camaleon_cms_rails6 2.5.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 846e226fbf2c350bbde225b5f9deecd28fe41e58cad36f5febc31a9f28ecd2cc
+  data.tar.gz: f5709de14195e70cd2519283e2a7db32611ddbf681aa3fc4d905f3e6abc9d914
+SHA512:
+  metadata.gz: 0e259351af42599ae01d2f1cd70a1f64e1c6a1c04c406355fd8a297f8cb10dc9c3af96706dd80d343e5463929bd103d7578bc13db212a5caaae1753a84066766
+  data.tar.gz: b0f9b7f5fb5009f7d826a4528b127ab56beb8f035ba34bf16772d894ec9ba347b19610ab9dcd18a494428079082c97ef52dcb4b46794a514c6e67ae154c5003d

data/README.md

@@ -0,0 +1,202 @@
+# CAMALEON CMS
+
+![](http://camaleon.tuzitio.com/media/132/logo2.png)
+
+[![Build Status](https://travis-ci.org/owen2345/camaleon-cms.svg?branch=master)](https://travis-ci.org/owen2345/camaleon-cms)
+![](https://img.shields.io/badge/Support-Immediate-green.svg)
+
+[Website](http://camaleon.tuzitio.com/)
+
+[Documentation](http://camaleon.tuzitio.com/docs.html)
+
+[Demonstration](http://camaleon.tuzitio.com/plugins/demo_manage/)
+
+## About
+
+Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails that adapts to your needs. This CMS is an alternative to Wordpress for Ruby on Rails developers to manage advanced content easier.
+
+Camaleon CMS is a flexible manager where you can build your custom content structure without coding anything by custom fields and custom contents type.
+
+To download or publish themes go to Theme store:
+http://camaleon.tuzitio.com/store/themes
+
+To download or publish plugins go to Plugin store:
+http://camaleon.tuzitio.com/store/plugins
+
+![](screenshot.png)
+
+## With Camaleon you can do:
+* Integrate into existing Rails projects
+* Multiples sites in the same installation
+* Multi-language sites
+* Design and create the architecture of your project without programming by dynamic contents and fields
+* Extend or customize the functionality using plugins
+* Manage your content visualization using themes
+* Easier administration. Camaleon CMS permits you to adapt the CMS to all your needs and not you adapt to the CMS. You can create your custom architecture with any custom attributes that you need for all content types.
+
+## Some features
+* Camaleon CMS is FREE and Open source
+* Shortcodes
+* Widgets
+* Drag and Drop / Sortable / Multi level menus
+* Templates/Layouts for pages
+* Advanced User roles
+* File Uploads with built in Local and Amazon S3 support
+* Easy migration from Wordpress
+* Security
+  - Remote code execution
+  - SQL injections
+  - Advanced sessions security
+  - Cross Site Scripting
+  - Control of abusive requests
+  - Cross-Site Request Forgery
+* Site Speed
+  Camaleon CMS include a lot of cache strategies to optimize the site access velocity:
+    - Cache contents
+    - Cache queries
+    - Manifests (compress and join asset files)
+    - Customize your content visualization for Desktop, Mobile and Tablet
+* SEO & HTML5
+  - Sitemap generations
+  - Seo configuration
+  - Seo for social media
+  - All generated content is compatible with HTML5 and Bootstrap 3
+
+## Camaleon CMS has many useful Plugins such as:
+* Content Cache (Included By Default)
+* Web Attack Control (Included By Default)
+* Post Visibility (Included By Default)
+* Contact Forms (Included By Default) - https://github.com/owen2345/cama_contact_form
+* SEO (Included By Default) - https://github.com/owen2345/camaleon-cms-seo
+* E-commerce - https://github.com/owen2345/camaleon-ecommerce
+* Language / Translation Editor - https://github.com/owen2345/camaleon-cms-language-editor
+* Subscriber (Email Subscriptions) - https://github.com/owen2345/cama_subscriber
+* Stripe Donation - https://github.com/owen2345/cama-stripe-donation
+* Star Rating - https://github.com/aspirewit/camaleon_cms_rating
+* Post Order - https://github.com/owen2345/camaleon-post-order-plugin
+* Post Created At - https://github.com/owen2345/camaleon_post_created_at
+* Post Clone - https://github.com/owen2345/camaleon-post-clone
+* Sitemap Customizer - https://github.com/brian-kephart/camaleon_sitemap_customizer
+* Image Optimizer - https://github.com/brian-kephart/camaleon_image_optimizer
+* Import / Export - https://github.com/owen2345/camaleon_export_import
+* Lightbox - https://github.com/owen2345/CamaImageLightbox
+* Autocomplete - https://github.com/gaelfokou/cama_autocomplete
+* Permissions for External Menus - https://github.com/owen2345/cama_external_menu
+* TinyMCE Template Integration - https://github.com/owen2345/Camaleon-Tinymce-Templates
+* Download Manager - https://github.com/max2320/camaleon-download
+* OAuth - https://github.com/owen2345/camaleon_oauth
+* Visual Editor - Paid Plugin ($) - http://camaleon.tuzitio.com/store/plugins/camaleon_editor
+* Spree Commerce Integration - Paid Plugin ($) - http://camaleon.tuzitio.com/store/plugins/camaleon-spree
+* Admin AJAX - Paid Plugin ($) - http://camaleon.tuzitio.com/store/plugins/admin_ajax
+* **See here for a complete Gemfile**: https://github.com/owen2345/camaleon-cms/blob/master/docs/example_gemfile.rb
+
+## Camaleon CMS has many useful frontend Themes such as:
+* Default Theme (Built in)
+* Clean Theme (Built in)
+* Wordpress Theme (Built in)
+* eCommerce - https://github.com/owen2345/cama-ecommerce-theme
+* eFashion - http://camaleon.tuzitio.com/store/themes/eFashion (Github: https://github.com/mazharoddin/camaleon-cms-efashion)
+* Shoppy - http://camaleon.tuzitio.com/store/themes/shoppy (Github: https://github.com/mazharoddin/camaleon-cms-shoppy)
+* CV - Paid Theme ($) - http://camaleon.tuzitio.com/store/themes/cv
+* Camaleon Site - Paid Them ($) - http://camaleon.tuzitio.com/store/themes/camaleon_cms
+* Sky - Paid Theme ($) - http://camaleon.tuzitio.com/store/themes/sky
+
+
+## Requirements
+* Rails 4.2 or 5+
+* PostgreSQL, MySQL 5+ or SQlite
+* Ruby 2.2+
+* Imagemagick
+
+## Installation
+* Install Ruby on Rails
+* Create your rails project
+
+  ```bash
+  rails new my_project
+  ```
+* Add the gem in your Gemfile
+
+  ```ruby
+  gem "camaleon_cms",  '>= 2.4.6.1' # (Current stable versions are 2.5.0, 2.4.4.5, 2.4.3.10, 2.3.6, 2.2.1)
+  # OR
+  # gem "camaleon_cms", github: 'owen2345/camaleon-cms' # latest development version
+
+  # gem 'draper', '~> 3' # for Rails 5+
+  
+  # For Ruby version < 2.5 
+  # gem 'sprockets', '< 4' # Sprockets 4 requires Ruby version >= 2.5 
+  ```
+
+* Install required Gem and dependencies
+
+  ```bash
+  bundle install
+  ```
+
+* Camaleon CMS Installation
+
+  ```bash
+  rails generate camaleon_cms:install
+  ```
+* (Optional) Before continue you can configure your CMS settings in (my_app/config/system.json), [here](config/system.json) you can see the full settings.
+* Create database structure
+  ```bash
+  rake camaleon_cms:generate_migrations
+  # before running migrations you can customize copied migration files
+  rake db:migrate
+  ```
+
+* Start your server
+
+  ```bash
+  rails server
+  ```
+
+* Go to your browser and visit http://localhost:3000/
+
+## Sample App / Demonstration
+* [Camaleon Server (current version)](http://camaleon.tuzitio.com/plugins/demo_manage/)
+* [Sample App](https://github.com/owen2345/Camaleon-CMS-Sample)
+* [Deploy Sample App in Heroku](https://heroku.com/deploy?template=https://github.com/owen2345/Camaleon-CMS-Sample)
+
+## Support
+If you have problems, please enter an issue [here.](https://github.com/owen2345/camaleon-cms/issues)
+If you need support, need some extra functionality or need plugins, please contact us on:
+* Gitter: https://gitter.im/camaleoncms/Lobby
+* Email: owenperedo@gmail.com
+* Skype: owen-2345
+* Stack Overflow: Use "camaleon" as tag to ask questions related to this CMS (don't forget to include cms version + rails version).
+* Site: http://camaleon.tuzitio.com/
+
+## Author
+Owen Peredo Diaz
+
+## License
+http://camaleon.tuzitio.com/license.html
+
+## Testing
+* Init DB
+```bash
+RAILS_ENV=test bundle exec rake app:db:migrate
+RAILS_ENV=test bundle exec rake app:db:test:prepare
+```
+* Run tests
+```bash
+bundle exec rspec
+```
+
+## Contributing
+* Fork it.
+* Create a branch (git checkout -b my_feature_branch)
+* Commit your changes (git commit -am "Added a sweet feature")
+* Push to the branch (git push origin my_feature_branch)
+* Create a pull request from your branch into master (Please be sure to provide enough detail for us to understand what this change is doing)
+
+## Version History
+
+http://camaleon.tuzitio.com/version-history.html
+
+Previous stable version (v1.x): https://github.com/owen2345/camaleon-cms/tree/version_1x
+
+Camaleon CMS was originally released in July 2015 and tested previously with more than 20 projects by 6 months and on August 22, 2015 was published as a gem.

data/Rakefile

@@ -0,0 +1,32 @@
+begin
+  require 'bundler/setup'
+rescue LoadError
+  puts 'You must `gem install bundler` and `bundle install` to run rake tasks'
+end
+
+require 'rdoc/task'
+
+RDoc::Task.new(:rdoc) do |rdoc|
+  rdoc.rdoc_dir = 'rdoc'
+  rdoc.title    = 'CamaleonCms'
+  rdoc.options << '--line-numbers'
+  rdoc.rdoc_files.include('README.rdoc')
+  rdoc.rdoc_files.include('lib/**/*.rb')
+end
+
+APP_RAKEFILE = File.expand_path("../spec/dummy/Rakefile", __FILE__)
+load 'rails/tasks/engine.rake'
+
+load 'rails/tasks/statistics.rake'
+
+Bundler::GemHelper.install_tasks
+
+Dir[File.join(File.dirname(__FILE__), 'tasks/**/*.rake')].each {|f| load f }
+
+require 'rspec/core'
+require 'rspec/core/rake_task'
+
+desc "Run all specs in spec directory (excluding plugin specs)"
+RSpec::Core::RakeTask.new(:spec => 'app:db:test:prepare')
+
+task :default => :spec

data/app/apps/plugins/attack/admin_controller.rb

@@ -0,0 +1,17 @@
+class Plugins::Attack::AdminController < CamaleonCms::Apps::PluginsAdminController
+  def settings
+    @attack = current_site.get_meta("attack_config")
+  end
+
+  def save_settings
+    current_site.set_meta("attack_config", {get: {sec: params[:attack][:get_sec], max: params[:attack][:get_max]},
+                                            post: {sec: params[:attack][:post_sec]||20, max: params[:attack][:post_max]},
+                                            msg: params[:attack][:msg],
+                                            ban: params[:attack][:ban],
+                                            cleared: Time.now
+                                        })
+    flash[:notice] = "#{t('plugin.attack.messages.settings_saved')}"
+    redirect_to action: :settings
+  end
+
+end

data/app/apps/plugins/attack/attack_helper.rb

@@ -0,0 +1,94 @@
+module Plugins::Attack::AttackHelper
+
+  # here all actions on plugin destroying
+  # plugin: plugin model
+  def attack_on_destroy(plugin)
+    current_site.attack.destroy_all
+  end
+
+  # here all actions on going to active
+  # you can run sql commands like this:
+  # results = ActiveRecord::Base.connection.execute(query);
+  # plugin: plugin model
+  def attack_on_active(plugin)
+    current_site.set_meta("attack_config", {get: {sec: 20, max: 10},
+                                            post: {sec: 20, max: 5},
+                                            msg: "#{I18n.t('plugin.attack.form.request_limit_exceeded')}",
+                                            ban: 5,
+                                            cleared: Time.now
+                                          })
+
+    unless ActiveRecord::Base.connection.table_exists? 'plugins_attacks'
+      ActiveRecord::Base.connection.create_table :plugins_attacks do |t|
+        t.string :path, index: true
+        t.string :browser_key, index: true
+        t.belongs_to :site, index: true
+        t.datetime "created_at"
+      end
+    end
+    CamaleonCms::Site.class_eval do
+      has_many :attack, class_name: "Plugins::Attack::Models::Attack"
+    end
+  end
+
+  # here all actions on going to inactive
+  # plugin: plugin model
+  def attack_on_inactive(plugin)
+    current_site.attack.destroy_all
+  end
+
+  def attack_app_before_load()
+    cache_ban = Rails.cache.read(cama_get_session_id)
+    if cache_ban.present? # render banned message if it was banned
+      render html: cache_ban.html_safe, layout: false
+      return
+    end
+
+    # save cache requests
+    attack_check_request
+  end
+
+  private
+  def attack_check_request
+    return unless current_site
+    config = current_site.get_meta("attack_config")
+    q = current_site.attack.where(browser_key: cama_get_session_id, path: attack_request_key)
+    return unless config.present?
+
+    # clear past requests
+    if (Time.parse(config[:cleared]) rescue 2.hours.ago) < 1.hour.ago
+      current_site.attack.where("plugins_attacks.created_at < ?", 1.hour.ago).delete_all
+      config[:cleared] = Time.now.to_s
+      current_site.set_meta("attack_config", config)
+    end
+
+    # post request
+    if (request.post? || request.patch?)
+      r = q.where(created_at: config[:post][:sec].to_i.seconds.ago..Time.now)
+      if r.count > config[:post][:max].to_i
+        Rails.cache.write(cama_get_session_id, config[:msg], expires_in: config[:ban].to_i.minutes)
+        # send an email to administrator with request info (ip, browser, if logged then send user info
+        render html: config[:msg].html_safe
+        return
+      end
+
+    # get request
+    else
+      r = q.where(created_at: config[:get][:sec].to_i.seconds.ago..Time.now)
+      if r.count > config[:get][:max].to_i
+        Rails.cache.write(cama_get_session_id, config[:msg], expires_in: config[:ban].to_i.minutes)
+        render html: config[:msg].html_safe
+        return
+      end
+    end
+    q.create()
+  end
+
+  def attack_request_key(method = nil)
+    "#{method.present? ? method : ((request.post? || request.patch?)?"post":"get")}_#{request.path_info.split("?").first}"
+  end
+
+  def attack_plugin_options(arg)
+    arg[:links] << link_to(t('plugin.attack.settings'), admin_plugins_attack_settings_path)
+  end
+end

data/app/apps/plugins/attack/config/config.json

@@ -0,0 +1,31 @@
+{
+  "title": "Attack",
+  "descr": "Please check documentation <a href='http://camaleon.tuzitio.com/store/plugins/2'>here.</a>",
+  "version": "0.1",
+  "key": "attack",
+  "position": 1,
+  "helpers": [
+    "Plugins::Attack::AttackHelper"
+  ],
+  "options": [
+    {"label": "Settings", "url": "admin_plugins_attack_settings_path", "eval_url": true}
+  ],
+  "hooks": {
+    "on_destroy": [
+      "attack_on_destroy"
+    ],
+    "on_active": [
+      "attack_on_active"
+    ],
+    "on_inactive": [
+      "attack_on_inactive"
+    ],
+    "front_before_load": [
+      "attack_app_before_load"
+    ],
+    "plugin_options":[
+      "attack_plugin_options"
+    ]
+    //here you can add all your hooks (read documentation)
+  }
+}

data/app/apps/plugins/attack/config/custom_models.rb

@@ -0,0 +1,8 @@
+# custom class for site
+Rails.application.config.to_prepare do
+  CamaleonCms::Site.class_eval do
+    has_many :attack, class_name: "Plugins::Attack::Models::Attack"
+  end
+end
+
+class Plugins::Attack::Config::CustomModels; end

data/app/apps/plugins/attack/config/locales/readme.txt

@@ -0,0 +1 @@
+Here all your plugin locales

data/app/apps/plugins/attack/config/locales/translation.yml

@@ -0,0 +1,129 @@
+# encoding: utf-8
+en:
+  plugin:
+    attack:
+      title: 'Attack'
+      attack_security: 'Attack security'
+      form:
+        in: 'in'
+        seconds: 'Seconds'
+        minutes: 'Minutes'
+        type_max_requests_time: 'Max. %{type} Requests'
+        type_time_requests_seconds: '%{type} time request [seconds]'
+        ban_time_minutes: 'Ban time'
+        ban_messages: 'Ban message'
+        request_limit_exceeded: 'Requests Limit exceeded!'
+      messages:
+        settings_saved: 'Settings saved!'
+      settings: 'Settings'
+
+pt:
+  plugin:
+    attack:
+      title: 'Ataque'
+      attack_security: 'Segurança contra ataques'
+      form:
+        in: 'em'
+        seconds: 'Segundos'
+        minutes: 'Minutos'
+        type_max_requests_time: 'Requisições %{type} máximas'
+        type_time_requests_seconds: 'Requisições %{type} por tipo [segundos]'
+        ban_time_minutes: 'Tempo de expulsão'
+        ban_messages: 'Mensagem de expulsão'
+        request_limit_exceeded: 'Número de requisições excedeu o limite!'
+      messages:
+        settings_saved: 'Configurações gravadas com sucesso!'
+      settings: 'Configurações'
+
+pt-BR:
+  plugin:
+    attack:
+      title: 'Ataque'
+      attack_security: 'Segurança contra ataques'
+      form:
+        in: 'em'
+        seconds: 'Segundos'
+        minutes: 'Minutos'
+        type_max_requests_time: 'Requisições %{type} máximas'
+        type_time_requests_seconds: 'Requisições %{type} por tipo [segundos]'
+        ban_time_minutes: 'Tempo de expulsão'
+        ban_messages: 'Mensagem de expulsão'
+        request_limit_exceeded: 'Número de requisições excedeu o limite!'
+      messages:
+        settings_saved: 'Configurações salvas com sucesso!'
+      settings: 'Configurações'
+
+
+
+es:
+  plugin:
+    attack:
+      title: 'Ataque'
+      attack_security: 'Seguridad de Ataques'
+      form:
+        in: 'en'
+        seconds: 'Segundos'
+        minutes: 'Minutos'
+        type_max_requests_time: 'Peticiones %{type} máximo '
+        type_time_requests_seconds: 'Peticiones %{type} por tiempo [segundo]'
+        ban_time_minutes: 'Tiempo de expulsión'
+        ban_messages: 'Mensaje de Prohibición'
+        request_limit_exceeded: 'Solicitud Límite excedido!'
+      messages:
+        settings_saved: 'Ajustes guardados!'
+      settings: 'Ajustes'
+
+
+nl:
+  plugin:
+    attack:
+      title: 'Aanval'
+      attack_security: 'Beveiliging tegen aanvallen'
+      form:
+        in: 'in'
+        seconds: 'seconden'
+        minutes: 'minuten'
+        type_max_requests_time: 'Max. %{type} Aanvragen'
+        type_time_requests_seconds: '%{type} tijd verzoek [seconds]'
+        ban_time_minutes: 'Tijdduur ban'
+        ban_messages: 'Melding bij ban'
+        request_limit_exceeded: 'Verzoek limiet overschreden!'
+      messages:
+        settings_saved: 'instellingen opgeslagen!'
+      settings: 'instellingen'
+
+it:
+  plugin:
+    attack:
+      title: 'Attack'
+      attack_security: 'Attack security'
+      form:
+        in: 'in'
+        seconds: 'Secondi'
+        minutes: 'Minuti'
+        type_max_requests_time: 'Numero massimo di richieste %{type}'
+        type_time_requests_seconds: '%{type} tempo richiesto [secondi]'
+        ban_time_minutes: 'Tempo di espulsione'
+        ban_messages: 'Messaggio di espulsione'
+        request_limit_exceeded: 'Il numero di richieste ha superato il limite!'
+      messages:
+        settings_saved: 'Impostazioni salvate!'
+      settings: 'Impostazioni'
+
+zh-CN:
+  plugin:
+    attack:
+      title: '攻击'
+      attack_security: '安全攻击'
+      form:
+        in: '期间'
+        seconds: '秒'
+        minutes: '分钟'
+        type_max_requests_time: '最大. %{type} 请求'
+        type_time_requests_seconds: '%{type} 每秒次数'
+        ban_time_minutes: '禁止时间'
+        ban_messages: '禁止消息'
+        request_limit_exceeded: '请求超过限制!'
+      messages:
+        settings_saved: '设置已保存!'
+      settings: '设置'