camaleon_cms 2.9.1 → 2.9.3

data/app/controllers/concerns/camaleon_cms/hook_lifecycle_concern.rb

@@ -0,0 +1,104 @@
+module CamaleonCms
+  module HookLifecycleConcern
+    extend ActiveSupport::Concern
+
+    def hook_run(plugin, hook_key, params = nil)
+      _do_hook(plugin, hook_key, params)
+    end
+
+    def hooks_run(hook_key, params = nil)
+      theme_slug = current_theme&.slug.presence || current_site.get_theme_slug
+      PluginRoutes.enabled_apps(current_site, theme_slug).each do |plugin|
+        _do_hook(plugin, hook_key, params)
+      end
+
+      PluginRoutes.get_anonymous_hooks(hook_key).each do |_hook|
+        _hook.call(params)
+      end
+    end
+
+    def hook_skip(hook_function_name)
+      hook_skip_list << hook_function_name
+    end
+
+    private
+
+    def initialize_hook_skip_list
+      hooks_skip = []
+      CurrentRequest.hooks_helper_state ||= {}
+      CurrentRequest.hooks_helper_state[:hooks_skip] = hooks_skip
+      @_hooks_skip = hooks_skip
+    end
+
+    def run_hook_lifecycle(hook_name, payload = nil)
+      payload.nil? ? hooks_run(hook_name) : hooks_run(hook_name, payload)
+    end
+
+    def run_app_before_load_hooks
+      run_hook_lifecycle('app_before_load')
+    end
+
+    def run_app_after_load_hooks
+      run_hook_lifecycle('app_after_load')
+    end
+
+    def _do_hook(plugin, hook_key, params = nil)
+      return if plugin.blank? || plugin['hooks'].blank? || plugin['hooks'][hook_key].blank?
+
+      plugin['hooks'][hook_key].each do |hook|
+        next if hook_skip_list.include?(hook)
+
+        begin
+          if params.nil?
+            send(hook)
+          else
+            send(hook, params)
+          end
+          Rails.logger.debug "Camaleon CMS - Hook \"#{hook_key}\" executed from dependency #{begin
+            plugin['key']
+          rescue StandardError
+            ''
+          end}".cama_log_style(:light_blue)
+        rescue StandardError
+          plugin_load_helpers(plugin)
+          next unless respond_to?(hook, true)
+
+          if params.nil?
+            send(hook)
+          else
+            send(hook, params)
+          end
+        end
+      end
+    end
+
+    def hook_skip_list
+      state = camaleon_hooks_state
+      return state[:hooks_skip] if state[:hooks_skip]
+
+      # back-compat: legacy plugins/themes may seed @_hooks_skip directly on the
+      # controller. Honored here (controller concern) only as initial input so the
+      # shared view helper stays ivar-free.
+      existing_hooks_skip = @_hooks_skip
+      state[:hooks_skip] = existing_hooks_skip.is_a?(Array) ? existing_hooks_skip : []
+    end
+
+    def camaleon_hooks_state
+      CurrentRequest.hooks_helper_state ||= {}
+    end
+
+    def plugin_load_helpers(plugin)
+      return if plugin.blank? || plugin['helpers'].blank?
+
+      plugin['helpers'].each do |h|
+        next if self.class.include?(h.constantize)
+
+        self.class.class_eval { include h.constantize }
+      rescue StandardError => e
+        Rails.logger.debug do
+          "Camaleon CMS - App loading error for #{h}: #{e.message}. Please check the plugins and themes presence"
+        end
+      end
+    end
+  end
+end

data/app/controllers/concerns/camaleon_cms/request_context_concern.rb

@@ -0,0 +1,113 @@
+module CamaleonCms
+  # Wires per-request site/theme resolution and Camaleon's before-action
+  # housekeeping into the runtime controller stack. The `current_site` /
+  # `current_theme` implementations live in `CamaleonCms::SiteHelper` (single
+  # source of truth shared with views); this concern only adds controller-only
+  # hooks like view-path setup and site-existence guards.
+  module RequestContextConcern
+    extend ActiveSupport::Concern
+
+    include CamaleonCms::SiteHelper
+
+    # Back-compat: expose the resolved site as the `@current_site` controller
+    # ivar for legacy templates/plugins. The helper logic itself stays ivar-free
+    # (it reads/writes `CurrentRequest.site`); only this controller concern
+    # bridges the value into an instance variable so views/plugins keep working.
+    def current_site(site = nil)
+      result = super
+      @current_site = CurrentRequest.site
+      result
+    end
+
+    private
+
+    def configure_runtime_request_context
+      sanitize_forwarded_host_header
+      configure_runtime_view_paths
+      sync_runtime_defaults
+      assign_template_compatibility_state
+    end
+
+    def sanitize_forwarded_host_header
+      request.env.except!('HTTP_X_FORWARDED_HOST') if request.env['HTTP_X_FORWARDED_HOST']
+    end
+
+    def configure_runtime_view_paths
+      views_dir = 'app/apps/'
+      prepend_view_path(CamaleonCms::Engine.root.join(views_dir).to_s)
+      prepend_view_path(Rails.root.join(views_dir).to_s)
+    end
+
+    def sync_runtime_defaults
+      CamaleonCms::PostDefault.current_user = cama_current_user
+      CamaleonCms::PostDefault.current_site = current_site
+    end
+
+    def assign_template_compatibility_state
+      @current_site = current_site
+    end
+
+    # check if current site exist, if not, this will be redirected to main domain
+    # Also, check current site status
+    def cama_site_check_existence
+      if current_site.blank?
+        redirect_when_site_missing
+      elsif (cama_current_user.present? && !cama_current_user.admin?) || cama_current_user.blank?
+        handle_inactive_site_access
+        handle_maintenance_site_access
+      end
+    end
+
+    def redirect_when_site_missing
+      if Cama::Site.main_site.present?
+        url = Cama::Site.main_site.decorate.the_url
+        # TODO: Remove this condition when Rails 6.x won't be supported
+        if Rails.gem_version >= Gem::Version.new('7.0.0')
+          redirect_to url, allow_other_host: true
+        else
+          redirect_to url
+        end
+      else
+        redirect_to cama_admin_installers_path
+      end
+    end
+
+    def handle_inactive_site_access
+      return unless current_site.is_inactive?
+
+      if request.original_url.to_s.match?(%r{\A#{current_site.the_url}admin(/|\z)})
+        if cama_current_user.present?
+          cama_logout_user
+          flash[:error] = 'Site is Inactive'
+        end
+      else
+        post = current_site.posts.find_by(id: current_site.get_option('page_inactive')).try(:decorate)
+        if post
+          redirect_to(post.the_url) unless params == {
+            'controller' => 'camaleon_cms/frontend',
+            'action' => 'post',
+            'slug' => post.the_slug
+          }
+        else
+          render html: 'This site was inactivated. Please contact to administrator.'
+        end
+      end
+    end
+
+    def handle_maintenance_site_access
+      return unless current_site.is_maintenance?
+      return if current_site.get_option('maintenance_ips', '').split(',').include?(request.remote_ip)
+
+      post = current_site.posts.find_by(id: current_site.get_option('page_maintenance')).try(:decorate)
+      if post
+        redirect_to(post.the_url) if params != {
+          'controller' => 'camaleon_cms/frontend',
+          'action' => 'post',
+          'slug' => post.the_slug
+        }
+      else
+        render html: 'This site is in maintenance mode. Please contact to administrator.'
+      end
+    end
+  end
+end

data/app/controllers/concerns/camaleon_cms/runtime_admin_menu_concern.rb

@@ -0,0 +1,237 @@
+# rubocop:disable Metrics/AbcSize
+module CamaleonCms
+  module RuntimeAdminMenuConcern
+    extend ActiveSupport::Concern
+
+    def admin_menus_add_commons
+      admin_menu_add_menu(
+        'dashboard',
+        { icon: 'dashboard', title: t('camaleon_cms.admin.sidebar.dashboard'), url: cama_admin_dashboard_path }
+      )
+
+      items = []
+      current_site.post_types.eager_load(:metas).visible_menu.find_each do |pt|
+        pt = pt.decorate
+        items_i = []
+        if can? :posts, pt
+          items_i << { icon: 'list', title: t('camaleon_cms.admin.post_type.all').to_s,
+                       url: cama_admin_post_type_posts_path(pt.id) }
+        end
+        if can? :create_post, pt
+          items_i << { icon: 'plus', title: t('camaleon_cms.admin.post_type.add_new', type_title: pt.the_title).to_s,
+                       url: new_cama_admin_post_type_post_path(pt.id) }
+        end
+        if pt.manage_categories? && (can? :categories, pt)
+          items_i << { icon: 'folder-open', title: t('camaleon_cms.admin.post_type.categories'),
+                       url: cama_admin_post_type_categories_path(pt.id) }
+        end
+        if pt.manage_tags? && (can? :post_tags, pt)
+          items_i << { icon: 'tags', title: t('camaleon_cms.admin.post_type.tags'),
+                       url: cama_admin_post_type_post_tags_path(pt.id) }
+        end
+        if items_i.present?
+          items << { icon: pt.get_option('icon', 'copy'), title: pt.the_title, url: '', items: items_i }
+        end
+      end
+
+      if items.present?
+        admin_menu_add_menu(
+          'content',
+          {
+            icon: 'database', title: t('camaleon_cms.admin.sidebar.contents'), url: '', items: items,
+            datas: "data-intro='#{t('camaleon_cms.admin.intro.content')}' data-position='right' data-wait='600'"
+          }
+        )
+      end
+
+      if can? :manage, :media
+        admin_menu_add_menu(
+          'media',
+          {
+            icon: 'picture-o', title: t('camaleon_cms.admin.sidebar.media'), url: cama_admin_media_path,
+            datas: "data-intro='#{t('camaleon_cms.admin.intro.media')}' data-position='right'"
+          }
+        )
+      end
+      if can? :manage, :comments
+        admin_menu_add_menu(
+          'comments',
+          {
+            icon: 'comments', title: t('camaleon_cms.admin.sidebar.comments'), url: cama_admin_comments_path,
+            datas: "data-intro='#{t('camaleon_cms.admin.intro.comments')}' data-position='right'"
+          }
+        )
+      end
+
+      items = []
+      if can? :manage, :themes
+        items << {
+          icon: 'desktop', title: t('camaleon_cms.admin.sidebar.themes'), url: cama_admin_appearances_themes_path,
+          datas: "data-intro='#{t('camaleon_cms.admin.intro.themes')}' data-position='right'"
+        }
+      end
+      if can? :manage, :widgets
+        items << {
+          icon: 'archive', title: t('camaleon_cms.admin.sidebar.widgets'),
+          url: cama_admin_appearances_widgets_main_index_path,
+          datas: "data-intro='#{t('camaleon_cms.admin.intro.widgets')}' data-position='right'"
+        }
+      end
+      if can? :manage, :nav_menu
+        intro_menus_data =
+          t('camaleon_cms.admin.intro.menus', image: helpers.asset_path('camaleon_cms/admin/intro/menus.png'))
+        items << {
+          icon: 'list', title: t('camaleon_cms.admin.sidebar.menus'), url: cama_admin_appearances_nav_menus_path,
+          datas: "data-intro='#{intro_menus_data}' data-position='right'"
+        }
+      end
+      if can? :manage, :shortcodes
+        items << {
+          icon: 'code', title: t('camaleon_cms.admin.sidebar.shortcodes', default: 'Shortcodes'),
+          url: cama_admin_settings_shortcodes_path,
+          datas: "data-intro='#{t('camaleon_cms.admin.intro.shortcodes')}' data-position='right'"
+        }
+      end
+      if items.present?
+        admin_menu_add_menu(
+          'appearance',
+          {
+            icon: 'paint-brush', title: t('camaleon_cms.admin.sidebar.appearance'), url: '', items: items,
+            datas: "data-intro='#{t('camaleon_cms.admin.intro.appearance')}' data-position='right' data-wait='500'"
+          }
+        )
+      end
+
+      if can? :manage, :plugins
+        plugin_count = PluginRoutes.all_plugins.count do |plugin|
+          !(plugin[:domain].present? && !plugin[:domain].split(',').include?(current_site.the_slug))
+        end
+        admin_menu_add_menu(
+          'plugins',
+          {
+            icon: 'plug',
+            title: helpers.safe_join([
+                                       t('camaleon_cms.admin.sidebar.plugins'),
+                                       ' ',
+                                       helpers.content_tag(:small, plugin_count, class: 'label label-primary')
+                                     ]),
+            url: cama_admin_plugins_path,
+            datas: "data-intro='#{t('camaleon_cms.admin.intro.plugins')}' data-position='right'"
+          }
+        )
+      end
+
+      if can? :manage, :users
+        items = []
+        items << { icon: 'list', title: t('camaleon_cms.admin.users.all_users'), url: cama_admin_users_path }
+        items << { icon: 'plus', title: t('camaleon_cms.admin.users.add_user'), url: new_cama_admin_user_path }
+        items << { icon: 'group', title: t('camaleon_cms.admin.users.user_roles'), url: cama_admin_user_roles_path }
+        admin_menu_add_menu(
+          'users',
+          {
+            icon: 'users', title: t('camaleon_cms.admin.sidebar.users'), url: '', items: items,
+            datas: "data-intro='#{t('camaleon_cms.admin.intro.users')}' data-position='right' data-wait='500'"
+          }
+        )
+      end
+
+      items = []
+      if can? :manage, :settings
+        items << {
+          icon: 'desktop', title: t('camaleon_cms.admin.sidebar.general_site'),
+          url: cama_admin_settings_site_path,
+          datas: "data-intro='#{t('camaleon_cms.admin.intro.gral_site')}' data-position='right'"
+        }
+        if current_site.manage_sites?
+          items << {
+            icon: 'cog', title: t('camaleon_cms.admin.sidebar.sites'),
+            url: cama_admin_settings_sites_path,
+            datas: "data-intro='#{t('camaleon_cms.admin.intro.sites')}' data-position='right'"
+          }
+        end
+        items << {
+          icon: 'files-o', title: t('camaleon_cms.admin.sidebar.content_groups'),
+          url: cama_admin_settings_post_types_path,
+          datas: "data-intro='#{t('camaleon_cms.admin.intro.post_type')}' data-position='right'"
+        }
+        items << {
+          icon: 'cog', title: t('camaleon_cms.admin.sidebar.custom_fields'),
+          url: cama_admin_settings_custom_fields_path,
+          datas: "data-intro='#{t('camaleon_cms.admin.intro.custom_fields')}' data-position='right'"
+        }
+        items << {
+          icon: 'language', title: t('camaleon_cms.admin.sidebar.languages'),
+          url: cama_admin_settings_languages_path,
+          datas: "data-intro='#{t('camaleon_cms.admin.intro.languages')}' data-position='right'"
+        }
+      end
+
+      if can? :manage, :theme_settings
+        items << {
+          icon: 'windows', title: t('camaleon_cms.admin.settings.theme_setting', default: 'Theme Settings'),
+          url: cama_admin_settings_theme_path
+        }
+      end
+      return if items.blank?
+
+      admin_menu_add_menu(
+        'settings',
+        {
+          icon: 'cogs', title: t('camaleon_cms.admin.sidebar.settings'), url: '', items: items,
+          datas: "data-intro='#{t('camaleon_cms.admin.intro.settings')}' data-position='right' data-wait='500'"
+        }
+      )
+    end
+
+    def admin_menu_add_menu(key, menu)
+      CurrentRequest.admin_menu_items ||= {}
+      CurrentRequest.admin_menu_items[key] = menu
+    end
+
+    def admin_menu_append_menu_item(key, menu)
+      CurrentRequest.admin_menu_items ||= {}
+      return if CurrentRequest.admin_menu_items[key].blank?
+
+      CurrentRequest.admin_menu_items[key][:items] = [] unless CurrentRequest.admin_menu_items[key].key?(:items)
+      CurrentRequest.admin_menu_items[key][:items] << menu
+    end
+
+    def admin_menu_prepend_menu_item(key, menu)
+      CurrentRequest.admin_menu_items ||= {}
+      return if CurrentRequest.admin_menu_items[key].blank?
+
+      CurrentRequest.admin_menu_items[key][:items] = [] unless CurrentRequest.admin_menu_items[key].key?(:items)
+      CurrentRequest.admin_menu_items[key][:items] = [menu] + CurrentRequest.admin_menu_items[key][:items]
+    end
+
+    def admin_menu_insert_menu_before(key_target, key_menu, menu)
+      CurrentRequest.admin_menu_items ||= {}
+      res = CurrentRequest.admin_menu_items.each_with_object({}) do |(key, val), hsh|
+        hsh[key_menu] = menu if key == key_target
+        hsh[key] = val
+      end
+      CurrentRequest.admin_menu_items.replace(res) # mutate in place so @_admin_menus stays a live alias (M19)
+    end
+
+    def admin_menu_insert_menu_after(key_target, key_menu, menu)
+      CurrentRequest.admin_menu_items ||= {}
+      res = CurrentRequest.admin_menu_items.each_with_object({}) do |(key, val), hsh|
+        hsh[key] = val
+        hsh[key_menu] = menu if key == key_target
+      end
+      CurrentRequest.admin_menu_items.replace(res) # mutate in place so @_admin_menus stays a live alias (M19)
+    end
+
+    def cama_comments_get_common_data
+      comment_data = {}
+      comment_data[:user_id] = cama_current_user.id
+      comment_data[:author] = cama_current_user.the_name
+      comment_data[:author_email] = cama_current_user.email
+      comment_data[:author_IP] = request.remote_ip.to_s
+      comment_data[:approved] = 'approved'
+      comment_data[:agent] = request.user_agent.force_encoding('ISO-8859-1').encode('UTF-8')
+      comment_data
+    end
+  end
+end
+# rubocop:enable Metrics/AbcSize

data/app/controllers/concerns/camaleon_cms/runtime_captcha_image_concern.rb

@@ -0,0 +1,13 @@
+module CamaleonCms
+  # Controller-stack entry point for captcha image generation: GET /captcha
+  # (CamaleonController#captcha) resolves cama_captcha_build through this concern.
+  # The implementation lives in CamaleonCms::CaptchaImageGeneration, shared with
+  # CamaleonCms::CaptchaHelper, so a captcha hardening fix cannot land in one entry
+  # point and not the other (parity is guarded by
+  # spec/lib/camaleon_cms/captcha_implementation_parity_spec.rb).
+  module RuntimeCaptchaImageConcern
+    extend ActiveSupport::Concern
+
+    include CamaleonCms::CaptchaImageGeneration
+  end
+end

data/app/controllers/concerns/camaleon_cms/runtime_html_content_concern.rb

@@ -0,0 +1,143 @@
+# rubocop:disable Rails/OutputSafety
+module CamaleonCms
+  module RuntimeHtmlContentConcern
+    extend ActiveSupport::Concern
+
+    # Single source of truth for the cama_content_* surface (prepend/append/draw).
+    # Including it here keeps those methods reachable from controllers (e.g. plugin
+    # hooks running in controller context call cama_content_append) while the shared
+    # view helper stays ivar-free.
+    include CamaleonCms::ContentHelper
+
+    def cama_html_helpers_init
+      state = camaleon_html_helper_state
+      state[:pre_assets_content] = []
+      state[:assets_libraries] = {}
+      state[:assets_content] = []
+    end
+
+    def cama_load_libraries(*keys)
+      state = camaleon_html_helper_state
+      keys.each do |key|
+        library = cama_assets_libraries[key.to_sym]
+        state[:assets_libraries][key.to_sym] = library if library.present?
+      end
+    end
+    alias add_asset_library cama_load_libraries
+
+    def append_asset_libraries(libraries)
+      state = camaleon_html_helper_state
+      libraries.each do |key, library|
+        state[:assets_libraries][key.to_sym] = if state[:assets_libraries].include?(key)
+                                                 state[:assets_libraries][key.to_sym].merge(library)
+                                               else
+                                                 library
+                                               end
+      end
+    end
+    alias cama_load_custom_assets append_asset_libraries
+
+    def append_asset_content(content)
+      camaleon_html_helper_state[:assets_content] << content
+    end
+
+    def append_pre_asset_content(content)
+      camaleon_html_helper_state[:pre_assets_content] << content
+    end
+
+    def cama_draw_pre_asset_contents
+      camaleon_html_helper_state[:pre_assets_content].join('').html_safe
+    end
+
+    def cama_draw_custom_assets
+      state = camaleon_html_helper_state
+      cama_html_helpers_init if state[:assets_libraries].blank?
+      libs = []
+      state[:assets_libraries].each_value do |assets|
+        libs += assets[:css] if assets[:css].present?
+      end
+      stylesheets = libs.uniq
+      css = helpers.stylesheet_link_tag(*stylesheets, media: 'all')
+
+      libs = []
+      state[:assets_libraries].each_value do |assets|
+        libs += assets[:js] if assets[:js].present?
+      end
+      javascripts = libs.uniq
+      js = helpers.javascript_include_tag(*javascripts)
+
+      args = { stylesheets: stylesheets, javascripts: javascripts, js_html: js, css_html: css }
+      hooks_run('draw_custom_assets', args)
+      trusted_fragments = [args[:css_html], args[:js_html], *state[:assets_content]].filter_map do |fragment|
+        next if fragment.blank?
+
+        fragment.is_a?(ActiveSupport::SafeBuffer) ? fragment : fragment.to_s.html_safe
+      end
+
+      helpers.safe_join(trusted_fragments, "\n")
+    end
+
+    def theme_init
+      breadcrumb_items = []
+      camaleon_theme_state[:front_breadcrumb] = breadcrumb_items
+      # back-compat ivar: themes/plugins may read @_front_breadcrumb directly.
+      # Owned here (controller concern) so the shared view helper stays ivar-free.
+      @_front_breadcrumb = breadcrumb_items
+    end
+
+    def breadcrumb_add(label, url = '', prepend = false)
+      breadcrumb_items = nav_menu_breadcrumb_items
+      if prepend
+        breadcrumb_items.unshift([label, url])
+      else
+        breadcrumb_items << [label, url]
+      end
+    end
+
+    private
+
+    def camaleon_html_helper_state
+      state = CurrentRequest.html_helper_state ||= {}
+      state[:pre_assets_content] ||= []
+      state[:assets_libraries] ||= {}
+      state[:assets_content] ||= []
+      state
+    end
+
+    def cama_assets_libraries
+      state = camaleon_html_helper_state
+      return state[:cama_assets_libraries] if state[:cama_assets_libraries].present?
+
+      libs = {}
+      libs[:colorpicker] =
+        { js: ['camaleon_cms/admin/bootstrap-colorpicker'], css: ['camaleon_cms/admin/colorpicker'] }
+      libs[:datepicker] = { js: [] }
+      libs[:datetimepicker] = { js: [], css: [] }
+      libs[:tinymce] =
+        { js: %w[camaleon_cms/admin/tinymce/tinymce.min camaleon_cms/admin/tinymce/plugins/filemanager/plugin.min],
+          css: ['camaleon_cms/admin/tinymce/skins/lightgray/content.min'] }
+      libs[:form_ajax] = { js: ['camaleon_cms/admin/form/jquery.form'] }
+      libs[:cropper] = {}
+      libs[:post] =
+        { js: %w[camaleon_cms/admin/jquery.tagsinput.min camaleon_cms/admin/post],
+          css: ['camaleon_cms/admin/jquery.tagsinput'] }
+      libs[:multiselect] = { js: ['camaleon_cms/admin/bootstrap-select.js'] }
+      libs[:validate] = { js: ['camaleon_cms/admin/jquery.validate'] }
+      libs[:nav_menu] =
+        { css: ['camaleon_cms/admin/nestable/jquery.nestable'],
+          js: %w[camaleon_cms/admin/jquery.nestable camaleon_cms/admin/nav_menu] }
+      libs[:admin_intro] =
+        { js: ['camaleon_cms/admin/introjs/intro.min'], css: ['camaleon_cms/admin/introjs/introjs.min'] }
+      state[:cama_assets_libraries] = libs
+    end
+
+    def camaleon_theme_state
+      CurrentRequest.theme_helper_state ||= {}
+    end
+
+    def nav_menu_breadcrumb_items
+      camaleon_theme_state[:front_breadcrumb] ||= []
+    end
+  end
+end
+# rubocop:enable Rails/OutputSafety