camaleon_cms_rails6 2.5.0

data/app/controllers/camaleon_cms/admin/sessions_controller.rb

@@ -0,0 +1,172 @@
+class CamaleonCms::Admin::SessionsController < CamaleonCms::CamaleonController
+  skip_before_action :cama_authenticate, raise: false
+  before_action :before_hook_session
+  after_action :after_hook_session
+  before_action :verificate_register_permission, only: [:register]
+  layout 'camaleon_cms/login'
+
+  # you can pass return_to as a param (mysite.com/admin/login?return_to=my-url) and this will be used after user logged in
+  def login
+    if signin?
+      return redirect_to (params[:return_to].present? ? params[:return_to] : cama_admin_dashboard_path)
+    else
+      cookies[:return_to] = params[:return_to] if params[:return_to].present?
+      @user ||= current_site.users.new
+    end
+    render "login"
+  end
+
+  def login_post
+    data_user = user_permit_data
+    @user = current_site.users.find_by_username(data_user[:username])
+    captcha_validate = captcha_verify_if_under_attack("login")
+    r = {user: @user, params: params, password: data_user[:password], captcha_validate: captcha_validate, stop_process: false}; hooks_run("user_before_login", r)
+    return if r[:stop_process] # permit to redirect for data completion
+    if captcha_validate && @user && @user.authenticate(data_user[:password])
+      #Email validation if is necessary
+      if @user.is_valid_email? || !current_site.need_validate_email?
+        cama_captcha_reset_attack("login")
+        r={user: @user, redirect_to: params[:format] == 'json' ? false : nil}; hooks_run('after_login', r)
+        login_user(@user, params[:remember_me].present?, r[:redirect_to])
+        render(json: flash.discard.to_hash) if params[:format] == 'json'
+        return
+      else
+        flash[:error] = t('camaleon_cms.admin.login.message.email_not_validated')
+        @user = current_site.users.new(data_user)
+        login if params[:format] != 'json'
+      end
+    else
+      cama_captcha_increment_attack("login")
+      if captcha_validate
+        flash[:error] = t('camaleon_cms.admin.login.message.fail')
+      else
+        flash[:error] = t('camaleon_cms.admin.login.message.invalid_caption')
+      end
+      @user = current_site.users.new(data_user)
+      login if params[:format] != 'json'
+    end
+    render(json: flash.discard.to_hash) if params[:format] == 'json'
+  end
+
+  def logout
+    if session[:parent_auth_token].present? && cama_sign_in?
+      session_back_to_parent(cama_admin_dashboard_path)
+    else
+      cama_logout_user
+    end
+
+  end
+
+
+  def forgot
+    @user = current_site.users.new
+    # get form reset password
+    if params[:h]
+      @user = current_site.users.where(password_reset_token: params[:h]).first
+      if @user.nil?
+        flash[:error] = t('camaleon_cms.admin.login.message.forgot_url_incorrect')
+        redirect_to cama_forgot_path
+        return
+      elsif @user.password_reset_sent_at < 2.hours.ago
+        flash[:error] = t('camaleon_cms.admin.login.message.forgot_expired')
+        redirect_to cama_admin_login_path
+      else
+        # saved new password
+        if params[:user].present?
+          if @user.update(params[:user].permit(:password, :password_confirmation))
+            flash[:notice] = t('camaleon_cms.admin.login.message.reset_password_succes')
+            redirect_to cama_admin_login_path
+            return
+          else
+            flash[:error] = t('camaleon_cms.admin.login.message.reset_password_error')
+          end
+        end
+        @form_reset = true
+        render "forgot"
+        return
+      end
+    end
+
+    # TODO: Move this out of the controller
+    # send email reset password
+    if params[:user].present?
+      data_user = user_permit_data
+      @user = current_site.users.find_by_email(data_user[:email])
+      if @user.present?
+        send_password_reset_email(@user)
+        flash[:notice] = t('camaleon_cms.admin.login.message.send_mail_succes')
+        redirect_to cama_admin_login_path
+        return
+      else
+        flash[:error] = t('camaleon_cms.admin.login.message.send_mail_error')
+        @user = current_site.users.new(data_user)
+      end
+    end
+  end
+
+  def register
+    @user ||= current_site.users.new
+    if params[:user].present?
+      params[:user][:role] = PluginRoutes.system_info["default_user_role"]
+      params[:user][:is_valid_email] = false if current_site.need_validate_email?
+      user_data = user_permit_data
+      result = cama_register_user(user_data, params[:meta])
+      if result[:result] == false && result[:type] == :captcha_error
+        @user.errors.add(:captcha, t('camaleon_cms.admin.users.message.error_captcha'))
+        render 'register'
+      elsif result[:result]
+        flash[:notice] = result[:message]
+        send_user_confirm_email(@user) if current_site.need_validate_email?
+        r = {user: @user, redirect_url: result[:redirect_url]}; hooks_run('user_registered', r)
+        redirect_to r[:redirect_url]
+      else
+        render 'register'
+      end
+    else
+      render 'register'
+    end
+  end
+
+  def confirm_email
+    @user = current_site.users.new
+    if params[:h]
+      @user = current_site.users.where(confirm_email_token: params[:h]).first
+      if @user.nil?
+        flash[:error] = t('camaleon_cms.admin.login.message.confirm_email_token_incorrect')
+      elsif @user.confirm_email_sent_at.nil? || @user.confirm_email_sent_at < 2.hours.ago
+        flash[:error] = t('camaleon_cms.admin.login.message.confirm_email_token_expired')
+      else
+        flash[:notice] = t('camaleon_cms.admin.login.message.confirm_email_success')
+        @user.is_valid_email = true
+        @user.save!
+      end
+    end
+    redirect_to cama_admin_login_path
+  end
+
+  private
+
+  def before_hook_session
+    session[:cama_current_language] = params[:cama_set_language].to_sym if params[:cama_set_language].present?
+    session[:cama_current_language] = nil if current_site.get_languages.exclude?(session[:cama_current_language])
+    I18n.locale = params[:locale] || session[:cama_current_language] || current_site.get_languages.first
+    hooks_run("session_before_load")
+  end
+
+  def after_hook_session
+    hooks_run("session_after_load")
+  end
+
+  # verify if current permit to register users by frontend
+  def verificate_register_permission
+    unless current_site.get_option('permit_create_account', false)
+      flash[:error] = t('camaleon_cms.admin.authorization_error', default: "You don't have authorization for this section.")
+      return redirect_to action: :login
+    end
+  end
+
+  def user_permit_data
+    params.require(:user).permit!
+  end
+
+end

data/app/controllers/camaleon_cms/admin/settings/custom_fields_controller.rb

@@ -0,0 +1,108 @@
+class CamaleonCms::Admin::Settings::CustomFieldsController < CamaleonCms::Admin::SettingsController
+  add_breadcrumb I18n.t("camaleon_cms.admin.sidebar.custom_fields"), :cama_admin_settings_custom_fields_path
+  before_action :set_custom_field_group, only: [:show,:edit,:update,:destroy]
+  before_action :set_post_data, only: [:create, :update]
+
+  def index
+    @field_groups = current_site.custom_field_groups.visible_group.eager_load(:site)
+    @field_groups = @field_groups.where(object_class: params[:c]) if params[:c].present?
+    @field_groups = @field_groups.where(objectid: params[:id]) if params[:id].present?
+    @field_groups = @field_groups.paginate(page: params[:page], per_page: current_site.admin_per_page)
+  end
+
+  def get_items
+    @key = params[:key]
+    render partial: "get_items", layout: false
+  end
+
+  def show
+  end
+
+  def edit
+    add_breadcrumb I18n.t("camaleon_cms.admin.button.edit")
+    render 'form'
+  end
+
+  def update
+    if @field_group.update(@post_data) && _save_fields(@field_group)
+      redirect_to action: :edit, id: @field_group.id
+    else
+      render 'form'
+    end
+  end
+
+  def new
+    add_breadcrumb I18n.t("camaleon_cms.admin.button.new")
+    @field_group ||= current_site.custom_field_groups.new
+    render 'form'
+  end
+
+  # create a new custom field group
+  def create
+    @field_group = current_site.custom_field_groups.new(@post_data)
+    if @field_group.save && _save_fields(@field_group)
+      redirect_to action: :edit, id: @field_group.id
+    else
+      new
+    end
+  end
+
+  # destroy a custom field group
+  def destroy
+    @field_group.destroy
+    flash[:notice] = t('camaleon_cms.admin.custom_field.message.deleted', default: "Custom Field Group Deleted.")
+    redirect_to action: :index
+  end
+
+  # reorder custom fields group
+  def reorder
+    params[:values].to_a.each_with_index do |value, index|
+      current_site.custom_field_groups.find(value).update_column('field_order', index)
+    end
+    json = { size: params[:values].size }
+    render json: json
+  end
+
+  def list
+    p = params.permit(:post_type, :post_id, :categories => [])
+    args = {}
+    if p[:post_id].present?
+      post = @current_site.the_post(p[:post_id].to_i)
+      post.update_categories(p[:categories])
+    else
+      post = CamaleonCms::Post.new
+      post.taxonomy_id = p[:post_type].to_i
+      args[:cat_ids] = p[:categories]
+    end
+    render partial: 'camaleon_cms/admin/settings/custom_fields/render', :locals => {record: post, field_groups: post.get_field_groups(args), show_shortcode: true}
+  end
+
+  private
+
+  def set_post_data
+    @post_data = params.require(:custom_field_group).permit!
+    @post_data[:object_class], @post_data[:objectid] = @post_data.delete(:assign_group).split(',')
+    @caption = @post_data.delete(:caption)
+  end
+
+  def set_custom_field_group
+    begin
+      @field_group = current_site.custom_field_groups.find(params[:id])
+    rescue
+      flash[:error] = t('camaleon_cms.admin.custom_field.message.custom_group_error')
+      redirect_to cama_admin_path
+    end
+  end
+
+  # return boolean: true if all fields were saved successfully
+  def _save_fields(group)
+    errors_saved, all_fields = group.add_fields(params[:fields] ? params.require(:fields).permit! : {}, params[:field_options] ? params.require(:field_options).permit! : {})
+    group.set_option('caption', @caption)
+    if errors_saved.present?
+      flash[:error] = "<b>#{t('camaleon_cms.errors_found_msg', default: 'Several errors were found, please check.')}</b><br>#{errors_saved.map{|field| "#{field.name}: " + "#{field.errors.messages.map{|k,v| "#{k.to_s.titleize}: #{v.join('|')}"}.join(', ')}" }.join('<br>')}"
+    else
+      flash[:notice] = t('camaleon_cms.admin.custom_field.message.custom_updated')
+    end
+    true
+  end
+end

data/app/controllers/camaleon_cms/admin/settings/post_types_controller.rb

@@ -0,0 +1,63 @@
+class CamaleonCms::Admin::Settings::PostTypesController < CamaleonCms::Admin::SettingsController
+  before_action :set_post_type, only: [:show,:edit,:update, :destroy]
+  before_action :set_data_term, only: [:create, :update]
+  add_breadcrumb I18n.t("camaleon_cms.admin.sidebar.content_groups"), :cama_admin_settings_post_types_path
+
+  def index
+    @post_types = current_site.post_types
+    @post_types = @post_types.paginate(:page => params[:page], :per_page => current_site.admin_per_page)
+    render "index"
+  end
+
+  def show
+  end
+
+  def edit
+    add_breadcrumb I18n.t("camaleon_cms.admin.button.edit")
+  end
+
+  def update
+    if @post_type.update(@data_term)
+      @post_type.set_field_values(params.require(:field_options).permit!) if params[:field_options].present?
+      hooks_run("updated_post_type", {post_type: @post_type})
+      flash[:notice] = t('camaleon_cms.admin.post_type.message.updated')
+      redirect_to action: :index
+    else
+      edit
+    end
+  end
+
+  def create
+    @post_type = current_site.post_types.new(@data_term)
+    if @post_type.save
+      @post_type.set_field_values(params.require(:field_options).permit!) if params[:field_options].present?
+      hooks_run("created_post_type", {post_type: @post_type})
+      flash[:notice] = t('camaleon_cms.admin.post_type.message.created')
+      redirect_to action: :index
+    else
+      index
+    end
+  end
+
+  def destroy
+    flash[:notice] = t('camaleon_cms.admin.post_type.message.deleted') if @post_type.destroy
+    redirect_to action: :index
+  end
+
+  private
+
+  def set_data_term
+    data_term = params.require(:post_type).permit!
+    data_term[:data_options] = params.require(:meta).permit!
+    @data_term = data_term
+  end
+
+  def set_post_type
+    begin
+      @post_type = current_site.post_types.find_by_id(params[:id])
+    rescue
+      flash[:error] = t('camaleon_cms.admin.post_type.message.error')
+      redirect_to cama_admin_path
+    end
+  end
+end

data/app/controllers/camaleon_cms/admin/settings/sites_controller.rb

@@ -0,0 +1,87 @@
+class CamaleonCms::Admin::Settings::SitesController < CamaleonCms::Admin::SettingsController
+  before_action :set_site, only: [:show, :edit, :update, :destroy]
+  before_action :check_shared_status
+  add_breadcrumb I18n.t("camaleon_cms.admin.sidebar.sites"), :cama_admin_settings_sites_path
+
+  def index
+    @sites = CamaleonCms::Site.all.order(:term_group)
+    @sites = @sites.paginate(:page => params[:page], :per_page => current_site.admin_per_page)
+    r = { sites: @sites, render: "index" }
+    hooks_run("list_site", r)
+    render r[:render]
+  end
+
+  def show
+  end
+
+  def edit
+    add_breadcrumb I18n.t("camaleon_cms.admin.button.edit")
+    render 'form'
+  end
+
+  def update
+    tmp = @site.slug
+    if @site.update(params.require(:site).permit!)
+      save_metas(@site)
+      flash[:notice] = t('camaleon_cms.admin.sites.message.updated')
+      if @site.id == Cama::Site.main_site.id && tmp != @site.slug
+        redirect_to @site.the_admin_url
+      else
+        redirect_to action: :index
+      end
+    else
+      edit
+    end
+  end
+
+  def new
+    add_breadcrumb I18n.t("camaleon_cms.admin.button.new")
+    @site ||= CamaleonCms::Site.new.decorate
+    render 'form'
+  end
+
+  def create
+    site_data = params.require(:site).permit!
+    @site = CamaleonCms::Site.new(site_data)
+    if @site.save
+      save_metas(@site)
+      site_after_install(@site, @site.get_theme_slug)
+      flash[:notice] = t('camaleon_cms.admin.sites.message.created')
+      redirect_to action: :index
+    else
+      new
+    end
+  end
+
+  def destroy
+    flash[:notice] = t('camaleon_cms.admin.sites.message.deleted') if @site.destroy
+    redirect_to action: :index
+  end
+
+  private
+
+  def save_metas(site)
+    if params[:metas].present?
+      params[:metas].each do |meta, val|
+        site.set_meta(meta, val)
+      end
+    end
+  end
+
+  def set_site
+    begin
+      @site = CamaleonCms::Site.find_by_id(params[:id]).decorate
+    rescue
+      flash[:error] = t('camaleon_cms.admin.sites.message.error')
+      redirect_to cama_admin_path
+    end
+  end
+
+  # check if the system.config manage shared users
+  def check_shared_status
+    unless current_site.manage_sites?
+      flash[:error] = t('camaleon_cms.admin.sites.message.unauthorized')
+      redirect_to cama_admin_path
+    end
+  end
+end

data/app/controllers/camaleon_cms/admin/settings_controller.rb

@@ -0,0 +1,86 @@
+class CamaleonCms::Admin::SettingsController < CamaleonCms::AdminController
+  before_action :validate_role, except: [:theme, :save_theme]
+  before_action :validate_role_theme, only: [:theme, :save_theme]
+  add_breadcrumb I18n.t("camaleon_cms.admin.sidebar.settings")
+
+  def index
+    redirect_to cama_admin_dashboard_path
+  end
+
+  def site
+    return redirect_to cama_admin_settings_theme_path if params[:tab].present? && params[:tab] == 'theme'
+    add_breadcrumb I18n.t("camaleon_cms.admin.sidebar.general_site")
+    @site = current_site
+  end
+
+  def site_saved
+    @site = current_site
+    cache_slug = @site.slug
+    if @site.update(params.require(:site).permit!)
+      @site.set_options(params[:options]) if params[:options].present?
+      @site.set_metas(params[:metas]) if params[:metas].present?
+      @site.set_field_values(params[:field_options])
+      flash[:notice] = t('camaleon_cms.admin.settings.message.site_updated')
+      args = {action: :site}
+      args[:host], args[:port] = @site.get_domain.to_s.split(':') if cache_slug != @site.slug
+      redirect_to(args)
+    else
+      render 'site'
+    end
+  end
+
+  # list available languages
+  def languages
+    add_breadcrumb I18n.t("camaleon_cms.admin.sidebar.languages")
+  end
+
+  # render the list of shortcodes
+  def shortcodes
+    add_breadcrumb I18n.t("camaleon_cms.admin.sidebar.shortcodes")
+  end
+
+  # save language customizations
+  def save_languages
+    current_site.set_meta("languages_site", params[:lang])
+    current_site.set_admin_language(params[:admin_language])
+    I18n.locale = current_site.get_admin_language
+    PluginRoutes.reload
+
+    flash[:notice] =  t('camaleon_cms.admin.settings.message.language_updated', locale: current_site.get_admin_language)
+    redirect_to action: :languages
+  end
+
+  def theme
+    add_breadcrumb I18n.t("camaleon_cms.admin.settings.theme_setting", default: 'Theme Settings')
+  end
+
+  def save_theme
+    current_theme.set_field_values(params[:theme_fields]) if params[:theme_fields].present?
+    current_theme.set_options(params[:theme_option]) if params[:theme_option].present?
+    current_theme.set_metas(params[:theme_meta]) if params[:theme_meta].present?
+    current_theme.set_field_values(params[:field_options])
+    hook_run(current_theme.settings, "on_theme_settings", current_theme)# permit to save extra/custom values by this hook
+    flash[:notice] = t('camaleon_cms.admin.message.updated_success', default: 'Theme updated successfully')
+    redirect_to action: :theme
+  end
+
+  # send email test
+  def test_email
+    begin
+      CamaleonCms::HtmlMailer.sender(params[:email], 'Test', {content: 'Test content'}).deliver_now
+      head :ok
+    rescue => e
+      render inline: e.message, status: 502
+    end
+  end
+
+  private
+
+  def validate_role
+    authorize! :manage, :settings
+  end
+
+  def validate_role_theme
+    authorize! :manage, :theme_settings
+  end
+end