chaas/debshots
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

Session token/IP based user authentication added

Browse source
This commit is contained in:
Christoph Haas 2015-06-14 12:33:18 +02:00
parent d866f17405
commit c87011ff84
3 changed files with 11 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

1
app/controllers/application_controller.rb
View file

@ -9,6 +9,7 @@ class ApplicationController < ActionController::Base
# and show them even before moderation. # and show them even before moderation.
def create_user_token def create_user_token
session[:token] ||= SecureRandom.hex session[:token] ||= SecureRandom.hex
session[:ip] ||= request.remote_ip
end end
end end

12
app/controllers/packages_controller.rb
View file

@ -24,6 +24,8 @@ class PackagesController < ApplicationController
@package = Package.find_by(name: params[:name]) @package = Package.find_by(name: params[:name])
end end
# POST target of the screenshots upload form.
# Checks upload images and creates a new Screenshot record for it.
def upload_image def upload_image
@package = Package.find_by(name: params[:name]) @package = Package.find_by(name: params[:name])
@ -33,13 +35,15 @@ class PackagesController < ApplicationController
new_screenshot = @package.screenshots.new(image: img) new_screenshot = @package.screenshots.new(image: img)
# Check if the image was valid # Check if the image was valid
unless new_screenshot.valid? if new_screenshot.valid?
errors = new_screenshot.errors[:image].join(' and ') new_screenshot.uploaderhash = session[:token]
flash['alert'] = "Sorry - the image #{errors}" new_screenshot.uploaderip = session[:ip]
else
new_screenshot.save new_screenshot.save
successful_upload_count += 1 successful_upload_count += 1
Log.log "Screenshot #{new_screenshot.id} uploaded successfully." Log.log "Screenshot #{new_screenshot.id} uploaded successfully."
else
errors = new_screenshot.errors[:image].join(' and ')
flash['alert'] = "Sorry - the image #{errors}"
end end
if successful_upload_count > 0 if successful_upload_count > 0

2
app/views/packages/details.slim
View file

@ -11,6 +11,8 @@
a.black.fancybox href=screenshot.image.url(:large, timestamp: false) rel='fancybox-thumb' title=screenshot.caption a.black.fancybox href=screenshot.image.url(:large, timestamp: false) rel='fancybox-thumb' title=screenshot.caption
= image_tag(screenshot.image.url(:large, timestamp: false), alt: screenshot.caption) = image_tag(screenshot.image.url(:large, timestamp: false), alt: screenshot.caption)
.imgcaption =screenshot.caption .imgcaption =screenshot.caption
// TODO: Show information only if admin
p Uploader IP=#{screenshot.uploaderip} / Token=#{screenshot.uploaderhash}
// TODO: Enable button only if admin or uploader // TODO: Enable button only if admin or uploader
a.button.tiny.alert[ a.button.tiny.alert[
href=delete_screenshot_path(@package.name, screenshot.id) href=delete_screenshot_path(@package.name, screenshot.id)