Mercurial > public > sg101

annotate comments/views.py @ 1025:23e477c509dd

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Fix bug in edit elsewhere template. Introduced during changeover to ManifestStaticFilesStorage.
author Brian Neal <bgneal@gmail.com>
date Thu, 10 Dec 2015 21:55:19 -0600
parents 68c3343f3318
children e932f2ecd4a7
rev   line source
gremmie@1 1 """
gremmie@1 2 Views for the comments application.
bgneal@693 3
gremmie@1 4 """
gremmie@1 5 from django.contrib.auth.decorators import login_required
gremmie@1 6 from django.core.exceptions import ObjectDoesNotExist
gremmie@1 7 from django.http import HttpResponse
gremmie@1 8 from django.http import HttpResponseBadRequest
gremmie@1 9 from django.http import HttpResponseForbidden
gremmie@1 10 from django.db.models import get_model
gremmie@1 11 from django.shortcuts import render_to_response
gremmie@1 12 from django.template import RequestContext
gremmie@1 13 from django.utils.html import escape
gremmie@1 14 from django.views.decorators.http import require_POST
gremmie@1 15
gremmie@1 16 from core.functions import email_admins
bgneal@974 17 from core.html import image_check, ImageCheckError
bgneal@136 18 from core.markup import site_markup
gremmie@1 19 from comments.forms import CommentForm
gremmie@1 20 from comments.models import Comment
gremmie@1 21 from comments.models import CommentFlag
bgneal@215 22 import antispam
bgneal@215 23 import antispam.utils
bgneal@215 24
gremmie@1 25
bgneal@974 26 PREVIEW_UNAVAILABLE = """
bgneal@974 27 <p><strong>Error</strong>: {}</p>
bgneal@974 28 <p>Sorry, preview is unavailable.</p>
bgneal@974 29 <p>There is an image in your post which failed our image check. We can only
bgneal@1021 30 accept images from a small number of sources for security reasons.</p>
bgneal@1021 31 <p>If there are forms below this post box, you may use them to safely hot-link
bgneal@1021 32 to images hosted elsewhere on the Internet or upload from your computer or
bgneal@1021 33 device.</p>
bgneal@1021 34 <p>If there are no image forms on this page, you can upload a photo from your
bgneal@1021 35 computer or device from your user profile. Copy the image code you receive
bgneal@1021 36 into the post box here.</p>
bgneal@974 37 """
bgneal@974 38
bgneal@974 39
gremmie@1 40 @login_required
gremmie@1 41 @require_POST
gremmie@1 42 def post_comment(request):
gremmie@1 43 """
gremmie@1 44 This function handles the posting of comments. If successful, returns
bgneal@215 45 the comment text as the response. This function is meant to be the target
gremmie@1 46 of an AJAX post.
gremmie@1 47 """
gremmie@1 48 # Look up the object we're trying to comment about
gremmie@1 49 ctype = request.POST.get('content_type', None)
gremmie@1 50 object_pk = request.POST.get('object_pk', None)
gremmie@1 51 if ctype is None or object_pk is None:
gremmie@1 52 return HttpResponseBadRequest('Missing content_type or object_pk field.')
gremmie@1 53
gremmie@1 54 try:
gremmie@1 55 model = get_model(*ctype.split('.', 1))
gremmie@1 56 target = model.objects.get(pk=object_pk)
gremmie@1 57 except TypeError:
gremmie@1 58 return HttpResponseBadRequest(
gremmie@1 59 "Invalid content_type value: %r" % escape(ctype))
gremmie@1 60 except AttributeError:
gremmie@1 61 return HttpResponseBadRequest(
gremmie@1 62 "The given content-type %r does not resolve to a valid model." % \
gremmie@1 63 escape(ctype))
gremmie@1 64 except ObjectDoesNotExist:
gremmie@1 65 return HttpResponseBadRequest(
gremmie@1 66 "No object matching content-type %r and object PK %r exists." % \
gremmie@1 67 (escape(ctype), escape(object_pk)))
gremmie@1 68
gremmie@1 69 # Can we comment on the target object?
gremmie@1 70 if hasattr(target, 'can_comment_on'):
gremmie@1 71 if callable(target.can_comment_on):
gremmie@1 72 can_comment_on = target.can_comment_on()
gremmie@1 73 else:
gremmie@1 74 can_comment_on = target.can_comment_on
gremmie@1 75 else:
gremmie@1 76 can_comment_on = True
gremmie@1 77
gremmie@1 78 if not can_comment_on:
gremmie@1 79 return HttpResponseForbidden('Cannot comment on this item.')
gremmie@1 80
gremmie@1 81 # Check form validity
gremmie@1 82
gremmie@1 83 form = CommentForm(target, request.POST)
gremmie@1 84 if not form.is_valid():
bgneal@963 85 # The client side javascript is pretty simplistic right now and we don't
bgneal@963 86 # want to change it yet. It is expecting a single error string. Just grab
bgneal@963 87 # the first error message and use that.
bgneal@963 88 errors = form.errors.as_data()
bgneal@963 89 msg = errors.values()[0][0].message if errors else 'Unknown error'
bgneal@963 90 return HttpResponseBadRequest(msg)
gremmie@1 91
bgneal@215 92 comment = form.get_comment_object(request.user, request.META.get("REMOTE_ADDR", None))
gremmie@1 93
bgneal@693 94 # Check for spam
bgneal@215 95
bgneal@215 96 if antispam.utils.spam_check(request, comment.comment):
bgneal@215 97 return HttpResponseForbidden(antispam.BUSTED_MESSAGE)
bgneal@215 98
bgneal@963 99 comment.save(html=form.comment_html)
gremmie@1 100
gremmie@1 101 # return the rendered comment
gremmie@1 102 return render_to_response('comments/comment.html', {
gremmie@1 103 'comment': comment,
gremmie@1 104 },
gremmie@1 105 context_instance = RequestContext(request))
bgneal@693 106
gremmie@1 107
gremmie@1 108 @require_POST
gremmie@1 109 def flag_comment(request):
gremmie@1 110 """
gremmie@1 111 This function handles the flagging of comments by users. This function should
gremmie@1 112 be the target of an AJAX post.
gremmie@1 113 """
gremmie@1 114 if not request.user.is_authenticated():
gremmie@1 115 return HttpResponse('Please login or register to flag a comment.')
gremmie@1 116
gremmie@1 117 id = request.POST.get('id', None)
gremmie@1 118 if id is None:
gremmie@1 119 return HttpResponseBadRequest('No id')
gremmie@1 120
gremmie@1 121 try:
gremmie@1 122 comment = Comment.objects.get(pk=id)
gremmie@1 123 except Comment.DoesNotExist:
gremmie@1 124 return HttpResponseBadRequest('No comment with id %s' % id)
gremmie@1 125
gremmie@1 126 flag = CommentFlag(user=request.user, comment=comment)
gremmie@1 127 flag.save()
gremmie@1 128 email_admins('A Comment Has Been Flagged', """Hello,
gremmie@1 129
gremmie@1 130 A user has flagged a comment for review.
gremmie@1 131 """)
gremmie@1 132 return HttpResponse('The comment was flagged. A moderator will review the comment shortly. ' \
gremmie@1 133 'Thanks for helping to improve the discussions on this site.')
gremmie@1 134
gremmie@1 135
gremmie@1 136 @require_POST
gremmie@1 137 def markdown_preview(request):
gremmie@1 138 """
gremmie@1 139 This function should be the target of an AJAX POST. It takes the 'data' parameter
gremmie@1 140 from the POST parameters and returns a rendered HTML page from the data, which
bgneal@693 141 is assumed to be in markdown format. The HTML page is suitable for the preview
gremmie@1 142 function for a javascript editor such as markItUp.
gremmie@1 143 """
gremmie@1 144 if not request.user.is_authenticated():
gremmie@1 145 return HttpResponseForbidden('This service is only available to logged in users.')
gremmie@1 146
gremmie@1 147 data = request.POST.get('data', None)
gremmie@1 148 if data is None:
gremmie@1 149 return HttpResponseBadRequest('No data')
gremmie@1 150
bgneal@974 151 html = site_markup(data)
bgneal@978 152 if html:
bgneal@978 153 try:
bgneal@978 154 image_check(html)
bgneal@978 155 except ImageCheckError as ex:
bgneal@978 156 html = PREVIEW_UNAVAILABLE.format(ex)
bgneal@974 157
gremmie@1 158 return render_to_response('comments/markdown_preview.html', {
bgneal@974 159 'data': html,
gremmie@1 160 },
gremmie@1 161 context_instance = RequestContext(request))