Example #1
0
func genComment(r *http.Request, fid aid) (*Comment, error) {
	r.ParseForm()
	if !checkKeyExist(r.Form, "author", "email", "content") {
		return nil, errors.New("Required field not found.")
	}
	if len(r.Form.Get("author")) == 0 || len(r.Form.Get("email")) == 0 {
		return nil, errors.New("Name, email and content can't be blank.")
	}
	content, err := htmlFilter(r.Form.Get("content"))
	if err != nil {
		return nil, err
	}
	if len(r.Form.Get("content")) == 0 {
		return nil, errors.New("Name, email and content can't be blank.")
	}
	return &Comment{
		Id:         allocCommentId(),
		Author:     html.EscapeString(r.Form.Get("author")),
		Email:      html.EscapeString(r.Form.Get("email")),
		Website:    genWebsite(r.Form.Get("website")),
		RemoteAddr: r.RemoteAddr,
		Date:       time.Now(),
		Content:    content,
		Father:     fid,
		Notif:      r.Form.Get("notify") == "on",
	}, nil
}
Example #2
0
func htmlFilter(content string) (string, error) {
	var ret string
	ret = "<p>"
	t := html.NewTokenizer(strings.NewReader(content))
	stack := make([]atom.Atom, 0)
L:
	for {
		t.Next()
		token := t.Token()
		str := token.String()
		switch token.Type {
		case html.StartTagToken, html.SelfClosingTagToken:
			ans := false
			if attrMap, ex := validAtom[token.DataAtom]; ex {
				ans = true
				for _, attr := range token.Attr {
					if _, ex := attrMap[attr.Key]; !ex {
						ans = false
						break
					}
				}
			}
			if ans {
				stack = append(stack, token.DataAtom)
				ret += str
			} else {
				ret += html.EscapeString(str)
			}
		case html.EndTagToken:
			var top int = len(stack) - 1
			for top >= 0 && stack[top] != token.DataAtom {
				top--
			}
			if top == -1 {
				ret += html.EscapeString(str)
			} else {
				stack = stack[0:top]
				ret += str
			}
		case html.TextToken:
			ret += str
		case html.ErrorToken:
			break L
		}
	}
	if err := t.Err(); err != io.EOF {
		return "", err
	}
	for len(stack) > 0 {
		ret += "</" + stack[len(stack)-1].String() + ">"
		stack = stack[:len(stack)-1]
	}
	ret += "</p>"
	return ret, nil
}
Example #3
0
func genArticle(r *http.Request) (*Article, error) {
	tagList := genTags(r.Form.Get("tags"))
	// may we need a filter?

	return &Article{
		Author:     html.EscapeString(r.Form.Get("author")),
		Email:      html.EscapeString(r.Form.Get("email")),
		RemoteAddr: r.RemoteAddr,
		Date:       time.Now(),
		Title:      html.EscapeString(r.Form.Get("title")),
		Src:        r.Form.Get("content"),
		Content:    process(r.Form.Get("content")),
		Notif:      r.Form.Get("notify") == "on",
		Tags:       tagList,
	}, nil
}
Example #4
0
func newArticleHandler(w http.ResponseWriter, r *http.Request) {
	var feedback string
	var article = &Article{}
	r.ParseForm()
	old, ok := getOld(r.URL.Path)
	w.Header().Set("Content-Type", "text/html; charset=UTF-8")
	if r.Method == "POST" {
		if err := checkArticle(r); err != nil {
			article = &Article{
				Title:  r.Form.Get("title"),
				Author: r.Form.Get("author"),
				Src:    r.Form.Get("content"),
				Tags:   genTags(r.Form.Get("tags")),
			}
			feedback = "Oops...! " + err.Error()
			goto out
		}
		if temp, err := genArticle(r); err != nil {
			feedback = "Oops...! " + err.Error()
			goto out
		} else {
			article = temp
		}
		if r.Form.Get("post") == "preview" {
			if err := tmpl.ExecuteTemplate(w, "preview", map[string]interface{}{
				"config":   config,
				"article":  article,
				"comments": make([]int, 0),
				"header":   article.Title + "(Preview)",
			}); err != nil {
				logger.Println("new:", err.Error())
			}
			return
		}
		if ok {
			if old.Email != article.Email {
				feedback = "Oops..! " + "This email address can't be the author."
				goto out
			}
			article.Id = old.Id
			article.Date = old.Date
		} else {
			article.Id = allocArticleId()
		}
		newArticleAuth(article, old)
		feedback = "Welcome my dear admin! Mail request has been sent, please check your mail."
	} else {
		if ok {
			article = old
		}
	}
out:
	if err := tmpl.ExecuteTemplate(w, "new", map[string]interface{}{
		"config":   config,
		"feedback": feedback,
		"form": map[string]string{
			"Title":   html.EscapeString(article.Title),
			"Author":  html.EscapeString(article.Author),
			"Content": html.EscapeString(article.Src),
			"Email":   html.EscapeString(r.Form.Get("email")),
		},
		"tagsNow": strings.Join(article.Tags, ", "),
		"allTags": getAllTags(),
		"header":  "Admin Panel",
	}); err != nil {
		logger.Println("new:", err.Error())
	}
}
Example #5
0
func articleHandler(w http.ResponseWriter, r *http.Request) {
	id64, err := strconv.ParseUint(r.URL.Path[len(config["ArticleUrl"]):], 10, 32)
	if err != nil {
		logger.Println(r.RemoteAddr + ": 404 for an invalid id")
		http.NotFound(w, r)
		return
	}
	id := aid(id64)
	p := getArticle(id)
	if p == nil {
		logger.Println(r.RemoteAddr + "404")
		http.NotFound(w, r)
		return
	}
	var feedback string
	r.ParseForm()
	if r.Method == "POST" {
		if ok := checkVerifiCode(r); ok == false {
			logger.Println("Oops")
			feedback = "Oops...! " + "Verification code error"
		} else {
			comm, err := genComment(r, id)
			if err == nil {
				setCookie("name", comm.Author, 1<<31-1, w)
				setCookie("website", comm.Website, 1<<31-1, w)

				// EventStart: newComment
				appendComment(comm)
				go newCommentNotify(comm)
				// EventEnd: newComment
				http.Redirect(w, r, "#comment-"+fmt.Sprint(comm.Id), http.StatusFound)
				return
			}
			logger.Println(r.RemoteAddr+":", err.Error())
			feedback = "Oops...! " + err.Error()
		}
	}
	w.Header().Set("Content-Type", "text/html; charset=UTF-8")
	cookies := map[string]string{
		"name":    "",
		"website": "",
	}
	if c, err := getCookie("name", r); err == nil {
		cookies["name"] = c
	}
	if c, err := getCookie("website", r); err == nil {
		cookies["website"] = c
	}
	if err := tmpl.ExecuteTemplate(w, "article", map[string]interface{}{
		"config":   config,
		"article":  p,
		"comments": getCommentList(p.Id),
		"form": map[string]string{
			"email":   html.EscapeString(r.Form.Get("email")),
			"content": html.EscapeString(r.Form.Get("content")),
		},
		"cookies":  cookies,
		"feedback": feedback,
		"header":   p.Title,
		"code":     genVerifiCode(w),
	}); err != nil {
		logger.Println(r.RemoteAddr + err.Error())
	}
}