PCv5/app/routes/posts/edit.py

from app import app, db
from app.models.user import Member
from app.models.post import Post
from app.models.comment import Comment
from app.models.attachment import Attachment
from app.models.topic import Topic
from app.models.program import Program
from app.utils.render import render
from app.utils.check_csrf import check_csrf
from app.forms.forum import CommentEditForm, AnonymousCommentEditForm, TopicEditForm
from wtforms import BooleanField
from urllib.parse import urlparse
from flask import redirect, url_for, abort, request
from flask_login import login_required, current_user

@app.route('/post/<int:postid>', methods=['GET','POST'])
@login_required
def edit_post(postid):
    # TODO: Maybe not safe
    referrer = urlparse(request.args.get('r', default = '/', type = str)).path
    print(referrer)

    p = Post.query.filter_by(id=postid).first_or_404()

    # Check permissions. TODO: Allow guests to edit their posts
    if current_user.is_anonymous or not current_user.can_edit_post(p):
        abort(403)

    if isinstance(p, Comment):
        base = CommentEditForm
        comment = p
    elif isinstance(p, Topic):
        base = TopicEditForm
        comment = p.thread.top_comment
    else:
        abort(404)

    class TheForm(base):
        pass
    for a in comment.attachments:
        setattr(TheForm, f'a{a.id}', BooleanField(f'a{a.id}'))
    setattr(TheForm, 'attachment_list',
        { f'a{a.id}': a for a in comment.attachments })
    form = TheForm()

    if form.validate_on_submit():
        comment.text = form.message.data

        # Remove attachments
        for id, a in form.attachment_list.items():
            if form[id].data:
                a.delete()

        # Add new attachments
        attachments = []
        for file in form.attachments.data:
            if file.filename != "":
                a = Attachment(file, comment)
                attachments.append((a, file))
                db.session.add(a)

        db.session.add(comment)

        if isinstance(p, Topic):
            p.title = form.title.data
            db.session.add(p)

        db.session.commit()

        for a, file in attachments:
            a.set_file(file)

        return redirect(referrer)

    # Non-submitted form
    if isinstance(p, Comment):
        form.message.data = p.text
        return render('forum/edit_comment.html', comment=p, form=form)
    elif isinstance(p, Topic):
        form.message.data = p.thread.top_comment.text
        form.title.data = p.title
        return render('forum/edit_topic.html', t=p, form=form)

@app.route('/post/supprimer/<int:postid>', methods=['GET','POST'])
@login_required
@check_csrf
def delete_post(postid):
    next_page = request.referrer
    p = Post.query.filter_by(id=postid).first_or_404()
    xp = -1

    if current_user.is_anonymous or not current_user.can_delete_post(p):
        abort(403)

    # Users who need to have their trophies updated
    authors = set()

    # When deleting topics, return to forum page
    if isinstance(p, Topic):
        next_page = url_for('forum_page', f=p.forum)
        xp = -2

        for comment in p.thread.comments:
            if isinstance(comment.author, Member):
                comment.author.add_xp(-1)
                db.session.merge(comment.author)
                authors.add(comment.author)

    if isinstance(p.author, Member):
        factor = 3 if request.args.get('penalty') == 'True' else 1
        p.author.add_xp(xp * factor)
        db.session.merge(p.author)
        authors.add(p.author)

    p.delete()
    db.session.commit()

    for author in authors:
        author.update_trophies("new-post")

    return redirect(next_page)

@app.route('/post/entete/<int:postid>', methods=['GET'])
@login_required
@check_csrf
def set_post_topcomment(postid):
    comment = Post.query.filter_by(id=postid).first_or_404()

    if current_user.can_set_topcomment(comment):
        comment.thread.top_comment = comment
        db.session.add(comment.thread)
        db.session.commit()

    return redirect(request.referrer)