131 lines
3.7 KiB
Go
131 lines
3.7 KiB
Go
package main
|
|
|
|
import (
|
|
"net/http"
|
|
"time"
|
|
)
|
|
|
|
// Take `creationDate` as a param because comment import (from Disqus, for
|
|
// example) will require a custom time.
|
|
func commentNew(commenterHex string, domain string, path string, parentHex string, markdown string, state string, creationDate time.Time) (string, error) {
|
|
// path is allowed to be empty
|
|
if commenterHex == "" || domain == "" || parentHex == "" || markdown == "" || state == "" {
|
|
return "", errorMissingField
|
|
}
|
|
|
|
p, err := pageGet(domain, path)
|
|
if err != nil {
|
|
logger.Errorf("cannot get page attributes: %v", err)
|
|
return "", errorInternal
|
|
}
|
|
|
|
if p.IsLocked {
|
|
return "", errorThreadLocked
|
|
}
|
|
|
|
commentHex, err := randomHex(32)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
html := markdownToHtml(markdown)
|
|
|
|
if err = pageNew(domain, path); err != nil {
|
|
return "", err
|
|
}
|
|
|
|
statement := `
|
|
INSERT INTO
|
|
comments (commentHex, domain, path, commenterHex, parentHex, markdown, html, creationDate, state)
|
|
VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9 );
|
|
`
|
|
_, err = db.Exec(statement, commentHex, domain, path, commenterHex, parentHex, markdown, html, creationDate, state)
|
|
if err != nil {
|
|
logger.Errorf("cannot insert comment: %v", err)
|
|
return "", errorInternal
|
|
}
|
|
|
|
return commentHex, nil
|
|
}
|
|
|
|
func commentNewHandler(w http.ResponseWriter, r *http.Request) {
|
|
type request struct {
|
|
CommenterToken *string `json:"commenterToken"`
|
|
Domain *string `json:"domain"`
|
|
Path *string `json:"path"`
|
|
ParentHex *string `json:"parentHex"`
|
|
Markdown *string `json:"markdown"`
|
|
}
|
|
|
|
var x request
|
|
if err := bodyUnmarshal(r, &x); err != nil {
|
|
bodyMarshal(w, response{"success": false, "message": err.Error()})
|
|
return
|
|
}
|
|
|
|
domain := domainStrip(*x.Domain)
|
|
path := *x.Path
|
|
|
|
d, err := domainGet(domain)
|
|
if err != nil {
|
|
bodyMarshal(w, response{"success": false, "message": err.Error()})
|
|
return
|
|
}
|
|
|
|
if d.State == "frozen" {
|
|
bodyMarshal(w, response{"success": false, "message": errorDomainFrozen.Error()})
|
|
return
|
|
}
|
|
|
|
if d.RequireIdentification && *x.CommenterToken == "anonymous" {
|
|
bodyMarshal(w, response{"success": false, "message": errorNotAuthorised.Error()})
|
|
return
|
|
}
|
|
|
|
var commenterHex, commenterName, commenterEmail, commenterLink string
|
|
var isModerator bool
|
|
if *x.CommenterToken == "anonymous" {
|
|
commenterHex, commenterName, commenterEmail, commenterLink = "anonymous", "Anonymous", "", ""
|
|
} else {
|
|
c, err := commenterGetByCommenterToken(*x.CommenterToken)
|
|
if err != nil {
|
|
bodyMarshal(w, response{"success": false, "message": err.Error()})
|
|
return
|
|
}
|
|
commenterHex, commenterName, commenterEmail, commenterLink = c.CommenterHex, c.Name, c.Email, c.Link
|
|
for _, mod := range d.Moderators {
|
|
if mod.Email == c.Email {
|
|
isModerator = true
|
|
break
|
|
}
|
|
}
|
|
}
|
|
|
|
var state string
|
|
if isModerator {
|
|
state = "approved"
|
|
} else if d.RequireModeration {
|
|
state = "unapproved"
|
|
} else if commenterHex == "anonymous" && d.ModerateAllAnonymous {
|
|
state = "unapproved"
|
|
} else if d.AutoSpamFilter && isSpam(*x.Domain, getIp(r), getUserAgent(r), commenterName, commenterEmail, commenterLink, *x.Markdown) {
|
|
state = "flagged"
|
|
} else {
|
|
state = "approved"
|
|
}
|
|
|
|
commentHex, err := commentNew(commenterHex, domain, path, *x.ParentHex, *x.Markdown, state, time.Now().UTC())
|
|
if err != nil {
|
|
bodyMarshal(w, response{"success": false, "message": err.Error()})
|
|
return
|
|
}
|
|
|
|
// TODO: reuse html in commentNew and do only one markdown to HTML conversion?
|
|
html := markdownToHtml(*x.Markdown)
|
|
|
|
bodyMarshal(w, response{"success": true, "commentHex": commentHex, "state": state, "html": html})
|
|
if smtpConfigured {
|
|
go emailNotificationNew(d, path, commenterHex, commentHex, html, *x.ParentHex, state)
|
|
}
|
|
}
|