camaleon_cms 0.0.1

data/app/controllers/admin/user_roles_controller.rb

@@ -0,0 +1,76 @@
+=begin
+  Camaleon CMS is a content management system
+  Copyright (C) 2015 by Owen Peredo Diaz
+  Email: owenperedo@gmail.com
+  This program is free software: you can redistribute it and/or modify   it under the terms of the GNU Affero General Public License as  published by the Free Software Foundation, either version 3 of the  License, or (at your option) any later version.
+  This program is distributed in the hope that it will be useful,  but WITHOUT ANY WARRANTY; without even the implied warranty of  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+  See the  GNU Affero General Public License (GPLv3) for more details.
+=end
+class Admin::UserRolesController < AdminController
+  before_action :validate_role
+  before_action :set_user_roles, only: ['show','edit','update','destroy']
+
+  def index
+    @user_roles = current_site.user_roles
+    @user_roles = @user_roles.paginate(:page => params[:page], :per_page => current_site.admin_per_page)
+  end
+
+  def show
+  end
+
+  def new
+    @user_role = current_site.user_roles.new
+    render 'form'
+  end
+
+  def create
+    user_role_data = params[:user_role]
+
+    @user_role = current_site.user_roles.new(user_role_data)
+    if @user_role.save
+      @user_role.set_meta("_post_type_#{current_site.id.to_s}", defined?(params[:rol_values][:post_type]) ? params[:rol_values][:post_type] : {})
+      @user_role.set_meta("_manager_#{current_site.id.to_s}", defined?(params[:rol_values][:post_type]) ? params[:rol_values][:manager] : {})
+      flash[:notice] = t('admin.users.message.rol_created')
+      redirect_to action: :edit, id: @user_role.id
+    else
+      render 'form'
+    end
+  end
+
+  def edit
+    admin_breadcrumb_add("#{t('admin.button.edit')}")
+    render 'form'
+  end
+
+  def update
+    if @user_role.editable? && @user_role.update(params[:user_role])
+      @user_role.set_meta("_post_type_#{current_site.id.to_s}", defined?(params[:rol_values][:post_type]) ? params[:rol_values][:post_type] : {})
+      @user_role.set_meta("_manager_#{current_site.id.to_s}", defined?(params[:rol_values][:post_type]) ? params[:rol_values][:manager] : {})
+      flash[:notice] = t('admin.users.message.rol_updated')
+      redirect_to action: :edit, id: @user_role.id
+    else
+      render 'form'
+    end
+  end
+
+  def destroy
+    @user_role.destroy
+    flash[:notice] = t('admin.users.message.rol_deleted')
+    redirect_to action: :index
+  end
+
+  private
+  def validate_role
+    authorize! :manager, :users
+  end
+  def set_user_roles
+      begin
+        @user_role = current_site.user_roles.find(params[:id])
+      rescue
+        flash[:error] = t('admin.users.message.rol_error')
+        redirect_to action: :index
+      end
+
+  end
+
+end

data/app/controllers/admin/users_controller.rb

@@ -0,0 +1,120 @@
+=begin
+  Camaleon CMS is a content management system
+  Copyright (C) 2015 by Owen Peredo Diaz
+  Email: owenperedo@gmail.com
+  This program is free software: you can redistribute it and/or modify   it under the terms of the GNU Affero General Public License as  published by the Free Software Foundation, either version 3 of the  License, or (at your option) any later version.
+  This program is distributed in the hope that it will be useful,  but WITHOUT ANY WARRANTY; without even the implied warranty of  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+  See the  GNU Affero General Public License (GPLv3) for more details.
+=end
+class Admin::UsersController < AdminController
+  before_action :validate_role, except: [:profile, :profile_edit]
+  before_action :set_user, only: ['show','edit','update','destroy']
+  #http_basic_authenticate_with name: "dhh", password: "secret", except: [:index, :show]
+
+  def index
+    @users = current_site.users.paginate(:page => params[:page], :per_page => current_site.admin_per_page)
+  end
+
+  def profile
+    @user = current_user
+  end
+
+  def profile_edit
+    @user = current_user
+    if params[:meta]
+      @user.set_meta_from_form(params[:meta])
+      render json: {message: 'update'}
+    end
+
+    if params[:user]
+      render json: @user.update(params[:user].permit(:username, :email)) ? {message: 'update'} : {errors: @user.errors.full_messages.join(', ')}
+    end
+
+    if params[:password]
+      if @user.authenticate(params[:password][:password_old])
+         render json: @user.update(params[:password]) ? {message: 'update'} : {errors: @user.errors.full_messages.join(', ')}
+      else
+        render json: {errors: t('admin.users.message.incorrect_old_password')}
+      end
+    end
+  end
+
+  def show
+    render 'profile'
+  end
+
+  def edit
+    admin_breadcrumb_add("#{t('admin.button.edit')}")
+    render 'form'
+  end
+
+  def update
+    if @user.update(params[:user])
+      @user.set_meta_from_form(params[:meta]) if params[:meta].present?
+      @user.set_field_values(params[:field_options])
+      flash[:notice] = t('admin.users.message.updated')
+      redirect_to action: :index
+    else
+      render 'form'
+    end
+  end
+
+  def updated_ajax
+    @user = current_site.users.find(params[:user_id])
+    if params[:meta]
+      @user.set_meta_from_form(params[:meta])
+      render json: {message: 'update'}
+    end
+
+    if params[:user]
+      render json: @user.update(params[:user].permit(:username, :email)) ? {message: 'update'} : {errors: @user.errors.full_messages.join(', ')}
+    end
+
+    if params[:password]
+      if @user.authenticate(params[:password][:password_old])
+        render json: @user.update(params[:password]) ? {message: 'update'} : {errors: @user.errors.full_messages.join(', ')}
+      else
+        render json: {errors: t('admin.users.message.incorrect_old_password')}
+      end
+    end
+  end
+
+  def new
+    @user = current_site.users.new
+    render 'form'
+  end
+
+  def create
+    user_data = params[:user]
+
+    @user = current_site.users.new(user_data)
+    if @user.save
+      @user.set_meta_from_form(params[:meta]) if params[:meta].present?
+      @user.set_field_values(params[:field_options])
+      flash[:notice] = t('admin.users.message.created')
+      redirect_to action: :index
+    else
+      render 'form'
+    end
+  end
+
+  def destroy
+    flash[:notice] = t('admin.users.message.deleted') if @user.destroy
+    redirect_to action: :index
+  end
+
+  private
+  def validate_role
+    authorize! :manager, :users
+  end
+  def set_user
+      begin
+        @user = current_site.users.find(params[:id])
+      rescue
+        flash[:error] = t('admin.users.message.error')
+        redirect_to admin_path
+      end
+
+  end
+
+end

data/app/controllers/admin_controller.rb

@@ -0,0 +1,56 @@
+=begin
+  Camaleon CMS is a content management system
+  Copyright (C) 2015 by Owen Peredo Diaz
+  Email: owenperedo@gmail.com
+  This program is free software: you can redistribute it and/or modify   it under the terms of the GNU Affero General Public License as  published by the Free Software Foundation, either version 3 of the  License, or (at your option) any later version.
+  This program is distributed in the hope that it will be useful,  but WITHOUT ANY WARRANTY; without even the implied warranty of  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+  See the  GNU Affero General Public License (GPLv3) for more details.
+=end
+class AdminController < CamaleonController
+  rescue_from CanCan::AccessDenied do |exception|
+    flash[:error] = "Error: #{exception.message}"
+    redirect_to admin_dashboard_path
+  end
+  include Admin::ApplicationHelper
+
+  layout "admin"
+  before_action :authenticate
+  before_action :admin_init_actions
+  before_action :admin_logged_actions
+  before_action :admin_before_hooks
+  after_action :admin_after_hooks
+
+  def index
+
+  end
+
+
+  def dashboard
+     render "admin/dashboard/index"
+  end
+
+  private
+  # initialize all vars and methods for admin panel
+  def admin_init_actions
+    I18n.locale = current_site.get_admin_language
+    @_admin_menus = {}
+    @_admin_breadcrumb = []
+    @_extra_models_for_fields = []
+    self.append_view_path(Rails.root.join("app", "apps"))
+  end
+
+  # trigger hooks for admin panel before admin load
+  def admin_before_hooks
+    hooks_run("admin_before_load")
+  end
+
+  # trigger hooks for admin panel after admin load
+  def admin_after_hooks
+    hooks_run("admin_after_load")
+  end
+
+  def admin_logged_actions
+    admin_menus_add_commons unless request.xhr?
+  end
+
+end

data/app/controllers/apps/plugins_admin_controller.rb

@@ -0,0 +1,21 @@
+=begin
+  Camaleon CMS is a content management system
+  Copyright (C) 2015 by Owen Peredo Diaz
+  Email: owenperedo@gmail.com
+  This program is free software: you can redistribute it and/or modify   it under the terms of the GNU Affero General Public License as  published by the Free Software Foundation, either version 3 of the  License, or (at your option) any later version.
+  This program is distributed in the hope that it will be useful,  but WITHOUT ANY WARRANTY; without even the implied warranty of  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+  See the  GNU Affero General Public License (GPLv3) for more details.
+=end
+class Apps::PluginsAdminController < AdminController
+  before_action :init_plugin
+
+  private
+  def init_plugin
+    plugin_name = params[:controller].split("/")[1]
+    @plugin = current_site.plugins.where(slug: plugin_name).first
+    return render_error(404) unless @plugin.active?
+    lookup_context.prefixes.prepend(params[:controller].sub("plugins/#{plugin_name}", "#{plugin_name}/views"))
+    self.append_view_path(Rails.root.join("app", 'apps', "plugins"))
+  end
+
+end

data/app/controllers/apps/plugins_front_controller.rb

@@ -0,0 +1,21 @@
+=begin
+  Camaleon CMS is a content management system
+  Copyright (C) 2015 by Owen Peredo Diaz
+  Email: owenperedo@gmail.com
+  This program is free software: you can redistribute it and/or modify   it under the terms of the GNU Affero General Public License as  published by the Free Software Foundation, either version 3 of the  License, or (at your option) any later version.
+  This program is distributed in the hope that it will be useful,  but WITHOUT ANY WARRANTY; without even the implied warranty of  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+  See the  GNU Affero General Public License (GPLv3) for more details.
+=end
+class Apps::PluginsFrontController < FrontendController
+  before_action :init_plugin
+
+  private
+  def init_plugin
+    plugin_name = params[:controller].split("/")[1]
+    @plugin = current_site.plugins.where(slug: plugin_name).first
+    return render_error(404) unless @plugin.active?
+    lookup_context.prefixes.prepend(params[:controller].sub("plugins/#{plugin_name}", "#{plugin_name}/views"))
+    self.append_view_path(Rails.root.join("app", 'apps', "plugins"))
+  end
+
+end

data/app/controllers/apps/themes_admin_controller.rb

@@ -0,0 +1,21 @@
+=begin
+  Camaleon CMS is a content management system
+  Copyright (C) 2015 by Owen Peredo Diaz
+  Email: owenperedo@gmail.com
+  This program is free software: you can redistribute it and/or modify   it under the terms of the GNU Affero General Public License as  published by the Free Software Foundation, either version 3 of the  License, or (at your option) any later version.
+  This program is distributed in the hope that it will be useful,  but WITHOUT ANY WARRANTY; without even the implied warranty of  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+  See the  GNU Affero General Public License (GPLv3) for more details.
+=end
+class Apps::ThemesAdminController < AdminController
+  before_action :init_theme
+
+  private
+  def init_theme
+    theme_name = params[:controller].split("/")[1]
+    @theme = current_theme
+    return render_error(404) unless current_theme.slug == theme_name
+    lookup_context.prefixes.prepend(params[:controller].sub("themes/#{theme_name}", "#{theme_name}/views"))
+    self.append_view_path(Rails.root.join("app", 'apps', "themes"))
+  end
+
+end

data/app/controllers/apps/themes_front_controller.rb

@@ -0,0 +1,21 @@
+=begin
+  Camaleon CMS is a content management system
+  Copyright (C) 2015 by Owen Peredo Diaz
+  Email: owenperedo@gmail.com
+  This program is free software: you can redistribute it and/or modify   it under the terms of the GNU Affero General Public License as  published by the Free Software Foundation, either version 3 of the  License, or (at your option) any later version.
+  This program is distributed in the hope that it will be useful,  but WITHOUT ANY WARRANTY; without even the implied warranty of  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+  See the  GNU Affero General Public License (GPLv3) for more details.
+=end
+class Apps::ThemesFrontController < FrontendController
+  before_action :init_theme
+
+  private
+  def init_theme
+    theme_name = params[:controller].split("/")[1]
+    @theme = current_theme
+    return render_error(404) unless current_theme.slug == theme_name
+    lookup_context.prefixes.prepend(params[:controller].sub("themes/#{theme_name}", "#{theme_name}/views"))
+    self.append_view_path(Rails.root.join("app", 'apps', "themes"))
+  end
+
+end

data/app/controllers/camaleon_controller.rb

@@ -0,0 +1,87 @@
+=begin
+  Camaleon CMS is a content management system
+  Copyright (C) 2015 by Owen Peredo Diaz
+  Email: owenperedo@gmail.com
+  This program is free software: you can redistribute it and/or modify   it under the terms of the GNU Affero General Public License as  published by the Free Software Foundation, either version 3 of the  License, or (at your option) any later version.
+  This program is distributed in the hope that it will be useful,  but WITHOUT ANY WARRANTY; without even the implied warranty of  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+  See the  GNU Affero General Public License (GPLv3) for more details.
+=end
+class CamaleonController < ApplicationController
+  include CamaleonHelper
+  include SessionHelper
+  include SiteHelper
+  include HtmlHelper
+  include UserRolesHelper
+  include ShortCodeHelper
+  include PluginsHelper
+  include ThemeHelper
+  include HooksHelper
+  include ContentHelper
+  include CaptchaHelper
+  include UploaderHelper
+  include Mobu::DetectMobile
+
+  before_action :site_check_existence, except: [:render_error, :captcha]
+  before_action :before_actions, except: [:render_error, :captcha]
+  after_action :after_actions, except: [:render_error, :captcha]
+  # Prevent CSRF attacks by raising an exception.
+  # For APIs, you may want to use :null_session instead.
+  protect_from_forgery with: :exception
+
+  layout Proc.new { |controller| controller.request.xhr? ? false : 'default' }
+
+  # show page error
+  def render_error(status = 404, exception = nil)
+    Rails.logger.info "====================#{caller.inspect}"
+    render :file => "public/#{status}.html", :status => status, :layout => false
+  end
+
+  # generate captcha image
+  def captcha
+    image = captcha_build(params[:len])
+    send_data image.to_blob, :type => image.mime_type, :disposition => 'inline'
+  end
+
+  private
+  def before_actions
+    # including all helpers (system, themes, plugins) for this site
+    PluginRoutes.enabled_apps(current_site, current_theme.slug).each{|plugin| plugin_load_helpers(plugin) }
+
+    # include all custom models created by installed plugins or themes for current site
+    site_load_custom_models(current_site)
+
+    # set default cache directory for current site
+    cache_store.cache_path = File.join(cache_store.cache_path.split("site-#{current_site.id}").first, "site-#{current_site.id}")
+    # Rails.cache.write("#{current_site.id}-#{Time.now}", 1)
+
+
+    # initializing short codes
+    shortcodes_init()
+
+    # initializing before and after contents
+    html_helpers_init
+
+    # initializing before and after contents
+    content_init
+
+    @_hooks_skip = []
+    # trigger all hooks before_load_app
+    hooks_run("app_before_load")
+
+    request.env.except!('HTTP_X_FORWARDED_HOST') if request.env['HTTP_X_FORWARDED_HOST'] # just drop the variable
+
+    # views path for plugins
+    self.append_view_path(Rails.root.join("app", "apps", 'plugins'))
+  end
+
+  def after_actions
+    # trigger all actions app after load
+    hooks_run("app_after_load")
+  end
+
+  # redirect to sessions login form when the session was expired.
+  def auth_session_error
+    redirect_to root_path
+  end
+
+end

data/app/controllers/concerns/frontend_concern.rb

@@ -0,0 +1,57 @@
+=begin
+  Camaleon CMS is a content management system
+  Copyright (C) 2015 by Owen Peredo Diaz
+  Email: owenperedo@gmail.com
+  This program is free software: you can redistribute it and/or modify   it under the terms of the GNU Affero General Public License as  published by the Free Software Foundation, either version 3 of the  License, or (at your option) any later version.
+  This program is distributed in the hope that it will be useful,  but WITHOUT ANY WARRANTY; without even the implied warranty of  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+  See the  GNU Affero General Public License (GPLv3) for more details.
+=end
+module FrontendConcern extend ActiveSupport::Concern
+  # visiting sitemap.xml
+  def sitemap
+    path = Rails.root.join("public", "sitemaps", current_site.slug, "sitemap.xml")
+    if File.exists?(path)
+      respond_to do |format|
+        format.html do
+          @xml = File.read(path)
+          render "sitemap"
+        end
+        format.xml { render(xml: open(path).read) }
+      end
+    else
+      render text: "Sitemap not found.", status: :not_found
+    end
+  end
+
+  # accessing for robots.txt
+  def robots
+  end
+
+  # save comment from a post
+  def save_comment
+    @post = current_site.posts.find_by_id(params[:post_id]).decorate
+    if @post.can_commented?
+      comment_data = {}
+      comment_data[:user_id] = current_user.id
+      comment_data[:author] = current_user.the_name
+      comment_data[:author_email] = current_user.email
+      comment_data[:author_url] = ""
+      comment_data[:author_IP] = request.remote_ip.to_s
+      comment_data[:approved] = current_site.front_comment_status
+      comment_data[:agent] = request.user_agent.force_encoding("ISO-8859-1").encode("UTF-8")
+      comment_data[:content] = params[:post_comment][:content]
+      @comment = @post.comments.main.new(comment_data)
+      if @comment.save
+        flash[:notice] = t('admin.comments.message.created')
+        redirect_to :back
+      else
+        flash[:error] = t('admin.validate.required')
+        redirect_to :back
+      end
+    else
+      flash[:error] = t('admin.message.unauthorized')
+      redirect_to :back
+    end
+  end
+
+end