     "user_agent":request.environ['HTTP_USER_AGENT'],
 205                     "comment_author":request.user.username,
 206                     "comment_author_email":request.user.email,
 207                     "comment_author_url":request.user.website,
 208                     "comment":request.POST['text']
 209                 }
 210                 if Node.isSpam(request.POST['text'], data):
 211                     raise SpamNotAllowedException("answer")
 212
 213                 answer = AnswerAction(user=request.user).save(dict(question=question, **form.cleaned_data)).node
 214                 return HttpResponseRedirect(answer.get_absolute_url())
 215             else:
 216                 return HttpResponseRedirect(reverse('auth_action_signin', kwargs={'action': 'newquestion'}))
 217
 218     return HttpResponseRedirect(question.get_absolute_url())
 219