package controllers /* Copyright (C) 2022 Rawley Fowler This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see .Rawley Fowler, 2022 */ import ( "encoding/json" "io/ioutil" "net/http" "github.com/gin-gonic/gin" "gitlab.com/rawleyifowler/site-rework/models" "gitlab.com/rawleyifowler/site-rework/utils" "gorm.io/driver/mysql" "gorm.io/gorm" ) type CommentDto struct { Url string } var ( db *gorm.DB apiKey string recentPosters map[string]uint ) func RegisterBlogGroup(r *gin.RouterGroup) { // Initialize recent posters cache recentPosters = make(map[string]uint) // Load dsn and initialize database dsn := utils.LoadDSN("dsn") // Load and initialize api key apiKey = utils.LoadApiKey("api_key.pem") var err error db, err = gorm.Open(mysql.Open(dsn), &gorm.Config{}) if err != nil { panic("Database connection failed...") } utils.PerformMigrations(db) r.GET("/", RenderBlogPage) r.GET("/post/:url", RenderIndividualBlogPost) r.POST("/post", CreateBlogPost) r.POST("/post/comment", CreateComment) // Clear the commenters cache every 15 minutes go utils.TimedClearMap(&recentPosters, 180000*5) } func RenderBlogPage(c *gin.Context) { posts := GetAllBlogPosts() if posts == nil { c.HTML(http.StatusInternalServerError, "internal_server_error.tmpl", gin.H{}) } else { c.HTML(http.StatusOK, "blog.tmpl", posts) } } func RenderIndividualBlogPost(c *gin.Context) { bp := GetBlogPostById(c.Param("url")) if bp == nil { c.HTML(http.StatusNotFound, "not_found.tmpl", gin.H{}) } else { c.HTML(http.StatusOK, "blog_post.tmpl", bp) } } func CreateBlogPost(c *gin.Context) { reqKey, err := c.Request.Cookie("APK") if err != nil { c.Status(http.StatusForbidden) return } if reqKey.Value != apiKey { c.Status(http.StatusForbidden) return } raw, err := ioutil.ReadAll(c.Request.Body) if err != nil { c.Status(http.StatusNotAcceptable) return } var data models.BlogPost // Write the data from the request to the data variable if json.Unmarshal([]byte(raw), &data) != nil { c.Status(http.StatusNotAcceptable) return } // Create the blog post in the database if db.Create(&data).Error != nil { c.Status(http.StatusNotAcceptable) } else { c.Status(http.StatusAccepted) } } func CreateComment(c *gin.Context) { if c.Request.ParseForm() != nil { c.Status(http.StatusNotAcceptable) return } a := []string{c.Request.Form.Get("author"), c.Request.Form.Get("content"), c.Request.Form.Get("url")} if GetNumberOfRecentPosts(c) > 3 { c.HTML(http.StatusOK, "comment_post_spam.tmpl", CommentDto{Url: a[2]}) return } for _, v := range a { if len(v) == 0 { c.Status(http.StatusNotAcceptable) return } } comment := models.Comment{ Author: a[0], Content: a[1], AssociatedPost: a[2], } db.Create(&comment) recentPosters[c.ClientIP()]++ // Pass the associated post to the template to add to the href c.HTML(http.StatusOK, "comment_post.tmpl", CommentDto{Url: comment.AssociatedPost}) } func GetNumberOfRecentPosts(c *gin.Context) uint { return recentPosters[c.ClientIP()] } func GetAllBlogPosts() *[]models.BlogPost { var posts []models.BlogPost // Select title, date, and url fields from the blog post records an store them in posts. // This is so we don't grab the entire blog post when we render them on the overview page. Saves a couple ms. err := db.Model(&models.BlogPost{}).Select("title, date, url").Take(&posts).Error if err != nil { return nil } return &posts } func GetBlogPostById(id string) *models.BlogPost { var post models.BlogPost err := db.Where(&models.BlogPost{Url: id}).First(&post).Error if err != nil { return nil } // TODO: Figure out gorm joins! // gorm joins are not working at all, just going to do another query to make it work for now. err = db.Where(&models.Comment{AssociatedPost: id}).Find(&post.Comments).Error if err != nil { return nil } return &post }