d3fc5f998a
* remove cache, cache setup is not easy, todays servers do not really * need it anymore * add prototypes and fix parameter issues * suppress redefinition
248 lines
6.4 KiB
Perl
Executable File
248 lines
6.4 KiB
Perl
Executable File
#!/usr/bin/perl
|
|
|
|
use warnings;
|
|
use strict;
|
|
use Data::Dumper;
|
|
|
|
use params();
|
|
use config();
|
|
use db();
|
|
use markup();
|
|
use comments();
|
|
use template();
|
|
use log();
|
|
use time();
|
|
|
|
binmode STDOUT, ":utf8";
|
|
|
|
my $r=shift;
|
|
(my $cgi, my $params, my $error)=params::get($r);
|
|
|
|
my $config = config::getFromScriptLocation();
|
|
my $debug = $config->{system}->{debug};
|
|
|
|
my $request={
|
|
url => $ENV{QUERY_STRING},
|
|
params => {
|
|
original => $params,
|
|
checked => check_params($config, $params),
|
|
},
|
|
config => $config,
|
|
};
|
|
$params=$request->{params}->{checked};
|
|
|
|
print "Content-Type:text/plain\n\n";
|
|
|
|
print STDERR "add comment: ".Dumper($params);
|
|
my $comment =$params->{comment};
|
|
|
|
$config->{access}->{write}=1;
|
|
my $dbh=db::connect($config,undef);
|
|
|
|
print "ok\n";
|
|
|
|
$comment->{content}=~s/(^|\s)((https?\:\/\/)(.*?))(\s|$|\<)/$1\<a href\=\"$2\"\>$2\<\/a\>$5/g;
|
|
$comment->{content}=~s/(^|\s)((https?\:\/\/)(.*?))(\s|$|\<)/$1\<a href\=\"$2\"\>$2\<\/a\>$5/g;
|
|
$comment->{content}=~s/(^|\s)((www\.)(.*?))(\s|$|\<)/$1\<a href\=\"http\:\/\/$2\"\>$2\<\/a\>$5/g; #"
|
|
$comment->{content}=~s/(^|\s)((www\.)(.*?))(\s|$|\<)/$1\<a href\=\"http\:\/\/$2\"\>$2\<\/a\>$5/g; #"
|
|
|
|
if (comments::check($dbh, $config, $comment)){
|
|
my $nslookup=nslookup();
|
|
|
|
#if (is_blocked($nslookup)==1){
|
|
# send_mail($comment, $nslookup, 'blocked');
|
|
# return;
|
|
#};
|
|
$comment->{comment_id}=comments::insert($dbh, $config, $comment);
|
|
if($comment->{comment_id}>0){
|
|
comments::update_comment_count($dbh, $config, $comment);
|
|
delete_cache($config);
|
|
send_mail($comment, $nslookup, 'new');
|
|
}
|
|
}
|
|
|
|
sub is_blocked{
|
|
my $nslookup=shift;
|
|
|
|
my $user_agent=$ENV{HTTP_USER_AGENT};
|
|
|
|
my $block=0;
|
|
$block = 1
|
|
if ( ( $user_agent eq 'Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:35.0) Gecko/20100101 Firefox/35.0' )
|
|
&& ( $nslookup =~ /alicedsl/ ) );
|
|
return $block;
|
|
}
|
|
|
|
sub send_mail{
|
|
my $comment = shift;
|
|
my $nslookup = shift;
|
|
my $status = shift || 'new';
|
|
|
|
my $ip = $ENV{REMOTE_ADDR}||'';
|
|
my $user_agent = $ENV{HTTP_USER_AGENT}||'';
|
|
my $cookie = $ENV{HTTP_COOKIE}||'';
|
|
|
|
my $from = 'no-reply@';
|
|
my $to = 'info@';
|
|
my $subject = "$status comment from '$comment->{author}': $comment->{content}";
|
|
my $content = "$status comment
|
|
|
|
FROM: '$comment->{author}'
|
|
EMAIL: $comment->{email}
|
|
|
|
CONTENT: '$comment->{content}'
|
|
|
|
view event
|
|
https://piradio.de/programm/sendung/$comment->{event_id}.html#comments
|
|
";
|
|
|
|
if ($status eq 'new'){
|
|
$content.="
|
|
manage comments:
|
|
https://piradio.de/agenda/planung/comment.cgi?project_id=1&studio_id=1
|
|
|
|
lock this comment
|
|
https://piradio.de/agenda/planung/comment.cgi?event_id=$comment->{event_id}&comment_id=$comment->{comment_id}&set_lock_status=blocked
|
|
";
|
|
}
|
|
|
|
$content.=qq{
|
|
-----------------------------------------------------------
|
|
|
|
SENDER IP: $ip ($comment->{ip})
|
|
USER AGENT: $user_agent
|
|
COOKIE: $cookie
|
|
|
|
$nslookup
|
|
};
|
|
|
|
use MIME::Lite;
|
|
my $msg = MIME::Lite->new(
|
|
From => $from,
|
|
To => $to,
|
|
Subject => $subject,
|
|
Data => $content
|
|
#.Dumper($comment)
|
|
);
|
|
|
|
$msg->send;
|
|
}
|
|
|
|
sub nslookup{
|
|
my $ip =$ENV{REMOTE_ADDR};
|
|
my $nslookup='';
|
|
if($ip=~/^([\d\.]+)$/){
|
|
$ip=$1;
|
|
return `nslookup '$ip'`;
|
|
}
|
|
return '';
|
|
}
|
|
|
|
sub delete_cache{
|
|
my $config=shift;
|
|
|
|
unless($config->{locations}->{base_dir}=~/a-zA-Z/){
|
|
print STDERR "add_comment.cgi: base_dir is not configured\n";
|
|
return;
|
|
}
|
|
unless($config->{cache}->{cache_dir}=~/a-zA-Z/){
|
|
print STDERR "add_comment.cgi: cache_dir is not configured\n";
|
|
return;
|
|
}
|
|
unless($config->{controllers}->{comments}=~/a-zA-Z/){
|
|
print STDERR "add_comment.cgi: contoller 'comments' is not configured\n";
|
|
return;
|
|
}
|
|
|
|
my $cache_dir=$config->{locations}->{base_dir}.'/'.$config->{cache}->{cache_dir}.'/';
|
|
|
|
my $widget_cache=$cache_dir.'/'.$config->{controllers}->{comments};
|
|
`rm -f $widget_cache/*` if (-d $widget_cache);
|
|
|
|
my $aggregator_dir=$cache_dir.'/programm/'.$config->{controllers}->{comments};
|
|
`rm -f $aggregator_dir/*` if (-d $aggregator_dir);
|
|
}
|
|
|
|
sub check_params{
|
|
my $config=shift;
|
|
my $params=shift;
|
|
|
|
my $template = template::check($config, $params->{'template'}, 'comments.html' );
|
|
|
|
my $comment={};
|
|
|
|
my $event_start=$params->{'event_start'}||'';
|
|
if ($event_start=~/^(\d\d\d\d\-\d\d\-\d\d[ T]\d\d\:\d\d)(\:\d\d)?$/){
|
|
$comment->{event_start}=$1;
|
|
}else{
|
|
log::error($config, 'add_comment.cgi: invalid date "'.$event_start.'"');
|
|
}
|
|
|
|
my $event_id=$params->{'event_id'}||'';
|
|
if ($event_id=~/^(\d+)$/){
|
|
$comment->{event_id}=$1;
|
|
}else{
|
|
log::error($config, 'add_comment.cgi: invalid id');
|
|
}
|
|
|
|
my $parent_id=$params->{'parent_id'}||'';
|
|
if ($parent_id=~/^(\d+)$/){
|
|
$comment->{parent_id}=$1;
|
|
}else{
|
|
$comment->{parent_id}=0;
|
|
}
|
|
|
|
$comment->{content}=$params->{'content'}||'';
|
|
$comment->{content}=escape_text($comment->{content});
|
|
$comment->{content}=substr($comment->{content},0,1000);
|
|
log::error($config, 'add_comment.cgi: missing body') if ($comment->{content}eq'');
|
|
|
|
$comment->{author}=$params->{'author'}||'';
|
|
$comment->{author}=escape_text($comment->{author});
|
|
$comment->{author}=substr($comment->{author},0,40);
|
|
log::error($config, 'add_comment.cgi: missing name') if ($comment->{author}eq'');
|
|
|
|
$comment->{email}=$params->{'email'}||'';
|
|
$comment->{email}=escape_text($comment->{email});
|
|
$comment->{email}=substr($comment->{email},0,40);
|
|
|
|
$comment->{title}=$params->{'title'}||'';
|
|
$comment->{title}=escape_text($comment->{title});
|
|
$comment->{title}=substr($comment->{title},0,80);
|
|
|
|
$comment->{ip}=$ENV{REMOTE_ADDR}||'';
|
|
log::error($config, 'missing ip') if ($comment->{ip}eq'');
|
|
$comment->{ip}=Digest::MD5::md5_base64($comment->{ip});
|
|
|
|
my $today=time::datetime_to_array(time::time_to_datetime());
|
|
my $date =time::datetime_to_array($comment->{event_start});
|
|
my $delta_days=time::days_between($today,$date);
|
|
log::error( $config, 'add_comment.cgi: no comments allowed, yet' )
|
|
if ( $delta_days > $config->{permissions}->{no_new_comments_before} );
|
|
log::error( $config, 'add_comment.cgi: no comments allowed anymore' )
|
|
if ( $delta_days < -1 * $config->{permissions}->{no_new_comments_after} );
|
|
|
|
return {
|
|
template =>$template,
|
|
comment =>$comment
|
|
};
|
|
}
|
|
|
|
sub escape_text{
|
|
my $s=shift;
|
|
$s=~s/^\s+//g;
|
|
$s=~s/\s+$//g;
|
|
|
|
#remove broken HTML
|
|
$s=~s/<[a-z\!\?\[\/][^\>]+?\>//gi;
|
|
$s=~s/<[a-z\!\?\[\/]\>//gi;
|
|
|
|
$s = markup::escapeHtml($s);
|
|
$s=~s/[\n\r]+/\<br \/\>/g;
|
|
$s=~s/\<br \/\>/\<br \/\>\n/g;
|
|
$s=~s/\<br \/\>\s*$//g;
|
|
return $s;
|
|
}
|
|
|
|
|