// URL: /signin // 处理用户登录,如果登录成功,设置Cookie func signinHandler(w http.ResponseWriter, r *http.Request) { next := r.FormValue("next") form := wtforms.NewForm( wtforms.NewHiddenField("next", next), wtforms.NewTextField("username", "用户名", "", &wtforms.Required{}), wtforms.NewPasswordField("password", "密码", &wtforms.Required{}), ) if r.Method == "POST" { if form.Validate(r) { c := db.C("users") user := User{} err := c.Find(bson.M{"username": form.Value("username")}).One(&user) if err != nil { form.AddError("username", "该用户不存在") renderTemplate(w, r, "account/signin.html", map[string]interface{}{"form": form}) return } if !user.IsActive { form.AddError("username", "邮箱没有经过验证,如果没有收到邮件,请联系管理员") renderTemplate(w, r, "account/signin.html", map[string]interface{}{"form": form}) return } if user.Password != encryptPassword(form.Value("password")) { form.AddError("password", "密码和用户名不匹配") renderTemplate(w, r, "account/signin.html", map[string]interface{}{"form": form}) return } session, _ := store.Get(r, "user") session.Values["username"] = user.Username session.Save(r, w) if form.Value("next") == "" { http.Redirect(w, r, "/", http.StatusFound) } else { http.Redirect(w, r, next, http.StatusFound) } return } } renderTemplate(w, r, "account/signin.html", map[string]interface{}{"form": form}) }
// URL: /package/new // 新建第三方包 func newPackageHandler(w http.ResponseWriter, r *http.Request) { user, ok := currentUser(r) if !ok { http.Redirect(w, r, "/signin", http.StatusFound) return } var categories []PackageCategory c := db.C("packagecategories") c.Find(nil).All(&categories) var choices []wtforms.Choice for _, category := range categories { choices = append(choices, wtforms.Choice{Value: category.Id_.Hex(), Label: category.Name}) } form := wtforms.NewForm( wtforms.NewHiddenField("html", ""), wtforms.NewTextField("name", "名称", "", wtforms.Required{}), wtforms.NewSelectField("category_id", "分类", choices, ""), wtforms.NewTextField("url", "网址", "", wtforms.Required{}, wtforms.URL{}), wtforms.NewTextArea("description", "描述", "", wtforms.Required{}), ) if r.Method == "POST" && form.Validate(r) { c = db.C("packages") id := bson.NewObjectId() categoryId := bson.ObjectIdHex(form.Value("category_id")) c.Insert(&Package{ Id_: id, UserId: user.Id_, CategoryId: categoryId, Name: form.Value("name"), Url: form.Value("url"), Markdown: form.Value("description"), Html: template.HTML(form.Value("html")), CreatedAt: time.Now(), }) c = db.C("packagecategories") // 增加数量 c.Update(bson.M{"_id": categoryId}, bson.M{"$inc": bson.M{"packagecount": 1}}) http.Redirect(w, r, "/p/"+id.Hex(), http.StatusFound) return } renderTemplate(w, r, "package/form.html", map[string]interface{}{"form": form, "title": "提交第三方包", "action": "/package/new"}) }
// URL: /package/{packageId}/edit // 编辑第三方包 func editPackageHandler(w http.ResponseWriter, r *http.Request) { user, ok := currentUser(r) if !ok { http.Redirect(w, r, "/signin", http.StatusFound) return } vars := mux.Vars(r) packageId := vars["packageId"] package_ := Package{} c := db.C("packages") err := c.Find(bson.M{"_id": bson.ObjectIdHex(packageId)}).One(&package_) if err != nil { message(w, r, "没有该包", "没有该包", "error") return } if !package_.CanEdit(user.Username) { message(w, r, "没有权限", "你没有权限编辑该包", "error") return } var categories []PackageCategory c = db.C("packagecategories") c.Find(nil).All(&categories) var choices []wtforms.Choice for _, category := range categories { choices = append(choices, wtforms.Choice{Value: category.Id_.Hex(), Label: category.Name}) } form := wtforms.NewForm( wtforms.NewHiddenField("html", string(package_.Html)), wtforms.NewTextField("name", "名称", package_.Name, wtforms.Required{}), wtforms.NewSelectField("category_id", "分类", choices, package_.CategoryId.Hex()), wtforms.NewTextField("url", "网址", package_.Url, wtforms.Required{}, wtforms.URL{}), wtforms.NewTextArea("description", "描述", package_.Markdown, wtforms.Required{}), ) if r.Method == "POST" && form.Validate(r) { c = db.C("packages") categoryId := bson.ObjectIdHex(form.Value("category_id")) c.Update(bson.M{"_id": package_.Id_}, bson.M{"$set": bson.M{ "categoryid": categoryId, "name": form.Value("name"), "url": form.Value("url"), "markdown": form.Value("description"), "html": template.HTML(form.Value("html")), }}) c = db.C("packagecategories") if categoryId != package_.CategoryId { // 减少原来类别的包数量 c.Update(bson.M{"_id": package_.CategoryId}, bson.M{"$inc": bson.M{"packagecount": -1}}) // 增加新类别的包数量 c.Update(bson.M{"_id": categoryId}, bson.M{"$inc": bson.M{"packagecount": 1}}) } http.Redirect(w, r, "/p/"+package_.Id_.Hex(), http.StatusFound) return } renderTemplate(w, r, "package/form.html", map[string]interface{}{"form": form, "title": "编辑第三方包", "action": "/p/" + packageId + "/edit"}) }
// URL: /topic/new // 新建主题 func newTopicHandler(w http.ResponseWriter, r *http.Request) { if _, ok := currentUser(r); !ok { http.Redirect(w, r, "/signin", http.StatusFound) return } nodeId := mux.Vars(r)["node"] var nodes []Node c := db.C("nodes") c.Find(nil).All(&nodes) var choices []wtforms.Choice for _, node := range nodes { choices = append(choices, wtforms.Choice{Value: node.Id_.Hex(), Label: node.Name}) } form := wtforms.NewForm( wtforms.NewHiddenField("html", ""), wtforms.NewSelectField("node", "节点", choices, nodeId), wtforms.NewTextArea("title", "标题", "", &wtforms.Required{}), wtforms.NewTextArea("content", "内容", ""), ) if r.Method == "POST" && form.Validate(r) { session, _ := store.Get(r, "user") username, _ := session.Values["username"] username = username.(string) user := User{} c = db.C("users") c.Find(bson.M{"username": username}).One(&user) c = db.C("topics") Id_ := bson.NewObjectId() now := time.Now() html := form.Value("html") html = strings.Replace(html, "<pre>", `<pre class="prettyprint linenums">`, -1) nodeId := bson.ObjectIdHex(form.Value("node")) err := c.Insert(&Topic{ Id_: Id_, NodeId: nodeId, UserId: user.Id_, Title: form.Value("title"), Markdown: form.Value("content"), Html: template.HTML(html), CreatedAt: now, LatestRepliedAt: now, }) if err != nil { panic(err) } // 增加Node.TopicCount c = db.C("nodes") c.Update(bson.M{"_id": nodeId}, bson.M{"$inc": bson.M{"topiccount": 1}}) c = db.C("status") var status Status c.Find(nil).One(&status) c.Update(bson.M{"_id": status.Id_}, bson.M{"$inc": bson.M{"topiccount": 1}}) http.Redirect(w, r, "/t/"+Id_.Hex(), http.StatusFound) return } renderTemplate(w, r, "topic/form.html", map[string]interface{}{"form": form, "title": "新建", "action": "/topic/new"}) }
// URL: /t/{topicId}/edit // 编辑主题 func editTopicHandler(w http.ResponseWriter, r *http.Request) { user, ok := currentUser(r) if !ok { http.Redirect(w, r, "/signin", http.StatusFound) return } topicId := mux.Vars(r)["topicId"] c := db.C("topics") var topic Topic err := c.Find(bson.M{"_id": bson.ObjectIdHex(topicId)}).One(&topic) if err != nil { message(w, r, "没有该主题", "没有该主题,不能编辑", "error") return } if !topic.CanEdit(user.Username) { message(w, r, "没用该权限", "对不起,你没有权限编辑该主题", "error") return } var nodes []Node c = db.C("nodes") c.Find(nil).All(&nodes) var choices []wtforms.Choice for _, node := range nodes { choices = append(choices, wtforms.Choice{Value: node.Id_.Hex(), Label: node.Name}) } form := wtforms.NewForm( wtforms.NewHiddenField("html", ""), wtforms.NewSelectField("node", "节点", choices, topic.NodeId.Hex()), wtforms.NewTextArea("title", "标题", topic.Title, &wtforms.Required{}), wtforms.NewTextArea("content", "内容", topic.Markdown), ) content := topic.Markdown html := topic.Html if r.Method == "POST" { if form.Validate(r) { html := form.Value("html") html = strings.Replace(html, "<pre>", `<pre class="prettyprint linenums">`, -1) nodeId := bson.ObjectIdHex(form.Value("node")) c = db.C("topics") c.Update(bson.M{"_id": topic.Id_}, bson.M{"$set": bson.M{ "nodeid": nodeId, "title": form.Value("title"), "markdown": form.Value("content"), "html": template.HTML(html), "updatedat": time.Now(), "updatedby": user.Id_, }}) // 如果两次的节点不同,更新节点的主题数量 if topic.NodeId != nodeId { c = db.C("nodes") c.Update(bson.M{"_id": topic.NodeId}, bson.M{"$inc": bson.M{"topiccount": -1}}) c.Update(bson.M{"_id": nodeId}, bson.M{"$inc": bson.M{"topiccount": 1}}) } http.Redirect(w, r, "/t/"+topic.Id_.Hex(), http.StatusFound) return } content = form.Value("content") html = template.HTML(form.Value("html")) } renderTemplate(w, r, "topic/form.html", map[string]interface{}{"form": form, "title": "编辑", "action": "/t/" + topicId + "/edit", "html": html, "content": content}) }
// URL: /article/new // 新建文章 func newArticleHandler(w http.ResponseWriter, r *http.Request) { if _, ok := currentUser(r); !ok { http.Redirect(w, r, "/signin", http.StatusFound) return } var categories []ArticleCategory c := db.C("articlecategories") c.Find(nil).All(&categories) var choices []wtforms.Choice for _, category := range categories { choices = append(choices, wtforms.Choice{Value: category.Id_.Hex(), Label: category.Name}) } form := wtforms.NewForm( wtforms.NewHiddenField("html", ""), wtforms.NewTextField("title", "标题", "", wtforms.Required{}), wtforms.NewTextArea("content", "内容", "", wtforms.Required{}), wtforms.NewTextField("original_source", "原始出处", "", wtforms.Required{}), wtforms.NewTextField("original_url", "原始链接", "", wtforms.URL{}), wtforms.NewSelectField("category", "分类", choices, ""), ) if r.Method == "POST" && form.Validate(r) { session, _ := store.Get(r, "user") username, _ := session.Values["username"] username = username.(string) user := User{} c = db.C("users") c.Find(bson.M{"username": username}).One(&user) c = db.C("articles") Id_ := bson.NewObjectId() html := form.Value("html") html = strings.Replace(html, "<pre>", `<pre class="prettyprint linenums">`, -1) categoryId := bson.ObjectIdHex(form.Value("category")) err := c.Insert(&Article{ Id_: Id_, CategoryId: categoryId, UserId: user.Id_, Title: form.Value("title"), Markdown: form.Value("content"), Html: template.HTML(html), OriginalSource: form.Value("original_source"), OriginalUrl: form.Value("original_url"), CreatedAt: time.Now(), }) if err != nil { panic(err) } http.Redirect(w, r, "/a/"+Id_.Hex(), http.StatusFound) return } renderTemplate(w, r, "article/form.html", map[string]interface{}{"form": form, "title": "新建", "action": "/article/new"}) }
// URL: /a/{articleId}/edit // 编辑主题 func editArticleHandler(w http.ResponseWriter, r *http.Request) { user, ok := currentUser(r) if !ok { http.Redirect(w, r, "/signin", http.StatusFound) return } articleId := mux.Vars(r)["articleId"] c := db.C("articles") var article Article err := c.Find(bson.M{"_id": bson.ObjectIdHex(articleId)}).One(&article) if err != nil { message(w, r, "没有该文章", "没有该文章,不能编辑", "error") return } if !article.CanEdit(user.Username) { message(w, r, "没用该权限", "对不起,你没有权限编辑该文章", "error") return } var categorys []ArticleCategory c = db.C("articlecategories") c.Find(nil).All(&categorys) var choices []wtforms.Choice for _, category := range categorys { choices = append(choices, wtforms.Choice{Value: category.Id_.Hex(), Label: category.Name}) } form := wtforms.NewForm( wtforms.NewHiddenField("html", ""), wtforms.NewTextField("title", "标题", article.Title, wtforms.Required{}), wtforms.NewTextArea("content", "内容", article.Markdown, wtforms.Required{}), wtforms.NewTextField("original_source", "原始出处", article.OriginalSource, wtforms.Required{}), wtforms.NewTextField("original_url", "原始链接", article.OriginalUrl, wtforms.URL{}), wtforms.NewSelectField("category", "分类", choices, article.CategoryId.Hex()), ) content := article.Markdown html := article.Html if r.Method == "POST" { if form.Validate(r) { html := form.Value("html") html = strings.Replace(html, "<pre>", `<pre class="prettyprint linenums">`, -1) categoryId := bson.ObjectIdHex(form.Value("category")) c = db.C("articles") c.Update(bson.M{"_id": article.Id_}, bson.M{"$set": bson.M{ "categoryid": categoryId, "title": form.Value("title"), "originalsource": form.Value("original_source"), "originalurl": form.Value("original_url"), "markdown": form.Value("content"), "html": template.HTML(html), }}) http.Redirect(w, r, "/a/"+article.Id_.Hex(), http.StatusFound) return } content = form.Value("content") html = template.HTML(form.Value("html")) } renderTemplate(w, r, "article/form.html", map[string]interface{}{"form": form, "title": "编辑", "action": "/a/" + articleId + "/edit", "html": html, "content": content}) }