openwrite 0.12.0__tar.gz → 0.13.1__tar.gz

{openwrite-0.12.0 → openwrite-0.13.1}/MANIFEST.in

@@ -1,3 +1,6 @@
 include openwrite/utils/i18n.json
 recursive-include openwrite/templates *
 recursive-include openwrite/static *
+exclude logs/*
+exclude gemini/*
+exclude uploads/*

{openwrite-0.12.0/openwrite.egg-info → openwrite-0.13.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: openwrite
-Version: 0.12.0
+Version: 0.13.1
 License:                     GNU AFFERO GENERAL PUBLIC LICENSE
                                Version 3, 19 November 2007
         
@@ -704,6 +704,7 @@ openwrite is a minimalist blogging platform built for writing freely, hosting in
 - Single-blog mode
 - Supports sqlite and mysql databases
 - Upload images to local storage or bunny cdn
+- Drafts
 - Simple markdown editor in posting
 - Discover section
 - Privacy: 

{openwrite-0.12.0 → openwrite-0.13.1}/README.md

@@ -15,6 +15,7 @@ openwrite is a minimalist blogging platform built for writing freely, hosting in
 - Single-blog mode
 - Supports sqlite and mysql databases
 - Upload images to local storage or bunny cdn
+- Drafts
 - Simple markdown editor in posting
 - Discover section
 - Privacy: 

{openwrite-0.12.0 → openwrite-0.13.1}/openwrite/__init__.py

@@ -85,7 +85,7 @@ def create_app(test_config=None):
                 url="",
                 content_raw=f"![hello](https://openwrite.b-cdn.net/hello.jpg =500x258)\n\n# Hello there! 👋\n\nYou can edit your blog home page in [dashboard](https://{domain}/dashboard/page/1/edit)\n\n---\n### Posts\n\n{{posts}}",
                 content_html=f"<p><img src=\"https://openwrite.b-cdn.net/hello.jpg\" width=\"500\" height=\"258\"></p><h1>Hello there! 👋</h1><p>You can edit your blog home page in <a href=\"https://{domain}/dashboard/page/1/edit\">dashboard</a></p>\n\n<hr>\n<h3>Posts\n\n{{posts}}",
-                show="off"
+                show="0"
             )
             SessionLocal.add(new_page)
 

{openwrite-0.12.0 → openwrite-0.13.1}/openwrite/gemini_multi.py

@@ -1,10 +1,11 @@
 import os, subprocess
 from dotenv import load_dotenv
 from openwrite.utils.db import init_engine, SessionLocal
-from openwrite.utils.models import Blog, Post, User, View
+from openwrite.utils.models import Blog, Post, User, View, Page
 from openwrite.utils.helpers import anonymize
 from md2gemini import md2gemini
 from datetime import datetime, timezone
+import re
 session = None
 
 openwrite_logo = """
@@ -25,7 +26,7 @@ def root(req):
     resp += "In here you can read posts published.\n"
     resp += "\n## 🗞️ Latest posts:\n"
     try:
-        posts = (session.query(Post).filter_by(feed="1").order_by(Post.id.desc()).limit(10).all())
+        posts = (session.query(Post).filter(Post.feed == "1", Post.isdraft == "0").order_by(Post.id.desc()).limit(10).all())
         for p in posts:
             blog = session.query(Blog).filter_by(id=p.blog).first()
             resp += f"\n{p.date} - 📓 {blog.title}\n"
@@ -45,15 +46,24 @@ def blog_index(req):
                 if not blog:
                     return "not found"
                 posts = (session.query(Post)
-                                .filter_by(blog=blog.id)
-                                .order_by(Post.id.desc())
-                                .all())
+                        .filter_by(blog=blog.id, isdraft="0")
+                        .order_by(Post.id.desc())
+                        .all())
+                pages = (session.query(Page)
+                        .filter(Page.blog == blog.id, Page.show == "1").all())
+                homepage = session.query(Page).filter(Page.blog == blog.id, Page.url == "").first()
                 body = f"# 📓 {blog.title}\n\n"
-                body += md2gemini(blog.description_raw.replace("#", ""))
-                body += "\n--------------------------------------------------\n"
-                body += "### Posts:\n\n"
+                posts_data = ""
                 for post in posts:
-                    body += f"=> /b/{blogname}/{post.link} {post.title}\n"
+                    posts_data += f"=> /b/{blogname}/{post.link} {post.title}\n\n"
+                pages_data = ""
+                for page in pages:
+                    pages_data += f"=> /b/{blogname}/{page.url} {page.name}\n\n"
+                content = pages_data + "\n"
+                content += homepage.content_raw.replace('{posts}', f"\n{posts_data}")
+                content = re.sub(r'!\[(.*?)\]\((.*?)\s*=\d+x\d+\)', r'![\1](\2)', content)
+                body += md2gemini(content)
+                
                 return body
             finally:
                 session.close()
@@ -67,10 +77,19 @@ def blog_index(req):
                     return "not found"
 
                 post = (session.query(Post)
-                              .filter_by(blog=blog.id, link=slug)
+                              .filter_by(blog=blog.id, link=slug, isdraft="0")
                               .first())
                 if not post:
-                    return "not found"
+                    page = (session.query(Page)
+                              .filter_by(blog=blog.id, url=slug)
+                              .first())
+                    if page:
+                        content = f"=> /b/{blog.name} 📓 {blog.title}\n\n"
+                        content += page.content_raw
+                        content = re.sub(r'!\[(.*?)\]\((.*?)\s*=\d+x\d+\)', r'![\1](\2)', content)
+                        return md2gemini(content)
+                    else:
+                        return "not found"
                 user = session.query(User).filter_by(id=blog.owner).first()
 
                 now = datetime.now(timezone.utc)
@@ -88,7 +107,9 @@ def blog_index(req):
                 if post.author != "0":
                     gemtext += f"by {post.authorname}"
                 gemtext += "\n--------------------------------------------------\n"
-                gemtext += f"\n\n{md2gemini(post.content_raw)}"
+                content = post.content_raw
+                content = re.sub(r'!\[(.*?)\]\((.*?)\s*=\d+x\d+\)', r'![\1](\2)', content)
+                gemtext += f"\n\n{md2gemini(content)}\n\n"
                 return gemtext
               
             finally:

{openwrite-0.12.0 → openwrite-0.13.1}/openwrite/gemini_single.py

@@ -11,17 +11,28 @@ def blog_index(req):
     global session
     try:
         blog = session.query(Blog).filter_by(name="default").first()
-        posts = (session.query(Post)
+                if not blog:
+                    return "not found"
+                posts = (session.query(Post)
                         .filter_by(blog=blog.id)
                         .order_by(Post.id.desc())
                         .all())
-        body = f"# 📓 {blog.title}\n\n"
-        body += md2gemini(blog.description_raw.replace("#", ""))
-        body += "\n--------------------------------------------------\n"
-        body += "### Posts:\n\n"
-        for post in posts:
-            body += f"=> /p/{post.link} {post.title}\n"
-        return body
+                pages = (session.query(Page)
+                        .filter(Page.blog == blog.id, Page.show == "1").all())
+                homepage = session.query(Page).filter(Page.blog == blog.id, Page.url == "").first()
+                body = f"# 📓 {blog.title}\n\n"
+                posts_data = ""
+                for post in posts:
+                    posts_data += f"=> /b/{blogname}/{post.link} {post.title}\n\n"
+                pages_data = ""
+                for page in pages:
+                    pages_data += f"=> /b/{blogname}/{page.url} {page.name}\n\n"
+                content = pages_data + "\n"
+                content += homepage.content_raw.replace('{posts}', f"\n{posts_data}")
+                content = re.sub(r'!\[(.*?)\]\((.*?)\s*=\d+x\d+\)', r'![\1](\2)', content)
+                body += md2gemini(content)
+                
+                return body
     finally:
         session.close()
 
@@ -33,11 +44,23 @@ def blog_post(req):
         slug = path.split("/")[2]
         try:
             blog = session.query(Blog).filter_by(name="default").first()
+            if not blog:
+                return "not found"
+
             post = (session.query(Post)
-                          .filter_by(blog=blog.id, link=slug)
-                          .first())
+                            .filter_by(blog=blog.id, link=slug, isdraft="0")
+                            .first())
             if not post:
-                return "not found"
+                page = (session.query(Page)
+                            .filter_by(blog=blog.id, url=slug)
+                            .first())
+                if page:
+                    content = f"=> /b/{blog.name} 📓 {blog.title}\n\n"
+                    content += page.content_raw
+                    content = re.sub(r'!\[(.*?)\]\((.*?)\s*=\d+x\d+\)', r'![\1](\2)', content)
+                    return md2gemini(content)
+                else:
+                    return "not found"
             user = session.query(User).filter_by(id=blog.owner).first()
 
             now = datetime.now(timezone.utc)
@@ -55,7 +78,9 @@ def blog_post(req):
             if post.author != "0":
                 gemtext += f"by {post.authorname}"
             gemtext += "\n--------------------------------------------------\n"
-            gemtext += f"\n\n{md2gemini(post.content_raw)}"
+            content = post.content_raw
+            content = re.sub(r'!\[(.*?)\]\((.*?)\s*=\d+x\d+\)', r'![\1](\2)', content)
+            gemtext += f"\n\n{md2gemini(content)}\n\n"
             return gemtext
           
         finally:

{openwrite-0.12.0 → openwrite-0.13.1}/openwrite/routes/admin.py

@@ -1,6 +1,6 @@
 from flask import Blueprint, render_template, redirect, g, request, make_response
 import json
-from openwrite.utils.models import Blog, User, Settings, Home
+from openwrite.utils.models import Blog, User, Settings, Home, Post
 import re
 import bcrypt
 from werkzeug.utils import secure_filename
@@ -116,16 +116,16 @@ def admin_add_user():
     
     form_username = request.form.get('username')
     if not re.match(r"^[a-zA-Z0-9](?:[a-zA-Z0-9_-]{1,28}[a-zA-Z0-9])?$", form_username):
-        return render_template('register.html', error=g.trans['wrong_username'], add="1", captcha="0")
+        return render_template('register.html', error='wrong_username', add="1", captcha="0")
     form_password = request.form.get('password')
     form_password2 = request.form.get('password2')
 
     if form_password != form_password2:
-        return render_template("register.html", error=g.trans['password_dont_match'], add="1", captcha="0")
+        return render_template("register.html", error='password_dont_match', add="1", captcha="0")
 
     user = g.db.query(User).filter_by(username=form_username).first()
     if user:
-        return render_template('register.html', error=g.trans["user_exists"], add="1", captcha="0")
+        return render_template('register.html', error="user_exists", add="1", captcha="0")
 
     try: 
         hashed = bcrypt.hashpw(form_password.encode('utf-8'), bcrypt.gensalt())
@@ -136,7 +136,7 @@ def admin_add_user():
     except Exception as e:
         print(e)
         g.db.rollback()
-        return render_template('register.html', error=g.trans["error"], add="1", captcha="0")
+        return render_template('register.html', error='error', add="1", captcha="0")
 
 
 @admin_bp.route("/admin/settings", methods=['GET', 'POST'])
@@ -166,17 +166,17 @@ def admin_settings():
         file = request.files['logo']
         filename = secure_filename(file.filename)
         if "." not in filename:
-            return render_template("settings.html", settings=settings_dict, hometext=hometext, error="Wrong file!")
+            return render_template("settings.html", settings=settings_dict, hometext=hometext, error='invalid_filename')
 
         extension = filename.rsplit('.', 1)[1].lower()
         if extension not in ALLOWED_EXTENSIONS:
-            return render_template("settings.html", settings=settings_dict, hometext=hometext, error="Wrong extension!")
+            return render_template("settings.html", settings=settings_dict, hometext=hometext, error='unsupported_filetype')
 
         try:
             img = Image.open(file.stream)
             img.verify()
         except Exception:
-            return render_template("settings.html", settings=settings_dict, hometext=hometext, error="File is not image!")
+            return render_template("settings.html", settings=settings_dict, hometext=hometext, error="not_image")
 
         file.stream.seek(0)
 
@@ -245,4 +245,19 @@ def download_translations():
     response = make_response(json.dumps(dict(trans_dict), ensure_ascii=False))
     response.headers["Content-Disposition"] = "attachment; filename=i18n.json"
     response.headers["Content-Type"] = "application/json"
-    return response
+    return response
+
+@admin_bp.route("/admin/remove_from_feed/<int:post_id>")
+def remove_from_feed(post_id):
+    """
+    Remove a post from the discover feed.
+    """
+    if g.user is None or g.isadmin == 0 or g.mode == "single":
+        return redirect("/")
+
+    post = g.db.query(Post).filter_by(id=post_id).first()
+    if post:
+        post.feed = "0"
+        g.db.commit()
+
+    return redirect("/discover")

{openwrite-0.12.0 → openwrite-0.13.1}/openwrite/routes/blog.py

@@ -24,7 +24,7 @@ def show_blog(blog):
     blog.url = f"/b/{blog.name}"
     homepage = g.db.query(Page).filter(Page.blog == blog.id, Page.url == "").first()
     if "{posts}" in homepage.content_raw:
-        posts = g.db.query(Post).filter_by(blog=blog.id).order_by(desc(Post.id)).all()
+        posts = g.db.query(Post).filter(Post.blog == blog.id, Post.isdraft == "0").order_by(desc(Post.id)).all()
         return render_template("blog.html", blog=blog, page=homepage, posts=posts, pages=pages)
 
     return render_template("blog.html", blog=blog, page=homepage, pages=pages)
@@ -40,10 +40,11 @@ def show_subblog(blog):
     if blog.access == "path":
         return redirect(f"https://{os.getenv('DOMAIN')}/b/{blog.name}")
 
+    blog.url = f"https://{blog.name}.{os.getenv('DOMAIN')}"
     pages = g.db.query(Page).filter_by(blog=blog.id).all()
     homepage = g.db.query(Page).filter(Page.blog == blog.id, Page.url == "").first()
     if "{posts}" in homepage.content_raw:
-        posts = g.db.query(Post).filter_by(blog=blog.id).order_by(desc(Post.id)).all()
+        posts = g.db.query(Post).filter(Post.blog == blog.id, Post.isdraft == "0").order_by(desc(Post.id)).all()
         return render_template("blog.html", blog=blog, page=homepage, posts=posts, pages=pages)
 
     return render_template("blog.html", blog=blog, page=homepage, pages=pages)
@@ -64,14 +65,14 @@ def show_post(blog, post):
 
     blog.url = f"/b/{blog.name}"
     pages = g.db.query(Page).filter_by(blog=blog.id).all()
-    one_post = g.db.query(Post).filter(Post.blog == blog.id, Post.link == post).first()
+    one_post = g.db.query(Post).filter(Post.blog == blog.id, Post.link == post, Post.isdraft == "0").first()
     if not one_post:
         page = g.db.query(Page).filter(Page.blog == blog.id, Page.url == post).first()
         if not page:
             return redirect("/")
 
         if "{posts}" in page.content_raw:
-            posts = g.db.query(Post).filter_by(blog=blog.id).order_by(desc(Post.id)).all()
+            posts = g.db.query(Post).filter(Post.blog == blog.id, Post.isdraft == "0").order_by(desc(Post.id)).all()
 
             return render_template("blog.html", blog=blog, page=page, posts=posts, pages=pages)
         
@@ -112,8 +113,10 @@ def show_subpost(blog, post):
     if blog.access == "path":
         return redirect(f"https://{os.getenv('DOMAIN')}/b/{blog.name}/{post}")
 
+    blog.url = f"https://{blog.name}.{os.getenv('DOMAIN')}"
+
     pages = g.db.query(Page).filter_by(blog=blog.id).all()
-    one_post = g.db.query(Post).filter(Post.blog == blog.id, Post.link == post).first()
+    one_post = g.db.query(Post).filter(Post.blog == blog.id, Post.link == post, Post.isdraft == "0").first()
 
     if not one_post:
         page = g.db.query(Page).filter(Page.blog == blog.id, Page.url == post).first()
@@ -121,7 +124,7 @@ def show_subpost(blog, post):
             return redirect("/")
 
         if "{posts}" in page.content_raw:
-            posts = g.db.query(Post).filter_by(blog=blog.id).order_by(desc(Post.id)).all()
+            posts = g.db.query(Post).filter(Post.blog == blog.id, Post.isdraft == "0").order_by(desc(Post.id)).all()
 
             return render_template("blog.html", blog=blog, page=page, posts=posts, pages=pages)
         
@@ -155,7 +158,7 @@ def single_showpost(post):
 
     blog = g.db.query(Blog).filter_by(id=1).first()
     blog.url = f"http://{g.main_domain}"
-    one_post = g.db.query(Post).filter(Post.blog == 1, Post.link == post).first()
+    one_post = g.db.query(Post).filter(Post.blog == 1, Post.link == post, Post.isdraft == "0").first()
 
     pages = g.db.query(Page).filter_by(blog=1).all()
 
@@ -165,7 +168,7 @@ def single_showpost(post):
             return redirect("/")
 
         if "{posts}" in page.content_raw:
-            posts = g.db.query(Post).filter_by(blog=blog.id).order_by(desc(Post.id)).all()
+            posts = g.db.query(Post).filter(Post.blog == blog.id, Post.isdraft == "0").order_by(desc(Post.id)).all()
 
             return render_template("blog.html", blog=blog, page=page, posts=posts, pages=pages)
         
@@ -230,7 +233,7 @@ def like():
     
 
 def _generate_rss(blog):
-    posts = g.db.query(Post).filter_by(blog=blog.id).all()
+    posts = g.db.query(Post).filter(Post.blog == blog.id, Post.isdraft == "0").all()
     fg = FeedGenerator()
     fg.title(blog.title)
     fg.link(href=f"https://{os.getenv('DOMAIN')}/b/{blog.name}", rel="alternate")

{openwrite-0.12.0 → openwrite-0.13.1}/openwrite/routes/dashboard.py

@@ -1,4 +1,4 @@
-from flask import Blueprint, render_template, redirect, request, g, abort
+from flask import Blueprint, render_template, redirect, request, g, abort, Response
 from openwrite.utils.models import Blog, Post, User, View, Page
 from openwrite.utils.helpers import sanitize_html, gen_link, safe_css, send_activity, is_html, get_themes
 import requests
@@ -13,6 +13,8 @@ import markdown
 from bs4 import BeautifulSoup
 from user_agents import parse
 import re
+import csv
+from io import StringIO
 
 dashboard_bp = Blueprint("dashboard", __name__)
 
@@ -36,7 +38,7 @@ def create_blog():
     if int(g.blog_limit) > 0:
         count = g.db.query(Blog).filter_by(owner=g.user).count()
         if count >= int(g.blog_limit):
-            return render_template("create.html", error="Blog limit reached!")
+            return render_template("create.html", error="blog-limit-reached")
 
     if request.method == "GET":
         return render_template("create.html")
@@ -44,17 +46,17 @@ def create_blog():
     form_name = request.form.get("name")
     form_url = gen_link(request.form.get("url"))
     if len(form_name) > 30:
-        return render_template("create.html", error="Title too long! Max 30 characters.")
+        return render_template("create.html", error="title-too-long")
     if len(form_url) > 30:
-        return render_template("create.html", error="URL too long! Max 30 characters.")
+        return render_template("create.html", error="url-too-long")
     blog = g.db.query(Blog).filter_by(name=form_url).first()
     if blog:
-        return render_template("create.html", error="This URL already exists!")
+        return render_template("create.html", error="url-exists")
     
     form_index = request.form.get("index") or "off"
     form_access = request.form.get("access")
     if form_access not in ("path", "domain"):
-        return render_template("create.html", error="Wrong access!")
+        return render_template("create.html", error="wrong-access")
     
     key = rsa.generate_private_key(
         public_exponent=65537,
@@ -99,15 +101,15 @@ def create_blog():
             name="Home",
             url="",
             content_raw=f"![hello](https://openwrite.b-cdn.net/hello.jpg =500x258)\n\n# Hello there! 👋\n\nYou can edit your blog home page in [dashboard](https://{g.main_domain}/dashboard/edit/{form_url})\n\n---\n### Posts\n\n{{posts}}",
-            content_html=f"<p><img src=\"https://openwrite.b-cdn.net/hello.jpg\" width=\"500\" height=\"258\"></p><h1>Hello there! 👋</h1><p>You can edit your blog home page in <a href=\"https://{g.main_domain}/dashboard/edit/{form_url}\">dashboard</a></p>\n\n<hr>\n<h3>Posts\n\n{{posts}}",
-            show="off"
+            content_html=f"<p><img src=\"https://openwrite.b-cdn.net/hello.jpg\" width=\"500\" height=\"258\"></p><h1>Hello there! 👋</h1><p>You can edit your blog home page in <a href=\"https://{g.main_domain}/dashboard/edit/{form_url}\">dashboard</a></p>\n\n<hr>\n<h3>Posts</h3>\n\n{{posts}}",
+            show="0"
         )
         g.db.add(new_page)
         g.db.commit()
            
         return redirect("/dashboard")
     except Exception:
-        return render_template("create.html", error=g.trans['error'])
+        return render_template("create.html", error="error")
 
 @dashboard_bp.route("/dashboard/delete/<name>")
 def delete_blog(name):
@@ -118,7 +120,7 @@ def delete_blog(name):
 
     blog = g.db.query(Blog).filter_by(name=name).first()
     if blog is None or blog.owner != g.user:
-        return redirect("/dashboard")
+        abort(403)
 
     g.db.delete(blog)
     g.db.commit()
@@ -131,7 +133,7 @@ def edit_blog(name):
 
     blog = g.db.query(Blog).filter_by(name=name).first()
     if blog is None or blog.owner != g.user:
-        return redirect("/dashboard")
+        abort(403)
 
     posts = g.db.query(Post).filter_by(blog=blog.id).all()
     for p in posts:
@@ -148,14 +150,14 @@ def edit_blog(name):
 
     now = datetime.now(timezone.utc).replace(microsecond=0)
     if len(request.form.get("title")) > 30:
-        return render_template("edit.html", blog=blog, posts=posts, themes=themes, pages=pages, error="Title too long! Max 30 characters.")
+        return render_template("edit.html", blog=blog, posts=posts, themes=themes, pages=pages, error="title-too-long")
     blog.css = safe_css(request.form.get("css"))
     blog.updated = now   
     blog.title = request.form.get("title")
     blog.favicon = request.form.get("icon")[:10]
     selected_theme = request.form.get("theme")
     if selected_theme not in themes:
-        return render_template("edit.html", blog=blog, posts=posts, themes=themes, pages=pages, error="Wrong theme!")
+        return render_template("edit.html", blog=blog, posts=posts, themes=themes, pages=pages, error="wrong-theme")
     blog.theme = selected_theme
     g.db.commit()
 
@@ -168,7 +170,7 @@ def new_post(name):
 
     blog = g.db.query(Blog).filter_by(name=name).first()
     if blog is None or blog.owner != g.user:
-        return redirect("/dashboard")
+        abort(403)
 
     if request.method == "GET":
         return render_template("new_post.html", blog=blog)
@@ -176,8 +178,11 @@ def new_post(name):
     u = g.db.query(User).filter_by(id=g.user).first()
     title = request.form.get('title')
     if len(title) > 120:
-        return render_template("new_post.html", blog=blog, error="Title too long! Max 120 characters.")
-        
+        return render_template("new_post.html", blog=blog, error="title-too-long")
+
+    if len(title) < 1:
+        return render_template("new_post.html", blog=blog, error="title-empty")
+
     link = gen_link(title)
     if link == "rss":
         link = "p_rss"
@@ -198,7 +203,8 @@ def new_post(name):
         author=request.form.get('author'),
         link=link,
         date=now,
-        feed=request.form.get('feed')
+        feed=request.form.get('feed'),
+        isdraft=request.form.get('draft', '0')
     )
     g.db.add(post)
     g.db.commit()
@@ -268,7 +274,7 @@ def blog_preview():
     blog_name = request.referrer.split("/")[-1]
     blog = g.db.query(Blog).filter_by(name=blog_name).first()
     if not blog:
-        return redirect("/")
+        abort(404)
 
     homepage = g.db.query(Page).filter(Page.blog == blog.id, Page.url == "").first()
     data = {
@@ -289,7 +295,7 @@ def edit_post(blog, post):
 
     blog_obj = g.db.query(Blog).filter_by(name=blog).first()
     if blog_obj is None or blog_obj.owner != g.user:
-        return redirect("/dashboard")
+        abort(403)
 
     e_post = g.db.query(Post).filter_by(link=post).first()
     if request.method == "GET":
@@ -297,11 +303,11 @@ def edit_post(blog, post):
 
     p = g.db.query(Post).filter_by(link=post, blog=blog_obj.id).first()
     if not p:
-        return redirect("/dashboard")
+        abort(404)
 
     title = request.form.get("title")
     if len(title) > 120:
-        return render_template("new_post.html", blog=blog_obj, error="Title too long! Max 120 characters.")
+        return render_template("new_post.html", blog=blog_obj, error="title-too-long")
     link = gen_link(title)
     if link == "rss":
         link = "p_rss"
@@ -319,6 +325,7 @@ def edit_post(blog, post):
     p.feed = request.form.get("feed")
     p.link = link
     p.updated = now
+    p.isdraft = request.form.get("draft", "0")
     g.db.commit()
     return redirect(f"/dashboard/edit/{blog_obj.name}")
 
@@ -329,7 +336,7 @@ def delete_post(blog, post):
 
     blog_obj = g.db.query(Blog).filter_by(name=blog).first()
     if blog_obj is None or blog_obj.owner != g.user:
-        return redirect("/dashboard")
+        abort(403)
 
     p = g.db.query(Post).filter_by(link=post, blog=blog_obj.id).first()
     if p:
@@ -353,14 +360,14 @@ def changepw():
     user = g.db.query(User).filter_by(id=g.user).first()
     if user and bcrypt.checkpw(old_pw.encode('utf-8'), user.password_hash.encode('utf-8')):
         if new_pass != new_pass2:
-            return render_template("changepw.html", error=g.trans['passwords_dont_match'])
+            return render_template("changepw.html", error='passwords_dont_match')
         hashed = bcrypt.hashpw(new_pass.encode('utf-8'), bcrypt.gensalt())
         user.password_hash = hashed
         return redirect("/dashboard")
 
     else:
-        return render_template("changepw.html", error=g.trans['invalid_password'])
-        
+        return render_template("changepw.html", error='invalid_password')
+
 
 @dashboard_bp.route("/dashboard/import", methods=['GET', 'POST'])
 def migrate():
@@ -377,7 +384,7 @@ def migrate():
 
     blog = g.db.query(Blog).filter_by(name=blog_d).first()
     if blog.owner != g.user:
-        return redirect("/dashboard")
+        abort(403)
 
     for post in posts:
         title = post['title']
@@ -404,7 +411,7 @@ def stats(blog):
 
     blog = g.db.query(Blog).filter_by(name=blog).first()
     if blog.owner != g.user:
-        return redirect("/dashboard")
+        abort(403)
 
     posts = g.db.query(Post).filter_by(blog=blog.id).all()
 
@@ -459,9 +466,9 @@ def new_page(blog):
     content_html = request.form.get("content")
     show = request.form.get("show")
     if len(name) > 120:
-        return render_template("new_page.html", blog=blog, error="Name too long! Max 120 characters")
+        return render_template("new_page.html", blog=blog, error="name-too-long")
     if not re.match(r"^\/[a-zA-Z0-9\-\_]+$", url):
-        return render_template("new_page.html", blog=blog, error="Invalid URL!")
+        return render_template("new_page.html", blog=blog, error="invalid-url")
 
     url = url[1:]
     if url == "rss":
@@ -506,10 +513,10 @@ def edit_page(page):
     show = request.form.get("show")
     url = request.form.get("url")
     if len(name) > 120:
-        return render_template("new_page.html", blog=blog, page=page, home=home, error="Name too long!")
+        return render_template("new_page.html", blog=blog, page=page, home=home, error="name-too-long")
     if home == False:
         if not re.match(r"^\/[a-zA-Z0-9\-\_]+$", url):
-            return render_template("new_page.html", blog=blog, error="Invalid URL!")
+            return render_template("new_page.html", blog=blog, error="invalid-url")
 
         url = url[1:]
         if url == "rss":
@@ -557,7 +564,50 @@ def page_delete(page):
     if blog.owner != g.user:
         return abort(403)
 
+    if page.url == "":
+        return redirect("/dashboard")
+
     g.db.delete(page)
     g.db.commit()
 
     return redirect(f"/dashboard/edit/{blog.name}")
+
+@dashboard_bp.route("/dashboard/export/<blog>")
+def export_posts(blog):
+    if g.user is None:
+        return redirect("/login")
+
+    blog_obj = g.db.query(Blog).filter_by(name=blog).first()
+    if blog_obj is None or blog_obj.owner != g.user:
+        return redirect("/dashboard")
+
+    posts = g.db.query(Post).filter_by(blog=blog_obj.id).all()
+    
+    
+    output = StringIO()
+    writer = csv.writer(output)
+    
+    writer.writerow(['Title', 'Content Raw', 'Content HTML', 'Author', 'Link', 'Date', 'Updated', 'Feed', 'Is Draft'])
+    
+    for post in posts:
+        writer.writerow([
+            post.title,
+            post.content_raw,
+            post.content_html,
+            post.author,
+            post.link,
+            post.date.isoformat() if post.date else '',
+            post.updated.isoformat() if post.updated else '',
+            post.feed,
+            post.isdraft
+        ])
+    
+    output.seek(0)
+    
+    return Response(
+        output.getvalue(),
+        mimetype='text/csv',
+        headers={
+            'Content-Disposition': f'attachment; filename={blog}_posts.csv'
+        }
+    )