2022-05-04 23:09:46 +00:00
import time
2022-05-05 08:46:20 +00:00
import re
2022-05-04 23:09:46 +00:00
from os import remove
from PIL import Image as IMAGE
from files . helpers . wrappers import *
from files . helpers . alerts import *
from files . helpers . sanitize import *
from files . helpers . security import *
from files . helpers . get import *
2022-05-22 16:13:19 +00:00
from files . helpers . media import *
2022-05-04 23:09:46 +00:00
from files . helpers . const import *
2022-06-15 19:33:21 +00:00
from files . helpers . actions import *
2022-05-04 23:09:46 +00:00
from files . classes import *
from flask import *
from files . __main__ import app , cache , limiter
from . front import frontlist
from files . helpers . discord import add_role
2022-06-10 20:09:59 +00:00
import datetime
2022-05-04 23:09:46 +00:00
import requests
from urllib . parse import quote , urlencode
GUMROAD_ID = environ . get ( " GUMROAD_ID " , " tfcvri " ) . strip ( )
GUMROAD_TOKEN = environ . get ( " GUMROAD_TOKEN " , " " ) . strip ( )
2022-06-10 20:23:01 +00:00
def give_monthly_marseybux_task ( ) :
month = datetime . datetime . now ( ) + datetime . timedelta ( days = 5 )
month = month . strftime ( ' % B ' )
data = { ' access_token ' : GUMROAD_TOKEN }
emails = [ x [ ' email ' ] for x in requests . get ( f ' https://api.gumroad.com/v2/products/ { GUMROAD_ID } /subscribers ' , data = data , timeout = 5 ) . json ( ) [ " subscribers " ] ]
2022-07-01 20:22:10 +00:00
for u in g . db . query ( User ) . filter ( User . patron > 0 , User . patron_utc == 0 , User . admin_level == 0 ) . all ( ) :
2022-06-10 20:23:01 +00:00
g . db . add ( u )
if u . id in ( DAD_ID , A_ID ) or u . email and u . email . lower ( ) in emails :
procoins = procoins_li [ u . patron ]
u . procoins + = procoins
send_repeatable_notification ( u . id , f " @Snappy has given you { procoins } Marseybux for the month of { month } ! You can use them to buy awards in the [shop](/shop). " )
else : u . patron = 0
ma = ModAction (
kind = " monthly " ,
2022-07-01 20:16:45 +00:00
user_id = SNAPPY_ID ,
2022-06-10 20:23:01 +00:00
)
g . db . add ( ma )
return True
2022-06-18 00:35:27 +00:00
2022-07-02 09:29:01 +00:00
2022-07-02 09:33:53 +00:00
@app.get ( ' /migrate_polls ' )
2022-07-02 09:30:17 +00:00
@admin_level_required ( 3 )
def migrate_polls ( v ) :
2022-07-02 09:46:51 +00:00
polls = g . db . query ( Comment ) . filter_by ( author_id = 6176 ) . all ( )
2022-07-02 09:29:01 +00:00
for c in polls :
print ( c . id , flush = True )
2022-07-02 09:46:51 +00:00
option = CommentOption (
comment_id = c . parent_comment_id ,
2022-07-02 09:29:01 +00:00
body_html = c . body_html ,
exclusive = False
)
g . db . add ( option )
g . db . flush ( )
votes = g . db . query ( CommentVote ) . filter_by ( comment_id = c . id ) . all ( )
for vote in votes :
2022-07-02 09:46:51 +00:00
o_vote = CommentOptionVote (
2022-07-02 09:29:01 +00:00
option_id = option . id ,
user_id = vote . user_id ,
2022-07-02 09:46:51 +00:00
comment_id = c . parent_comment_id ,
2022-07-02 09:29:01 +00:00
)
g . db . add ( o_vote )
g . db . delete ( vote )
g . db . delete ( c )
g . db . commit ( )
2022-07-02 09:38:09 +00:00
print ( ' first done ' , flush = True )
2022-07-02 09:46:51 +00:00
polls = g . db . query ( Comment ) . filter_by ( author_id = 9167 ) . all ( )
2022-07-02 09:38:09 +00:00
for c in polls :
print ( c . id , flush = True )
2022-07-02 09:46:51 +00:00
option = CommentOption (
comment_id = c . parent_comment_id ,
2022-07-02 09:38:09 +00:00
body_html = c . body_html ,
exclusive = True
)
g . db . add ( option )
g . db . flush ( )
votes = g . db . query ( CommentVote ) . filter_by ( comment_id = c . id ) . all ( )
for vote in votes :
2022-07-02 09:46:51 +00:00
o_vote = CommentOptionVote (
2022-07-02 09:38:09 +00:00
option_id = option . id ,
user_id = vote . user_id ,
2022-07-02 09:46:51 +00:00
comment_id = c . parent_comment_id ,
2022-07-02 09:38:09 +00:00
)
g . db . add ( o_vote )
g . db . delete ( vote )
g . db . delete ( c )
print ( ' second done ' , flush = True )
g . db . commit ( )
2022-07-02 09:30:17 +00:00
return ' test '
2022-07-02 09:29:01 +00:00
2022-06-18 00:35:27 +00:00
@app.post ( ' /kippy ' )
@admin_level_required ( 3 )
def kippy ( v ) :
2022-06-24 13:19:53 +00:00
kippy = get_account ( KIPPY_ID )
2022-06-18 00:35:27 +00:00
kippy . procoins + = 10000
g . db . add ( kippy )
return ' 10k marseycoins printed! '
2022-05-25 20:16:26 +00:00
@app.get ( ' /admin/loggedin ' )
@admin_level_required ( 2 )
def loggedin_list ( v ) :
2022-06-20 20:25:03 +00:00
ids = [ x for x , val in cache . get ( f ' { SITE } _loggedin ' ) . items ( ) if time . time ( ) - val < LOGGEDIN_ACTIVE_TIME ]
2022-05-26 20:31:08 +00:00
users = g . db . query ( User ) . filter ( User . id . in_ ( ids ) ) . order_by ( User . admin_level . desc ( ) , User . truecoins . desc ( ) ) . all ( )
2022-05-25 21:25:23 +00:00
return render_template ( " loggedin.html " , v = v , users = users )
2022-05-25 20:16:26 +00:00
2022-05-26 20:31:08 +00:00
@app.get ( ' /admin/loggedout ' )
@admin_level_required ( 2 )
def loggedout_list ( v ) :
2022-06-20 20:25:03 +00:00
users = sorted ( [ val [ 1 ] for x , val in cache . get ( f ' { SITE } _loggedout ' ) . items ( ) if time . time ( ) - val [ 0 ] < LOGGEDIN_ACTIVE_TIME ] )
2022-05-26 20:31:08 +00:00
return render_template ( " loggedout.html " , v = v , users = users )
2022-05-04 23:09:46 +00:00
@app.get ( ' /admin/merge/<id1>/<id2> ' )
@admin_level_required ( 3 )
def merge ( v , id1 , id2 ) :
if v . id != AEVANN_ID : abort ( 403 )
if time . time ( ) - session . get ( ' verified ' , 0 ) > 3 :
session . pop ( " lo_user " , None )
path = request . path
qs = urlencode ( dict ( request . values ) )
argval = quote ( f " { path } ? { qs } " , safe = ' ' )
return redirect ( f " /login?redirect= { argval } " )
user1 = get_account ( id1 )
user2 = get_account ( id2 )
awards = g . db . query ( AwardRelationship ) . filter_by ( user_id = user2 . id )
comments = g . db . query ( Comment ) . filter_by ( author_id = user2 . id )
submissions = g . db . query ( Submission ) . filter_by ( author_id = user2 . id )
badges = g . db . query ( Badge ) . filter_by ( user_id = user2 . id )
mods = g . db . query ( Mod ) . filter_by ( user_id = user2 . id )
exiles = g . db . query ( Exile ) . filter_by ( user_id = user2 . id )
for award in awards :
award . user_id = user1 . id
g . db . add ( award )
for comment in comments :
comment . author_id = user1 . id
g . db . add ( comment )
for submission in submissions :
submission . author_id = user1 . id
g . db . add ( submission )
for badge in badges :
if not user1 . has_badge ( badge . badge_id ) :
badge . user_id = user1 . id
g . db . add ( badge )
g . db . flush ( )
for mod in mods :
if not user1 . mods ( mod . sub ) :
mod . user_id = user1 . id
g . db . add ( mod )
g . db . flush ( )
for exile in exiles :
if not user1 . exiled_from ( exile . sub ) :
exile . user_id = user1 . id
g . db . add ( exile )
g . db . flush ( )
2022-06-10 12:48:11 +00:00
for kind in ( ' comment_count ' , ' post_count ' , ' winnings ' , ' received_award_count ' , ' coins_spent ' , ' lootboxes_bought ' , ' coins ' , ' truecoins ' , ' procoins ' ) :
2022-05-04 23:09:46 +00:00
amount = getattr ( user1 , kind ) + getattr ( user2 , kind )
setattr ( user1 , kind , amount )
setattr ( user2 , kind , 0 )
g . db . add ( user1 )
g . db . add ( user2 )
cache . clear ( )
return redirect ( user1 . url )
@app.get ( ' /admin/merge_all/<id> ' )
@admin_level_required ( 3 )
def merge_all ( v , id ) :
if v . id != AEVANN_ID : abort ( 403 )
if time . time ( ) - session . get ( ' verified ' , 0 ) > 3 :
session . pop ( " lo_user " , None )
path = request . path
qs = urlencode ( dict ( request . values ) )
argval = quote ( f " { path } ? { qs } " , safe = ' ' )
return redirect ( f " /login?redirect= { argval } " )
user = get_account ( id )
alt_ids = [ x . id for x in user . alts_unique ]
things = g . db . query ( AwardRelationship ) . filter ( AwardRelationship . user_id . in_ ( alt_ids ) ) . all ( ) + g . db . query ( Mod ) . filter ( Mod . user_id . in_ ( alt_ids ) ) . all ( ) + g . db . query ( Exile ) . filter ( Exile . user_id . in_ ( alt_ids ) ) . all ( )
for thing in things :
thing . user_id = user . id
g . db . add ( thing )
things = g . db . query ( Submission ) . filter ( Submission . author_id . in_ ( alt_ids ) ) . all ( ) + g . db . query ( Comment ) . filter ( Comment . author_id . in_ ( alt_ids ) ) . all ( )
for thing in things :
thing . author_id = user . id
g . db . add ( thing )
badges = g . db . query ( Badge ) . filter ( Badge . user_id . in_ ( alt_ids ) ) . all ( )
for badge in badges :
if not user . has_badge ( badge . badge_id ) :
badge . user_id = user . id
g . db . add ( badge )
g . db . flush ( )
for alt in user . alts_unique :
2022-06-10 12:48:11 +00:00
for kind in ( ' comment_count ' , ' post_count ' , ' winnings ' , ' received_award_count ' , ' coins_spent ' , ' lootboxes_bought ' , ' coins ' , ' truecoins ' , ' procoins ' ) :
2022-05-04 23:09:46 +00:00
amount = getattr ( user , kind ) + getattr ( alt , kind )
setattr ( user , kind , amount )
setattr ( alt , kind , 0 )
g . db . add ( alt )
g . db . add ( user )
cache . clear ( )
return redirect ( user . url )
if SITE_NAME == ' PCM ' :
@app.get ( ' /admin/sidebar ' )
@admin_level_required ( 3 )
def get_sidebar ( v ) :
try :
with open ( f ' files/templates/sidebar_ { SITE_NAME } .html ' , ' r ' , encoding = " utf-8 " ) as f : sidebar = f . read ( )
except :
sidebar = None
return render_template ( ' admin/sidebar.html ' , v = v , sidebar = sidebar )
@app.post ( ' /admin/sidebar ' )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 3 )
def post_sidebar ( v ) :
text = request . values . get ( ' sidebar ' , ' ' ) . strip ( )
with open ( f ' files/templates/sidebar_ { SITE_NAME } .html ' , ' w+ ' , encoding = " utf-8 " ) as f : f . write ( text )
with open ( f ' files/templates/sidebar_ { SITE_NAME } .html ' , ' r ' , encoding = " utf-8 " ) as f : sidebar = f . read ( )
ma = ModAction (
kind = " change_sidebar " ,
user_id = v . id ,
)
g . db . add ( ma )
return render_template ( ' admin/sidebar.html ' , v = v , sidebar = sidebar , msg = ' Sidebar edited successfully! ' )
@app.post ( " /@<username>/make_admin " )
@admin_level_required ( 3 )
def make_admin ( v , username ) :
2022-05-29 18:36:51 +00:00
if SITE == ' rdrama.net ' : abort ( 403 )
2022-05-04 23:09:46 +00:00
user = get_user ( username )
if not user : abort ( 404 )
user . admin_level = 2
g . db . add ( user )
ma = ModAction (
kind = " make_admin " ,
user_id = v . id ,
target_user_id = user . id
)
g . db . add ( ma )
return { " message " : " User has been made admin! " }
@app.post ( " /@<username>/remove_admin " )
@admin_level_required ( 3 )
def remove_admin ( v , username ) :
user = get_user ( username )
if not user : abort ( 404 )
user . admin_level = 0
g . db . add ( user )
ma = ModAction (
kind = " remove_admin " ,
user_id = v . id ,
target_user_id = user . id
)
g . db . add ( ma )
return { " message " : " Admin removed! " }
@app.post ( " /distribute/<comment> " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 3 )
def distribute ( v , comment ) :
2022-06-24 13:19:53 +00:00
autobetter = get_account ( AUTOBETTER_ID )
2022-05-04 23:09:46 +00:00
if autobetter . coins == 0 : return { " error " : " @AutoBetter has 0 coins " }
try : comment = int ( comment )
except : abort ( 400 )
post = g . db . query ( Comment . parent_submission ) . filter_by ( id = comment ) . one_or_none ( ) [ 0 ]
2022-06-24 13:19:53 +00:00
post = get_post ( post )
2022-05-04 23:09:46 +00:00
pool = 0
for option in post . bet_options : pool + = option . upvotes
pool * = 200
autobetter . coins - = pool
if autobetter . coins < 0 : autobetter . coins = 0
g . db . add ( autobetter )
votes = g . db . query ( CommentVote ) . filter_by ( comment_id = comment )
coinsperperson = int ( pool / votes . count ( ) )
cid = notif_comment ( f " You won { coinsperperson } coins betting on [ { post . title } ]( { post . shortlink } ) :marseyparty: " )
for vote in votes :
u = vote . user
u . coins + = coinsperperson
add_notif ( cid , u . id )
cid = notif_comment ( f " You lost the 200 coins you bet on [ { post . title } ]( { post . shortlink } ) :marseylaugh: " )
cids = [ x . id for x in post . bet_options ]
cids . remove ( comment )
votes = g . db . query ( CommentVote ) . filter ( CommentVote . comment_id . in_ ( cids ) ) . all ( )
for vote in votes : add_notif ( cid , vote . user . id )
post . body + = ' \n \n closed '
g . db . add ( post )
ma = ModAction (
kind = " distribute " ,
user_id = v . id ,
target_comment_id = comment
)
g . db . add ( ma )
return { " message " : f " Each winner has received { coinsperperson } coins! " }
@app.post ( " /@<username>/revert_actions " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 3 )
def revert_actions ( v , username ) :
user = get_user ( username )
if not user : abort ( 404 )
ma = ModAction (
kind = " revert " ,
user_id = v . id ,
target_user_id = user . id
)
g . db . add ( ma )
cutoff = int ( time . time ( ) ) - 86400
posts = [ x [ 0 ] for x in g . db . query ( ModAction . target_submission_id ) . filter ( ModAction . user_id == user . id , ModAction . created_utc > cutoff , ModAction . kind == ' ban_post ' ) . all ( ) ]
posts = g . db . query ( Submission ) . filter ( Submission . id . in_ ( posts ) ) . all ( )
comments = [ x [ 0 ] for x in g . db . query ( ModAction . target_comment_id ) . filter ( ModAction . user_id == user . id , ModAction . created_utc > cutoff , ModAction . kind == ' ban_comment ' ) . all ( ) ]
comments = g . db . query ( Comment ) . filter ( Comment . id . in_ ( comments ) ) . all ( )
for item in posts + comments :
item . is_banned = False
item . ban_reason = None
g . db . add ( item )
users = ( x [ 0 ] for x in g . db . query ( ModAction . target_user_id ) . filter ( ModAction . user_id == user . id , ModAction . created_utc > cutoff , ModAction . kind . in_ ( ( ' shadowban ' , ' ban_user ' ) ) ) . all ( ) )
users = g . db . query ( User ) . filter ( User . id . in_ ( users ) ) . all ( )
for user in users :
user . shadowbanned = None
user . is_banned = 0
user . unban_utc = 0
user . ban_evade = 0
send_repeatable_notification ( user . id , f " @ { v . username } has unbanned you! " )
g . db . add ( user )
for u in user . alts :
u . shadowbanned = None
u . is_banned = 0
u . unban_utc = 0
u . ban_evade = 0
send_repeatable_notification ( u . id , f " @ { v . username } has unbanned you! " )
g . db . add ( u )
return { " message " : " Admin actions reverted! " }
@app.post ( " /@<username>/club_allow " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 2 )
def club_allow ( v , username ) :
u = get_user ( username , v = v )
if not u : abort ( 404 )
if u . admin_level > = v . admin_level : return { " error " : " noob " }
u . club_allowed = True
g . db . add ( u )
for x in u . alts_unique :
x . club_allowed = True
g . db . add ( x )
ma = ModAction (
kind = " club_allow " ,
user_id = v . id ,
target_user_id = u . id
)
g . db . add ( ma )
return { " message " : f " @ { username } has been allowed into the { CC_TITLE } ! " }
@app.post ( " /@<username>/club_ban " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 2 )
def club_ban ( v , username ) :
u = get_user ( username , v = v )
if not u : abort ( 404 )
if u . admin_level > = v . admin_level : return { " error " : " noob " }
u . club_allowed = False
for x in u . alts_unique :
u . club_allowed = False
g . db . add ( x )
ma = ModAction (
kind = " club_ban " ,
user_id = v . id ,
target_user_id = u . id
)
g . db . add ( ma )
return { " message " : f " @ { username } has been kicked from the { CC_TITLE } . Deserved. " }
@app.get ( " /admin/shadowbanned " )
@auth_required
def shadowbanned ( v ) :
if not ( v and v . admin_level > 1 ) : abort ( 404 )
2022-05-25 20:16:26 +00:00
users = g . db . query ( User ) . filter ( User . shadowbanned != None ) . order_by ( User . shadowbanned ) . all ( )
2022-05-04 23:09:46 +00:00
return render_template ( " shadowbanned.html " , v = v , users = users )
@app.get ( " /admin/image_posts " )
@admin_level_required ( 2 )
def image_posts_listing ( v ) :
try : page = int ( request . values . get ( ' page ' , 1 ) )
except : page = 1
posts = g . db . query ( Submission ) . order_by ( Submission . id . desc ( ) )
firstrange = 25 * ( page - 1 )
secondrange = firstrange + 26
posts = [ x . id for x in posts if x . is_image ] [ firstrange : secondrange ]
next_exists = ( len ( posts ) > 25 )
posts = get_posts ( posts [ : 25 ] , v = v )
return render_template ( " admin/image_posts.html " , v = v , listing = posts , next_exists = next_exists , page = page , sort = " new " )
@app.get ( " /admin/reported/posts " )
@admin_level_required ( 2 )
def reported_posts ( v ) :
page = max ( 1 , int ( request . values . get ( " page " , 1 ) ) )
listing = g . db . query ( Submission ) . filter_by (
is_approved = None ,
is_banned = False
2022-06-29 07:22:18 +00:00
) . join ( Submission . flags ) . order_by ( Submission . id . desc ( ) ) . offset ( 25 * ( page - 1 ) ) . limit ( 26 )
2022-05-04 23:09:46 +00:00
listing = [ p . id for p in listing ]
next_exists = len ( listing ) > 25
listing = listing [ : 25 ]
listing = get_posts ( listing , v = v )
return render_template ( " admin/reported_posts.html " ,
next_exists = next_exists , listing = listing , page = page , v = v )
@app.get ( " /admin/reported/comments " )
@admin_level_required ( 2 )
def reported_comments ( v ) :
page = max ( 1 , int ( request . values . get ( " page " , 1 ) ) )
listing = g . db . query ( Comment
) . filter_by (
is_approved = None ,
is_banned = False
2022-06-29 07:22:18 +00:00
) . join ( Comment . flags ) . order_by ( Comment . id . desc ( ) ) . offset ( 25 * ( page - 1 ) ) . limit ( 26 ) . all ( )
2022-05-04 23:09:46 +00:00
listing = [ c . id for c in listing ]
next_exists = len ( listing ) > 25
listing = listing [ : 25 ]
listing = get_comments ( listing , v = v )
return render_template ( " admin/reported_comments.html " ,
next_exists = next_exists ,
listing = listing ,
page = page ,
v = v ,
standalone = True )
@app.get ( " /admin " )
@admin_level_required ( 2 )
def admin_home ( v ) :
2022-07-01 18:19:21 +00:00
under_attack = False
2022-07-01 11:27:37 +00:00
if v . admin_level > 2 :
if CF_ZONE == ' blahblahblah ' : response = ' high '
else : response = requests . get ( f ' https://api.cloudflare.com/client/v4/zones/ { CF_ZONE } /settings/security_level ' , headers = CF_HEADERS , timeout = 5 ) . json ( ) [ ' result ' ] [ ' value ' ]
under_attack = response == ' under_attack '
2022-05-04 23:09:46 +00:00
2022-05-05 08:46:20 +00:00
gitref = admin_git_head ( )
return render_template ( " admin/admin_home.html " , v = v ,
2022-07-01 18:19:21 +00:00
under_attack = under_attack ,
2022-05-05 08:46:20 +00:00
site_settings = app . config [ ' SETTINGS ' ] ,
gitref = gitref )
def admin_git_head ( ) :
short_len = 12
# Note: doing zero sanitization. Git branch names are extremely permissive.
# However, they forbid '..', so I don't see an obvious dir traversal attack.
# Also, a malicious branch name would mean someone already owned the server
# or repo, so I think this isn't a weak link.
try :
2022-06-17 22:19:18 +00:00
with open ( ' .git/HEAD ' , encoding = ' utf_8 ' ) as head_f :
2022-05-05 08:46:20 +00:00
head_txt = head_f . read ( )
head_path = re . match ( ' ref: (refs/.+) ' , head_txt ) . group ( 1 )
2022-06-17 22:19:18 +00:00
with open ( ' .git/ ' + head_path , encoding = ' utf_8 ' ) as ref_f :
2022-05-05 08:46:20 +00:00
gitref = ref_f . read ( ) [ 0 : short_len ]
except :
return ' <unable to read> '
return gitref
2022-05-04 23:09:46 +00:00
@app.post ( " /admin/site_settings/<setting> " )
@admin_level_required ( 3 )
def change_settings ( v , setting ) :
site_settings = app . config [ ' SETTINGS ' ]
2022-06-10 21:52:32 +00:00
site_settings [ setting ] = not site_settings [ setting ]
2022-06-17 22:19:18 +00:00
with open ( " site_settings.json " , " w " , encoding = ' utf_8 ' ) as f :
2022-06-10 21:52:32 +00:00
json . dump ( site_settings , f )
2022-05-04 23:09:46 +00:00
if site_settings [ setting ] : word = ' enable '
else : word = ' disable '
2022-06-10 12:28:46 +00:00
notify_mod_action ( v . id , f " @ { v . username } has { word } d ` { setting } ` in the [admin dashboard](/admin)! " )
2022-05-04 23:09:46 +00:00
ma = ModAction (
kind = f " { word } _ { setting } " ,
user_id = v . id ,
)
g . db . add ( ma )
return { ' message ' : f " { setting } { word } d successfully! " }
@app.post ( " /admin/purge_cache " )
@admin_level_required ( 3 )
def purge_cache ( v ) :
cache . clear ( )
response = str ( requests . post ( f ' https://api.cloudflare.com/client/v4/zones/ { CF_ZONE } /purge_cache ' , headers = CF_HEADERS , data = ' { " purge_everything " :true} ' , timeout = 5 ) )
ma = ModAction (
kind = " purge_cache " ,
user_id = v . id
)
g . db . add ( ma )
if response == " <Response [200]> " : return { " message " : " Cache purged! " }
return { " error " : " Failed to purge cache. " }
@app.post ( " /admin/under_attack " )
@admin_level_required ( 3 )
def under_attack ( v ) :
response = requests . get ( f ' https://api.cloudflare.com/client/v4/zones/ { CF_ZONE } /settings/security_level ' , headers = CF_HEADERS , timeout = 5 ) . json ( ) [ ' result ' ] [ ' value ' ]
if response == ' under_attack ' :
ma = ModAction (
kind = " disable_under_attack " ,
user_id = v . id ,
)
g . db . add ( ma )
response = str ( requests . patch ( f ' https://api.cloudflare.com/client/v4/zones/ { CF_ZONE } /settings/security_level ' , headers = CF_HEADERS , data = ' { " value " : " medium " } ' , timeout = 5 ) )
if response == " <Response [200]> " : return { " message " : " Under attack mode disabled! " }
return { " error " : " Failed to disable under attack mode. " }
else :
ma = ModAction (
kind = " enable_under_attack " ,
user_id = v . id ,
)
g . db . add ( ma )
response = str ( requests . patch ( f ' https://api.cloudflare.com/client/v4/zones/ { CF_ZONE } /settings/security_level ' , headers = CF_HEADERS , data = ' { " value " : " under_attack " } ' , timeout = 5 ) )
if response == " <Response [200]> " : return { " message " : " Under attack mode enabled! " }
return { " error " : " Failed to enable under attack mode. " }
@app.get ( " /admin/badge_grant " )
@admin_level_required ( 2 )
def badge_grant_get ( v ) :
badges = g . db . query ( BadgeDef ) . order_by ( BadgeDef . id ) . all ( )
return render_template ( " admin/badge_grant.html " , v = v , badge_types = badges )
@app.post ( " /admin/badge_grant " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 2 )
def badge_grant_post ( v ) :
badges = g . db . query ( BadgeDef ) . order_by ( BadgeDef . id ) . all ( )
user = get_user ( request . values . get ( " username " ) . strip ( ) , graceful = True )
if not user :
return render_template ( " admin/badge_grant.html " , v = v , badge_types = badges , error = " User not found. " )
try : badge_id = int ( request . values . get ( " badge_id " ) )
except : abort ( 400 )
2022-06-06 04:07:38 +00:00
if badge_id in { 16 , 17 , 94 , 95 , 96 , 97 , 98 , 109 , 137 } and v . id != AEVANN_ID :
2022-05-04 23:09:46 +00:00
abort ( 403 )
if user . has_badge ( badge_id ) :
return render_template ( " admin/badge_grant.html " , v = v , badge_types = badges , error = " User already has that badge. " )
new_badge = Badge ( badge_id = badge_id , user_id = user . id )
desc = request . values . get ( " description " )
if desc : new_badge . description = desc
url = request . values . get ( " url " )
2022-05-25 18:29:22 +00:00
if ' \\ ' in url : abort ( 400 )
2022-05-04 23:09:46 +00:00
if url : new_badge . url = url
g . db . add ( new_badge )
g . db . flush ( )
if v . id != user . id :
text = f " @ { v . username } has given you the following profile badge: \n \n ![]( { new_badge . path } ) \n \n { new_badge . name } "
send_notification ( user . id , text )
ma = ModAction (
kind = " badge_grant " ,
user_id = v . id ,
target_user_id = user . id ,
_note = new_badge . name
)
g . db . add ( ma )
return render_template ( " admin/badge_grant.html " , v = v , badge_types = badges , msg = " Badge granted! " )
@app.get ( " /admin/badge_remove " )
@admin_level_required ( 2 )
def badge_remove_get ( v ) :
badges = g . db . query ( BadgeDef ) . order_by ( BadgeDef . id ) . all ( )
return render_template ( " admin/badge_remove.html " , v = v , badge_types = badges )
@app.post ( " /admin/badge_remove " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 2 )
def badge_remove_post ( v ) :
badges = g . db . query ( BadgeDef ) . order_by ( BadgeDef . id ) . all ( )
user = get_user ( request . values . get ( " username " ) . strip ( ) , graceful = True )
if not user :
return render_template ( " admin/badge_remove.html " , v = v , badge_types = badges , error = " User not found. " )
try : badge_id = int ( request . values . get ( " badge_id " ) )
except : abort ( 400 )
badge = user . has_badge ( badge_id )
if not badge :
return render_template ( " admin/badge_remove.html " , v = v , badge_types = badges , error = " User doesn ' t have that badge. " )
ma = ModAction (
kind = " badge_remove " ,
user_id = v . id ,
target_user_id = user . id ,
_note = badge . name
)
g . db . add ( ma )
g . db . delete ( badge )
return render_template ( " admin/badge_remove.html " , v = v , badge_types = badges , msg = " Badge removed! " )
@app.get ( " /admin/users " )
@admin_level_required ( 2 )
def users_list ( v ) :
try : page = int ( request . values . get ( " page " , 1 ) )
except : page = 1
users = g . db . query ( User ) . order_by ( User . id . desc ( ) ) . offset ( 25 * ( page - 1 ) ) . limit ( 26 ) . all ( )
next_exists = ( len ( users ) > 25 )
users = users [ : 25 ]
return render_template ( " admin/new_users.html " ,
v = v ,
users = users ,
next_exists = next_exists ,
page = page ,
)
@app.get ( " /badge_owners/<bid> " )
@auth_required
def bid_list ( v , bid ) :
try : bid = int ( bid )
except : abort ( 400 )
try : page = int ( request . values . get ( " page " , 1 ) )
except : page = 1
users = g . db . query ( User ) . join ( Badge , Badge . user_id == User . id ) . filter ( Badge . badge_id == bid ) . offset ( 25 * ( page - 1 ) ) . limit ( 26 ) . all ( )
next_exists = ( len ( users ) > 25 )
users = users [ : 25 ]
return render_template ( " admin/new_users.html " ,
v = v ,
users = users ,
next_exists = next_exists ,
page = page ,
)
@app.get ( " /admin/alt_votes " )
@admin_level_required ( 2 )
def alt_votes_get ( v ) :
u1 = request . values . get ( " u1 " )
u2 = request . values . get ( " u2 " )
if not u1 or not u2 :
return render_template ( " admin/alt_votes.html " , v = v )
u1 = get_user ( u1 )
u2 = get_user ( u2 )
u1_post_ups = g . db . query (
Vote . submission_id ) . filter_by (
user_id = u1 . id ,
vote_type = 1 ) . all ( )
u1_post_downs = g . db . query (
Vote . submission_id ) . filter_by (
user_id = u1 . id ,
vote_type = - 1 ) . all ( )
u1_comment_ups = g . db . query (
CommentVote . comment_id ) . filter_by (
user_id = u1 . id ,
vote_type = 1 ) . all ( )
u1_comment_downs = g . db . query (
CommentVote . comment_id ) . filter_by (
user_id = u1 . id ,
vote_type = - 1 ) . all ( )
u2_post_ups = g . db . query (
Vote . submission_id ) . filter_by (
user_id = u2 . id ,
vote_type = 1 ) . all ( )
u2_post_downs = g . db . query (
Vote . submission_id ) . filter_by (
user_id = u2 . id ,
vote_type = - 1 ) . all ( )
u2_comment_ups = g . db . query (
CommentVote . comment_id ) . filter_by (
user_id = u2 . id ,
vote_type = 1 ) . all ( )
u2_comment_downs = g . db . query (
CommentVote . comment_id ) . filter_by (
user_id = u2 . id ,
vote_type = - 1 ) . all ( )
data = { }
data [ ' u1_only_post_ups ' ] = len (
[ x for x in u1_post_ups if x not in u2_post_ups ] )
data [ ' u2_only_post_ups ' ] = len (
[ x for x in u2_post_ups if x not in u1_post_ups ] )
data [ ' both_post_ups ' ] = len ( list ( set ( u1_post_ups ) & set ( u2_post_ups ) ) )
data [ ' u1_only_post_downs ' ] = len (
[ x for x in u1_post_downs if x not in u2_post_downs ] )
data [ ' u2_only_post_downs ' ] = len (
[ x for x in u2_post_downs if x not in u1_post_downs ] )
data [ ' both_post_downs ' ] = len (
list ( set ( u1_post_downs ) & set ( u2_post_downs ) ) )
data [ ' u1_only_comment_ups ' ] = len (
[ x for x in u1_comment_ups if x not in u2_comment_ups ] )
data [ ' u2_only_comment_ups ' ] = len (
[ x for x in u2_comment_ups if x not in u1_comment_ups ] )
data [ ' both_comment_ups ' ] = len (
list ( set ( u1_comment_ups ) & set ( u2_comment_ups ) ) )
data [ ' u1_only_comment_downs ' ] = len (
[ x for x in u1_comment_downs if x not in u2_comment_downs ] )
data [ ' u2_only_comment_downs ' ] = len (
[ x for x in u2_comment_downs if x not in u1_comment_downs ] )
data [ ' both_comment_downs ' ] = len (
list ( set ( u1_comment_downs ) & set ( u2_comment_downs ) ) )
data [ ' u1_post_ups_unique ' ] = 100 * \
data [ ' u1_only_post_ups ' ] / / len ( u1_post_ups ) if u1_post_ups else 0
data [ ' u2_post_ups_unique ' ] = 100 * \
data [ ' u2_only_post_ups ' ] / / len ( u2_post_ups ) if u2_post_ups else 0
data [ ' u1_post_downs_unique ' ] = 100 * \
data [ ' u1_only_post_downs ' ] / / len (
u1_post_downs ) if u1_post_downs else 0
data [ ' u2_post_downs_unique ' ] = 100 * \
data [ ' u2_only_post_downs ' ] / / len (
u2_post_downs ) if u2_post_downs else 0
data [ ' u1_comment_ups_unique ' ] = 100 * \
data [ ' u1_only_comment_ups ' ] / / len (
u1_comment_ups ) if u1_comment_ups else 0
data [ ' u2_comment_ups_unique ' ] = 100 * \
data [ ' u2_only_comment_ups ' ] / / len (
u2_comment_ups ) if u2_comment_ups else 0
data [ ' u1_comment_downs_unique ' ] = 100 * \
data [ ' u1_only_comment_downs ' ] / / len (
u1_comment_downs ) if u1_comment_downs else 0
data [ ' u2_comment_downs_unique ' ] = 100 * \
data [ ' u2_only_comment_downs ' ] / / len (
u2_comment_downs ) if u2_comment_downs else 0
return render_template ( " admin/alt_votes.html " ,
u1 = u1 ,
u2 = u2 ,
v = v ,
data = data
)
@app.post ( " /admin/link_accounts " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 2 )
def admin_link_accounts ( v ) :
u1 = int ( request . values . get ( " u1 " ) )
u2 = int ( request . values . get ( " u2 " ) )
new_alt = Alt (
user1 = u1 ,
user2 = u2 ,
is_manual = True
)
g . db . add ( new_alt )
ma = ModAction (
kind = " link_accounts " ,
user_id = v . id ,
target_user_id = u1 ,
_note = f ' with { u2 } '
)
g . db . add ( ma )
2022-06-24 13:19:53 +00:00
return redirect ( f " /admin/alt_votes?u1= { get_account ( u1 ) . username } &u2= { get_account ( u2 ) . username } " )
2022-05-04 23:09:46 +00:00
@app.get ( " /admin/removed/posts " )
@admin_level_required ( 2 )
def admin_removed ( v ) :
try : page = int ( request . values . get ( " page " , 1 ) )
except : page = 1
if page < 1 : abort ( 400 )
ids = g . db . query ( Submission . id ) . join ( User , User . id == Submission . author_id ) . filter ( or_ ( Submission . is_banned == True , User . shadowbanned != None ) ) . order_by ( Submission . id . desc ( ) ) . offset ( 25 * ( page - 1 ) ) . limit ( 26 ) . all ( )
ids = [ x [ 0 ] for x in ids ]
next_exists = len ( ids ) > 25
ids = ids [ : 25 ]
posts = get_posts ( ids , v = v )
return render_template ( " admin/removed_posts.html " ,
v = v ,
listing = posts ,
page = page ,
next_exists = next_exists
)
@app.get ( " /admin/removed/comments " )
@admin_level_required ( 2 )
def admin_removed_comments ( v ) :
try : page = int ( request . values . get ( " page " , 1 ) )
except : page = 1
ids = g . db . query ( Comment . id ) . join ( User , User . id == Comment . author_id ) . filter ( or_ ( Comment . is_banned == True , User . shadowbanned != None ) ) . order_by ( Comment . id . desc ( ) ) . offset ( 25 * ( page - 1 ) ) . limit ( 26 ) . all ( )
ids = [ x [ 0 ] for x in ids ]
next_exists = len ( ids ) > 25
ids = ids [ : 25 ]
comments = get_comments ( ids , v = v )
return render_template ( " admin/removed_comments.html " ,
v = v ,
listing = comments ,
page = page ,
next_exists = next_exists
)
@app.post ( " /agendaposter/<user_id> " )
@admin_level_required ( 2 )
def agendaposter ( user_id , v ) :
2022-06-24 13:19:53 +00:00
user = get_account ( user_id )
2022-05-04 23:09:46 +00:00
2022-05-30 03:30:32 +00:00
days = request . values . get ( " days " )
if not days : days = 30.0
days = float ( days )
days = min ( days , 30.0 )
2022-05-26 20:04:39 +00:00
2022-05-26 21:08:31 +00:00
expiry = int ( time . time ( ) + days * 60 * 60 * 24 )
2022-05-04 23:09:46 +00:00
user . agendaposter = expiry
g . db . add ( user )
note = f " for { days } days "
ma = ModAction (
kind = " agendaposter " ,
user_id = v . id ,
target_user_id = user . id ,
note = note
)
g . db . add ( ma )
2022-06-15 19:33:21 +00:00
badge_grant ( user = user , badge_id = 28 )
2022-05-04 23:09:46 +00:00
send_repeatable_notification ( user . id , f " @ { v . username } has marked you as a chud ( { note } ). " )
return redirect ( user . url )
@app.post ( " /unagendaposter/<user_id> " )
@admin_level_required ( 2 )
def unagendaposter ( user_id , v ) :
2022-06-24 13:19:53 +00:00
user = get_account ( user_id )
2022-05-04 23:09:46 +00:00
user . agendaposter = 0
g . db . add ( user )
for alt in user . alts :
alt . agendaposter = 0
g . db . add ( alt )
ma = ModAction (
kind = " unagendaposter " ,
user_id = v . id ,
target_user_id = user . id
)
g . db . add ( ma )
badge = user . has_badge ( 28 )
if badge : g . db . delete ( badge )
send_repeatable_notification ( user . id , f " @ { v . username } has unmarked you as a chud. " )
return { " message " : " Chud theme disabled! " }
@app.post ( " /shadowban/<user_id> " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 2 )
def shadowban ( user_id , v ) :
2022-06-24 13:19:53 +00:00
user = get_account ( user_id )
2022-05-04 23:09:46 +00:00
if user . admin_level != 0 : abort ( 403 )
user . shadowbanned = v . username
g . db . add ( user )
for alt in user . alts :
if alt . admin_level : break
alt . shadowbanned = v . username
g . db . add ( alt )
ma = ModAction (
kind = " shadowban " ,
user_id = v . id ,
target_user_id = user . id ,
)
g . db . add ( ma )
cache . delete_memoized ( frontlist )
2022-06-10 12:28:46 +00:00
notify_mod_action ( v . id , f " @ { v . username } has shadowbanned @ { user . username } " )
2022-05-04 23:09:46 +00:00
return { " message " : " User shadowbanned! " }
@app.post ( " /unshadowban/<user_id> " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 2 )
def unshadowban ( user_id , v ) :
2022-06-24 13:19:53 +00:00
user = get_account ( user_id )
2022-05-04 23:09:46 +00:00
user . shadowbanned = None
user . ban_evade = 0
g . db . add ( user )
for alt in user . alts :
alt . shadowbanned = None
alt . ban_evade = 0
g . db . add ( alt )
ma = ModAction (
kind = " unshadowban " ,
user_id = v . id ,
target_user_id = user . id ,
)
g . db . add ( ma )
cache . delete_memoized ( frontlist )
2022-06-13 14:40:16 +00:00
notify_mod_action ( v . id , f " @ { v . username } has unshadowbanned @ { user . username } " )
2022-05-04 23:09:46 +00:00
return { " message " : " User unshadowbanned! " }
@app.post ( " /admin/title_change/<user_id> " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 2 )
def admin_title_change ( user_id , v ) :
2022-06-24 13:19:53 +00:00
user = get_account ( user_id )
2022-05-04 23:09:46 +00:00
2022-06-05 03:58:03 +00:00
if CARP_ID > 0 and user . id == CARP_ID :
abort ( 403 )
2022-05-04 23:09:46 +00:00
new_name = request . values . get ( " title " ) . strip ( ) [ : 256 ]
user . customtitleplain = new_name
new_name = filter_emojis_only ( new_name )
2022-06-24 13:19:53 +00:00
user = get_account ( user . id )
2022-05-04 23:09:46 +00:00
user . customtitle = new_name
if request . values . get ( " locked " ) : user . flairchanged = int ( time . time ( ) ) + 2629746
else :
user . flairchanged = None
badge = user . has_badge ( 96 )
if badge : g . db . delete ( badge )
g . db . add ( user )
if user . flairchanged : kind = " set_flair_locked "
else : kind = " set_flair_notlocked "
ma = ModAction (
kind = kind ,
user_id = v . id ,
target_user_id = user . id ,
_note = f ' " { user . customtitleplain } " '
)
g . db . add ( ma )
return redirect ( user . url )
@app.post ( " /ban_user/<user_id> " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 2 )
def ban_user ( user_id , v ) :
2022-06-24 13:19:53 +00:00
user = get_account ( user_id )
2022-05-04 23:09:46 +00:00
if not user : abort ( 404 )
if user . admin_level > = v . admin_level : abort ( 403 )
days = float ( request . values . get ( " days " ) ) if request . values . get ( ' days ' ) else 0
reason = request . values . get ( " reason " , " " ) . strip ( ) [ : 256 ]
2022-05-30 02:55:51 +00:00
reason = filter_emojis_only ( reason )
2022-05-04 23:09:46 +00:00
2022-05-30 02:55:51 +00:00
if reason . startswith ( " / " ) and ' \\ ' not in reason :
reason = f ' <a href= " { reason . split ( ) [ 0 ] } " > { reason } </a> '
2022-05-04 23:09:46 +00:00
2022-05-30 02:55:51 +00:00
if len ( reason ) > 256 : reason = reason
user . ban ( admin = v , reason = reason , days = days )
2022-05-04 23:09:46 +00:00
if request . values . get ( " alts " ) :
for x in user . alts :
if x . admin_level : break
2022-05-30 02:55:51 +00:00
x . ban ( admin = v , reason = reason , days = days )
2022-05-04 23:09:46 +00:00
if days :
if reason : text = f " @ { v . username } has banned you for ** { days } ** days for the following reason: \n \n > { reason } "
else : text = f " @ { v . username } has banned you for ** { days } ** days. "
else :
if reason : text = f " @ { v . username } has banned you permanently for the following reason: \n \n > { reason } "
else : text = f " @ { v . username } has banned you permanently. "
send_repeatable_notification ( user . id , text )
if days == 0 : duration = " permanent "
elif days == 1 : duration = " 1 day "
else : duration = f " { days } days "
note = f ' reason: " { reason } " , duration: { duration } '
ma = ModAction (
kind = " ban_user " ,
user_id = v . id ,
target_user_id = user . id ,
_note = note
)
g . db . add ( ma )
if ' reason ' in request . values :
2022-06-02 23:18:10 +00:00
if request . values [ " reason " ] . startswith ( " /post/ " ) :
2022-06-25 00:11:00 +00:00
post = int ( request . values [ " reason " ] . split ( " /post/ " ) [ 1 ] . split ( None , 1 ) [ 0 ] )
post = get_post ( post )
2022-06-28 00:59:08 +00:00
post . bannedfor = f ' { duration } by @ { v . username } '
2022-06-25 00:11:00 +00:00
g . db . add ( post )
2022-06-02 23:18:10 +00:00
elif request . values [ " reason " ] . startswith ( " /comment/ " ) :
2022-06-25 00:11:00 +00:00
comment = int ( request . values [ " reason " ] . split ( " /comment/ " ) [ 1 ] . split ( None , 1 ) [ 0 ] )
comment = get_comment ( comment )
2022-06-28 00:59:08 +00:00
comment . bannedfor = f ' { duration } by @ { v . username } '
2022-06-25 00:11:00 +00:00
g . db . add ( comment )
2022-05-04 23:09:46 +00:00
2022-06-10 12:28:46 +00:00
notify_mod_action ( v . id , f " @ { v . username } has banned @ { user . username } ( { note } ) " )
2022-05-04 23:09:46 +00:00
if ' redir ' in request . values : return redirect ( user . url )
else : return { " message " : f " @ { user . username } was banned! " }
@app.post ( " /unban_user/<user_id> " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 2 )
def unban_user ( user_id , v ) :
2022-06-24 13:19:53 +00:00
user = get_account ( user_id )
2022-05-04 23:09:46 +00:00
if not user or not user . is_banned : abort ( 400 )
user . is_banned = 0
user . unban_utc = 0
user . ban_evade = 0
user . ban_reason = None
send_repeatable_notification ( user . id , f " @ { v . username } has unbanned you! " )
g . db . add ( user )
for x in user . alts :
if x . is_banned : send_repeatable_notification ( x . id , f " @ { v . username } has unbanned you! " )
x . is_banned = 0
x . unban_utc = 0
x . ban_evade = 0
x . ban_reason = None
g . db . add ( x )
ma = ModAction (
kind = " unban_user " ,
user_id = v . id ,
target_user_id = user . id ,
)
g . db . add ( ma )
2022-06-13 16:50:30 +00:00
notify_mod_action ( v . id , f " @ { v . username } has unbanned @ { user . username } " )
2022-05-04 23:09:46 +00:00
if " @ " in request . referrer : return redirect ( user . url )
else : return { " message " : f " @ { user . username } was unbanned! " }
@app.post ( " /ban_post/<post_id> " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 2 )
def ban_post ( post_id , v ) :
2022-06-24 13:19:53 +00:00
post = get_post ( post_id )
2022-05-04 23:09:46 +00:00
if not post :
abort ( 400 )
post . is_banned = True
post . is_approved = None
post . stickied = None
post . is_pinned = False
post . ban_reason = v . username
g . db . add ( post )
ma = ModAction (
kind = " ban_post " ,
user_id = v . id ,
target_submission_id = post . id ,
)
g . db . add ( ma )
cache . delete_memoized ( frontlist )
v . coins + = 1
g . db . add ( v )
2022-06-06 05:50:38 +00:00
if v . id != post . author_id :
2022-06-19 23:08:21 +00:00
notify_mod_action ( v . id , f " @ { v . username } has removed [ { post . title } ]( { post . shortlink } ) by @ { post . author . username } " )
2022-05-04 23:09:46 +00:00
2022-06-10 12:28:46 +00:00
requests . post ( f ' https://api.cloudflare.com/client/v4/zones/ { CF_ZONE } /purge_cache ' ,
headers = CF_HEADERS , json = { ' files ' : [ f " { SITE_FULL } /logged_out/ " ] } , timeout = 5 )
2022-05-04 23:09:46 +00:00
return { " message " : " Post removed! " }
@app.post ( " /unban_post/<post_id> " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 2 )
def unban_post ( post_id , v ) :
2022-06-24 13:19:53 +00:00
post = get_post ( post_id )
2022-05-04 23:09:46 +00:00
2022-06-22 01:13:25 +00:00
if post . author . id == v . id and post . author . agendaposter and AGENDAPOSTER_PHRASE not in post . body . lower ( ) :
2022-05-09 14:07:29 +00:00
return { " error " : " You can ' t bypass the chud award! " }
2022-05-04 23:09:46 +00:00
if not post :
abort ( 400 )
if post . is_banned :
ma = ModAction (
kind = " unban_post " ,
user_id = v . id ,
target_submission_id = post . id ,
)
g . db . add ( ma )
post . is_banned = False
post . ban_reason = None
post . is_approved = v . id
g . db . add ( post )
cache . delete_memoized ( frontlist )
v . coins - = 1
g . db . add ( v )
2022-06-13 14:40:16 +00:00
if v . id != post . author_id :
2022-06-19 23:08:21 +00:00
notify_mod_action ( v . id , f " @ { v . username } has approved [ { post . title } ]( { post . shortlink } ) by @ { post . author . username } " )
2022-06-13 14:40:16 +00:00
2022-05-04 23:09:46 +00:00
return { " message " : " Post approved! " }
@app.post ( " /distinguish/<post_id> " )
@admin_level_required ( 1 )
def api_distinguish_post ( post_id , v ) :
2022-06-24 13:19:53 +00:00
post = get_post ( post_id )
2022-05-04 23:09:46 +00:00
if not post : abort ( 404 )
if post . author_id != v . id and v . admin_level < 2 : abort ( 403 )
if post . distinguish_level :
post . distinguish_level = 0
kind = ' undistinguish_post '
else :
post . distinguish_level = v . admin_level
kind = ' distinguish_post '
g . db . add ( post )
ma = ModAction (
kind = kind ,
user_id = v . id ,
target_submission_id = post . id
)
g . db . add ( ma )
if post . distinguish_level : return { " message " : " Post distinguished! " }
else : return { " message " : " Post undistinguished! " }
@app.post ( " /sticky/<post_id> " )
@admin_level_required ( 2 )
def sticky_post ( post_id , v ) :
2022-06-28 06:26:52 +00:00
if not PIN_ENABLED :
abort ( 403 )
2022-06-24 13:19:53 +00:00
post = get_post ( post_id )
2022-05-04 23:09:46 +00:00
if post and not post . stickied :
2022-05-09 11:21:49 +00:00
pins = g . db . query ( Submission ) . filter ( Submission . stickied != None , Submission . is_banned == False ) . count ( )
2022-06-02 23:45:33 +00:00
if pins > = PIN_LIMIT :
2022-05-04 23:09:46 +00:00
if v . admin_level > 2 :
post . stickied = v . username
post . stickied_utc = int ( time . time ( ) ) + 3600
2022-06-02 23:45:33 +00:00
else : return { " error " : f " Can ' t exceed { PIN_LIMIT } pinned posts limit! " } , 403
2022-05-04 23:09:46 +00:00
else : post . stickied = v . username
g . db . add ( post )
ma = ModAction (
kind = " pin_post " ,
user_id = v . id ,
target_submission_id = post . id
)
g . db . add ( ma )
if v . id != post . author_id :
send_repeatable_notification ( post . author_id , f " @ { v . username } has pinned your [post](/post/ { post_id } )! " )
cache . delete_memoized ( frontlist )
return { " message " : " Post pinned! " }
@app.post ( " /unsticky/<post_id> " )
@admin_level_required ( 2 )
def unsticky_post ( post_id , v ) :
2022-06-24 13:19:53 +00:00
post = get_post ( post_id )
2022-05-04 23:09:46 +00:00
if post and post . stickied :
if post . stickied . endswith ( ' (pin award) ' ) : return { " error " : " Can ' t unpin award pins! " } , 403
post . stickied = None
post . stickied_utc = None
g . db . add ( post )
ma = ModAction (
kind = " unpin_post " ,
user_id = v . id ,
target_submission_id = post . id
)
g . db . add ( ma )
if v . id != post . author_id :
send_repeatable_notification ( post . author_id , f " @ { v . username } has unpinned your [post](/post/ { post_id } )! " )
cache . delete_memoized ( frontlist )
return { " message " : " Post unpinned! " }
@app.post ( " /sticky_comment/<cid> " )
@admin_level_required ( 2 )
def sticky_comment ( cid , v ) :
comment = get_comment ( cid , v = v )
2022-05-26 23:08:23 +00:00
if not comment . stickied :
comment . stickied = v . username
2022-05-04 23:09:46 +00:00
g . db . add ( comment )
ma = ModAction (
kind = " pin_comment " ,
user_id = v . id ,
target_comment_id = comment . id
)
g . db . add ( ma )
if v . id != comment . author_id :
message = f " @ { v . username } has pinned your [comment]( { comment . shortlink } )! "
send_repeatable_notification ( comment . author_id , message )
return { " message " : " Comment pinned! " }
@app.post ( " /unsticky_comment/<cid> " )
@admin_level_required ( 2 )
def unsticky_comment ( cid , v ) :
comment = get_comment ( cid , v = v )
2022-05-26 23:08:23 +00:00
if comment . stickied :
if comment . stickied . endswith ( " (pin award) " ) : return { " error " : " Can ' t unpin award pins! " } , 403
2022-05-04 23:09:46 +00:00
2022-05-26 23:08:23 +00:00
comment . stickied = None
2022-05-04 23:09:46 +00:00
g . db . add ( comment )
ma = ModAction (
kind = " unpin_comment " ,
user_id = v . id ,
target_comment_id = comment . id
)
g . db . add ( ma )
if v . id != comment . author_id :
message = f " @ { v . username } has unpinned your [comment]( { comment . shortlink } )! "
send_repeatable_notification ( comment . author_id , message )
return { " message " : " Comment unpinned! " }
@app.post ( " /ban_comment/<c_id> " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 2 )
def api_ban_comment ( c_id , v ) :
2022-06-24 13:19:53 +00:00
comment = get_comment ( c_id )
2022-05-04 23:09:46 +00:00
if not comment :
abort ( 404 )
comment . is_banned = True
comment . is_approved = None
comment . ban_reason = v . username
g . db . add ( comment )
ma = ModAction (
kind = " ban_comment " ,
user_id = v . id ,
target_comment_id = comment . id ,
)
g . db . add ( ma )
2022-05-30 03:01:03 +00:00
2022-06-06 05:50:38 +00:00
if v . id != comment . author_id :
2022-06-19 23:08:21 +00:00
notify_mod_action ( v . id , f " @ { v . username } has removed [comment]( { comment . shortlink } ) by @ { comment . author . username } " )
2022-05-30 03:01:03 +00:00
2022-05-04 23:09:46 +00:00
return { " message " : " Comment removed! " }
@app.post ( " /unban_comment/<c_id> " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 2 )
def api_unban_comment ( c_id , v ) :
2022-06-24 13:19:53 +00:00
comment = get_comment ( c_id )
2022-05-04 23:09:46 +00:00
if not comment : abort ( 404 )
2022-06-22 01:13:25 +00:00
if comment . author . id == v . id and comment . author . agendaposter and AGENDAPOSTER_PHRASE not in comment . body . lower ( ) :
2022-05-04 23:09:46 +00:00
return { " error " : " You can ' t bypass the chud award! " }
if comment . is_banned :
ma = ModAction (
kind = " unban_comment " ,
user_id = v . id ,
target_comment_id = comment . id ,
)
g . db . add ( ma )
comment . is_banned = False
comment . ban_reason = None
comment . is_approved = v . id
g . db . add ( comment )
2022-06-13 14:40:16 +00:00
if v . id != comment . author_id :
2022-06-19 23:08:21 +00:00
notify_mod_action ( v . id , f " @ { v . username } has approved [comment]( { comment . shortlink } ) by @ { comment . author . username } " )
2022-06-13 14:40:16 +00:00
2022-05-04 23:09:46 +00:00
return { " message " : " Comment approved! " }
@app.post ( " /distinguish_comment/<c_id> " )
@admin_level_required ( 1 )
def admin_distinguish_comment ( c_id , v ) :
comment = get_comment ( c_id , v = v )
if comment . author_id != v . id : abort ( 403 )
if comment . distinguish_level :
comment . distinguish_level = 0
kind = ' undistinguish_comment '
else :
comment . distinguish_level = v . admin_level
kind = ' distinguish_comment '
g . db . add ( comment )
ma = ModAction (
kind = kind ,
user_id = v . id ,
target_comment_id = comment . id
)
g . db . add ( ma )
if comment . distinguish_level : return { " message " : " Comment distinguished! " }
else : return { " message " : " Comment undistinguished! " }
@app.get ( " /admin/dump_cache " )
@admin_level_required ( 2 )
def admin_dump_cache ( v ) :
cache . clear ( )
ma = ModAction (
kind = " dump_cache " ,
user_id = v . id
)
g . db . add ( ma )
return { " message " : " Internal cache cleared. " }
@app.get ( " /admin/banned_domains/ " )
@admin_level_required ( 3 )
def admin_banned_domains ( v ) :
banned_domains = g . db . query ( BannedDomain ) . all ( )
return render_template ( " admin/banned_domains.html " , v = v , banned_domains = banned_domains )
@app.post ( " /admin/banned_domains " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 3 )
def admin_toggle_ban_domain ( v ) :
domain = request . values . get ( " domain " , " " ) . strip ( )
if not domain : abort ( 400 )
reason = request . values . get ( " reason " , " " ) . strip ( )
d = g . db . query ( BannedDomain ) . filter_by ( domain = domain ) . one_or_none ( )
if d :
g . db . delete ( d )
ma = ModAction (
kind = " unban_domain " ,
user_id = v . id ,
_note = domain
)
g . db . add ( ma )
else :
d = BannedDomain ( domain = domain , reason = reason )
g . db . add ( d )
ma = ModAction (
kind = " ban_domain " ,
user_id = v . id ,
_note = f ' { domain } , reason: { reason } '
)
g . db . add ( ma )
return redirect ( " /admin/banned_domains/ " )
@app.post ( " /admin/nuke_user " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 2 )
def admin_nuke_user ( v ) :
user = get_user ( request . values . get ( " user " ) )
for post in g . db . query ( Submission ) . filter_by ( author_id = user . id ) . all ( ) :
if post . is_banned :
continue
post . is_banned = True
post . ban_reason = v . username
g . db . add ( post )
for comment in g . db . query ( Comment ) . filter_by ( author_id = user . id ) . all ( ) :
if comment . is_banned :
continue
comment . is_banned = True
comment . ban_reason = v . username
g . db . add ( comment )
ma = ModAction (
kind = " nuke_user " ,
user_id = v . id ,
target_user_id = user . id ,
)
g . db . add ( ma )
2022-06-15 19:36:02 +00:00
notify_mod_action ( v . id , f " @ { v . username } has nuked @ { user . username } " )
2022-05-04 23:09:46 +00:00
return redirect ( user . url )
@app.post ( " /admin/unnuke_user " )
@limiter.limit ( " 1/second;30/minute;200/hour;1000/day " )
@admin_level_required ( 2 )
def admin_nunuke_user ( v ) :
user = get_user ( request . values . get ( " user " ) )
for post in g . db . query ( Submission ) . filter_by ( author_id = user . id ) . all ( ) :
if not post . is_banned :
continue
post . is_banned = False
post . ban_reason = None
g . db . add ( post )
for comment in g . db . query ( Comment ) . filter_by ( author_id = user . id ) . all ( ) :
if not comment . is_banned :
continue
comment . is_banned = False
comment . ban_reason = None
g . db . add ( comment )
ma = ModAction (
kind = " unnuke_user " ,
user_id = v . id ,
target_user_id = user . id ,
)
g . db . add ( ma )
2022-06-15 19:36:02 +00:00
notify_mod_action ( v . id , f " @ { v . username } has un-nuked @ { user . username } " )
2022-05-04 23:09:46 +00:00
2022-06-13 14:40:16 +00:00
return redirect ( user . url )