carpathianflorist
/
MarseyWorld
forked from MarseyWorld/MarseyWorld
1
0
Fork 0
Code Pull Requests Activity
30,530 Commits
1 Branch
0 Tags
2.3 GiB
Commit Graph

1613 Commits (759c90fdf8f23ca31fe7191d5122dc4463d3a90b)

Author SHA1 Message Date
Aevann 95bb5db1af remove intervention code for being not necessary anymore 2023-03-01 21:15:11 +02:00
Aevann 891fa80388 use "p" variable instead of "post" variabe for consistency 2023-03-01 00:37:12 +02:00
Aevann ff73022863 mive /edit_post and /edit_comment to the bottom 2023-03-01 00:22:59 +02:00
Aevann 55c8a51a1d make it possible to position poll options 2023-03-01 00:09:16 +02:00
Aevann 24c298f329 do this https://stupidpol.site/h/countryclub/post/79285/-/3681172#context 2023-02-28 21:36:14 +02:00
Aevann 86b0d2f5c1 fix comments not appearing 2023-02-27 18:16:12 +02:00
Aevann 984aecec9a destroy the shadow realm (#135) 
Co-authored-by: Aevann <randomname42029@gmail.com>
Reviewed-on: rDrama/rDrama#135
 2023-02-27 15:38:12 +00:00
Aevann 17bb6dad48 blackjack fix exploit 2023-02-27 07:33:45 +02:00
Aevann 6ac9b32834 allow positioning of files 2023-02-26 14:08:37 +02:00
Aevann fe0b8887bc change 1/second ratelimit to 1/2 second 2023-02-26 12:26:26 +02:00
Aevann fd9e1c3fec in push notifs: link the post I was mentioned in 2023-02-26 11:37:44 +02:00
Aevann 82a73392a9 fix errors 2023-02-26 10:49:09 +02:00
Aevann 8c495c914a default ratelimit doesnt apply implicitly if theres other @limiter.limit before the function, so add it explicity before all functions 2023-02-26 10:41:04 +02:00
Aevann 4c35f0b07f remove unnecessary line 2023-02-26 08:35:59 +02:00
Aevann 7aaeedea36 better ratelimiting 2023-02-26 03:42:39 +02:00
Aevann d2bda15383 remove unnecessary f 2023-02-24 04:54:31 +02:00
Aevann 3e7ccb7756 add push notifs to add_notif() 2023-02-24 04:28:10 +02:00
Aevann 81cc869fe2 make sure autojanny, zozbot, longpostbot add to the comment count of a post 2023-02-18 23:59:17 +02:00
Aevann d4913ce4ee constantify CASINO_RATELIMIT 2023-02-18 20:22:48 +02:00
Aevann 6af1954b8f Revert "bandaid fix to ping groups post" 
This reverts commit 8205efa318.
 2023-02-18 18:43:06 +02:00
Aevann d4210c2710 renamed p.embed_url to p.embed 2023-02-18 18:33:19 +02:00
Aevann d5d3e1f65e use abort in /submit 2023-02-18 01:25:01 +02:00
Aevann 8205efa318 bandaid fix to ping groups post 2023-02-11 08:55:37 +02:00
Aevann eb68c743e1 remove unnecessary return 2023-02-10 16:15:37 +02:00
Aevann 400ed01ed2 remove time measurement 2023-02-10 15:51:42 +02:00
Aevann a0378e83ab revert 2023-02-10 15:48:31 +02:00
Aevann e243458338 fix 500 error 2023-02-10 15:45:36 +02:00
Aevann 419f3da1e5 try to lower time it takes to load bug thread 2023-02-10 15:35:22 +02:00
Aevann 72097b4592 fix 2023-02-10 15:21:28 +02:00
Aevann f0b1870e92 fix 2023-02-10 14:06:27 +02:00
Aevann e1037467cc fix 2023-02-10 14:05:37 +02:00
Aevann 97cf5c89fe fix 2023-02-10 14:03:18 +02:00
Aevann 54800df9f0 measure /post time 2023-02-10 14:02:00 +02:00
Aevann 83195cded9 take pizza off the autopin list and up it to 1 hour again 2023-02-10 13:53:42 +02:00
Aevann b3f9fc88f0 reduce the autopin from 1 hour to 10 minutes 2023-02-09 15:47:19 +02:00
Aevann fc98963e7c remove unnecessary if condition 2023-02-09 07:12:37 +02:00
Aevann b79172a1a2 add 500MB limit in WPD 2023-02-08 18:54:11 +02:00
Aevann 42de90c955 remove print debugging 2023-02-08 18:26:14 +02:00
Aevann ea9cdea42b print debugging 2023-02-08 18:22:48 +02:00
Aevann c4394316fb add upload progressbar in /submit 2023-02-08 09:15:37 +02:00
Aevann 399d32eaf5 extend usage of features['NSFW_MARKING'] 2023-02-08 08:22:11 +02:00
Aevann 4c87ace27c remove ?all 2023-02-08 04:32:14 +02:00
Aevann 88814ee208 expand blackjack 2023-02-07 05:31:49 +02:00
Aevann 59fe09d0af disable NSFW marking in WPD 2023-02-01 20:52:34 +02:00
Aevann 8e5c00e351 pin snally posts 2023-01-29 18:29:17 +02:00
Aevann 349fa17836 use exlamation marks instead of dots in responses to users 2023-01-27 13:57:29 +02:00
Aevann b31405c23d rename handle_youtube to handle_youtube_links 2023-01-25 13:17:12 +02:00
Aevann a560958c3a fix youtube timestamps 2023-01-23 04:06:56 +02:00
Aevann a40dee5bd8 improve user ratelimiting 2023-01-21 06:39:46 +02:00
Aevann 4718576778 remove leftover discord shit 2023-01-20 07:41:45 +02:00
Aevann f17fade8a6 purge discord from site code 2023-01-20 07:31:53 +02:00
Aevann 044664a25e get rid of useless tabs and spaces 2023-01-01 13:36:20 +02:00
Aevann 8ee189022b seething hatred 2022-12-30 21:01:47 +02:00
Aevann c4872ecb07 Revert "attempt to fix ratelimiting user" 
This reverts commit 99597fc36c.
 2022-12-30 20:43:13 +02:00
Aevann 99597fc36c attempt to fix ratelimiting user 2022-12-30 20:40:58 +02:00
Aevann 9a8c986f93 attempt to fix ratelimiting user 2022-12-30 20:33:07 +02:00
Aevann 93e9a42fa3 stop using inline style/script elements 2022-12-29 16:20:27 +02:00
Aevann 909e3f5f29 use a cool flask feature i didnt know about 2022-12-29 12:39:10 +02:00
Aevann c1e147c190 dont pin agendaposter comment 2022-12-29 09:01:36 +02:00
Aevann f7aa7d8dfd better error messages 2022-12-28 11:50:48 +02:00
Aevann e3529d0495 use abort instead of return {"error": 2022-12-26 04:37:30 +02:00
Aevann 561b14cfd6 make post thumbnails not animated 2022-12-26 04:16:46 +02:00
Aevann 9af435adf0 im genuinely fucking retarded 2022-12-26 04:14:09 +02:00
Aevann ecf95ef51e force posts by @intervention into chudrama 2022-12-24 21:11:32 +02:00
Aevann a63b02470d use sets with in statements 2022-12-24 00:22:41 +02:00
Aevann e45fd63d64 do this https://watchpeopledie.tv/h/aftermath/post/17441/horribly-mangled-corpse-after-traffic-accident/344509 2022-12-23 02:47:01 +02:00
Aevann1 78e2fe9d5a remove unnecessary logic now 2022-12-16 16:48:17 +02:00
justcool393 7aa10b9d1b special logic redux (#76) 
Co-authored-by: justcool393 <justcool393@gmail.com>
Reviewed-on: rDrama/rDrama#76
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
 2022-12-15 22:56:04 +00:00
justcool393 82f34d0cab submissions: special posting sub logic by request (#75) 
Co-authored-by: justcool393 <justcool393@gmail.com>
Reviewed-on: rDrama/rDrama#75
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
 2022-12-15 22:51:59 +00:00
Aevann1 a71b21c1b6 fix JC bug 2022-12-14 20:24:14 +02:00
Aevann1 0376124eb0 clearer notifications for hole and admin actions 2022-12-13 19:11:26 +02:00
justcool393 ab41db22b7 [DO NOT MERGE] multiple sub banners (#59) 
allows multiple sub banners

Snakes note: By request of Carp, especially for WPD.

Co-authored-by: justcool393 <justcool393@gmail.com>
Co-authored-by: Snakes <duolsm@outlook.com>
Reviewed-on: rDrama/rDrama#59
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
 2022-12-11 23:44:34 +00:00
Aevann1 d59543891f add BAN_EVASION_FULL constant 2022-12-11 20:56:04 +02:00
Aevann1 02eb014dd8 posters for videos 2022-12-10 21:39:30 +02:00
Aevann1 3e3d39e432 minor /set_new rework 2022-12-10 16:57:19 +02:00
Aevann1 2525db6b07 give ppl a notif when janny toggles nsfw on their posts 2022-12-10 16:47:20 +02:00
Aevann1 5e52a86500 cleanup user ids in const.py 2022-12-10 16:00:03 +02:00
Aevann1 ff2ced1911 fix 500 error 2022-12-10 10:24:29 +02:00
Snakes f06da51288 vid-thumbs: suppress ffmpeg stdout, fix vid toggle 
Previous behavior on submission_listing was clicking a thumbnail would
toggle an inline video player. This was retained for clicking the
thumbnail off the `.video-play` element; however, directly clicking
the `.video-play` did not have the `toggleVideo` onclick event attached
and would navigate the browser to the video file directly.
 2022-12-10 04:05:46 +00:00
Aevann1 37cedaee9f add thumbnails for videos on the frontpage 2022-12-10 04:05:46 +00:00
Aevann1 14d343dcb3 dont change titles for chudded ppl posting on /h/chudrama 2022-12-05 03:21:47 +02:00
justcool393 ed0981cbdb add functionality to disable poll formatting (#35) 
Co-authored-by: justcool393 <justcool393@gmail.com>
Reviewed-on: rDrama/rDrama#35
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
 2022-12-04 21:46:27 +00:00
Aevann e105035272 remove country club system and replace it with a 3 tier thing: (#41) 
- /h/masterbaiters: 1 TS - for gayops

- /h/countryclub: 1000 TS - for anything requiring secrecy and doesnt need critical mass - have to make it a rule that u cant post gayops in /h/countryclub

- /h/chudrama: 5000 TS - for chad+stud posts

EDIT: i removed the /h/masterbaiters gate, but u can bring it back if u want
Co-authored-by: Aevann1 <randomname42029@gmail.com>
Co-authored-by: Snakes <duolsm@outlook.com>
Reviewed-on: rDrama/rDrama#41
Co-authored-by: Aevann <aevann@noreply.fsdfsd.net>
Co-committed-by: Aevann <aevann@noreply.fsdfsd.net>
 2022-12-04 18:39:06 +00:00
Aevann1 2deba4d623 "megathread" new sort 2022-12-04 00:01:08 +02:00
Snakes 71738b05fc
Fix 500 on all non-holed post submissions. 2022-12-01 17:12:57 -05:00
justcool393 0f2f72f2c3 sort by new button (#34) 
also get rid of megathread logic

do the needful and do
```sql
UPDATE submissions SET new=true WHERE title LIKE 'Thread' OR title ILIKE 'megathread';
```
or whatever the proper equivalent is

Co-authored-by: justcool393 <justcool393@gmail.com>
Reviewed-on: rDrama/rDrama#34
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
 2022-12-01 22:04:10 +00:00
Aevann1 e125443d50 make Thread (upper case) sort comments by new, around 20% false positive rate but worth it 2022-12-01 19:49:26 +02:00
Aevann1 3308734dc7 dont auto-pin if post sub is stealthed 2022-12-01 18:22:33 +02:00
Aevann1 845e13b4ae minor bug fix 2022-12-01 14:27:15 +02:00
justcool393 69a44baea7 settings: convert all to snek_case 2022-11-30 12:26:07 -06:00
justcool393 0106a4e340 antispam: under siege mode 2022-11-30 11:37:35 -06:00
Aevann1 ff2503ce4b fix 500 error 2022-11-29 03:47:54 +02:00
Aevann1 be8be13a01 move pinned comment ordering to SQLAlchemy 2022-11-29 02:04:06 +02:00
Aevann1 4656fa0b8d pin posts by pizza/impassionata/TGTW automatically for 1 hour 2022-11-28 04:07:06 +02:00
Aevann ca8c8297c5 sort pinned top-level comments by most recent first 2022-11-28 01:16:49 +02:00
justcool393 0ff034b01b add typing to a bunch of routes 2022-11-26 15:00:16 -06:00
Aevann1 d624dbe2de fix this https://rdrama.net/post/125682 2022-11-26 08:11:00 +02:00
Aevann1 a641acaf8f use sets instead of lists in some statements 2022-11-26 06:52:47 +02:00
Aevann1 642d19b861 move ratelimit_user after auth 2022-11-26 01:37:04 +02:00
Aevann1 e4b521a63f limit polls to 10 options to prevent spam 2022-11-25 23:33:38 +02:00
justcool393 816389cf28 security: fix DoS on title getter 
the `timeout` parameter only applies to seconds per *byte* received (and time to first
byte), not the entire request

this means an attacker could theoretically send a very... slow...
stream... of... bytes... and... crash... the... worker... when... the...
timeout... is... reached...
 2022-11-25 07:10:05 -06:00
justcool393 427d8f643d ratelimiting: use ratelimit_user everywhere 2022-11-21 09:30:27 -06:00
Aevann1 1de69518be stop forcing posts in /h/chudrama 2022-11-21 16:13:21 +02:00
Aevann1 caabaf0c6f expand IS_LOCALHOST 2022-11-21 00:16:49 +02:00
Aevann1 0be653e632 remove unecessary request when making a post linking to a yt video 2022-11-19 06:44:07 -06:00
Aevann1 2fd63d7474 I hate you and I hope you die a violent death 2022-11-18 23:11:03 +02:00
justcool393 83963470e8
user can_view functions (#460) 
* user: move can_see_to user class

* stub out can_see in comments and posts

* make can_see a classmethod so it's usable for loggedoutfriends

* test

* kill me now

* threelargeclassesmating

* dfdfdfdfdfdfd

* sdsdsdsd

* classmethod should be above i think

* Revert "classmethod should be above i think"

This reverts commit df1772eb9e7e71bf7b89123f6277b648de2b1af3.

* Revert "Revert "classmethod should be above i think""

This reverts commit 32883406c2e2916fc6c436611376a1817c16cb84.

* test rewritnig thing

* go home python

* what the fuck python

* fix AttributeError

* sdsdsdsdsdsd

* lazy and user and stuff

* test

* Revert "test"

This reverts commit 45af5bb3d45f3ec17126ab117d494ec978062a38.

* merge

* newline

* test

* test 2

* Revert "test"

This reverts commit 196dae677e2ee8cd29261c93dcb747087cb399b6.

* revert test

* fix merge error

* fix import error ciruclation i think

* sdsd

* add type annotations back

* deleted_utc

* isinstance

* user_can_see in jinja and remove unnecessary things

* a bunch of stuff
remove can_see from comment and post
expand can_see to messages

* antiannoyingamountsofwhitespace

* fix for chudrama

* improve prev
 2022-11-17 16:02:08 -05:00
justcool393 caf3a81748 remove unnecessary fstrings 
(or actually use the feature)
 2022-11-17 10:01:03 -06:00
justcool393 b2d0671734 merge fix: remove a couple of unnecessary from flask import *s 2022-11-15 05:28:45 -06:00
justcool393 781daeed2f fix thumbnail thread redux i think 2022-11-15 04:57:49 -06:00
justcool393 60748e4135 add TODO for migration of old comments 2022-11-15 04:43:19 -06:00
justcool393 168e5d04b9 give the thumbnail thread their own db_session 2022-11-15 04:34:35 -06:00
Snakes e896aaa1f7
Fix comment rendering when pin.level > 1. 2022-11-15 05:29:47 -05:00
justcool393 8f2f48d6d1
[DO NOT MERGE] import detanglation (#442) 
* move Base definition to files.classes.__init__.py

* fix ImportError

* move userpage listing to users.py

* don't import the app from classes

* consts: set default values to avoid crashes
consts: warn if the secret key is the default config value

* card view: sneed (user db schema)

* cloudflare: use DEFAULT_CONFIG_VALUE

* const: set default values

* decouple media.py from __main__

* pass database to avoid imports

* import cleanup and import request not in const, but in the requests mega import

* move asset_submissions site check to __init__

* asset submissions feature flag

* flag

* g.is_tor

* don't import request where it's not needed

* i think this is fine

* mail: move to own routes and helper

* wrappers

* required wrappers move

* unfuck wrappers a bit

* move snappy quotes and marseys to stateful consts

* marsify

* :pepodrool:

* fix missing import

* import cache

* ...and settings.py

* and static.py

* static needs cache

* route

* lmao all of the jinja shit was in feeds.py amazing

* classes should only import what they need from flask

* import Response

* hdjbjdhbhjf

* ...

* dfdfdfdf

* make get a non-required import

* isort imports (mostly)

* but actually

* configs

* reload config on import

* fgfgfgfg

* config

* config

* initialize snappy and test

* cookie of doom debug

* edfjnkf

* xikscdfd

* debug config

* set session cookie domain, i think this fixes the can't login bug

* sdfbgnhvfdsghbnjfbdvvfghnn

* hrsfxgf

* dump the entire config on a request

* kyskyskyskyskyskyskyskyskys

* duifhdskfjdfd

* dfdfdfdfdfdfdfdfdfdfdfdf

* dfdfdfdf

* imoprt all of the consts beacuse fuck it

* 😭

* dfdfdfdfdfdfsdasdf

* print the entire session

* rffdfdfjkfksj

* fgbhffh

* not the secret keys

* minor bug fixes

* be helpful in the warning

* gfgfgfg

* move warning lower

* isort main imports (i hope this doesn't fuck something up)

* test

* session cookie domain redux

* dfdfdfd

* try only importing Flask

* formkeys fix

* y

* :pepodrool:

* route helper

* remove before flight

* dfdfdfdfdf

* isort classes

* isort helpers

* move check_for_alts to routehelpers and also sort imports and get rid of unused ones

* that previous commit but actkally

* readd the cache in a dozen places they were implicitly imported

* use g.is_tor instead of request.headers. bla bla bla

* upgrade streamers to their own route file

* get rid of unused imports in __main__

* fgfgf

* don't pull in the entire ORM where we don't need it

* features

* explicit imports for the get helper

* explicit imports for the get helper redux

* testing allroutes

* remove unused import

* decouple flask from classes

* syntax fix also remember these have side fx for some reason (why?)

* move side effects out of the class

* posts

* testing on devrama

* settings

* reloading

* settingssdsdsds

* streamer features

* site settings

* testing settings on devrama

* import

* fix modlog

* remove debug stuff

* revert commit 67275b21ab6e2f2520819e84d10bfc1c746a15b6

* archiveorg to _archiveorg

* skhudkfkjfd

* fix cron for PCM

* fix bugs that snekky wants me to

* Fix call to realbody passing db, standardize kwarg

* test

* import check_for_alts from the right place

* cloudflare

* testing on devrama

* fix cron i think

* shadow properly

* tasks

* Remove print which will surely be annoying in prod.

* v and create new session

* use files.classes

* make errors import little and fix rare 500 in /allow_nsfw

* Revert "use files.classes"

This reverts commit 98c10b876cf86ce058b7fb955cf1ec0bfb9996c6.

* pass v to media functions rather than using g

* fix

* dfdfdfdfd

* cleanup, py type checking is dumb so don't use it where it causes issues

* Fix some merge bugs, add DEFAULT_RATELIMIT to main.

* Fix imports on sqlalchemy expressions.

* `from random import random` is an error.

* Fix replies db param.

* errors: fix missing import

* fix rare 500: only send to GIFT_NOTIF_ID if it exists, and send them the right text

* Fix signup formkey.

* fix 2 500s

* propagate db to submissions

* fix replies

* dfdfdfdf

* Fix verifiedcolor.

* is_manual

* can't use getters outside of an app context

* don't attempt to do gumroad on sites where it's not enabled

* don't attempt to do gumraod on sites's where it's unnecessary

* Revert "don't attempt to do gumroad on sites where it's not enabled"

This reverts commit 6f8a6331878655492dfaf1907b27f8be513c14d3.

* fix 500

* validate media type

Co-authored-by: TLSM <duolsm@outlook.com>
 2022-11-15 03:19:08 -06:00
justcool393 000b4f4c37 can post in ghost threads 2022-11-14 11:20:34 -06:00
Aevann1 41ab1f313c move feature_required wrappers up 2022-11-14 18:14:47 +02:00
Aevann1 ac8c1d524d "moved into cc" -> "marked as cc" 2022-11-14 07:49:23 +02:00
justcool393 39e7e61bcb posts: make ghost threads cost DC again 
who the hell disabled this
 2022-11-13 19:52:32 -06:00
Snakes cc8f2d1a6e
Restrict permabanned editing content. 2022-11-13 19:00:55 -05:00
Snakes 8fee66c894
Reorder decorators to support f63237a9a2. 
Ultimately necessary because otherwise all bots share rate limits
with each other. The somewhat haphazard ordering of decorators bothers
me, but it's functionally required.

Approaches using request context (like reading the Authorization
header in ratelimit_user) likely produce bugs all their own.
 2022-11-13 05:18:52 -05:00
justcool393 aa272729f1 default ratelimit and default ratelimit slower 2022-11-13 00:43:47 -06:00
justcool393 80d7d5281d ratelimit_user() wrapper 2022-11-13 00:07:15 -06:00
Aevann1 31e6ca0889 fix pinned comments logic 2022-11-12 13:33:18 +02:00
Aevann1 f9b673e33d allowing adding bets via edit 2022-11-12 12:30:05 +02:00
Aevann1 3f17624de6 validate poll options body_html length 2022-11-12 12:27:05 +02:00
justcool393 b1924e0cdf don't bother try checking invalid urls 2022-11-11 23:40:17 -06:00
justcool393 9f4d62d305 :) 2022-11-11 04:19:44 -06:00
justcool393 0cf37cfe5f fix for worker timeout 2022-11-11 04:19:44 -06:00
justcool393 0c7eab0def :pepodrool: 2022-11-11 04:19:43 -06:00
justcool393 f5912bb4cc we don't need bloody bs4 to get a bloody title 2022-11-11 04:19:43 -06:00
Snakes 439b73d6ae
Make explicit submission flag behavior. 
Main intention is to allow API users (bots) to benefit from the
defaults typically enforced clientside, and to generally be clearer
about what values do what.
 2022-11-11 00:23:03 -05:00
Aevann1 fd3edf51c9 minor bool change 2022-11-11 06:46:14 +02:00
Aevann1 254798d0d4 fix 500 error in WPD/PCM 2022-11-11 06:43:02 +02:00
Aevann1 c066227d2b remove pizza autovote 2022-11-09 23:27:16 +02:00
Snakes 4f0f4412c0
Fix /submit not testing `ghost` as boolean. 2022-11-09 16:24:35 -05:00
Aevann1 6694585434 make ghost threads free again 2022-11-09 21:19:29 +02:00
justcool393 26549a6e66
remove logged out routes (#433) 
* remove /logged_out/ routes

* update sitemap, remove users route, and update header

* cloudflare cookie

* only mess with the cookie whenever we desire auth

* sitemap: (small) improvements
sitemap: fix little bug i introduced
sitemap: fix login redirects for /id/ routes

* sitemap: remove duplicate entry

* contact is auth desired

* imports: don't import what we don't need and bind late to the db

* praying to god this works

* keep yourself safe

* oh i actually need to commit and push lol

* import Sub

* t

* refix cache purger
 2022-11-09 00:35:24 -05:00
Aevann1 d616086dbd fix logic for duplicate posts in localhost 2022-11-07 01:48:37 +02:00
justcool393 0b3fae81d6 's 2022-11-03 02:16:01 -05:00
justcool393 6d636e4e42 use charge_account everywhere 2022-11-01 00:25:19 -05:00
Aevann1 cc473795bf make banned domains case insensitive 2022-10-31 16:33:11 +02:00
Aevann1 b9c482712a constantify file extensions 2022-10-30 16:55:43 +02:00
justcool393 b9f2a7123e actions: move pizzashill autovotes to actions 2022-10-30 01:03:23 -05:00
Aevann1 d7091c4799 force posts by PERMA-chudded users to go to /h/chudrama 2022-10-30 00:17:16 +02:00
Aevann1 227d074da7 remove redundant "noreferrer" 2022-10-29 23:46:35 +02:00
justcool393 35e2128dec
get: use function to get voted and blocked properties (#425) 
* get: comments and posts: use get function from get.py
* fix prev commit
* move filter to correct place
* fix error and also log so i can figure out what's wrong
* comments: add some more trace logging
* should_keep_func always acts as return True if None is passed in
* remove logging code
 2022-10-28 19:13:37 -05:00
Aevann1 b816973f38 ignore subdomains in banned_domains logic 2022-10-28 20:12:40 +02:00
Aevann1 94d1a7d98d fix 2022-10-28 19:13:24 +02:00
Aevann1 8999a6ea29 fix 2022-10-28 19:08:52 +02:00
Aevann1 834516cd51 fix prev commit 2022-10-28 00:42:32 +02:00
Aevann1 1a35e2ec6a refactor banned domains 2022-10-28 00:37:29 +02:00
Aevann1 ad358650e1 remove retarded bullshit I wasn't consulted about 2022-10-27 19:53:08 +02:00
Aevann1 8795ecfb58 fix thumbnails 2022-10-26 16:34:33 +02:00
Aevann1 883ab31cc9 Describe what Poor Mode does 2022-10-25 20:20:43 +02:00
Aevann1 fbeac461ca refactor poorcel mode 2022-10-25 18:07:44 +02:00
Aevann1 3b16c8f3e3 close image files after ur done 2022-10-25 17:41:23 +02:00
gooseman 8b98eabbb9 simultaneous hosts 2022-10-24 15:28:43 -07:00
justcool393 ec1affcf85 posts: add MasterLawlz specific actions 2022-10-23 12:01:00 -05:00
Aevann1 7733449169 fix 500 error 2022-10-21 13:30:32 +02:00
justcool393 8fe73cb68e refactor blackjack a bit 2022-10-20 19:28:05 -05:00
justcool393 360cff7e8f add post bypass checking perm 2022-10-20 17:51:29 -05:00
Aevann1 465160dbe6 dont include SITE_FULL in post urls 2022-10-18 13:09:53 +02:00
Aevann1 3e7b37ec35 dont redirect to a repost for chadmins 2022-10-18 12:26:44 +02:00
Aevann1 44fca7f086 ripbozo 2022-10-17 21:13:33 +02:00
Snakes 2efe5d1522
Fix changelog channel messaging on draft publish. 2022-10-16 13:49:24 -04:00
justcool393 4b2ce3b7a0 use perms constant for unclub_post 2022-10-16 03:41:54 -07:00
justcool393 f4af073253 fix 17 potential 500s 2022-10-16 02:51:42 -07:00
justcool393 32a4693da9 fix a couple of potentially rare 500s 2022-10-15 14:35:24 -07:00
Snakes 616e15ebb9
Fix posting/commenting from API. 
The rework to v.client meant that `is_bot` on Submission and Comment
would attempt to be populated with a ClientAuth object when submitted
by a bot other than Snappy or bbbb. SQLAlchemy requires an actual
boolean, not just a truthy value.
 2022-10-15 10:11:14 -04:00
justcool393 39aa59a37a add g.is_api_or_xhr so we can use it where we want to give API output 
* also use v.client for strict API clients
 2022-10-15 02:11:36 -07:00
justcool393 2dd74d3acd don't constantly check for reposts when it's obvious there can't be one 
we currently spam the /is_repost api on every single character change in the URL box even though there is no way these URLs would ever be submitted to the site

introducing a frankly conservative limit to where we start actually pinging both the api and (on the backend) the database for reposts may help in some cases

the current constant was chosen by taking the length of "http://" and adding 2 to it
 2022-10-14 03:27:45 -07:00
Aevann1 7a6b4406ef remove redundant shadoban filters 2022-10-13 12:47:55 +02:00
Snakes e5af46c4ae
Fix shadow visibility logic. 2022-10-13 00:10:34 -04:00
Aevann1 cdff11424f use charge_account everywhere 2022-10-12 18:33:00 +02:00
Snakes 166e33dc38
Clarify architecture of sort_objects. 2022-10-12 04:05:26 -04:00
Aevann1 2aa281e8c8 refactor sorting again (untested) 2022-10-12 09:03:28 +02:00
Aevann1 925ec12141 more shadowban refactor 2022-10-12 08:53:32 +02:00
Aevann1 b1abd33835 refactor sorting 2022-10-12 08:10:11 +02:00
justcool393 501fbbf5d3 move antispam code to actions 2022-10-11 22:34:55 -07:00
Aevann1 466867afd1 Merge branch 'frost' of https://github.com/Aevann1/rDrama into frost 2022-10-11 18:41:12 +02:00
Aevann1 e3a3cbd358 add "hot" comment sorting 2022-10-11 18:41:09 +02:00
justcool393 c0acb1722b abort a bunch of stuff where we manually returned JSON 2022-10-11 08:40:19 -07:00
justcool393 456dd43bba replace "if not FEATURES" with wrapper 2022-10-11 00:33:23 -07:00
Snakes 33d99f86e6
Temporary deletion special case by Carp request. 2022-10-10 23:48:16 -04:00
Snakes 69f1b09a76
Restrict editing old posts (harmonize comments). 2022-10-10 23:40:08 -04:00
justcool393 75e593da00 Revert "feature required wrapper" 
This reverts commit 8700bcc5ee.
 2022-10-10 02:54:47 -07:00
justcool393 8700bcc5ee feature required wrapper 2022-10-09 23:16:05 -07:00
Aevann1 356c9f1219 add "(Admin)" to messages sent to users due to admin actions (for clarity to new users) 2022-10-10 08:11:17 +02:00
justcool393 d6f4e20f7d use constant for BBBB_ID instead of 12125 2022-10-09 07:03:21 -07:00
justcool393 87fd8ee57a comment sanity checks and constantization 
* make HTML body length a constant and use it
* abort before uploads and other tasks if comment level is too deep
* what a nightmare of two functions, please do better next time
 2022-10-09 05:54:46 -07:00
justcool393 c9ab2c515b remove some more vestiges 
get_post and get_comment both handle this
 2022-10-09 01:25:21 -07:00
justcool393 c4c3d6cf49
Merge branch 'frost' into permissions-refactor 2022-10-06 19:55:36 -07:00
Aevann1 3ecb1b4f9a generate a mod log for CCing or unCCing posts and notify OP 2022-10-07 04:48:31 +02:00
justcool393 e372158729
Merge branch 'frost' into permissions-refactor 2022-10-06 19:05:42 -07:00
Aevann1 3cf838af29 fix thumbnails and add opera-proxy to docker 2022-10-06 21:07:45 +02:00
Snakes 24167b1d09
Fix thumbnail_thread passing uploader to media. 2022-10-06 05:15:21 -04:00
justcool393 8db6b3f7fd improve POST_TO_CHANGELOG check 2022-10-06 02:09:46 -07:00
justcool393 e93e2d9ca9 convert some more >s to >=s 2022-10-06 01:40:21 -07:00
Aevann1 96f4f8499f fix 500 errors 2022-10-06 09:30:38 +02:00
justcool393 06f88e8a4a post based permissions mostly 2022-10-05 21:45:54 -07:00
justcool393 43f137208a bypass pin limit perm and also fix a shadowban perm 2022-10-05 19:51:30 -07:00
justcool393 d8610b34b6 changelog permission and don't query db for badges if admin with perm level 2022-10-05 19:45:05 -07:00
justcool393 2fc3044d5b shadowban perms and stuff 2022-10-05 19:24:37 -07:00
justcool393 591e6342bb editing permissions 2022-10-05 18:24:37 -07:00
justcool393 0dfff1f4f6 editing posts to JL3 (will be constantified soon) 2022-10-05 18:03:23 -07:00
justcool393 04f24cd8fd content moderation permission level 
holy crap there's a lot
 2022-10-05 17:57:08 -07:00
justcool393 2a66104d8b improve body for edit_post 2022-10-05 16:35:44 -07:00
justcool393 d58351637c use constants 2022-10-05 16:35:44 -07:00
justcool393 093ced7b20 introduce constant for post and title length 2022-10-05 16:35:44 -07:00
justcool393 2a53df20ff consistency in return error and returned status code 2022-10-05 16:35:44 -07:00
justcool393 88ae00deef sanitize raw bodies 2022-10-05 16:35:44 -07:00
justcool393 19b2f71c3b improve raw title sanitization and don't check the same thing like 5 times 2022-10-05 16:35:44 -07:00
Aevann1 2f979b859b generate modlogs when a hole janny toggles nsfw 2022-10-06 01:24:54 +02:00
justcool393 9575e11b8b add get_sub_by_name function 2022-10-05 03:37:29 -07:00
justcool393 d5bd3463e8
disallow permanently banned users from untoggling NSFW 
can help i guess prevent abuse and creating a situation where dueling NSFW toggles have to be set
 2022-10-04 14:09:25 -07:00
Aevann1 fabbc7a1a3 allow hole jannies to mark posts and comments in their holes as +18 2022-10-04 22:10:59 +02:00
Aevann1 3bf62c6ff0 add missing ban_reason when shadowbanning 2022-10-02 13:31:02 +02:00
Aevann1 da4ade067d make pizza's vote on himself be the first 2022-10-02 12:35:04 +02:00
justcool393 057bc360bf don't duplicate get checks for posts 2022-09-30 15:51:17 -07:00
justcool393 c1ca1a02ac
only attempt to parse HTML content types for titles (#382) 
* only attempt to parse HTML content types for titles

also don't try to get submission titles for .gifv, .tif, .tiff

* ratelimit to 3 per minute instead of 6 minutes

no one will ever need more than 3 requests to this endpoint per minute - justcool393

6 per minute is already kinda a lot for this endpoint, i think aggressively ratelimiting this one is fine, especially since it's a minute ratelimit
 2022-09-30 14:13:06 +02:00
justcool393 0617bb154c
use get_post to handle getting a post (#381) 
why did we ever catch an exception throw it away, then catch an exception (something get_post already does) and then finally get the post
 2022-09-30 01:44:32 -04:00
Aevann1 6b0c734254 Revert "make the default for notify True" 
This reverts commit c192019a22.
 2022-09-29 20:05:35 +02:00
Aevann1 c192019a22 make the default for notify True 2022-09-29 19:58:19 +02:00
Aevann1 c16654c4c7 make sure u dont try to get the title of a file (always times out) 2022-09-29 16:45:59 +02:00
Aevann1 09cc43060d
add hole mod logs (#380) 2022-09-29 11:39:37 +02:00
Aevann1 37e1f25624 make using proxies only happen in 3 circumstances again 2022-09-26 06:01:25 +02:00
Aevann1 dd0f8fbed7 proxy all requests we make 2022-09-25 05:23:50 +02:00
Aevann1 c12f7a5f9a commit before rendering 2022-09-22 22:20:29 +02:00
Aevann1 7d39cdb520 minor auth_desired refactor 2022-09-20 02:51:01 +02:00
Aevann1 ff7a54e842 Revert "test ratelimiting on devrama" 
This reverts commit 1d83412545.
 2022-09-19 21:43:47 +02:00
Aevann1 1d83412545 test ratelimiting on devrama 2022-09-19 21:35:58 +02:00
Aevann1 f54791cc4c remove categories 2022-09-19 20:04:30 +02:00
Aevann1 2fb4ebdcb0 minor sanitize refactor 2022-09-16 18:30:34 +02:00
Aevann1 4abf75edc0 add error codes 2022-09-12 11:52:07 +02:00
Aevann1 ae90eb1cf2 simplify house checking logic 2022-09-11 03:53:16 +02:00
Aevann1 c1aae95d16 restore "notify followers" checkbox 2022-09-10 09:00:45 +02:00
Aevann1 0f232b264c refactor torture_ap 2022-09-05 22:05:04 +02:00
Aevann1 6727d4005c better stripping syntax 2022-09-05 03:44:38 +02:00
Aevann1 842300ac6e remove code irrelevant now (not broken this time I hope) 2022-09-05 01:21:48 +02:00
Aevann1 0c32d56cd6 casino + style shit 2022-09-05 01:15:37 +02:00
outruncolors 5e1d98a3bf
WIP: Add Casino (Do Not Merge) (#341) 
* Add new /casino route and template

* Consolidate lottery into casino and add initial template for slots

* Change /lottery route to /casino and replace icon with usd symbol and change sitewide const to reflect change

* Hook up new slots method to casino

* Enable Marseybux spending in casino slots

* Add UI for playing blackjack in casino

* First connection of blackjack UI to backend

* Add protective clause thanks to help from carpathianflorist.

* Create new Casino_Game relation and persist inside of blackjack

* Connect new slots behavior to Casino_Game table

* Create UI action management logic

* Add blackjack game status checker which adds persistence for blackjack

* Gonna handle this better, hold on

* Reorganize blackjack helper methods

* Reorganize casino.js to account for new changes

* Connect up to frontend

* Little changes ya know

* Display a message when winning in Blackjack

* Fix some issues with double down and insure

* Revert "remove owoify-py from requirements"

This reverts commit 4454648ea2.

* A little casino styling change

* Reorganize into a casino block

* Smallenize the card'

* Remove references to old game data on comments

* Add sql migration file

* Remove logic to drop old columns

* Fix two forgotten conflicts
 2022-09-04 22:53:34 +02:00
Aevann1 8ed450e980 fix edge case with pinning child comments 2022-09-02 06:13:40 +02:00
Aevann1 5032a9aec2 fix pinned child comments 2022-09-02 02:46:17 +02:00
Aevann1 083371f20f keep_blank_values 2022-09-01 22:46:57 +02:00
Aevann1 17fd089870 refactor pinning child comments 2022-09-01 22:31:08 +02:00
Aevann1 e4c0f1b4b3 restore pizza autoupvotes on posts 2022-09-01 22:07:08 +02:00
Aevann1 8e74171d9d exclude authorized bots from hole restrictions 2022-09-01 22:01:03 +02:00
Snakes 0e70879598
Fix /h/<sub>/submit header icon. 
sub.marsey_url was returning false because the submit.html template,
which then includes header.html, was passed an SQLAlchemy Row instance,
not a files.classes.sub.Sub instance. This worked alright because both
the header and the submit page only accessed the name field; however,
accessing the marsey_url property (rather than the marseyurl column
field) failed because of it.
 2022-08-30 19:20:27 -04:00
Aevann1 bcec360f30 sort posts with "megathread" in title by new cuz ppl forget to tick the "new" checkbox 2022-08-30 20:22:15 +02:00
Snakes 8c50047f20
Remove new sort on 'thread' in Submission.title. 
Requested by multiple jannies. Rough timeline, as I understand it:
  - Circa 7mo ago, this logic was originally added for threads with
    'megathread' in the title.
  - Some time later, a checkbox on submission which sets the flag
    Submission.new does the same thing.
  - In af680d8a94, change the check from 'megathread' to 'thread'.

There must've been some reason for the change of substring checked.
However, it routinely causes issues for the admins and confuses
users. Solution has been to retroactively update posts that currently
rely on the 'megathread' in title behavior to use the `new` flag and
to remove the logic going forward.
 2022-08-30 12:14:19 -04:00
Aevann1 7fbcec3b82 turns out we didnt need a dedicated ajax variable 2022-08-30 07:26:13 +02:00
Aevann1 2aaed858d2 add a #changelog channel in jannycord 2022-08-30 04:03:48 +02:00
Aevann1 7a8eef2b99 in /submit, don't get title for url if it ends with extension 2022-08-30 03:51:09 +02:00
Aevann1 f9b56bd046 fix 500 error on posting 2022-08-27 00:05:40 +02:00
Aevann1 1a47d9a916 fix 500 error that's been happening for like a year (thank you snakes and spidey) 2022-08-27 00:03:15 +02:00
Aevann1 45d5f52388 restore betting 2022-08-26 23:53:17 +02:00
Aevann1 5a106b9f90 Revert "make thumbnail code simpler" 
This reverts commit 94e7457965.
 2022-08-25 17:26:27 +02:00
Aevann1 94e7457965 make thumbnail code simpler 2022-08-25 17:24:32 +02:00
Aevann1 3a50784239 remove all artificial votes 2022-08-23 21:35:28 +02:00
Aevann1 f6e6d07504 make me autoupvote dad's posts 2022-08-23 17:27:52 +02:00
Aevann1 666b0cb063 comment betting code 2022-08-22 22:48:47 +02:00
Aevann1 c0e9425015 make me not upvote posts in /h/racist 2022-08-21 19:47:59 +02:00
Aevann1 c70ea0eb64 boost informative holes with 3 extra autoupvotes 2022-08-21 19:14:03 +02:00
Aevann1 b5d500a98e add house holes 2022-08-21 17:24:16 +02:00
Aevann1 fb2437574f change ping_limit to be 3 for comments, and 50 for posts 2022-08-21 17:05:32 +02:00
Aevann1 350a6eb878 make me upvote /h/smuggies 2022-08-21 15:58:22 +02:00
Aevann1 f3c487f6de make me upvote /h/braincels instead of /h/foid 2022-08-21 15:14:44 +02:00
Aevann1 550299e6a1 make me upvote shit in chudrama 2022-08-20 13:59:29 +02:00
Aevann1 e1e7258e7a add def can_see(v) 2022-08-20 00:36:28 +02:00
Aevann1 a88b9d59c4 rename /h/chudtopia to /h/chudrama 2022-08-20 00:20:25 +02:00
Aevann1 4a8220d687 make chudtopians immune to chud effects 2022-08-20 00:12:53 +02:00
Aevann1 9e5ddcbd92 large commit: stealth mode, SubJoin, chudtopia 
dont read if u value ur sanity
 2022-08-19 23:31:26 +02:00
Aevann1 3ac493aa95 exclude /h/smuggies from my autoupvote 2022-08-15 16:24:29 +02:00
Snakes 12d7cfaa6c
Verify admin level before editing others' posts. 
Yes, it has been possible for any user to edit any post on the site,
their own or otherwise. Only have to generate the POST /edit_post/
manually: an example exploit was created and tested successfully
prior to patching. However, abuse of this vulnerability would have
generated edit_post modlog entries, the lack of which on prod suggest
it was not abused that we know of -- Lord knows how.
 2022-08-11 20:12:35 -04:00
Aevann1 1000f9c45e Merge branch 'frost' of https://github.com/Aevann1/rDrama into frost 2022-08-11 06:05:26 +02:00
Aevann1 9341f2368a make some function names shorter 2022-08-11 06:05:23 +02:00
Snakes 55c1ad859e
Disable showmore logic on posts. 2022-08-10 17:34:15 -04:00
Snakes 6a7a3b1821
Hide shadowed user content in more contexts. 
- Search: posts by shadowed user.
  - Search: shadowed users in search for users.
  - Direct links to shadowed user posts display as removed.
  - Other users' profile comments listings hide comments on shadowed
    posts. Users can still see their own comments on shadowed posts.
    Similar to ghosted comment logic.
 2022-08-08 18:21:59 -04:00
Snakes 1411018f8d Add post categories. 
Implemented for LGB but can likely be used for WPD and other future
sites. Similar to a reddit post flair. Provides:
  - Admin panel for Category management.
  - Category selection on post submission.
  - 'Recategorize' post action.
 2022-08-07 02:57:30 -04:00
Snakes 2845e0961b Turn login-gate of 1568ec0162 into admin toggle. 2022-08-05 16:42:22 -04:00
Aevann1 3bc1ee583e make carp autoupvote posts in /h/foid 2022-08-05 20:47:33 +02:00
Aevann1 981692550f fix ping limiting being applies on all instances of "sanitize()" 2022-08-05 17:14:22 +02:00
scitzocel e68c2efb1b
sneed (#328) 
* sneed

* schizosneed

soren

* Update posts.py
 2022-08-05 05:52:03 -04:00
Aevann1 9a2b80e374 spam carp inbox 2022-08-04 23:20:29 +02:00
Aevann1 6087aebc78 make previous commit a little neater 2022-08-04 22:57:07 +02:00
Aevann1 84f4fc164d make chud editting less annoying 2022-08-04 22:54:24 +02:00
Aevann1 1568ec0162 sneed 2022-08-04 22:33:22 +02:00
Snakes 73b71b2f44
PCM: disable repost detection. 2022-08-04 00:07:17 -04:00
Aevann1 e5a2980d1b normalizing request.full_path 2022-08-01 20:03:29 +02:00
Aevann1 ddeba62aeb fixing infinite redirections 2022-07-23 09:22:17 +02:00
Snakes eb55a6cc01
LGB: disable country club. 2022-07-19 21:50:08 -04:00
Aevann1 9e05f0a3b5 refactor changelog v2 2022-07-13 23:12:07 +02:00
Aevann1 86717e37b2 refactor changelog 2022-07-13 23:03:11 +02:00
Aevann1 28119f1aa4 fix blocks 2022-07-13 20:48:04 +02:00
Aevann1 2d21863e19 replace "request.host" with "SITE" 2022-07-13 20:14:37 +02:00
Aevann1 aa4ab5b217 sneed 2022-07-13 17:16:53 +02:00
Aevann1 a7c49ca69a don't embed comments as posts 2022-07-11 13:55:15 +02:00
Aevann1 4e6c7fe683 don't notify on drafts 2022-07-10 16:34:11 +02:00
Aevann1 2a1efff78b repost new posts in WPD in discord 2022-07-10 16:25:42 +02:00
Aevann1 bb59cd0476 minor logic tweaks 2022-07-10 16:21:16 +02:00