cd2_catton_cms 1.1.10

data/app/controllers/c/admin/projects_controller.rb

@@ -0,0 +1,55 @@
+# frozen_string_literal: true
+require_dependency 'c/admin_controller'
+
+module C
+  class Admin::ProjectsController < AdminController
+    before_action :load_from_url, only: [:edit, :update, :destroy]
+    load_and_authorize_resource class: C::Project
+
+    def index
+      @projects = filter_and_paginate(@projects, 'created_at desc')
+    end
+
+    def create
+      @project = C::Project.new(project_params)
+      if @project.save
+        redirect_to projects_path, notice: 'Project created'
+      else
+        render :new
+      end
+    end
+
+    def update
+      if params[:commit] == 'upload'
+        @project.assign_attributes(new_image_params)
+        render :edit
+      elsif @project.update(project_params)
+        redirect_to projects_path, notice: 'Project updated'
+      else
+        render :edit
+      end
+    end
+
+    def destroy
+      @project.destroy
+      respond_to do |format|
+        format.js
+        format.html { redirect_to projects_path }
+      end
+    end
+
+    private
+
+    def load_from_url
+      @project = C::Project.get_from_url(params[:id])
+    end
+
+    def new_image_params
+      params.require(:project).permit(new_images: [], images_attributes: [:id, :_destroy, :alt, :caption])
+    end
+
+    def project_params
+      params.require(:project).permit(:name, :body, :published, :url_alias, C::Page::IMAGEABLE_ATTRIBUTES, C::Page::PAGE_INFO_ATTRIBUTES, new_images: [])
+    end
+  end
+end

data/app/controllers/c/admin/redirects_controller.rb

@@ -0,0 +1,55 @@
+# frozen_string_literal: true
+require_dependency 'c/admin_controller'
+
+module C
+  class Admin::RedirectsController < AdminController
+    load_and_authorize_resource class: C::Redirect
+    before_action :set_redirect, only: [:edit, :update, :destroy]
+
+    def index
+      @redirects = filter_and_paginate(@redirects, 'old_url asc')
+    end
+
+    def create
+      if @redirect.save
+        redirect_to redirects_path, notice: 'Redirect Created'
+      else
+        render :new
+      end
+    end
+
+    def update
+      if @redirect.update(redirect_params)
+        redirect_to redirects_path, notice: 'Redirect Updated'
+      else
+        render :edit
+      end
+    end
+
+    def destroy
+      @redirect.destroy!
+      respond_to do |format|
+        format.js
+        format.html { redirect_to [:redirect] }
+      end
+    end
+
+    def confirm_destroy; end
+
+    def bulk_actions
+      @redirects = C::Redirect.where(id: params[:redirect])
+      action = @redirects.bulk_action(params[:bulk_actions])
+      redirect_back(fallback_location: order_sales_path, notice: action)
+    end
+
+    private
+
+    def set_redirect
+      @redirect = Redirect.find(params[:id])
+    end
+
+    def redirect_params
+      params.require(:redirect).permit(:old_url, :new_url, :last_used, :used_counter)
+    end
+  end
+end

data/app/controllers/c/admin/roles_controller.rb

@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+require_dependency 'c/admin_controller'
+
+module C
+  class Admin::RolesController < AdminController
+    load_and_authorize_resource class: C::Role
+
+    def index; end
+
+    def new; end
+
+    def create
+      if @role.save
+        flash[:success] = 'Role saved.'
+        redirect_to roles_path
+      else
+        render :new
+      end
+    end
+
+    def edit; end
+
+    def update
+      if @role.update(role_params)
+        flash[:success] = 'Role updated.'
+        redirect_to roles_path
+      else
+        render :edit
+      end
+    end
+
+    def destroy
+      if @role.destroy
+        flash[:success] = 'Role deleted.'
+      else
+        flash[:error] = 'An error occurred.'
+      end
+      redirect_to roles_path
+    end
+
+    def confirm_destroy; end
+
+    private
+
+    def role_params
+      params.require(:role).permit(:name, :body, permissions_attributes: [:id, :permission_subject_id, :read, :new, :edit, :remove])
+    end
+  end
+end

data/app/controllers/c/admin/slides_controller.rb

@@ -0,0 +1,50 @@
+# frozen_string_literal: true
+require_dependency 'c/admin_controller'
+
+module C
+  class Admin::SlidesController < AdminController
+    load_and_authorize_resource :slideshow, class: C::Slideshow
+    load_and_authorize_resource :slide, class: C::Slide, through: :slideshow
+
+    def create
+      @slide = @slideshow.slides.new(slide_params)
+      if @slide.save
+        redirect_to edit_slideshow_path(@slideshow), notice: 'Slide created'
+      else
+        render :new
+      end
+    end
+
+    def update
+      if @slide.update(slide_params)
+        redirect_to edit_slideshow_path(@slideshow), notice: 'Slide updated'
+      else
+        render :edit
+      end
+    end
+
+    def destroy
+      @slide.destroy
+      respond_to do |format|
+        format.js
+        format.html do
+          redirect_to @slideshow, notice: 'Slide deleted'
+        end
+      end
+    end
+
+    def sort
+      @slides = C::Slideshow.find(params[:slideshow_id]).slides
+      @slides.update_order(params[:slideshow])
+      respond_to do |format|
+        format.js { head :ok, content_type: 'text/html' }
+      end
+    end
+
+    private
+
+    def slide_params
+      params.require(:slide).permit(:name, :body, :url, :image)
+    end
+  end
+end

data/app/controllers/c/admin/slideshows_controller.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+require_dependency 'c/admin_controller'
+
+module C
+  class Admin::SlideshowsController < AdminController
+    load_and_authorize_resource class: C::Slideshow
+
+    def index
+      @slideshows = @slideshows.ordered
+    end
+
+    def create
+      if @slideshow.save
+        redirect_to [:edit, @slideshow], notice: 'Slideshow created'
+      else
+        render :new
+      end
+    end
+
+    def update
+      if @slideshow.update(slideshow_params)
+        redirect_to [:edit, @slideshow], notice: 'Slideshow updated'
+      else
+        render :new
+      end
+    end
+
+    private
+
+    def slideshow_params
+      params.require(:slideshow).permit(:id, :name, :body)
+    end
+  end
+end

data/app/controllers/c/admin/team_members_controller.rb

@@ -0,0 +1,61 @@
+# frozen_string_literal: true
+require_dependency 'c/admin_controller'
+
+module C
+  class Admin::TeamMembersController < AdminController
+    before_action :load_from_url, only: [:destroy, :edit, :update]
+    load_and_authorize_resource class: C::TeamMember
+
+    def index
+      @team_members
+    end
+
+    def new; end
+
+    def edit; end
+
+    def create
+      if @team_member.save
+        redirect_to team_members_path, notice: 'Team Member created'
+      else
+        render :new
+      end
+    end
+
+    def update
+      if @team_member.update(team_member_params)
+        redirect_to team_members_path, notice: 'Team Member updated'
+      else
+        render :edit
+      end
+    end
+
+    def dashboard; end
+
+    def destroy
+      @team_member.destroy
+      respond_to do |format|
+        format.js
+        format.html { redirect_to team_members_path }
+      end
+    end
+
+    def sort
+      @team_members = C::TeamMember.all
+      @team_members.update_order(params[:team_member])
+      respond_to do |format|
+        format.js { head :ok, content_type: 'text/html' }
+      end
+    end
+
+    private
+
+    def load_from_url
+      @team_member = C::TeamMember.find(params[:id])
+    end
+
+    def team_member_params
+      params.require(:team_member).permit(:id, :name, :role, :image, :body)
+    end
+  end
+end

data/app/controllers/c/admin/testimonials_controller.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+require_dependency 'c/admin_controller'
+
+module C
+  class Admin::TestimonialsController < AdminController
+    load_and_authorize_resource class: C::Testimonial
+
+    def index
+      @testimonials = filter_and_paginate(@testimonials, 'created_at desc')
+    end
+
+    def create
+      @testimonial = C::Testimonial.new(testimonial_params)
+      if @testimonial.save
+        redirect_to testimonials_path, notice: 'Testimonial created'
+      else
+        render :new
+      end
+    end
+
+    def update
+      if @testimonial.update(testimonial_params)
+        redirect_to testimonials_path, notice: 'Testimonial updated'
+      else
+        render :edit
+      end
+    end
+
+    def destroy
+      @testimonial.destroy
+      respond_to do |format|
+        format.js
+        format.html { redirect_to testimonials_path }
+      end
+    end
+
+    private
+
+    def testimonial_params
+      params.require(:testimonial).permit(:author, :quote)
+    end
+  end
+end

data/app/controllers/c/admin/users_controller.rb

@@ -0,0 +1,51 @@
+# frozen_string_literal: true
+require_dependency 'c/admin_controller'
+
+module C
+  class Admin::UsersController < AdminController
+    load_and_authorize_resource class: C::User
+
+    def index
+      @users = filter_and_paginate(@users, 'name asc')
+    end
+
+    def create
+      if @user.save
+        redirect_to users_path, notice: 'User created'
+      else
+        render :new
+      end
+    end
+
+    def update
+      if @user.update(user_params)
+        redirect_to users_path, notice: 'User created'
+      else
+        render :edit
+      end
+    end
+
+    def destroy
+      if @user != current_user && @user.destroy
+        respond_to do |format|
+          format.js
+          format.html { redirect_to [:redirect] }
+        end
+      else
+        redirect_to [:redirect]
+      end
+    end
+
+    def confirm_destroy; end
+
+    private
+
+    def user_params
+      if params[:user][:password].blank?
+        params[:user].delete(:password)
+        params[:user].delete(:password_confirmation)
+      end
+      params.require(:user).permit(:name, :email, :password, role_ids: [])
+    end
+  end
+end

data/app/controllers/c/admin_controller.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+require_dependency 'c/application_controller'
+
+module C
+  class AdminController < ApplicationController
+    check_authorization unless: :devise_controller?
+
+    before_action :authenticate_user!
+    before_action :current_user_id
+
+    def edit
+      ajax_form
+    end
+
+    def new
+      ajax_form
+    end
+
+    private
+
+    def current_ability
+      @current_ability ||= ::C::Ability.new(current_user)
+    end
+
+    def ajax_form
+      respond_to do |format|
+        format.html
+        format.js { render 'quick_edit' }
+      end
+    end
+
+    def current_user_id
+      # For the Authorable concern
+      $user_id = current_user.id
+    end
+
+    def filter_and_paginate(collection, default_sort='id asc', per_page=30)
+      @q = collection.ransack(params[:q])
+      @q.sorts = default_sort if @q.sorts.empty?
+      @q.result.paginate(page: params[:page], per_page: per_page)
+    end
+  end
+end

data/app/controllers/c/application_controller.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+module C
+  class ApplicationController < ActionController::Base
+    protect_from_forgery with: :exception
+    layout :layout
+
+    def layout
+      devise_controller? ? 'c/cms_login_layout' : 'c/application'
+    end
+
+    def current_ability
+      Ability.new(current_user)
+    end
+  end
+end

data/app/controllers/c/errors_controller.rb

@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+class C::ErrorsController < ApplicationController
+  def show
+    render status_code.to_s, status: status_code
+  end
+
+  protected
+
+  def status_code
+    params[:code] || 500
+  end
+end

data/app/controllers/c/front/devise/passwords_controller.rb

@@ -0,0 +1,6 @@
+# frozen_string_literal: true
+module C
+  class Front::Devise::PasswordsController < Devise::PasswordsController
+    layout 'c/main_application'
+  end
+end

data/app/controllers/c/front/devise/registrations_controller.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+module C
+  class Front::Devise::RegistrationsController < Devise::RegistrationsController
+    layout 'c/main_application'
+
+    def after_sign_up_path_for(resource)
+      if session[:cart_id].present?
+        begin
+          customer = current_front_customer_account.customer
+          cart = C::Cart.find(session[:cart_id])
+          cart.update(customer_id: customer.id)
+          cart.order.update(customer: customer) if cart.order.present?
+        rescue ActiveRecord::RecordNotFound
+          # Do nothing, as there is nothing to set
+        end
+        session.delete(:cart_id)
+      end
+      params['checkout'] ? new_checkout_path : super
+    end
+
+    private
+
+    def sign_up_params
+      h = params.require(:front_customer_account).permit(
+        :email, :password, :password_confirmation,
+        customer_attributes: [:name]
+      )
+      h[:customer_attributes][:email] = h[:email]
+      h
+    end
+  end
+end

data/app/controllers/c/front/devise/sessions_controller.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+module C
+  class Front::Devise::SessionsController < Devise::SessionsController
+    layout 'c/main_application'
+    after_action :after_login, only: :create
+
+    def after_login
+      return unless session[:cart_id].present?
+      begin
+        customer = current_front_customer_account.customer
+        cart = C::Cart.find(session[:cart_id])
+        cart.update(customer_id: customer.id)
+        cart.order.update(customer: customer) if cart.order.present?
+      rescue ActiveRecord::RecordNotFound
+        # Do nothing, as there is nothing to set
+      end
+    end
+
+    def after_sign_in_path_for(resource)
+      request[:checkout] ? new_checkout_path : super
+    end
+
+    def after_sign_out_path_for(_resource_or_scope)
+      '/'
+    end
+  end
+end

data/app/controllers/c/front/mailchimp_controller.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+require_dependency 'c/application_controller'
+
+module C
+  class Front::MailchimpController < ApplicationController
+    def subscribe
+      begin
+        @mc = Mailchimp::API.new(Setting.get('mailchimp_api_key'))
+        email = params['email']
+        begin
+          @mc.lists.subscribe(Setting.get('mailchimp_list_id'), 'email' => email)
+          flash[:success] = "#{email} subscribed successfully"
+        rescue Mailchimp::ListAlreadySubscribedError
+          flash[:error] = "#{email} is already subscribed to the list"
+        rescue Mailchimp::ListDoesNotExistError
+          flash[:error] = 'The list could not be found'
+          redirect_back(fallback_location: front_end_root_path)
+          return
+        rescue Mailchimp::Error => ex
+          flash[:error] = if ex.message
+                            ex.message
+                          else
+                            'An unknown error occurred'
+                          end
+        end
+      rescue Mailchimp::InvalidApiKeyError => ex
+        flash[:error] = ex.message
+      end
+      redirect_back(fallback_location: front_end_root_path)
+    end
+  end
+end

data/app/controllers/c/front_controller.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+require_dependency 'c/application_controller'
+
+module C
+  class FrontController < MainApplicationController
+  end
+end

data/app/controllers/c/front_end/blogs_controller.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+require_dependency 'c/application_controller'
+
+module C
+  class FrontEnd::BlogsController < MainApplicationController
+    include BlogsHelper
+
+    def index
+      get_page C::Page, 'blogs'
+      @blogs = C::Blog.order(created_at: 'DESC')
+      archive_blogs
+    end
+
+    def show
+      get_page C::Blog
+      @blog = @page
+      redirect_to root_url unless @blog.published || user_signed_in?
+      force_clean_url @blog
+    end
+  end
+end

data/app/controllers/c/front_end/enquiries_controller.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+require_dependency 'c/application_controller'
+
+module C
+  class FrontEnd::EnquiriesController < MainApplicationController
+    def new
+      get_page C::Page, 'contact-us'
+      @enquiry = C::Enquiry.new
+    end
+
+    def create
+      get_page C::Page, 'contact-us'
+      @enquiry = C::Enquiry.new(enquiry_params)
+      if @enquiry.save
+        C::EnquiriesMailer.new_enquiry(@enquiry).deliver_now
+        redirect_to thanks_front_end_enquiries_path
+      else
+        render :new
+      end
+    end
+
+    def thanks
+      @enquiry = C::Enquiry.new
+    end
+
+    private
+
+    def enquiry_params
+      params.require(:enquiry).permit(:name, :email, :body)
+    end
+  end
+end

data/app/controllers/c/front_end/pages_controller.rb

@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+require_dependency 'c/application_controller'
+
+module C
+  class FrontEnd::PagesController < MainApplicationController
+    def show
+      get_page C::Page
+      render @render if @render
+      redirect_to root_url unless @page.published || user_signed_in?
+    end
+
+    def sitemap
+      @pages =  C::Page.all
+      respond_to do |format|
+        format.xml
+      end
+    end
+  end
+end

data/app/controllers/c/main_application_controller.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+require_dependency 'c/application_controller'
+
+module C
+  class MainApplicationController < ApplicationController
+    layout 'c/main_application'
+    helper C::NavigationHelper
+    helper C::StorefrontHelper
+    helper C::PagesHelper
+    include C::PagesHelper
+
+    before_action :check_redirects
+
+    private
+
+    def check_redirects
+      return unless (redirect = C::Redirect.find_by(old_url: request.path))
+      redirect.increment
+      redirect_to redirect.new_url
+    end
+  end
+end