class ContentViewerController < ApplicationController needs_profile inverse_captcha :field => 'e_mail' helper ProfileHelper helper TagsHelper def view_page path = params[:page].join('/') if path.blank? @page = profile.home_page if @page.nil? @tags = profile.tags render :template => 'profile/index' return end else @page = profile.articles.find_by_path(path) unless @page page_from_old_path = profile.articles.find_by_old_path(path) if page_from_old_path redirect_to :profile => profile.identifier, :page => page_from_old_path.explode_path return end end # only show unpublished articles to those who can edit then if @page && !@page.published && (!user || !user.has_permission?('post_content', profile)) @page = nil end # page not found, give error if @page.nil? render_not_found(@path) return end end if !@page.public? && !request.ssl? return if redirect_to_ssl end if @page.public? return unless avoid_ssl end if !@page.display_to?(user) render_access_denied(_('You are not allowed to view this content. You can contact the owner of this profile to request access then.')) end # At this point the page will be showed @page.hit unless @page.mime_type == 'text/html' || (@page.image? && params[:view]) headers['Content-Type'] = @page.mime_type data = @page.data # TODO test the condition if data.nil? raise "No data for file" end render :text => data, :layout => false return end @form_div = params[:form] if request.post? && params[:comment] && params[self.icaptcha_field].blank? && @page.accept_comments? add_comment end if request.post? && params[:remove_comment] remove_comment end if @page.blog? @page.filter = {:year => params[:year], :month => params[:month]} end if @page.folder? && @page.view_as == 'image_gallery' @images = @page.images.paginate(:per_page => 12, :page => params[:npage]) end @comments = @page.comments(true) if params[:slideshow] render :action => 'slideshow', :layout => 'slideshow' end end protected def add_comment @comment = Comment.new(params[:comment]) @comment.author = user if logged_in? @comment.article = @page if @comment.save @comment = nil # clear the comment form else @form_div = 'opened' end end def remove_comment @comment = @page.comments.find(params[:remove_comment]) if (user == @comment.author || user == @page.profile || user.has_permission?(:moderate_comments, @page.profile)) @comment.destroy flash[:notice] = _('Comment succesfully deleted') end redirect_to :action => 'view_page', :profile => params[:profile], :page => @page.explode_path, :view => params[:view] end end