HornsAndHooves-publify_core 10.0.0

data/app/models/user.rb

@@ -0,0 +1,142 @@
+# frozen_string_literal: true
+
+require "digest/sha1"
+
+# Publify user.
+# TODO: Should belong to a blog
+class User < ApplicationRecord
+  ADMIN = "admin"
+  PUBLISHER = "publisher"
+  CONTRIBUTOR = "contributor"
+
+  # Include default devise modules. Others available are:
+  # :confirmable, :lockable, :timeoutable and :omniauthable
+  devise :database_authenticatable, :registerable,
+         :recoverable, :rememberable, :trackable, :validatable
+  include ConfigManager
+
+  before_validation :set_default_profile
+
+  validates :login, uniqueness: true, on: :create
+  validates :email, uniqueness: true, on: :create
+  validates :email, :login, presence: true
+  validates :login, length: { in: 3..40 }
+
+  belongs_to :resource, optional: true
+  has_many :notifications, foreign_key: "notify_user_id"
+  has_many :notify_contents, -> { uniq }, through: :notifications,
+                                          source: "notify_content"
+
+  has_many :articles
+
+  serialize :settings, Hash
+
+  STATUS = %w(active inactive).freeze
+
+  attr_accessor :filename
+
+  # Settings
+  setting :notify_watch_my_articles, :boolean, true
+  setting :firstname, :string, ""
+  setting :lastname, :string, ""
+  setting :nickname, :string, ""
+  setting :description, :string, ""
+  setting :url, :string, ""
+  setting :msn, :string, ""
+  setting :aim, :string, ""
+  setting :yahoo, :string, ""
+  setting :twitter, :string, ""
+  setting :jabber, :string, ""
+  setting :admin_theme, :string, "blue"
+  setting :twitter_account, :string, ""
+  setting :twitter_oauth_token, :string, ""
+  setting :twitter_oauth_token_secret, :string, ""
+  setting :twitter_profile_image, :string, ""
+
+  # echo "publify" | sha1sum -
+  class_attribute :salt
+
+  def self.salt
+    "20ac4d290c2293702c64b3b287ae5ea79b26a5c1"
+  end
+
+  def first_and_last_name
+    return "" unless firstname.present? && lastname.present?
+
+    "#{firstname} #{lastname}"
+  end
+
+  def display_names
+    [:login, :nickname, :firstname, :lastname, :first_and_last_name].
+      map { |f| send(f) }.delete_if(&:empty?)
+  end
+
+  # Authenticate users with old password hashes
+  alias devise_valid_password? valid_password?
+
+  def valid_password?(password)
+    devise_valid_password?(password)
+  rescue BCrypt::Errors::InvalidHash
+    digest = Digest::SHA1.hexdigest("#{self.class.salt}--#{password}--")
+    if digest == encrypted_password
+      # Update old SHA1 password with new Devise ByCrypt password
+      self.encrypted_password = password_digest(password)
+      save
+      true
+    else
+      # If not BCrypt password and not old SHA1 password deny access
+      false
+    end
+  end
+
+  def active_for_authentication?
+    super && state == "active"
+  end
+
+  def text_filter
+    TextFilter.make_filter(text_filter_name)
+  end
+
+  def self.to_prefix
+    "author"
+  end
+
+  def article_counter
+    articles.size
+  end
+
+  def display_name
+    if nickname.present?
+      nickname
+    elsif name.present?
+      name
+    else
+      login
+    end
+  end
+
+  def permalink
+    login
+  end
+
+  def admin?
+    profile == User::ADMIN
+  end
+
+  def update_twitter_profile_image(img)
+    return if twitter_profile_image == img
+
+    self.twitter_profile_image = img
+    save
+  end
+
+  def has_twitter_configured?
+    twitter_oauth_token.present? && twitter_oauth_token_secret.present?
+  end
+
+  private
+
+  def set_default_profile
+    self.profile ||= User.count.zero? ? "admin" : "contributor"
+  end
+end

data/app/services/title_builder.rb

@@ -0,0 +1,88 @@
+# frozen_string_literal: true
+
+class TitleBuilder
+  def initialize(template)
+    @template = template
+  end
+
+  def build(item, settings, parameters)
+    str = @template
+
+    str = substitute_parameters(str, parameters)
+    str = substitute_settings(str, settings)
+    str = substitute_item(str, item)
+    str = substitute_time(str, settings)
+
+    str
+  end
+
+  private
+
+  def substitute_time(str, settings)
+    # Other
+    str = str.gsub("%currentdate%", Time.zone.now.strftime(settings.date_format))
+    str = str.gsub("%currenttime%", Time.zone.now.strftime(settings.time_format))
+    str = str.gsub("%currentmonth%", Time.zone.now.strftime("%B"))
+    str = str.gsub("%currentyear%", Time.zone.now.year.to_s)
+    str
+  end
+
+  def substitute_item(str, item)
+    # Tags for item
+    str = str.gsub("%title%", item.title) if str =~ /%title/ && item.respond_to?(:title)
+    if str =~ /%excerpt%/ && item.respond_to?(:excerpt_text)
+      str = str.gsub("%excerpt%", item.excerpt_text)
+    end
+    if str =~ /%description%/ && item.respond_to?(:description)
+      str = str.gsub("%description%", item.description)
+    end
+    str = str.gsub("%name%", item.name) if str =~ /%name%/ && item.respond_to?(:name)
+    str = str.gsub("%author%", item.name) if str =~ /%author%/ && item.respond_to?(:name)
+    str = str.gsub("%body%", item.body) if str =~ /%body%/ && item.respond_to?(:body)
+
+    if str =~ /%categories%/ && item.respond_to?(:categories)
+      str = str.gsub("%categories%", item.categories.map(&:name).join(", "))
+    end
+
+    if str =~ /%tags%/ && item.respond_to?(:tags)
+      str = str.gsub("%tags%", item.tags.map(&:display_name).join(", "))
+    end
+
+    str
+  end
+
+  def substitute_settings(str, settings)
+    # Tags for settings
+    str = str.gsub("%blog_name%", settings.blog_name)
+    str = str.gsub("%blog_subtitle%", settings.blog_subtitle)
+    str = str.gsub("%meta_keywords%", settings.meta_keywords)
+
+    str
+  end
+
+  def substitute_parameters(str, parameters)
+    str = str.gsub("%date%", parse_date(str, parameters)) if /%date%/.match?(str)
+    str = str.gsub("%search%", parameters[:q]) if parameters[:q]
+    str = str.gsub("%page%", parse_page(str, parameters)) if /%page%/.match?(str)
+
+    str
+  end
+
+  def parse_date(string, params)
+    return "" unless params[:year]
+
+    format = +""
+    format << "%A %d " if params[:day]
+    format << "%B " if params[:month]
+    format << "%Y" if params[:year]
+
+    string.gsub("%date%", Time.zone.local(*params.values_at(:year, :month, :day)).
+      strftime(format))
+  end
+
+  def parse_page(_string, params)
+    return "" unless params[:page]
+
+    "#{I18n.t("articles.index.page")} #{params[:page]}"
+  end
+end

data/app/uploaders/resource_uploader.rb

@@ -0,0 +1,63 @@
+# frozen_string_literal: true
+
+require "mimemagic"
+
+class ResourceUploader < CarrierWave::Uploader::Base
+  include CarrierWave::MiniMagick
+  before :cache, :check_image_content_type!
+
+  def store_dir
+    "files/#{model.class.to_s.underscore}/#{model.id}"
+  end
+
+  version :thumb, if: :image? do
+    process dynamic_resize_to_fit: :thumb
+  end
+
+  version :medium, if: :image? do
+    process dynamic_resize_to_fit: :medium
+  end
+
+  version :avatar, if: :image? do
+    process dynamic_resize_to_fit: :avatar
+  end
+
+  def dynamic_resize_to_fit(size)
+    resize_setting = model.blog.send("image_#{size}_size").to_i
+
+    resize_to_fit(resize_setting, resize_setting)
+  end
+
+  def image?(new_file)
+    content_type = new_file.content_type
+    content_type&.include?("image")
+  end
+
+  def check_image_content_type!(new_file)
+    if image?(new_file)
+      magic_type = mime_magic_content_type(new_file)
+      if magic_type != new_file.content_type
+        raise CarrierWave::IntegrityError, "has MIME type mismatch"
+      end
+    end
+  end
+
+  private
+
+  # NOTE: This method was adapted from MagicMimeBlacklist#extract_content_type
+  # from CarrierWave 1.0.0 and SanitizedFile#mime_magic_content_type from CarrierWave 0.11.2
+  def mime_magic_content_type(new_file)
+    content_type = nil
+
+    File.open(new_file.path) do |fd|
+      content_type = MimeMagic.by_magic(fd).try(:type)
+    end
+
+    content_type
+  end
+
+  # NOTE: This method was copied from MagicMimeBlacklist from CarrierWave 1.0.0.
+  def filemagic
+    @filemagic ||= FileMagic.new(FileMagic::MAGIC_MIME_TYPE)
+  end
+end

data/app/views/accounts/confirm.html.erb

@@ -0,0 +1,7 @@
+<p><%= t('.success') %></p>
+<p><%= t('.login', login: current_user.login) %></p>
+<div class='alert alert-warning'><%= t('.dont_lose_the_mail_sent', email: current_user.email) %></div>
+
+<% content_for :account_links do %>
+  <%= raw t('.proceed_to', link: link_to(t('.admin'), controller: 'admin/dashboard')) %>
+<% end %>

data/app/views/admin/content/_article_list.html.erb

@@ -0,0 +1,26 @@
+<% if @articles.empty? %>
+  <tr>
+    <td colspan="7">
+      <%= t('.no_articles') %>
+    </td>
+  </tr>
+<% end %>
+<% for article in @articles %>
+  <tr>
+    <td>
+      <% if article.published? %>
+        <%= link_to_permalink(article, article.title, nil, 'published') %>
+      <% else %>
+        <%= link_to(article.title, { controller: '/articles', action: 'preview', id: article.id }, { class: 'unpublished', target: '_new' }) %>
+      <% end %>
+      <%= show_actions article %>
+    </td>
+    <td>
+      <%= author_link(article) %><br />
+      <small><%= l(article.published_at || article.created_at) %></small>
+    </td>
+    <td>
+      <%= article.allow_comments? ? link_to("#{article.comments.ham.size} <i class='glyphicon glyphicon-comment'></i>".html_safe, controller: '/admin/feedback', id: article.id, action: 'article') : '-' %></td>
+  </tr>
+<% end %>
+<%= display_pagination(@articles, 5, 'first', 'last') %>

data/app/views/admin/content/_form.html.erb

@@ -0,0 +1,145 @@
+<%= hidden_field_tag 'user_textfilter', current_user.text_filter_name %>
+<div id="autosave">
+  <%= hidden_field_tag('article[id]', @article.id) if @article.present? %>
+</div>
+<div class="row save-bar">
+  <div class="col-md-8 col-md-offset-2" id="save-bar">
+    <div class="pull-right">
+      <%= link_to(t('.cancel'), { action: 'index' }, { class: 'btn btn-default' }) %>
+      <span id="preview_link">
+        <%= link_to(t('.preview'), { controller: '/articles', action: 'preview', id: @article.id }, { target: 'new', class: 'btn btn-default' }) if @article.id %>
+      </span>
+      <input id="save_draft" type="submit" value="<%= t('.save_as_draft') %>" name="article[draft]" class="btn btn-default" />
+      <span class="btn btn-success" data-toggle="modal" data-target="#publishOptions">
+        <%= controller.action_name == 'new' ? t('.publish') : t('.save') %>
+      </span>
+    </div>
+  </div>
+</div>
+<div class="row">
+  <div class="col-md-8 col-md-offset-2" id="error-message-article">
+    <%= render 'shared/flash', flash: flash %>
+    <%= error_messages_for 'article' %>
+  </div>
+</div>
+<div class="row">
+  <div class="col-md-2" id="quicktags-block">
+    <div id="quicktags" class="pull-right">
+      <script type="text/javascript">edToolbar('article_body_and_extended', '<%= @article.text_filter.name %>');</script>
+    </div>
+  </div>
+  <div class="col-md-8">
+    <%= text_field 'article', 'title', class: 'form-control', placeholder: t('.title') %>
+    <%= select 'article', 'resource_id', resource_options, { prompt: 'Select Image' }, { class: 'form-control', required: "required" } %>
+    <div id="editor">
+      <%= text_area('article', 'body_and_extended', class: 'form-control ', style: 'height: 360px', placeholder: t('.type_your_post')) %>
+    </div>
+  </div>
+</div>
+<div class="modal fade" id="publishOptions" tabindex="-1" role="dialog" aria-labelledby="publishOptions" aria-hidden="true">
+  <div class="modal-dialog">
+    <div class="modal-content">
+      <div class="modal-header">
+        <h2 class="modal-title" id="myModalLabel"><%= t('.publish') %>
+          <%= submit_tag(t('.publish'), class: 'btn btn-success pull-right') %>&nbsp;
+        </h2>
+      </div>
+      <div class="modal-body">
+        <div class="well">
+          <h4><%= t('.tags') %></h4>
+          <div class="form-group">
+            <%= text_field 'article', 'keywords', autocomplete: 'off', class: 'form-control tm-input' %>
+          </div>
+          <p class="alert alert-warning"><%= t('.tags_explanation_html') %></p>
+        </div>
+        <% post_types = @post_types || [] %>
+        <% if post_types.size.zero? %>
+          <%= hidden_field_tag 'article[post_type]', 'read' %>
+        <% else %>
+          <div class="well">
+            <h4><%= t('.article_type') %></h4>
+            <%= select :article, :post_type, post_types.map { |pt| [pt.name, pt.permalink] }, include_blank: t('.default') %>
+          </div>
+        <% end %>
+        <div class="well">
+          <fieldset>
+            <legend><%= t('.publish_settings') %></legend>
+            <div class='control-group'>
+              <p>
+                <%= t('.permalink') %>:
+                <%= toggle_element('permalink') %>
+              </p>
+              <div id="permalink" class="collapse">
+                <div class="form-group">
+                  <%= text_field 'article', 'permalink', autocomplete: 'off', class: 'form-control' %>
+                </div>
+                <p>
+                  <span class="btn btn-mini btn-default">
+                    <%= toggle_element('permalink', t('.ok')) %>
+                  </span>
+                </p>
+              </div>
+            </div>
+            <div class="control-group">
+              <p>
+                <%= t('.allowed_comments_html', allow_comment: content_tag(:strong, @article.allow_comments? ? t('.allow_comments_status.enabled') : t('.allow_comments_status.disabled'))) %>
+                <%= toggle_element('conversation') %>
+              </p>
+              <div id="conversation" class="collapse">
+                <label for="article_allow_comments" class="checkbox">
+                  <%= check_box 'article', 'allow_comments' %>
+                  <%= t('.allow_comments') %>
+                </label>
+                <p>
+                  <span class="btn btn-mini btn-default">
+                    <%= toggle_element('conversation', t('.ok')) %>
+                  </span>
+                </p>
+              </div>
+            </div>
+            <div class="control-group">
+              <p>
+                <%= t('.published') %>
+                <strong>
+                  <% if @article.published_at.present? %>
+                    <%= display_date_and_time(@article.published_at) %>
+                  <% else %>
+                    <%= t('.now') %>
+                  <% end %>
+                </strong>
+                <%= toggle_element('publish') %>
+              </p>
+              <div id="publish" class="collapse">
+                <%= text_field 'article', 'published_at' %>
+                <p>
+                  <span class="btn btn-mini btn-default">
+                    <%= toggle_element('publish', t('.ok')) %>
+                  </span>
+                </p>
+              </div>
+            </div>
+            <div class="control-group">
+              <p>
+                <%= t('.visibility') %>: <strong><%= @article.password.blank? ? t('.public') : t('.protected') %></strong>
+                <%= toggle_element('visibility') %>
+              </p>
+              <div id="visibility" class="collapse">
+                <label for="article_password"><%= t('.password') %></label>
+                <%= text_field 'article', 'password', class: 'form-control' %>
+                <p>
+                  <span class="btn btn-mini btn-default">
+                    <%= toggle_element('visibility', t('.ok')) %>
+                  </span>
+                </p>
+              </div>
+            </div>
+          </fieldset>
+        </div>
+      </div>
+      <div class="modal-footer">
+        <button type="button" class="btn btn-default" data-dismiss="modal"><%= t('.cancel') %></button>
+        <%= submit_tag(t('.publish'), class: 'btn btn-success') %>
+      </div>
+    </div>
+  </div>
+</div>

data/app/views/admin/content/autosave.js.erb

@@ -0,0 +1,5 @@
+$('#autosave').html('<%= hidden_field_tag('article[id]', @article.id) %>');
+$('#preview_link').replaceWith('<%= link_to('Preview', {:controller => '/articles', :action => 'preview', :id => @article.id}, {:target => 'new', :class => 'btn btn-default'}); %>');
+<% if @article.state.to_s.downcase == "draft" %>
+  $("#article_published_at").val(<% Time.zone.now() %>);
+<% end %>

data/app/views/admin/content/edit.html.erb

@@ -0,0 +1,3 @@
+<%= form_tag({ action: 'update', id: @article.id }, { method: :put, multipart: true, id: 'article_form', class: 'autosave' }) do %>
+  <%= render 'form' %>
+<% end %>

data/app/views/admin/content/index.html.erb

@@ -0,0 +1,48 @@
+<% content_for :page_heading do %>
+  <h2>
+    <i class="glyphicon glyphicon-large glyphicon-pencil"></i>
+    <%= t('.manage_articles') %>
+    <%= link_to(t('.new_article'), { controller: 'content', action: 'new' }, { id: 'dialog-link', class: 'btn btn-info pull-right' }) %>
+  </h2>
+<% end %>
+
+<%= form_tag({ action: 'index' }, { method: :get, name: 'article', remote: true, class: 'form-inline spinnable', "data-update-success": 'articleList' }) do %>
+
+  <% if params[:search] and params[:search]['state'] %>
+    <input type="hidden" name="search[state]" value="<%= params[:search]['state'] %>" />
+  <% end %>
+
+  <p>
+    <%= link_to(t('.all_articles'), { action: 'index' }, { class: 'label label-default' }) %>
+    <%= link_to(t('.published'), { action: 'index', search: { state: 'published' } }, { class: 'label label-success' }) %>
+    <%= link_to(t('.withdrawn'), { action: 'index', search: { state: 'withdrawn' } }, { class: 'label label-danger' }) %>
+    <%= link_to(t('.drafts'), { action: 'index', search: { state: 'drafts' } }, { class: 'label label-info' }) %>
+    <%= link_to(t('.publication_pending'), { action: 'index', search: { state: 'pending' } }, { class: 'label label-warning' }) %>
+  </p>
+
+  <div class="panel panel-default">
+    <div class="panel-heading">
+      <div class="pull-right">
+        <div class="form-group">
+          <%= select_tag('search[user_id]', options_from_collection_for_select(User.all, 'id', 'name'), prompt: t('.select_an_author'), class: 'form-control') %>
+        </div>
+        <div class="form-group">
+          <%= select_tag('search[published_at]', options_for_select(Article.publication_months), prompt: t('.publication_date'), class: 'form-control') %>
+        </div>
+        <div class="form-group">
+          <input id="search" type="text" name="search[searchstring]" class="form-control" />
+        </div>
+        <div class="form-group">
+          <%= submit_tag(t('.search'), class: 'btn btn-success') %>
+          <span id="spinner" style="display:none;"><%= image_tag('spinner.gif') %></span>
+        </div>
+      </div>
+      <br style="clear: both" />
+    </div>
+  </div>
+  <table class="table table-hover">
+    <tbody id="articleList">
+      <%= render 'article_list', articles: @articles %>
+    </tbody>
+  </table>
+<% end %>

data/app/views/admin/content/index.js.erb

@@ -0,0 +1 @@
+$("#articleList").html('<%= raw escape_javascript(render(partial: "article_list", locals: { articles: @articles })) %>');

data/app/views/admin/content/new.html.erb

@@ -0,0 +1,3 @@
+<%= form_tag({ action: 'create' }, { id: 'article_form', multipart: true, class: 'autosave' }) do %>
+  <%= render partial: 'form' %>
+<% end %>

data/app/views/admin/dashboard/_comment.html.erb

@@ -0,0 +1,18 @@
+<% if @comments.size == 0 %>
+  <li class='alert alert-info'><%= t('.no_comments_yet') %></li>
+<% else %>
+  <% for comment in @comments %>
+    <li id='feedback_<%= comment.id %>'>
+    <%= avatar_tag(email: comment.email, url: comment.url, class: 'pull-left img-circle gravatar') %>
+    <h5>
+      <%= t('.by') %> <%= comment.url.blank? ? h(comment.author) : nofollowify_links(link_to(h(comment.author), comment.url)) %>
+      <%= display_date_and_time comment.created_at %>
+    </h5>
+    <p>
+    <%= comment.html.strip_html.slice(0..300) %>
+    </p>
+    <%= show_feedback_actions(comment, 'dashboard') %>
+    <hr />
+    </li>
+  <% end %>
+<% end %>

data/app/views/admin/dashboard/_comments.html.erb

@@ -0,0 +1,10 @@
+<div class="panel panel-default">
+  <div class="panel-heading">
+    <h3 class='panel-title'><%= t('.latest_comments') %></h3>
+  </div>
+  <div class="panel-body">
+    <ul class='list-unstyled' id="commentList">
+      <%= render partial: 'comment' %>
+    </ul>
+  </div>
+</div>

data/app/views/admin/dashboard/_drafts.html.erb

@@ -0,0 +1,25 @@
+<div class="panel panel-default">
+  <div class="panel-heading">
+    <h3 class='panel-title'><%= t('.your_drafts') %></h3>
+  </div>
+  <div class="panel-body">
+    <ul class='list-unstyled'>
+      <% if @drafts.empty? %>
+        <li class='alert alert-info'>
+        <%= link_to t('.no_drafts_yet'), controller: 'content', action: 'new' %> ?
+        </li>
+      <% else %>
+        <% for post in @drafts %>
+          <li>
+          <h5>
+            <%= link_to(post.title, controller: 'admin/content', action: 'edit', id: post.id) %>
+            <%= display_date_and_time(post.created_at) %>
+          </h5>
+          <p><%= post.body&.strip_html&.slice(0, 300) %></p>
+          <hr />
+          </li>
+        <% end %>
+      <% end %>
+    </ul>
+  </div>
+</div>

data/app/views/admin/dashboard/_overview.html.erb

@@ -0,0 +1,21 @@
+<div class='alert alert-info'>
+  <button type="button" class="close" data-dismiss="alert">
+    <span aria-hidden="true">&times;</span>
+    <span class="sr-only">Close</span>
+  </button>
+  <% links = []
+     links << link_to(t('.write_a_post'), controller: 'content', action: 'new') if can? :new, 'admin/content'
+     links << link_to(t('.write_a_page'), controller: 'pages', action: 'new') if can? :new, 'admin/pages'
+     links << link_to(t('.update_your_profile_or_change_your_password'), controller: 'profiles', action: 'index') %>
+  <p>
+    <%= t('.dashboard_explain_html', available_actions: safe_join(links, ', ')) %>
+  </p>
+  <% if can? :index, 'admin/themes' %>
+  <p>
+    <%= t('.customization_explain_html', theme_link: link_to(t('.change_your_blog_presentation'), controller: 'themes'), sidebar_link: link_to(t('.enable_plugins'), controller: 'sidebar')) %>
+  </p>
+  <% end %>
+  <p>
+  <%= t('.help_explain_html', doc_link: link_to(t('.read_our_documentation'), 'https://publify.github.io/')) %>
+  </p>
+</div>

data/app/views/admin/dashboard/_welcome.html.erb

@@ -0,0 +1,28 @@
+<div class="panel panel-default">
+  <div class="panel-heading">
+    <h3 class="panel-title"><%= t('.today') %></h3>
+  </div>
+  <div class="panel-body">
+    <p><%= t('.articles_and_comments_count_since', articles_count: @newposts_count, comments_count: @newcomments_count) %></p>
+    <p><%= t('.running_publify', version: PublifyCore::VERSION) %> <%= @version_message %></p>
+    <div class='col-md-6'>
+      <% if can? :index, 'admin/content' %>
+        <h4 class='page-header'><%= t('.content') %></h4>
+        <p><%= link_to(t('.articles_count', count: @statposts), controller: 'admin/content') %></p>
+        <p><%= link_to(t('.your_articles_count', count: @statuserposts), controller: 'admin/content', 'search[user_id]' => current_user.id) %></p>
+        <p><%= link_to(t('.drafts_count', count: @statsdrafts), controller: 'admin/content', 'search[state]' => 'drafts') %></p>
+        <p><%= link_to(t('.pages_count', count: @statspages), controller: 'admin/pages') %></p>
+        <p><%= link_to(t('.notes_count', count: @statuses), controller: 'admin/notes') %></p>
+      <% end %>
+    </div>
+    <div class='col-md-6'>
+      <% if can? :index, 'admin/feedback' %>
+        <h4 class='page-header'><%= t('.feedback') %></h4>
+        <p><%= link_to(t('.comments_count', count: @statcomments), controller: 'admin/feedback') %></p>
+        <p><%= link_to(t('.approved_count', count: @confirmed), controller: 'admin/feedback', only: 'ham') %></p>
+        <p><%= link_to(t('.unconfirmed_count', count: @unconfirmed), controller: 'admin/feedback', only: 'unapproved') %></p>
+        <p><%= link_to(t('.spam_count', count: @statspam), controller: 'admin/feedback', only: 'spam') %></p>
+      <% end %>
+    </div>
+  </div>
+</div>