Class: FreditController

Inherits:
ApplicationController
  • Object
show all
Defined in:
app/controllers/fredit_controller.rb

Constant Summary collapse

CSS_DIR = 
Rails.root + 'public/stylesheets/**/*.css'
JS_DIR = 
Rails.root + 'public/javascripts/**/*.js'

Instance Method Summary collapse

Instance Method Details

#create ⇒ Object 



58
59
60
61
62
63
64
 
# File 'app/controllers/fredit_controller.rb', line 58

def create
  @path = secure_path params[:new_file]
  FileUtils::mkdir_p File.dirname(@path)
  File.open(@path, 'w') {|f| f.write("REPLACE WITH CONTENT")}
  flash[:notice] = "Created new file: #@path"
  redirect_to fredit_path(:file => @path)
end

#revision ⇒ Object 



93
94
95
96
97
98
99
 
# File 'app/controllers/fredit_controller.rb', line 93

def revision
  @path = secure_path params[:file]
  load_git_log
  @sha = params[:sha].gsub(/[^0-9a-z]/, '') # shell injection protection
  @git_object = @git.object(@sha)
  @diff = `git show #{@sha}`
end

#show ⇒ Object 



14
15
16
17
18
 
# File 'app/controllers/fredit_controller.rb', line 14

def show
  @path ||= secure_path(params[:file] || Fredit.editables[:views].first)
  load_git_log
  @source = File.read(Rails.root + @path)
end

#update ⇒ Object 



20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
 
# File 'app/controllers/fredit_controller.rb', line 20

def update
  @path = secure_path params[:file_path]

  edit_msg = !params[:edit_message].blank? ? params[:edit_message] : "unspecified edit"
  edit_msg_file = Tempfile.new('commit-message')
  edit_msg_file.write(edit_msg) # we write this message to a file to protect against shell injection
  edit_msg_file.close

  session[:commit_author] = (params[:commit_author] || '')
  # cleanup any shell injection attempt characters
  author = session[:commit_author].gsub(/[^\w@<>. ]/, '') 

  if session[:commit_author].blank?
    flash.now[:notice] = "Edited By must not be blank"
    @source = params[:source]
    load_git_log
    render :action => 'show'
    return
  end

  if params[:commit] =~ /delete/i
    `git rm #@path`
    flash[:notice] = "#@path deleted"
    res = system %Q|git commit --author='#{author}' --file #{edit_msg_file.path} #{@path}|
    @path = nil
  else
    n = params[:source].gsub(/\r\n/, "\n")
    File.open(@path, 'w') {|f| f.write(n)}
    system %Q|git add #{@path}|
    flash[:notice] = "#@path updated"
    res = system %Q|git commit --author='#{author}' --file #{edit_msg_file.path} #{@path}|
  end
  if res == false
    flash[:notice] = "Something went wrong with git. Make sure you changed something and filled in required fields."
  end
  redirect_to fredit_path(:file => @path)
end

#upload ⇒ Object 



66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
 
# File 'app/controllers/fredit_controller.rb', line 66

def upload
  @path = secure_path params[:file_path]
  upload = params[:upload_file]  
  if !upload.respond_to?(:original_filename)
    flash[:notice] = "You need to choose a file to upload"
    redirect_to fredit_path(file: @path)
    return
  end
  filename = upload.original_filename
  upload_dir = secure_path( params[:target_dir] || 'public/images' )
  FileUtils::mkdir_p upload_dir
  upload_path = File.join(upload_dir, filename)
  File.open(upload_path, 'wb') {|f| f.write(upload.read)}
  flash[:notice] = "File successfully uploaded to #{upload_path}"
  system %Q|git add #{upload_path}|
  author = session[:commit_author] = (params[:commit_author] || '').gsub(/[^\w@<>. ]/, '') 
  if author.blank?
    flash[:notice] = "Uploaded By must not be blank"
    redirect_to :back
    return
  end
  cmd = %Q|git commit --author='#{author}' -m 'added #{filename}' #{upload_path}|
  logger.debug cmd
  res = system cmd
  redirect_to fredit_path(@path)
end