camaleon_cms 0.0.1

data/lib/ext/string.rb

@@ -0,0 +1,159 @@
+class String
+
+
+  def to_bool
+    return true if self == true || self =~ (/(true|t|yes|y|1)$/i)
+    return false if self == false || self.blank? || self =~ (/(false|f|no|n|0)$/i)
+    raise ArgumentError.new("invalid value for Boolean: \"#{self}\"")
+  end
+
+  def strip_tags
+    ActionController::Base.helpers.strip_tags(self)
+  end
+
+  def is_email
+    return false if self.blank?
+    return /^[a-zA-Z][\w\.-]*[a-zA-Z0-9]@[a-zA-Z0-9][\w\.-]*[a-zA-Z0-9]\.[a-zA-Z][a-zA-Z\.]*[a-zA-Z]$/.match(self).present?
+  end
+
+  def is_number?
+    self.to_f.to_s == self.to_s || self.to_i.to_s == self.to_s
+  end
+
+  def is_bool?
+    self == 'false' || self == 'true'
+  end
+
+  def to_var
+    if is_number?
+      self.to_i
+    elsif is_bool?
+      self.to_bool
+    else
+      self
+    end
+  end
+
+  def split_bar
+    self.split(',').map{|us_id| us_id.gsub('__','')}.uniq
+  end
+  def include_bar?(uid)
+    self.include?("__#{uid}__")
+  end
+
+  # slice string respect to correct word for read more
+  def slice_read_more(quantity = 100, start_from = 0)
+    return self if self.length <= quantity
+    tmp = self.slice(start_from, self.length)
+    if tmp.slice(quantity) == " " || tmp.index(" ").nil?
+      return tmp.slice(0, quantity)
+    end
+    quantity += tmp.slice(quantity, tmp.length).index(" ").nil? ? tmp.length : tmp.slice(quantity, tmp.length).index(" ")
+    tmp.slice(0, quantity)
+  end
+
+  # slice string respect to correct word for read more
+  def truncate_text(string, quantity = 100, quantity_before_text = 20)
+    string = string.gsub("+", "").gsub("*", "").gsub("-", "").downcase
+    self.strip_tags
+    return self if self.length <= quantity
+    start_from = self.downcase.index("#{string}")
+    start_from = self.index(/#{string.split(" ").join("|")}/i) unless start_from.present?
+    start_from -= quantity_before_text  if start_from.present? && start_from > 0
+    start_from = 0 if start_from.nil? || start_from < 0
+    tmp = self.slice(start_from, self.length)
+    if tmp.slice(quantity) == " " || tmp.index(" ").nil?
+      return tmp.slice(0, quantity)
+    end
+    quantity += tmp.slice(quantity, tmp.length).to_s.index(" ").nil? ? tmp.length : tmp.slice(quantity, tmp.length).to_s.index(" ")
+    tmp.slice(0, quantity)
+  end
+  
+  def strip_stopwords(language = "es")
+    if language == "en"
+      words = ["a", "about", "above", "above", "across", "after", "afterwards", "again", "against", "all", "almost", "alone", "along", "already", "also","although","always","am","among", "amongst", "amoungst", "amount",  "an", "and", "another", "any","anyhow","anyone","anything","anyway", "anywhere", "are", "around", "as",  "at", "back","be","became", "because","become","becomes", "becoming", "been", "before", "beforehand", "behind", "being", "below", "beside", "besides", "between", "beyond", "bill", "both", "bottom","but", "by", "call", "can", "cannot", "cant", "co", "con", "could", "couldnt", "cry", "de", "describe", "detail", "do", "done", "down", "due", "during", "each", "eg", "eight", "either", "eleven","else", "elsewhere", "empty", "enough", "etc", "even", "ever", "every", "everyone", "everything", "everywhere", "except", "few", "fifteen", "fify", "fill", "find", "fire", "first", "five", "for", "former", "formerly", "forty", "found", "four", "from", "front", "full", "further", "get", "give", "go", "had", "has", "hasnt", "have", "he", "hence", "her", "here", "hereafter", "hereby", "herein", "hereupon", "hers", "herself", "him", "himself", "his", "how", "however", "hundred", "ie", "if", "in", "inc", "indeed", "interest", "into", "is", "it", "its", "itself", "keep", "last", "latter", "latterly", "least", "less", "ltd", "made", "many", "may", "me", "meanwhile", "might", "mill", "mine", "more", "moreover", "most", "mostly", "move", "much", "must", "my", "myself", "name", "namely", "neither", "never", "nevertheless", "next", "nine", "no", "nobody", "none", "noone", "nor", "not", "nothing", "now", "nowhere", "of", "off", "often", "on", "once", "one", "only", "onto", "or", "other", "others", "otherwise", "our", "ours", "ourselves", "out", "over", "own","part", "per", "perhaps", "please", "put", "rather", "re", "same", "see", "seem", "seemed", "seeming", "seems", "serious", "several", "she", "should", "show", "side", "since", "sincere", "six", "sixty", "so", "some", "somehow", "someone", "something", "sometime", "sometimes", "somewhere", "still", "such", "system", "take", "ten", "than", "that", "the", "their", "them", "themselves", "then", "thence", "there", "thereafter", "thereby", "therefore", "therein", "thereupon", "these", "they", "thickv", "thin", "third", "this", "those", "though", "three", "through", "throughout", "thru", "thus", "to", "together", "too", "top", "toward", "towards", "twelve", "twenty", "two", "un", "under", "until", "up", "upon", "us", "very", "via", "was", "we", "well", "were", "what", "whatever", "when", "whence", "whenever", "where", "whereafter", "whereas", "whereby", "wherein", "whereupon", "wherever", "whether", "which", "while", "whither", "who", "whoever", "whole", "whom", "whose", "why", "will", "with", "within", "without", "would", "yet", "you", "your", "yours", "yourself", "yourselves", "the"]
+    else
+      words = ["un", "una", "unas", "unos", "uno", "sobre", "todo", "tambien", "tras", "otro", "algun", "alguno", "alguna", "algunos", "algunas", "ser", "es", "soy", "eres", "somos", "sois", "estoy", "esta", "estamos", "estais", "estan", "como", "en", "para", "atras", "porque", "por", "que", "estado", "estaba", "ante", "antes", "siendo", "ambos", "pero", "por", "poder", "puede", "puedo", "podemos", "podeis", "pueden", "fui", "fue", "fuimos", "fueron", "hacer", "hago", "hace", "hacemos", "haceis", "hacen", "cada", "fin", "incluso", "primero", "desde", "conseguir", "consigo", "consigue", "consigues", "conseguimos", "consiguen", "ir", "voy", "va", "vamos", "vais", "van", "vaya", "gueno", "ha", "tener", "tengo", "tiene", "tenemos", "teneis", "tienen", "el", "la", "lo", "las", "los", "su", "aqui", "mio", "tuyo", "ellos", "ellas", "nos", "nosotros", "vosotros", "vosotras", "si", "dentro", "solo", "solamente", "saber", "sabes", "sabe", "sabemos", "sabeis", "saben", "ultimo", "largo", "bastante", "haces", "muchos", "aquellos", "aquellas", "sus", "entonces", "tiempo", "verdad", "verdadero", "verdadera", "cierto", "ciertos", "cierta", "ciertas", "intentar", "intento", "intenta", "intentas", "intentamos", "intentais", "intentan", "dos", "bajo", "arriba", "encima", "usar", "uso", "usas", "usa", "usamos", "usais", "usan", "emplear", "empleo", "empleas", "emplean", "ampleamos", "empleais", "valor", "muy", "era", "eras", "eramos", "eran", "modo", "bien", "cual", "cuando", "donde", "mientras", "quien", "con", "entre", "sin", "trabajo", "trabajar", "trabajas", "trabaja", "trabajamos", "trabajais", "trabajan", "podria", "podrias", "podriamos", "podrian", "podriais", "yo", "aquel"]
+    end
+
+    tmp_self = self.strip
+    res = tmp_self.split(" ").delete_if { |s| words.include?(s) }
+    return tmp_self if res.blank?
+    return res.uniq.join(" ")
+  end
+  def strip_stopwords2(language = "es")
+    if language == "en"
+      words = ["a", "about", "above", "above", "across", "after", "afterwards", "again", "against", "all", "almost", "alone", "along", "already", "also","although","always","am","among", "amongst", "amoungst", "amount",  "an", "and", "another", "any","anyhow","anyone","anything","anyway", "anywhere", "are", "around", "as",  "at", "back","be","became", "because","become","becomes", "becoming", "been", "before", "beforehand", "behind", "being", "below", "beside", "besides", "between", "beyond", "bill", "both", "bottom","but", "by", "call", "can", "cannot", "cant", "co", "con", "could", "couldnt", "cry", "de", "describe", "detail", "do", "done", "down", "due", "during", "each", "eg", "eight", "either", "eleven","else", "elsewhere", "empty", "enough", "etc", "even", "ever", "every", "everyone", "everything", "everywhere", "except", "few", "fifteen", "fify", "fill", "find", "fire", "first", "five", "for", "former", "formerly", "forty", "found", "four", "from", "front", "full", "further", "get", "give", "go", "had", "has", "hasnt", "have", "he", "hence", "her", "here", "hereafter", "hereby", "herein", "hereupon", "hers", "herself", "him", "himself", "his", "how", "however", "hundred", "ie", "if", "in", "inc", "indeed", "interest", "into", "is", "it", "its", "itself", "keep", "last", "latter", "latterly", "least", "less", "ltd", "made", "many", "may", "me", "meanwhile", "might", "mill", "mine", "more", "moreover", "most", "mostly", "move", "much", "must", "my", "myself", "name", "namely", "neither", "never", "nevertheless", "next", "nine", "no", "nobody", "none", "noone", "nor", "not", "nothing", "now", "nowhere", "of", "off", "often", "on", "once", "one", "only", "onto", "or", "other", "others", "otherwise", "our", "ours", "ourselves", "out", "over", "own","part", "per", "perhaps", "please", "put", "rather", "re", "same", "see", "seem", "seemed", "seeming", "seems", "serious", "several", "she", "should", "show", "side", "since", "sincere", "six", "sixty", "so", "some", "somehow", "someone", "something", "sometime", "sometimes", "somewhere", "still", "such", "system", "take", "ten", "than", "that", "the", "their", "them", "themselves", "then", "thence", "there", "thereafter", "thereby", "therefore", "therein", "thereupon", "these", "they", "thickv", "thin", "third", "this", "those", "though", "three", "through", "throughout", "thru", "thus", "to", "together", "too", "top", "toward", "towards", "twelve", "twenty", "two", "un", "under", "until", "up", "upon", "us", "very", "via", "was", "we", "well", "were", "what", "whatever", "when", "whence", "whenever", "where", "whereafter", "whereas", "whereby", "wherein", "whereupon", "wherever", "whether", "which", "while", "whither", "who", "whoever", "whole", "whom", "whose", "why", "will", "with", "within", "without", "would", "yet", "you", "your", "yours", "yourself", "yourselves", "the"]
+    else
+      words = ["de","la","lo","del","un", "una", "unas", "unos", "uno", "sobre", "todo", "tambien", "tras", "otro", "algun", "alguno", "alguna", "algunos", "algunas", "ser", "es", "soy", "eres", "somos", "sois", "estoy", "esta", "estamos", "estais", "estan", "como", "en", "para", "atras", "porque", "por", "que", "estado", "estaba", "ante", "antes", "siendo", "ambos", "pero", "por", "poder", "puede", "puedo", "podemos", "podeis", "pueden", "fui", "fue", "fuimos", "fueron", "hacer", "hago", "hace", "hacemos", "haceis", "hacen", "cada", "fin", "incluso", "primero", "desde", "conseguir", "consigo", "consigue", "consigues", "conseguimos", "consiguen", "ir", "voy", "va", "vamos", "vais", "van", "vaya", "gueno", "ha", "tener", "tengo", "tiene", "tenemos", "teneis", "tienen", "el", "la", "lo", "las", "los", "su", "aqui", "mio", "tuyo", "ellos", "ellas", "nos", "nosotros", "vosotros", "vosotras", "si", "dentro", "solo", "solamente", "saber", "sabes", "sabe", "sabemos", "sabeis", "saben", "ultimo", "largo", "bastante", "haces", "muchos", "aquellos", "aquellas", "sus", "entonces", "tiempo", "verdad", "verdadero", "verdadera", "cierto", "ciertos", "cierta", "ciertas", "intentar", "intento", "intenta", "intentas", "intentamos", "intentais", "intentan", "dos", "bajo", "arriba", "encima", "usar", "uso", "usas", "usa", "usamos", "usais", "usan", "emplear", "empleo", "empleas", "emplean", "ampleamos", "empleais", "valor", "muy", "era", "eras", "eramos", "eran", "modo", "bien", "cual", "cuando", "donde", "mientras", "quien", "con", "entre", "sin", "trabajo", "trabajar", "trabajas", "trabaja", "trabajamos", "trabajais", "trabajan", "podria", "podrias", "podriamos", "podrian", "podriais", "yo", "aquel"]
+    end
+
+    tmp_self = self.strip
+    res = tmp_self.split(" ").delete_if { |s| words.include?(s) }
+    return tmp_self if res.blank?
+    return res.uniq.join(" ")
+  end
+
+
+  def slug
+    #strip the string
+    ret = self.strip
+
+    #blow away apostrophes
+    ret.gsub! /['`]/,""
+
+    # @ --> at, and & --> and
+    ret.gsub! /\s*@\s*/, " at "
+    ret.gsub! /\s*&\s*/, " and "
+
+    #replace all non alphanumeric, underscore or periods with underscore
+    ret.gsub! /\s*[^A-Za-z0-9\.\-]\s*/, '_'
+
+    #convert double underscores to single
+    ret.gsub! /_+/,"_"
+
+    #strip off leading/trailing underscore
+    ret.gsub! /\A[_\.]+|[_\.]+\z/,""
+
+    return ret
+  end
+
+  # generate combinations
+  # generate alternative queries
+  def to_alt_query(qty_combination = 2, min_length = 2)
+    s = self.strip_stopwords("es").gsub(/\*|\+|-|~/, " ")
+    r = s.split(" ").clean_empty.uniq
+    r = r.delete_if {|s| s.size < 3 }
+    return s if r.size < min_length
+
+    res = []
+    r.combination(qty_combination).to_a.each do |i|
+      res << "(\"+#{i.join("+")}\")"
+    end
+    res.join(" ")
+  end
+
+  # from a string path, this function get the filename
+  def get_file_name
+    self.split("/").last.split(".").delete_last.join(".")
+  end
+
+  def hex_to_binary
+    temp = gsub("\s", "");
+    ret = []
+    (0...temp.size()/2).each{|index| ret[index] = [temp[index*2, 2]].pack("H2")}
+    return ret
+  end
+
+  # parse string into domain
+  # http://owem.tuzitio.com into owem.tuzitio.com
+  def parse_domain
+    url = self
+    uri = URI.parse(url)
+    uri = URI.parse("http://#{url}") if uri.scheme.nil?
+    host = (uri.host || self).downcase
+    h = host.start_with?('www.') ? host[4..-1] : host
+    "#{h}#{":#{uri.port}" unless [80, 443].include?(uri.port)}"
+  end
+
+end

data/lib/ext/translator.rb

@@ -0,0 +1,83 @@
+class String
+
+  # return translation value of locale
+  # if locale is nil, it will use I18n.locale
+
+  # Usage
+  # The default value if translation is not provided is all text
+  #
+  #  $ WpPost.post_title
+  #  $ => "<!--:en-->And this is how the Universe ended.<!--:--><!--:fr-->Et c'est ainsi que l'univers connu cessa d'exister.<!--:-->"
+  #  $ I18n.locale = :en
+  #  $ WpPost.post_title.translate
+  #  $ => "And this is how the Universe ended."
+  #  $ WpPost.post_title.translate(:en)
+  #  $ => "And this is how the Universe ended."
+  #
+  #  Spits the same text out if no translation tags are applied
+  #  $ WpPost.post_title
+  #  $ => "And this is how the Universe ended."
+  #  $ WpPost.post_title.translate(:fr)
+  #  $ => "And this is how the Universe ended."
+
+  def translate(locale = nil)
+    locale ||= I18n.locale
+    locale = locale.to_sym
+    return self if !self.squish.starts_with?("<!--") or self.blank?
+    return translations[locale] if translations.has_key?(locale)
+    return translations[I18n.default_locale] if translations.has_key?(I18n.default_locale)
+    return '' if translations.keys.any?
+    self
+  end
+
+  # return hash of translations for this string
+  # sample: {es: "hola mundo", en: "Hello World"}
+  def translations
+    @translations ||= split_locales
+    @translations
+  end
+
+  # return aray of translations for this string
+  # sample: ["hola mundo", "Hello World"]
+  def translations_array
+    r = translations.map{|key, value| value}
+    return r.present? ? r : [self]
+  end
+
+  protected
+  def split_locales
+    translations_per_locale = {}
+    return translations_per_locale if !self.squish.starts_with?("<!--") or self.blank?
+
+    self.split('<!--:-->').each do |t|
+      t.match(/^<!--:([\w]{2})/) do |lang|
+        translations_per_locale[lang[1].to_sym] = t.gsub(/<!--:#{lang[1]}-->(.*)/, '\1')
+      end
+    end
+    translations_per_locale
+  end
+end
+
+
+class Hash
+  # convert hash to translation string structure
+  # sample: {es: "hola mundo", en: "Hello World"}
+  # ==> <!--:es-->Hola Mundo<!--:--><!--:en-->Hello World<!--:-->
+  def to_translate
+    res = []
+    self.each do|key, val|
+      res << "<!--:#{key}-->#{val}<!--:-->"
+    end
+    res.join("")
+  end
+end
+
+class Array
+  # translate array values
+  # return the same array translated
+  def translate(locale = nil)
+    self.collect do |val|
+      val.to_s.translate(locale)
+    end
+  end
+end

data/lib/generators/camaleon_cms/install_generator.rb

@@ -0,0 +1,20 @@
+require 'rails/generators/base'
+require 'securerandom'
+module CamaleonCms
+  module Generators
+    class InstallGenerator < Rails::Generators::Base
+      source_root File.expand_path("../install_template", __FILE__)
+      desc "This generator create all basic Camaleon CMS structure."
+
+      def create_initializer_file
+        copy_file "system.json", "config/system.json"
+        copy_file "plugin_routes.rb", "lib/plugin_routes.rb"
+        copy_file "../../../../Gemfile", "lib/Gemfile_camaleon"
+        directory("apps", "app/apps")
+        append_to_file 'Gemfile' do
+          "\n\n#################### Camaleon CMS include all gems for plugins and themes #################### \nrequire './lib/plugin_routes' \ninstance_eval(PluginRoutes.draw_gems)"
+        end
+      end
+    end
+  end
+end

data/lib/generators/camaleon_cms/install_template/apps/plugins/attack/admin_controller.rb

@@ -0,0 +1,25 @@
+=begin
+  Camaleon CMS is a content management system
+  Copyright (C) 2015 by Owen Peredo Diaz
+  Email: owenperedo@gmail.com
+  This program is free software: you can redistribute it and/or modify   it under the terms of the GNU Affero General Public License as  published by the Free Software Foundation, either version 3 of the  License, or (at your option) any later version.
+  This program is distributed in the hope that it will be useful,  but WITHOUT ANY WARRANTY; without even the implied warranty of  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+  See the  GNU Affero General Public License (GPLv3) for more details.
+=end
+class Plugins::Attack::AdminController < Apps::PluginsAdminController
+  def settings
+    @attack = current_site.get_meta("attack_config")
+  end
+
+  def save_settings
+    current_site.set_meta("attack_config", {get: {sec: params[:attack][:get_sec], max: params[:attack][:get_max]},
+                                            post: {sec: params[:attack][:post_sec]||20, max: params[:attack][:post_max]},
+                                            msg: params[:attack][:msg],
+                                            ban: params[:attack][:ban],
+                                            cleared: Time.now
+                                        })
+    flash[:notice] = "#{t('plugin.attack.messages.settings_saved')}"
+    redirect_to action: :settings
+  end
+
+end

data/lib/generators/camaleon_cms/install_template/apps/plugins/attack/assets/docs/index.html

@@ -0,0 +1,60 @@
+<div class="panel panel-default">
+    <div class="panel-body">
+        <table  border="1">
+            <thead><tr><th class="padding-10 txt-left">Description</th></tr></thead>
+            <tbody>
+            <tr>
+                <td class="padding-10">
+                    Plugin Attack keeps the system secure against potential computer attacks that exist in the network,
+                    with this plugin keep data safe system.
+                </td>
+            </tr>
+            </tbody>
+        </table>
+        <br>
+        <table  border="1" class="table"><caption>&nbsp;</caption>
+            <thead>
+                <tr><th class="padding-10" colspan="2">Configuration</th></tr>
+            </thead>
+            <tbody>
+                <tr>
+                    <td class="th_1 padding-10"><img src="images/screenshot_1.jpg" class="" ></td>
+                    <td class="th_2 padding-10">
+                        After activating the plugin, select the link "Settings" to edit the characteristics of the plugin
+                    </td>
+                </tr>
+                <tr>
+                    <td class="padding-10"><img src="images/screenshot_2.jpg" class="td_img" ></td>
+                    <td class="padding-10">
+                        Configure the GET and POST requests<br><br>
+                        <ul>
+                            <li><strong>GET max requests per time</strong></li>
+                            <li><strong>GET time request [seconds]</strong></li>
+                            <li><strong>POST max requests per time</strong></li>
+                            <li><strong>POST time request [seconds]</strong></li>
+                            <li><strong>Ban time [minutes]</strong></li>
+                            <li><strong>Ban message</strong></li>
+                        </ul>
+                        <br>
+                        Then click on <strong>Submit</strong> to save the changes
+                    </td>
+                </tr>
+                <tr>
+                    <td class="padding-10"><img src="images/screenshot_3.jpg" class="" ></td>
+                    <td class="padding-10">
+                        Message comes out when some of the settings of the plugin is exceeded and the site is blocked by the time settings.
+                    </td>
+                </tr>
+
+            </tbody>
+        </table>
+    </div>
+</div>
+
+<style>
+    .padding-10{ padding: 10px;}
+    .txt-left{ text-align: left;}
+    .th_1{ width: 70% !important;}
+    .th_2{ width: 30% !important;}
+    .td_img{ width: 100% !important;}
+</style>

data/lib/generators/camaleon_cms/install_template/apps/plugins/attack/attack_helper.rb

@@ -0,0 +1,99 @@
+=begin
+  Camaleon CMS is a content management system
+  Copyright (C) 2015 by Owen Peredo Diaz
+  Email: owenperedo@gmail.com
+  This program is free software: you can redistribute it and/or modify   it under the terms of the GNU Affero General Public License as  published by the Free Software Foundation, either version 3 of the  License, or (at your option) any later version.
+  This program is distributed in the hope that it will be useful,  but WITHOUT ANY WARRANTY; without even the implied warranty of  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+  See the  GNU Affero General Public License (GPLv3) for more details.
+=end
+module Plugins::Attack::AttackHelper
+
+  # here all actions on plugin destroying
+  # plugin: plugin model
+  def attack_on_destroy(plugin)
+    current_site.attack.destroy_all
+  end
+
+  # here all actions on going to active
+  # you can run sql commands like this:
+  # results = ActiveRecord::Base.connection.execute(query);
+  # plugin: plugin model
+  def attack_on_active(plugin)
+    current_site.set_meta("attack_config", {get: {sec: 20, max: 10},
+                                            post: {sec: 20, max: 5},
+                                            msg: "#{t('plugin.attack.form.request_limit_exceeded')}",
+                                            ban: 5,
+                                            cleared: Time.now
+                                          })
+
+    unless ActiveRecord::Base.connection.table_exists? 'plugins_attacks'
+      ActiveRecord::Base.connection.create_table :plugins_attacks do |t|
+        t.string :path, index: true
+        t.string :browser_key, index: true
+        t.belongs_to :site, index: true
+        t.datetime "created_at"
+      end
+    end
+  end
+
+  # here all actions on going to inactive
+  # plugin: plugin model
+  def attack_on_inactive(plugin)
+    current_site.attack.destroy_all
+  end
+
+  def attack_app_before_load()
+    cache_ban = Rails.cache.read(get_session_id)
+    if cache_ban.present? # render banned message if it was banned
+      render text: cache_ban, layout: false
+      return
+    end
+
+    # save cache requests
+    attack_check_request
+  end
+
+  private
+  def attack_check_request
+    config = current_site.get_meta("attack_config")
+    q = current_site.attack.where(browser_key: get_session_id, path: attack_request_key)
+    return unless config.present?
+
+    # clear past requests
+    if (Time.parse(config[:cleared])) < 1.hour.ago
+      current_site.attack.where("plugins_attacks.created_at < ?", 1.hour.ago).delete_all
+      config[:cleared] = Time.now
+      current_site.set_meta("attack_config", config)
+    end
+
+    # post request
+    if (request.post? || request.patch?)
+      r = q.where(created_at: config[:post][:sec].to_i.seconds.ago..Time.now)
+      if r.count > config[:post][:max].to_i
+        Rails.cache.write(get_session_id, config[:msg], expires_in: config[:ban].to_i.minutes)
+        # send an email to administrator with request info (ip, browser, if logged then send user info
+        render text: config[:msg]
+        return
+      end
+
+    # get request
+    else
+      r = q.where(created_at: config[:get][:sec].to_i.seconds.ago..Time.now)
+      if r.count > config[:get][:max].to_i
+        Rails.cache.write(get_session_id, config[:msg], expires_in: config[:ban].to_i.minutes)
+        render text: config[:msg]
+        return
+      end
+    end
+
+    q.create()
+  end
+
+  def attack_request_key(method = nil)
+    "#{method.present? ? method : ((request.post? || request.patch?)?"post":"get")}_#{request.path_info.split("?").first}"
+  end
+
+  def attack_plugin_options(arg)
+    arg[:links] << link_to(t('plugin.attack.settings'), admin_plugins_attack_settings_path)
+  end
+end