dm_cms 4.2.1.5

data/app/controllers/dm_cms/admin/cms_posts_controller.rb

@@ -0,0 +1,67 @@
+class DmCms::Admin::CmsPostsController < DmCms::Admin::AdminController
+  include DmCms::PermittedParams
+
+  before_filter   :blog_lookup
+  before_filter   :post_lookup, :except =>  [:new, :create]
+  
+  #------------------------------------------------------------------------------
+  def new
+    @post = @blog.posts.build(comments_allowed: @blog.comments_allowed)
+  end
+
+  #------------------------------------------------------------------------------
+  def edit
+  end
+
+  #------------------------------------------------------------------------------
+  def create
+    @post = @blog.posts.new(cms_post_params)
+
+    if @post.save
+      redirect_to admin_cms_blog_url(@blog), notice: 'Post was successfully created.'
+    else
+      render action: :new
+    end
+  end
+
+  #------------------------------------------------------------------------------
+  def update
+    if @post.update_attributes(cms_post_params)
+      redirect_to admin_cms_blog_url(@blog), notice: 'Post was successfully updated.'
+    else
+      render action: :edit
+    end
+  end
+
+  #------------------------------------------------------------------------------
+  def destroy
+    @post.destroy
+    redirect_to admin_cms_blog_url(@blog), notice: 'Post was successfully deleted.'
+  end
+  
+  #------------------------------------------------------------------------------
+  def send_notifications_emails
+    status = @post.send_notification_emails(params[:test] ? current_user : nil)
+    if params[:test] && status == 0
+      redirect_to admin_cms_blog_url(@blog), error: "Unable to send test email"
+    else
+      msg = params[:test] ? "Test notification sent to #{current_user.email}" : "#{status} emails are being sent"
+      redirect_to admin_cms_blog_url(@blog), notice: msg
+    end
+  end
+
+private
+
+  # the blog needs to be specified in the url for each post.  post slugs are
+  # unique per blog
+  #------------------------------------------------------------------------------
+  def blog_lookup
+    @blog = CmsBlog.friendly.find(params[:cms_blog_id])
+  end
+
+  #------------------------------------------------------------------------------
+  def post_lookup
+    @post = @blog.posts.friendly.find(params[:id])
+  end
+
+end

data/app/controllers/dm_cms/admin/cms_snippets_controller.rb

@@ -0,0 +1,73 @@
+class DmCms::Admin::CmsSnippetsController < DmCms::Admin::AdminController
+  include DmCms::PermittedParams
+  
+  before_filter   :find_snippet, except: [:index, :new, :create]
+  before_filter   :set_title
+
+  include DmCore::LiquidHelper
+
+  #------------------------------------------------------------------------------
+  def index
+    @cms_snippets = CmsSnippet.order('slug ASC')
+  end
+
+  #------------------------------------------------------------------------------
+  def new
+    @cms_snippet = CmsSnippet.new
+  end
+
+  #------------------------------------------------------------------------------
+  def create
+    @cms_snippet = CmsSnippet.new(cms_snippet_params)
+    if @cms_snippet.save
+      redirect_to admin_cms_snippets_url, notice: 'Snippet successfully created.'
+    else
+      render action: :new
+    end
+  end
+
+  #------------------------------------------------------------------------------
+  def edit
+  end
+
+  #------------------------------------------------------------------------------
+  def update
+    if @cms_snippet.update_attributes(cms_snippet_params)
+      redirect_to admin_cms_snippets_url, notice: 'Content updated'
+     else
+      render :action => :edit, alert: 'An error of some kind occurred'
+     end
+  end
+
+  #------------------------------------------------------------------------------
+  def destroy
+    @cms_snippet.destroy
+    redirect_to admin_cms_snippets_url
+  end
+
+  # [todo]
+  #------------------------------------------------------------------------------
+  def update_fragment
+    if @cms_snippet.update_attributes(cms_snippet_params)
+      #@cms_page.merge!(@item.cms_page.get_page_render_values)
+      #respond_to do |format| 
+      #  format.js { render :action => :update_fragment } 
+      #end
+    end
+  end
+
+private
+
+  #------------------------------------------------------------------------------
+  def find_snippet
+    @cms_snippet = CmsSnippet.friendly.find(params[:id])
+  end
+
+  # Set some values for the template based on the controller
+  #------------------------------------------------------------------------------
+  def set_title
+    text = 'Snippets'
+    content_for :content_title, text
+  end
+
+end

data/app/controllers/dm_cms/admin/dashboard_controller.rb

@@ -0,0 +1,12 @@
+class DmCms::Admin::DashboardController < DmCms::Admin::AdminController
+  
+  #------------------------------------------------------------------------------
+  def widget_blog_comments
+    @comment_day = params[:comment_day].to_i
+    respond_to do |format|
+      format.html
+      format.js
+    end
+  end
+
+end

data/app/controllers/dm_cms/admin/media_files_controller.rb

@@ -0,0 +1,80 @@
+class DmCms::Admin::MediaFilesController < DmCms::Admin::AdminController
+  include DmCms::PermittedParams
+
+  #------------------------------------------------------------------------------
+  def index
+    @tag_filter  = params[:filter] || 'all'
+    @media_files = MediaFile.order('folder, media ASC')
+
+    @media_files = case @tag_filter
+    when 'all'
+      @media_files
+    when 'top'
+      @media_files.where(folder: '')
+    else
+      @media_files.tagged_with(@tag_filter)
+    end
+    @media_files = @media_files.paginate :page => params[:page], :per_page => 40
+  end
+
+  #------------------------------------------------------------------------------
+  def new
+    @media_file = MediaFile.new
+  end
+  
+  #------------------------------------------------------------------------------
+  def edit
+    @media_file = MediaFile.find(params[:id])
+  end
+  
+  #------------------------------------------------------------------------------
+  def create
+    @media_file   = MediaFile.new(media_file_params)  # for collecting all error msgs
+    if params[:media_list]
+      params[:media_list].each do |file|
+        media_file       = MediaFile.new(media_file_params)
+        media_file.media = file
+        media_file.user  = current_user
+        if !media_file.save
+          media_file.errors.each { |attribute, error| @media_file.errors.add(attribute, error) }
+        end
+      end
+    else
+      @media_file.errors[:base] << 'Please select files to upload'
+    end
+    if @media_file.errors.empty?
+      redirect_to admin_media_files_url, notice: 'Media successfully uploaded'
+    else
+      render action: :new
+    end
+  end
+  
+  #------------------------------------------------------------------------------
+  def update
+    @media_file       = MediaFile.find(params[:id])
+    @media_file.user  = current_user
+
+    #--- must be set before attributes saved, otherwise retina versions not generated
+    @media_file.generate_retina = params[:media_file][:generate_retina] unless params[:media_file][:generate_retina].nil?
+    if @media_file.update_attributes(media_file_params)
+      redirect_to admin_media_files_url, notice: 'Media successfully updated'
+    else
+      render action: :edit
+    end
+  end
+  
+  #------------------------------------------------------------------------------
+  def destroy
+    @media_file = MediaFile.find(params[:id])
+    @media_file.destroy
+    redirect_to admin_media_files_url
+  end
+  
+private
+
+  # Set some values for the template based on the controller
+  #------------------------------------------------------------------------------
+  def template_setup
+  end
+
+end

data/app/controllers/dm_cms/application_controller.rb

@@ -0,0 +1,9 @@
+# Subclass from main ApplicationController, which will subclass from DmCore
+#------------------------------------------------------------------------------
+class DmCms::ApplicationController < ::ApplicationController
+  include ApplicationHelper
+  helper DmCms::RenderHelper
+  helper DmCore::LiquidHelper
+  helper DmCore::AccountHelper
+  include DmCore::AccountHelper
+end

data/app/controllers/dm_cms/blogs_controller.rb

@@ -0,0 +1,50 @@
+class DmCms::BlogsController < DmCms::ApplicationController
+  include ApplicationHelper  
+
+  helper  DmCms::RenderHelper
+  helper  DmCore::LiquidHelper
+  helper  DmCms::PagesHelper
+  helper  DmCms::PostsHelper
+  include DmCore::RenderHelper
+
+  before_filter   :blog_lookup, :except =>  [:index, :toggle_follow]
+
+  layout    'cms_templates/blog', :only => [:index, :show]
+  
+  #------------------------------------------------------------------------------
+  def index
+    redirect_to(index_url) and return if CmsBlog.count == 0
+    @blogs        = CmsBlog.available_to_user(current_user)
+    @posts        = CmsPost.where(cms_blog_id: @blogs.map(&:id)).includes(:cms_blog, :translations).published.order('published_on DESC').paginate page: page_number
+    @recent_posts = CmsPost.where(cms_blog_id: @blogs.map(&:id)).includes(:cms_blog, :translations).published.order('published_on DESC').limit(5)
+    content_for :page_title, I18n.t('cms.blog_header')
+    
+    render action: :show
+  end
+
+  #------------------------------------------------------------------------------
+  def show
+    @blogs        = CmsBlog.available_to_user(current_user)
+    @posts        = @blog.posts.includes(:cms_blog, :translations).published.order('published_on DESC').paginate :page => page_number
+    @recent_posts = @blog.posts.includes(:cms_blog, :translations).published.order('published_on DESC').limit(5)
+    content_for :page_title, (@blog ? @blog.title : I18n.t('cms.blog_header'))
+  end
+
+  #------------------------------------------------------------------------------
+  def toggle_follow
+    @blog = CmsBlog.friendly.find(params[:cms_blog_id])
+    authorize! :read, @blog
+    @following = current_user.following.following?(@blog)
+    @following ? current_user.following.stop_following(@blog) : current_user.following.follow(@blog)
+  end
+  
+protected
+
+  #------------------------------------------------------------------------------
+  def blog_lookup
+    @blog = CmsBlog.friendly.find(params[:id])
+    redirect_to blog_root_path and return if @blog.nil?
+    authorize! :read, @blog
+  end
+
+end

data/app/controllers/dm_cms/comments_controller.rb

@@ -0,0 +1,3 @@
+class DmCms::PostsController < DmCms::ApplicationController
+
+end

data/app/controllers/dm_cms/contact_form_controller.rb

@@ -0,0 +1,27 @@
+class DmCms::ContactFormController < DmCms::ApplicationController
+  # Type of contact form object is specified by any param name that
+  # ends with '_contact_form'.  Also takes into account themes.
+  # 'tech_contact_form' => TechContactForm
+  # 'theme_bogus_tech_contact_form' => ThemeBogus::TechContactForm
+  #------------------------------------------------------------------------------
+  def create
+    form_key = params.select {|key, v| key.end_with?('contact_form') }.first[0]
+    if form_key.present?
+      if form_key.start_with?('theme_')
+        parts       = form_key.split('_')
+        part_module = parts[0...2].join('_')
+        part_class  = parts[2..-1].join('_')
+        object      = "#{part_module}/#{part_class}".camelize.constantize
+      else
+        part_class  = form_key
+        object      = "#{part_class}".camelize.constantize
+      end
+      @contact  = object.new(params[form_key])
+      if @contact.deliver
+        flash.now[:notice] = I18n.t('cms.contact_form.sent')
+        @contact = nil
+      end
+    end
+    @partial_name = "liquid_tags/#{part_class || 'contact_form'}"
+  end
+end

data/app/controllers/dm_cms/pages_controller.rb

@@ -0,0 +1,67 @@
+class DmCms::PagesController < DmCms::ApplicationController
+  include ApplicationHelper
+  include DmCore::UrlHelper
+  include DmCore::LiquidHelper
+  helper DmCms::RenderHelper
+  helper DmCore::LiquidHelper
+  
+  #------------------------------------------------------------------------------
+  def index
+    redirect_to "/#{DmCore::Language.locale}/index"
+  end
+
+  #------------------------------------------------------------------------------
+  def show
+    render(file: 'public/404.html', status: :not_found, layout: false) && return if invalid_slug?
+
+    #--- make sure we have a valid locale for this site set
+    DmCore::Language.locale = current_account.verify_locale(params[:locale])
+    
+    #--- find the requested page, and if not found try to find the 'missing' page
+    @current_page = CmsPage.friendly.find_by_slug(params[:slug])
+    if @current_page.nil? || !can?(:read, @current_page)
+      @current_page = CmsPage.friendly.find_by_slug('missing')
+      render(file: 'public/404.html', status: :not_found, layout: false) && return if @current_page.nil? || !@current_page.is_published?
+    end
+
+    if @current_page.requires_login && !signed_in?
+      redirect_to(main_app.new_user_session_url, alert: 'You must be signed into your account before you can access this page') and return
+    end
+
+    case @current_page.pagetype
+    when 'content'
+      status = (@current_page.slug == 'missing' ? 404 : 200)
+      content_for :page_title, @current_page.title
+      set_meta description: @current_page.summary, "og:description" => sanitize_text(markdown(@current_page.summary, safe: false))
+      set_meta "og:image" => site_asset_media_url(@current_page.featured_image) if @current_page.featured_image.present?
+      #--- if body=true, then use a minimal template to render, suitable for a minimal iFrame
+      if params['body'] == 'true'
+        render action: :show, layout: "cms_templates/minimal_page", status: status
+      else
+        render action: :show, layout: "cms_templates/#{@current_page.page_template}", status: status, formats: [:html]
+      end
+    when 'pagelink'
+      redirect_to showpage_url(slug: @current_page.link)
+    when 'controller/action'
+      redirect_to "/#{DmCore::Language.locale}/#{@current_page.link}"
+    when 'link'
+      redirect_to @current_page.link
+    when 'divider'
+      render text: 'Not a real page'
+    end
+  end
+  
+  # Basically empty, as well as the view.  But gets rendered by dm_core when the 
+  # site is disabled
+  #------------------------------------------------------------------------------
+  def coming_soon
+  end
+
+private
+
+  # might get missing image requests, try to weed them out
+  #------------------------------------------------------------------------------
+  def invalid_slug?
+    params[:slug].end_with?('.png', '.gif', '.jpg', '.mp4', '.mp3', '.ogg', '.avi', '.php', '.cgi')
+  end
+end

data/app/controllers/dm_cms/posts_controller.rb

@@ -0,0 +1,69 @@
+class DmCms::PostsController < DmCms::ApplicationController
+  include ApplicationHelper  
+
+  helper  DmCms::RenderHelper
+  helper  DmCore::LiquidHelper
+  helper  DmCms::PagesHelper
+  helper  DmCms::PostsHelper
+  include DmCore::RenderHelper
+  include DmCore::UrlHelper
+  include DmCore::LiquidHelper
+
+  before_filter   :post_lookup, except: [:ajax_delete_comment]
+
+  layout    'cms_templates/blog_post'
+  
+  #------------------------------------------------------------------------------
+  def show
+    @blogs        = CmsBlog.available_to_user(current_user)
+    @recent_posts = CmsPost.where(cms_blog_id: @blogs.map(&:id)).includes(:cms_blog, :translations).published.order('published_on DESC').limit(5)
+    @comments     = @post.comments.paginate page: page_number
+
+    #--- set title / meta data
+    content_for :page_title, @post.title
+    set_meta description: @post.summary, "og:description" => sanitize_text(markdown(@post.summary, safe: false))
+    set_meta "og:image" => site_asset_media_url(@post.featured_image) if @post.featured_image.present?
+  end
+
+  #------------------------------------------------------------------------------
+  def ajax_add_comment
+    @post.comments.create(:body => params[:comment][:body], :user_id => current_user.id) if current_user && !params[:comment][:body].blank?
+    redirect_to :back
+  end
+  
+  # #------------------------------------------------------------------------------
+  # def ajax_edit_comment
+  #   @comment  = Comment.find(params[:id])
+  #   @post     = comment.commentable
+  #   authorize! :read, @post.cms_blog
+  # 
+  #   if put_or_post?
+  #   end
+  #   
+  #   @post.comments.create(:body => params[:comment][:body], :user_id => current_user.id)
+  #   redirect_to :back
+  # end
+  
+  #------------------------------------------------------------------------------
+  def ajax_delete_comment
+    if is_admin?
+      Comment.find(params[:id]).destroy
+    end
+    redirect_to :back and return
+  end
+
+protected
+
+  #------------------------------------------------------------------------------
+  def post_lookup
+    @blog = CmsBlog.friendly.find(params[:cms_blog_id])
+    redirect_to blog_root_path and return if @blog.nil?
+    raise Account::LoginRequired.new(I18n.t('cms.blog_login_required')) if !current_user && !@blog.is_public?
+    authorize! :read, @blog
+    
+    @post = @blog.posts.friendly.find(params[:id])
+    redirect_to blog_show_path(@blog) and return if @post.nil?
+    authorize! :read, @post
+  end
+
+end