--- /dev/null
+#!/usr/bin/perl
+# Copyright © 2006-2008 Joey Hess <joey@ikiwiki.info>
+# Copyright © 2008 Simon McVittie <http://smcv.pseudorandom.co.uk/>
+# Licensed under the GNU GPL, version 2, or any later version published by the
+# Free Software Foundation
+package IkiWiki::Plugin::smcvpostcomment;
+
+use warnings;
+use strict;
+use IkiWiki 2.00;
+use IkiWiki::Plugin::mdwn;
+use CGI 'escapeHTML';
+
+use constant PLUGIN => "smcvpostcomment";
+use constant PREVIEW => "Preview";
+use constant POST_COMMENT => "Post comment";
+use constant CANCEL => "Cancel";
+
+sub import { #{{{
+ hook(type => "getsetup", id => PLUGIN, call => \&getsetup);
+ hook(type => "preprocess", id => PLUGIN, call => \&preprocess);
+ hook(type => "sessioncgi", id => PLUGIN, call => \&sessioncgi);
+ hook(type => "htmlize", id => "_".PLUGIN,
+ call => \&IkiWiki::Plugin::mdwn::htmlize);
+ IkiWiki::loadplugin("inline");
+} # }}}
+
+sub getsetup () { #{{{
+ return
+ plugin => {
+ safe => 1,
+ rebuild => undef,
+ },
+} #}}}
+
+# Somewhat based on IkiWiki::Plugin::inline blog posting support
+sub preprocess (@) { #{{{
+ my %params=@_;
+
+ unless (length $config{cgiurl}) {
+ error("this plugin makes no sense if you have no CGI");
+ }
+
+ my $formtemplate = IkiWiki::template(PLUGIN . "_embed.tmpl",
+ blind_cache => 1);
+ $formtemplate->param(cgiurl => $config{cgiurl});
+ $formtemplate->param(page => $params{page});
+
+ if ($params{preview}) {
+ $formtemplate->param("disabled" =>
+ 'not available during Preview');
+ }
+
+ debug("page $params{page} => destpage $params{page}");
+
+ # I'm reasonably sure that this counts as abuse of [[!inline]]
+ return $formtemplate->output . "\n" .
+ IkiWiki::preprocess_inline(
+ pages => "internal(/$params{page}/comment_*)",
+ template => PLUGIN . "_display",
+ show => 0,
+ reverse => "yes",
+ page => $params{page},
+ destpage => $params{destpage},
+ preview => $params{preview});
+} # }}}
+
+# FIXME: logic taken from editpage, should be common code?
+sub getcgiuser ($) { # {{{
+ my $session = shift;
+ my $user = $session->param('name');
+ $user = $ENV{REMOTE_ADDR} unless defined $user;
+ debug("getcgiuser() -> $user");
+ return $user;
+} # }}}
+
+# FIXME: logic adapted from recentchanges, should be common code?
+sub linkuser ($) { # {{{
+ my $user = shift;
+ my $oiduser = eval { IkiWiki::openiduser($user) };
+
+ if (defined $oiduser) {
+ return ($user, $oiduser);
+ }
+ else {
+ my $page = bestlink('', (length $config{userdir}
+ ? "$config{userdir}/"
+ : "").$user);
+ return (urlto($page, undef, 1), $user);
+ }
+} # }}}
+
+# FIXME: taken from IkiWiki::Plugin::editpage, should be common?
+sub checksessionexpiry ($$) { # {{{
+ my $session = shift;
+ my $sid = shift;
+
+ if (defined $session->param("name")) {
+ if (! defined $sid || $sid ne $session->id) {
+ error(gettext("Your login session has expired."));
+ }
+ }
+} # }}}
+
+# Mostly cargo-culted from IkiWiki::plugin::editpage
+sub sessioncgi ($$) { #{{{
+ my $cgi=shift;
+ my $session=shift;
+
+ my $do = $cgi->param('do');
+ return unless $do eq PLUGIN;
+
+ # These are theoretically configurable, but currently hard-coded
+ my $allow_wikilinks = 0;
+ my $allow_directives = 0;
+ my $commit_comments = 1;
+
+ IkiWiki::decode_cgi_utf8($cgi);
+
+ eval q{use CGI::FormBuilder};
+ error($@) if $@;
+
+ my @buttons = (POST_COMMENT, PREVIEW, CANCEL);
+ my $form = CGI::FormBuilder->new(
+ fields => [qw{do sid page subject body}],
+ charset => 'utf-8',
+ method => 'POST',
+ required => [qw{body}],
+ javascript => 0,
+ params => $cgi,
+ action => $config{cgiurl},
+ header => 0,
+ table => 0,
+ template => scalar IkiWiki::template_params(PLUGIN . '_form.tmpl'),
+ # wtf does this do in editpage?
+ wikiname => $config{wikiname},
+ );
+
+ IkiWiki::decode_form_utf8($form);
+ IkiWiki::run_hooks(formbuilder_setup => sub {
+ shift->(title => PLUGIN, form => $form, cgi => $cgi,
+ session => $session, buttons => \@buttons);
+ });
+ IkiWiki::decode_form_utf8($form);
+
+ $form->field(name => 'do', type => 'hidden');
+ $form->field(name => 'sid', type => 'hidden', value => $session->id,
+ force => 1);
+ $form->field(name => 'page', type => 'hidden');
+ $form->field(name => 'subject', type => 'text', size => 80);
+ $form->field(name => 'body', type => 'textarea', rows => 5,
+ cols => 80);
+
+ # The untaint is OK (as in editpage) because we're about to pass
+ # it to file_pruned anyway
+ my $page = $form->field('page');
+ $page = IkiWiki::possibly_foolish_untaint($page);
+ if (!defined $page || !length $page ||
+ IkiWiki::file_pruned($page, $config{srcdir})) {
+ error ("bad page name");
+ }
+
+ # FIXME: is this right? Or should we be using the candidate subpage
+ # (whatever that might mean) as the base URL?
+ my $baseurl = urlto($page, undef, 1);
+
+ $form->title(sprintf(gettext("commenting on %s"),
+ IkiWiki::pagetitle($page)));
+
+ $form->tmpl_param('helponformattinglink',
+ htmllink($page, $page, 'ikiwiki/formatting',
+ noimageinline => 1,
+ linktext => 'FormattingHelp'));
+
+ if (not exists $pagesources{$page}) {
+ error ("page '$page' doesn't exist, so you can't comment");
+ }
+
+ if ($form->submitted eq CANCEL) {
+ # bounce back to the page they wanted to comment on, and exit.
+ # CANCEL need not be considered in future
+ IkiWiki::redirect($cgi, urlto($page, undef, 1));
+ exit;
+ }
+
+ my ($authorurl, $author) = linkuser(getcgiuser($session));
+
+ my $body = $form->field('body');
+ $body =~ s/\r\n/\n/g;
+ $body =~ s/\r/\n/g;
+ $body .= "\n" if $body !~ /\n$/;
+
+ $body =~ s/\[\[([^!])/[[$1/g unless $allow_wikilinks;
+ $body =~ s/\[\[!/[[!/g unless $allow_directives;
+
+ # In this template, the [[!meta]] directives should stay at the end,
+ # so that they will override anything the user specifies. (For
+ # instance, [[!meta author="I can fake the author"]]...)
+ my $content_tmpl = template(PLUGIN . '_comment.tmpl');
+ $content_tmpl->param(author => $author);
+ $content_tmpl->param(authorurl => $authorurl);
+ $content_tmpl->param(subject => $form->field('subject'));
+ $content_tmpl->param(body => $body);
+
+ my $content = $content_tmpl->output;
+
+ # This is essentially a simplified version of editpage:
+ # - the user does not control the page that's created, only the parent
+ # - it's always a create operation, never an edit
+ # - this means that conflicts should never happen
+ # - this means that if they do, rocks fall and everyone dies
+
+ if ($form->submitted eq PREVIEW) {
+ my $fake = "$page/_" . PLUGIN . "hypothetical";
+ my $preview = IkiWiki::htmlize($fake, $page, 'mdwn',
+ IkiWiki::linkify($page, $page,
+ IkiWiki::preprocess($page, $page,
+ IkiWiki::filter($fake, $page,
+ $content),
+ 0, 1)));
+ IkiWiki::run_hooks(format => sub {
+ $preview = shift->(page => $page,
+ content => $preview);
+ });
+
+ my $template = template(PLUGIN . "_display.tmpl");
+ $template->param(content => $preview);
+ $template->param(title => $form->field('subject'));
+ $template->param(ctime => displaytime(time));
+ $template->param(author => $author);
+ $template->param(authorurl => $authorurl);
+
+ $form->tmpl_param(page_preview => $template->output);
+ }
+ else {
+ $form->tmpl_param(page_preview => "");
+ }
+
+ if ($form->submitted eq POST_COMMENT && $form->validate) {
+ # Let's get posting. We don't check_canedit here because
+ # that somewhat defeats the point of this plugin.
+
+ checksessionexpiry($session, $cgi->param('sid'));
+
+ # FIXME: check that the wiki is locked right now, because
+ # if it's not, there are mad race conditions!
+
+ # FIXME: rather a simplistic way to make the comments...
+ my $i = 0;
+ my $file;
+ do {
+ $i++;
+ $file = "$page/comment_${i}._" . PLUGIN;
+ } while (-e "$config{srcdir}/$file");
+
+ # FIXME: could probably do some sort of graceful retry
+ # if I could be bothered
+ writefile($file, $config{srcdir}, $content);
+
+ my $conflict;
+
+ if ($config{rcs} and $commit_comments) {
+ my $message = "Added a comment";
+ if (defined $form->field('subject') &&
+ length $form->field('subject')) {
+ $message = "Added a comment: " .
+ $form->field('subject');
+ }
+
+ IkiWiki::rcs_add($file);
+ IkiWiki::disable_commit_hook();
+ $conflict = IkiWiki::rcs_commit_staged($message,
+ $session->param('name'), $ENV{REMOTE_ADDR});
+ IkiWiki::enable_commit_hook();
+ IkiWiki::rcs_update();
+ }
+
+ # Now we need a refresh
+ require IkiWiki::Render;
+ IkiWiki::refresh();
+ IkiWiki::saveindex();
+
+ # this should never happen, unless a committer deliberately
+ # breaks it or something
+ error($conflict) if defined $conflict;
+
+ # Bounce back to where we were, but defeat broken caches
+ my $anticache = "?updated=$page/comment_$i";
+ IkiWiki::redirect($cgi, urlto($page, undef, 1).$anticache);
+ }
+ else {
+ IkiWiki::showform ($form, \@buttons, $session, $cgi,
+ forcebaseurl => $baseurl);
+ }
+
+ exit;
+} #}}}
+
+1
projects / ikiwiki.git / commitdiff