burp_cms 1.3.0

data/app/assets/stylesheets/burp/docs.less

@@ -0,0 +1,83 @@
+/* Add additional stylesheets below
+-------------------------------------------------- */
+/*
+  Bootstrap's documentation styles
+  Special styles for presenting Bootstrap's documentation and examples
+*/
+
+.container section {
+  padding-top: 30px;
+}
+
+
+/* Sidenav for Docs
+-------------------------------------------------- */
+
+.docs-sidenav {
+  width: 200px;
+  margin: 30px 0 0;
+  padding: 0;
+  background-color: #fff;
+  -webkit-border-radius: 6px;
+     -moz-border-radius: 6px;
+          border-radius: 6px;
+  -webkit-box-shadow: 0 1px 4px rgba(0,0,0,.065);
+     -moz-box-shadow: 0 1px 4px rgba(0,0,0,.065);
+          box-shadow: 0 1px 4px rgba(0,0,0,.065);
+}
+.docs-sidenav > li > a {
+  display: block;
+  width: 190px \9;
+  margin: 0 0 -1px;
+  padding: 8px 14px;
+  border: 1px solid #e5e5e5;
+}
+.docs-sidenav > li:first-child > a {
+  -webkit-border-radius: 6px 6px 0 0;
+     -moz-border-radius: 6px 6px 0 0;
+          border-radius: 6px 6px 0 0;
+}
+.docs-sidenav > li:last-child > a {
+  -webkit-border-radius: 0 0 6px 6px;
+     -moz-border-radius: 0 0 6px 6px;
+          border-radius: 0 0 6px 6px;
+}
+.docs-sidenav > .active > a {
+  position: relative;
+  z-index: 2;
+  padding: 9px 15px;
+  border: 0;
+  text-shadow: 0 1px 0 rgba(0,0,0,.15);
+  -webkit-box-shadow: inset 1px 0 0 rgba(0,0,0,.1), inset -1px 0 0 rgba(0,0,0,.1);
+     -moz-box-shadow: inset 1px 0 0 rgba(0,0,0,.1), inset -1px 0 0 rgba(0,0,0,.1);
+          box-shadow: inset 1px 0 0 rgba(0,0,0,.1), inset -1px 0 0 rgba(0,0,0,.1);
+}
+/* Chevrons */
+.docs-sidenav .icon-chevron-right {
+  float: right;
+  margin-top: 2px;
+  margin-right: -6px;
+  opacity: .25;
+}
+.docs-sidenav > li > a:hover {
+  background-color: #f5f5f5;
+}
+.docs-sidenav a:hover .icon-chevron-right {
+  opacity: .5;
+}
+.docs-sidenav .active .icon-chevron-right,
+.docs-sidenav .active a:hover .icon-chevron-right {
+  background-image: image-url('burp/img/glyphicons-halflings-white.png');
+  opacity: 1;
+}
+.docs-sidenav.affix {
+  top: 40px;
+}
+.docs-sidenav.affix-bottom {
+  position: absolute;
+  top: auto;
+  bottom: 270px;
+}
+
+
+

data/app/assets/stylesheets/burp/fileupload.less

@@ -0,0 +1,31 @@
+.qq-uploader { position:relative; width: 100%;}
+
+.qq-upload-button {
+    display:block; /* or inline-block */
+    width: 105px; padding: 7px 0; text-align:center;    
+    background:#880000; border-bottom:1px solid #ddd;color:#fff;
+}
+.qq-upload-button-hover {background:#cc0000;}
+.qq-upload-button-focus {outline:1px dotted black;}
+
+.qq-upload-drop-area {
+    position:absolute; top:0; left:0; width:100%; height:100%; min-height: 70px; z-index:2;
+    background:#FF9797; text-align:center; 
+}
+.qq-upload-drop-area span {
+    display:block; position:absolute; top: 50%; width:100%; margin-top:-8px; font-size:16px;
+}
+.qq-upload-drop-area-active {background:#FF7171;}
+
+.qq-upload-list {margin:15px 35px; padding:0; list-style:disc;}
+.qq-upload-list li { margin:0; padding:0; line-height:15px; font-size:12px;}
+.qq-upload-file, .qq-upload-spinner, .qq-upload-size, .qq-upload-cancel, .qq-upload-failed-text {
+    margin-right: 7px;
+}
+
+.qq-upload-file {}
+.qq-upload-spinner {display:inline-block; background: url("loading.gif"); width:15px; height:15px; vertical-align:text-bottom;}
+.qq-upload-size,.qq-upload-cancel {font-size:11px;}
+
+.qq-upload-failed-text {display:none;}
+.qq-upload-fail .qq-upload-failed-text {display:inline;}

data/app/assets/stylesheets/burp/views/dnd-menu.less

@@ -0,0 +1,87 @@
+
+
+.dnd-editable-menu {
+  
+  .group {
+    padding: 0px; 
+  }
+  
+  > .group {
+
+    .group-name {
+      color: #0088CC;
+      cursor: pointer;
+      font-size: inherit;
+      line-height: inherit;
+      font-weight: inherit;
+      display: inline;
+      margin: 0px;
+  
+      &:hover {
+        color: #005580;
+      }
+    }
+    
+    > ul.children {
+      min-height: 27px;
+    }
+    
+    .draging {
+      opacity: 0.5;
+    }
+
+    ul {
+      list-style: none;
+      margin-left: 32px;
+    }
+
+    a:hover {
+      text-decoration: none;
+    }
+
+    .first-link-in-group  {
+      display: none;
+    }
+
+    > .group-name {
+      display: none;
+    }
+  
+    > .group {
+      font-size: 15px;
+    }
+  
+    li {
+      min-height: 27px;
+      line-height: 27px;
+    }
+  
+  
+    /*
+      Drag buttons
+    */
+    .drag-handel {
+      background-color: #468847;
+      border-radius: 3px 3px 3px 3px;
+      color: #FFFFFF;
+      cursor: move;
+      display: inline-block;
+      font-size: 10px;
+      letter-spacing: 1px;
+      font-weight: normal;
+      letter-spacing: 0.5px;
+      line-height: 14px;
+      margin-right: 5px;
+      padding: 2px 4px;
+      position: relative;
+      text-transform: uppercase;
+      top: 0;
+      vertical-align: middle;
+    }
+    
+    .group > .drag-handel {
+        background: #F89406;
+    }
+  }
+  
+}

data/app/assets/stylesheets/burp/views/files/index.less

@@ -0,0 +1,40 @@
+.burp-files-index {
+  .file-upload-drop-area-active {
+    background: #eee;
+  }
+  
+  .file-upload-drop-area {
+    border: 1px solid #DDDDDD;
+    border-radius: 4px 4px 4px 4px;
+    display: block !important;
+    font-size: 30px;
+    font-weight: bold;
+    line-height: 120px;
+    margin: 60px auto 20px;
+    text-align: center;
+    width: 800px;
+  }
+  
+  .file-upload-button {
+    display: block;
+    margin: 20px auto;
+    width: 160px;
+  }
+  
+  .upload-time {
+    min-width: 115px;
+  }
+  
+  .file-size {
+    min-width: 60px;
+    text-align: right;
+  }
+  
+  td {
+    padding: 1px 30px 1px 0px; 
+  }
+  
+  table {
+    margin-left: 30px;
+  }
+}

data/app/assets/stylesheets/burp/views/pages/index.less

@@ -0,0 +1,4 @@
+.burp-pages-index {
+  
+
+}

data/app/assets/stylesheets/burp/views/static/help.less

@@ -0,0 +1,11 @@
+
+.burp-static-help .image-list {
+  
+  margin-left: 90px;
+  
+  font-size: 40px;
+  
+  img {
+    margin: 20px;
+  }
+}

data/app/controllers/burp/application_controller.rb

@@ -0,0 +1,45 @@
+module Burp
+  class ApplicationController < ActionController::Base
+    
+    protect_from_forgery
+    before_filter :refresh_access
+    before_filter :authenticate
+    before_filter :init_body_classes
+    
+    def init_body_classes 
+
+      module_name = self.class.parent.class == Module ? self.class.parent.name+"-" : ""
+
+      @body_classes ||= ""
+      @body_classes += " #{module_name}#{controller_name} ".downcase
+      @body_classes += " #{module_name}#{controller_name}-#{action_name} ".downcase
+
+      @body_classes += " #{(request.user_agent || '').match(/(lion)/i) ? "noscrollbars" : "scrollbars"} "
+    end
+    
+    private
+    
+    def refresh_access
+      Burp.access.refresh
+    end
+    
+    def authenticate
+      unless Burp.access.may_skip_http_auth? || Rails.env == "test"
+      
+        if !Rails.application.config.respond_to?(:burp_password) or !Rails.application.config.respond_to?(:burp_username)
+          raise "config.burp_username and config.burp_password are not set.\n\nYou can fix this by adding them to application.rb."
+        end
+      
+        unless Rails.env == 'development'
+          authenticate_or_request_with_http_basic do |username, password|
+            # Rails.logger.debug "in authenticate_or_request_with_http_basic, #{request.headers['Authorization']}"
+            username == Rails.application.config.burp_username && password == Rails.application.config.burp_password
+          end
+        end
+      
+      end
+    end
+    
+  end
+end
+    

data/app/controllers/burp/catch_all_controller.rb

@@ -0,0 +1,24 @@
+
+class Burp::CatchAllController < ApplicationController
+
+  skip_before_filter :authenticate
+
+  def show
+    @menu = Burp::Menu.find("main")
+    @burp_page_path = params[:burp_page_path] || request.path
+    @cms_page = Burp.find_page(@burp_page_path)
+    Burp.access.refresh
+    Burp.access.may_view_page!(@cms_page)
+
+    raise ActionController::RoutingError.new('Page not Found') if @cms_page.nil?
+
+    render :text => @cms_page[:main], :layout => "application"
+  end
+
+  def cms_page
+    @cms_page
+  end
+
+  helper_method :cms_page
+
+end

data/app/controllers/burp/error_controller.rb

@@ -0,0 +1,7 @@
+module Burp
+  class ErrorController < Burp::ApplicationController
+    def no_such_page
+      raise ActionController::RoutingError.new('Not Found')
+    end 
+  end
+end

data/app/controllers/burp/files_controller.rb

@@ -0,0 +1,92 @@
+
+require 'fileutils'
+
+module Burp
+  class FilesController < Burp::ApplicationController
+    
+    skip_before_filter :authenticate, :only => [:show]
+    
+    def index
+      
+      Burp.access.may_view_file_list! do
+      
+        @files = FileModel.all
+      
+        respond_to do |format|
+          format.html {}
+          format.json { render :json =>  {:paths => @files.map {|file| file.public_path }} }
+        end
+      end
+    end
+    
+    def destroy
+      file_path = "#{upload_directory_path}#{params[:id].gsub("burp/files/","")}#{params[:format].blank? ? "" : ".#{params[:format]}"}"
+      
+      if File.expand_path(file_path) != file_path
+        render :text => "403, Forbiden!", :status => 403, :content_type => "text/plain"
+      else
+        File.unlink(file_path)
+      end
+      
+      Util.commit("Burp: removed a file")
+      
+      redirect_to files_path
+    end
+    
+    def show
+      file_path = "#{upload_directory_path}#{params[:id]}#{params[:format].blank? ? "" : ".#{params[:format]}"}"
+      
+      if File.expand_path(file_path) != file_path
+        render :text => "403, Forbiden!", :status => 403, :content_type => "text/plain"
+      elsif File.exist?(file_path)
+        Burp.access.may_view_file!(file_path) do
+          
+          headers["Cache-Control"] = "Public"
+          headers["Last-Modified"] = File.mtime(file_path).utc.rfc2822
+          
+          # Stop session cookie form being set
+          request.session_options[:skip] = true 
+          
+          send_file(file_path, :disposition => disposition(file_path))
+        end
+      else  
+        render :text => "404, No such file", :status => 404, :content_type => "text/plain"
+      end
+
+    end
+    
+    def create 
+      Burp.access.may_upload_a_file! do
+        Util::UploadHandler.handle(params[:qqfile],request) do |file|
+        
+          errors = []
+          errors << {:size => "File to big, max size is 40 meg"} if file.size > 40.megabyte
+        
+          if errors.length > 0
+            render :json => {:errors => errors}
+          else
+            FileUtils.mkdir_p(upload_directory_path)
+            FileUtils.mv(file.path,upload_directory_path+File.basename(file.path))
+            
+            Burp::Util.create_smaller_images(upload_directory_path+File.basename(file.path)) if file.path.match(/(jpg|jpeg|gif|png)$/i)
+            
+            Util.commit("Burp: file upload")
+            render :json => {:success => true}
+          end
+        end
+      end
+      
+    end
+    
+    private
+    
+    def disposition(file_path)
+      file_path.match(/\.(png|jpeg|gif|jpg|pdf|txt)$/) && !params.has_key?(:download) ? 'inline' : 'attachment'
+    end
+    
+    def upload_directory_path
+      "#{Burp.content_directory}uploads/"
+    end
+    
+  end
+end

data/app/controllers/burp/groups_controller.rb

@@ -0,0 +1,49 @@
+
+module Burp
+  class GroupsController < Burp::ApplicationController
+  
+    def edit
+      @menu = Menu.find(params[:menu_id])
+      @menu.update_id("")
+      @group = @menu.all_children().select {|child| child.id.to_s == params[:id].to_s}.first
+    end
+  
+    def update
+      @menu = Menu.find(params[:menu_id])
+      @menu.update_id("")
+      @group = @menu.all_children().select {|child| child.id.to_s == params[:id].to_s}.first
+      @group.name = params[:group][:name]
+      @menu.save
+    
+      redirect_to edit_menu_path(@menu)
+    end
+    
+    def destroy
+      @menu = Menu.find(params[:menu_id])
+      @menu.update_id("")
+      @group_to_remove = @menu.all_children().select {|child| child.id.to_s == params[:id].to_s}.first
+      @group = (@menu.all_children+[@menu]).select {|child| child.is_a?(Group) && child.children.include?(@group_to_remove)}.first
+      @group.children.delete(@group_to_remove)
+      @menu.save
+    
+      redirect_to edit_menu_path(@menu)
+    end
+  
+  
+    def new
+      @menu = Menu.find(params[:menu_id])
+      @group = nil
+      
+      render :action => :edit
+    end
+  
+    def create
+      @menu = Menu.find(params[:menu_id])
+      @menu.children << Group.new(params[:group][:name])
+      @menu.save
+    
+      redirect_to edit_menu_path(@menu)
+    end
+  
+  end
+end

data/app/controllers/burp/links_controller.rb

@@ -0,0 +1,48 @@
+module Burp
+  class LinksController < ApplicationController
+    
+    def new
+      @menu = Menu.find(params[:menu_id])
+      @link = nil
+      
+      render :action => :edit
+    end
+    
+    def edit
+      @menu = Menu.find(params[:menu_id])
+      @menu.update_id("")
+      @link = @menu.all_children().select {|child| child.id.to_s == params[:id].to_s}.first
+    end
+    
+    def update
+      @menu = Menu.find(params[:menu_id])
+      @menu.update_id("")
+      @link = @menu.all_children().select {|child| child.id.to_s == params[:id].to_s}.first
+      @link.name = params[:link][:name]
+      @link.url = params[:link][:url]
+      @menu.save
+    
+      redirect_to edit_menu_path(@menu)
+    end
+    
+    def destroy
+      @menu = Menu.find(params[:menu_id])
+      @menu.update_id("")
+      @link = @menu.all_children().select {|child| child.id.to_s == params[:id].to_s}.first
+      @group = (@menu.all_children+[@menu]).select {|child| child.is_a?(Group) && child.children.include?(@link)}.first
+      @group.children.delete(@link)
+      @menu.save
+    
+      redirect_to edit_menu_path(@menu)
+    end
+    
+    def create
+      @menu = Menu.find(params[:menu_id])
+      @menu.children << Link.new(params[:link][:name] => params[:link][:url])
+      @menu.save
+    
+      redirect_to edit_menu_path(@menu)
+    end
+    
+  end
+end

data/app/controllers/burp/menus_controller.rb

@@ -0,0 +1,33 @@
+module Burp
+  class MenusController < Burp::ApplicationController
+    
+    def index
+      @menus = Menu.all
+    end
+    
+    def edit
+      @menu = Menu.find(params[:id])
+      @menu.update_id("")
+      
+      all_items = @menu.all_children
+      
+      @pages_not_in_menu = Group.new("pages not in menu")
+      
+      PageModel.all_paths.each do |path|
+        path2 = path == "/" ? path : path + "/"
+        if(all_items.select{|item| item.is_a?(Link) && (item.url == path || item.url == path2)}.length == 0) 
+          page = PageModel.find(path)
+          @pages_not_in_menu.children << Link.new(page.title => page.path)
+        end
+      end
+    end
+    
+    def update
+      menu = Group.from_hash(JSON.parse(params[:menu])).to_menu
+      menu.save
+      
+      render :json => {:success => true}
+    end 
+    
+  end
+end

data/app/controllers/burp/pages_controller.rb

@@ -0,0 +1,112 @@
+module Burp
+  class PagesController < Burp::ApplicationController
+
+    def index
+      Burp.access.may_view_page_list! do
+        @pages = PageModel.all
+      end
+    end
+    
+    def edit
+      @page = PageModel.find(("/"+params[:id]).gsub("/$root","/"))
+      Burp.access.may_edit_page!(@page) do    
+          
+        respond_to do |format|
+          format.html {}
+          format.json { render :json =>  @page }
+        end
+      end
+    end
+    
+    def show
+      path = ("/"+params[:id]).gsub("/$root","/")
+      @page = PageModel.find(path)
+      Burp.access.may_view_page_data!(@page) do
+
+        respond_to do |format|
+          format.html {
+            redirect_to path
+          }
+          format.json { render :json =>  @page }
+        end
+      end
+    end
+    
+    def new
+      @page = PageModel.new
+      Burp.access.may_create_new_page! do
+        render :action => :edit
+      end
+    end
+    
+    def create
+      
+      Burp.access.may_create_new_page! do
+        
+        @page = PageModel.new
+        
+        @page.title = params[:page][:title]
+        @page.path = params[:page][:path]
+        (params[:page][:snippets] || {}).each do |name,value|
+          @page.snippets[name] = value
+        end
+        
+        if @page.save
+      
+          respond_to do |format|
+            format.html {
+              redirect_to pages_path
+            }
+            format.json { render :json =>  {:success => true} }
+          end
+        else
+          respond_to do |format|
+            format.html {
+              render :edit
+            }
+            format.json { render :json =>  {:errors => @page.errors} }
+          end
+        end
+      end
+    end
+    
+    def update
+      
+      @page = PageModel.find(("/"+params[:id]).gsub("/$root","/")) || PageModel.new(:path => ("/"+params[:id]).gsub("/$root","/"))
+      Burp.access.may_update_page!(@page) do
+  
+        @page.title = params[:page][:title] if params[:page][:title]
+        @page.path = params[:page][:path] if params[:page][:path]
+        @page.misc = params[:page][:misc] if params[:page][:misc]
+        
+        if params[:page][:snippets]
+          @page.snippets = {}
+          (params[:page][:snippets] || {}).each do |name,value|
+            @page.snippets[name] = value
+          end
+        end
+        
+        @page.save
+          
+        respond_to do |format|
+          format.html {
+            redirect_to pages_path
+          }
+          format.json { render :json =>  {:success => true} }
+        end
+      end
+    end
+    
+    def destroy
+      
+      @page = PageModel.find(("/"+params[:id]).gsub("/$root","/"))
+      Burp.access.may_remove_page!(@page) do
+        
+        @page.remove
+        redirect_to "/burp/pages/"
+      end
+    end
+    
+  end
+  
+end

data/app/controllers/burp/static_controller.rb

@@ -0,0 +1,11 @@
+module Burp
+  class StaticController < Burp::ApplicationController
+    def index
+      Burp.access.may_view_static_page!(params[:action])
+    end 
+    
+    def help
+      
+    end
+  end
+end

data/app/helpers/burp/application_helper.rb

@@ -0,0 +1,4 @@
+module Burp
+  module ApplicationHelper
+  end
+end