content_viewer_controller.rb
2.93 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
class ContentViewerController < ApplicationController
needs_profile
inverse_captcha :field => 'e_mail'
helper ProfileHelper
helper TagsHelper
def view_page
path = params[:page].join('/')
if path.blank?
@page = profile.home_page
if @page.nil?
@tags = profile.tags
render :template => 'profile/index'
return
end
else
@page = profile.articles.find_by_path(path)
unless @page
page_from_old_path = profile.articles.find_by_old_path(path)
if page_from_old_path
redirect_to :profile => profile.identifier, :page => page_from_old_path.explode_path
return
end
end
# only show unpublished articles to those who can edit then
if @page && !@page.published && (!user || !user.has_permission?('post_content', profile))
@page = nil
end
# page not found, give error
if @page.nil?
render_not_found(@path)
return
end
end
if !@page.public? && !request.ssl?
return if redirect_to_ssl
end
if @page.public?
return unless avoid_ssl
end
if !@page.display_to?(user)
render_access_denied(_('You are not allowed to view this content. You can contact the owner of this profile to request access then.'))
end
# At this point the page will be showed
@page.hit
unless @page.mime_type == 'text/html' || (@page.image? && params[:view])
headers['Content-Type'] = @page.mime_type
data = @page.data
# TODO test the condition
if data.nil?
raise "No data for file"
end
render :text => data, :layout => false
return
end
@form_div = params[:form]
if request.post? && params[:comment] && params[self.icaptcha_field].blank? && @page.accept_comments?
add_comment
end
if request.post? && params[:remove_comment]
remove_comment
end
if @page.blog?
@page.filter = {:year => params[:year], :month => params[:month]}
end
if @page.folder? && @page.view_as == 'image_gallery'
@images = @page.images.paginate(:per_page => 12, :page => params[:npage])
end
@comments = @page.comments(true)
if params[:slideshow]
render :action => 'slideshow', :layout => 'slideshow'
end
end
protected
def add_comment
@comment = Comment.new(params[:comment])
@comment.author = user if logged_in?
@comment.article = @page
if @comment.save
@comment = nil # clear the comment form
else
@form_div = 'opened'
end
end
def remove_comment
@comment = @page.comments.find(params[:remove_comment])
if (user == @comment.author || user == @page.profile || user.has_permission?(:moderate_comments, @page.profile))
@comment.destroy
flash[:notice] = _('Comment succesfully deleted')
end
redirect_to :action => 'view_page', :profile => params[:profile], :page => @page.explode_path, :view => params[:view]
end
end