Class: FreditController

Inherits:
ApplicationController
  • Object
show all
Defined in:
app/controllers/fredit_controller.rb

Constant Summary collapse

CSS_DIR = 
Rails.root + 'public/stylesheets/**/*.css'
JS_DIR = 
Rails.root + 'public/javascripts/**/*.js'

Instance Method Summary collapse

Instance Method Details

#create ⇒ Object 



62
63
64
65
66
67
68
 
# File 'app/controllers/fredit_controller.rb', line 62

def create
  @path = secure_path params[:new_file]
  FileUtils::mkdir_p File.dirname(@path)
  File.open(@path, 'w') {|f| f.write("REPLACE WITH CONTENT")}
  flash[:notice] = "Created new file: #@path"
  redirect_to fredit_path(:file => @path)
end

#revision ⇒ Object 



97
98
99
100
101
102
103
 
# File 'app/controllers/fredit_controller.rb', line 97

def revision
  @path = secure_path params[:file]
  load_git_log
  @sha = params[:sha].gsub(/[^0-9a-z]/, '') # shell injection protection
  @git_object = @git.object(@sha)
  @diff = `git show #{@sha}`
end

#show ⇒ Object 



14
15
16
17
18
19
20
21
22
 
# File 'app/controllers/fredit_controller.rb', line 14

def show
  @path ||= secure_path(params[:file] || Fredit.editables[:views].first)
  load_git_log
  @source = File.read(Rails.root + @path)
rescue 
  # to force the backtrace out into the rails log
  puts $!.backtrace
  raise
end

#update ⇒ Object 



24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
 
# File 'app/controllers/fredit_controller.rb', line 24

def update
  @path = secure_path params[:file_path]

  edit_msg = !params[:edit_message].blank? ? params[:edit_message] : "unspecified edit"
  edit_msg_file = Tempfile.new('commit-message')
  edit_msg_file.write(edit_msg) # we write this message to a file to protect against shell injection
  edit_msg_file.close

  session[:commit_author] = (params[:commit_author] || '')
  # cleanup any shell injection attempt characters
  author = session[:commit_author].gsub(/[^\w@<>. ]/, '') 

  if session[:commit_author].blank?
    flash.now[:notice] = "Edited By must not be blank"
    @source = params[:source]
    load_git_log
    render :action => 'show'
    return
  end

  if params[:commit] =~ /delete/i
    `git rm #@path`
    flash[:notice] = "#@path deleted"
    res = system %Q|git commit --author='#{author}' --file #{edit_msg_file.path} #{@path}|
    @path = nil
  else
    n = params[:source].gsub(/\r\n/, "\n")
    File.open(@path, 'w') {|f| f.write(n)}
    system %Q|git add #{@path}|
    flash[:notice] = "#@path updated"
    res = system %Q|git commit --author='#{author}' --file #{edit_msg_file.path} #{@path}|
  end
  if res == false
    flash[:notice] = "Something went wrong with git. Make sure you changed something and filled in required fields."
  end
  redirect_to fredit_path(:file => @path)
end

#upload ⇒ Object 



70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
 
# File 'app/controllers/fredit_controller.rb', line 70

def upload
  @path = secure_path params[:file_path]
  upload = params[:upload_file]  
  if !upload.respond_to?(:original_filename)
    flash[:notice] = "You need to choose a file to upload"
    redirect_to fredit_path(file: @path)
    return
  end
  filename = upload.original_filename
  upload_dir = secure_path( params[:target_dir] || 'public/images' )
  FileUtils::mkdir_p upload_dir
  upload_path = File.join(upload_dir, filename)
  File.open(upload_path, 'wb') {|f| f.write(upload.read)}
  flash[:notice] = "File successfully uploaded to #{upload_path}"
  system %Q|git add #{upload_path}|
  author = session[:commit_author] = (params[:commit_author] || '').gsub(/[^\w@<>. ]/, '') 
  if author.blank?
    flash[:notice] = "Uploaded By must not be blank"
    redirect_to :back
    return
  end
  cmd = %Q|git commit --author='#{author}' -m 'added #{filename}' #{upload_path}|
  logger.debug cmd
  res = system cmd
  redirect_to fredit_path(@path)
end