}.gif "{i.group(1)}")
')
+
+ sanitized = sanitized.replace("https://www.", "https://").replace("https://youtu.be/", "https://youtube.com/embed/").replace("https://music.youtube.com/watch?v=", "https://youtube.com/embed/").replace("/watch?v=", "/embed/").replace("https://open.spotify.com/", "https://open.spotify.com/embed/").replace("https://streamable.com/", "https://streamable.com/e/").replace("https://youtube.com/shorts/", "https://youtube.com/embed/")
+
+ for i in re.finditer('{url}'
+ htmlsource = f''
+ sanitized = sanitized.replace(replacing, htmlsource)
+
+ for i in re.finditer('{url}'
+ htmlsource = f''
+ sanitized = sanitized.replace(replacing, htmlsource)
+
+ sanitized = sanitized.replace("https://mobile.twitter.com", "https://twitter.com")
+
+ for rd in ["https://reddit.com/", "https://new.reddit.com/", "https://www.reddit.com/", "https://redd.it/"]:
+ sanitized = sanitized.replace(rd, "https://old.reddit.com/")
+
+ for i in re.finditer('(/comments/.*?)"', sanitized):
+ url = i.group(1)
+ if not "sort=" in url: sanitized = sanitized.replace(url, f"{url}?sort=controversial")
+
+ return sanitized
\ No newline at end of file
diff --git a/ruqqus/helpers/security.py b/ruqqus/helpers/security.py
new file mode 100644
index 000000000..f921b805d
--- /dev/null
+++ b/ruqqus/helpers/security.py
@@ -0,0 +1,23 @@
+from werkzeug.security import *
+from os import environ
+
+
+def generate_hash(string):
+
+ msg = bytes(string, "utf-16")
+
+ return hmac.new(key=bytes(environ.get("MASTER_KEY"), "utf-16"),
+ msg=msg,
+ digestmod='md5'
+ ).hexdigest()
+
+
+def validate_hash(string, hashstr):
+
+ return hmac.compare_digest(hashstr, generate_hash(string))
+
+
+def hash_password(password):
+
+ return generate_password_hash(
+ password, method='pbkdf2:sha512', salt_length=8)
diff --git a/ruqqus/helpers/session.py b/ruqqus/helpers/session.py
new file mode 100644
index 000000000..11b0a10f9
--- /dev/null
+++ b/ruqqus/helpers/session.py
@@ -0,0 +1,35 @@
+from flask import *
+import time
+from .security import *
+
+
+def session_over18(board):
+
+ now = int(time.time())
+
+ return session.get('over_18', {}).get(board.base36id, 0) >= now
+
+
+def session_isnsfl(board):
+
+ now = int(time.time())
+
+ return session.get('show_nsfl', {}).get(board.base36id, 0) >= now
+
+
+def make_logged_out_formkey(t):
+
+ s = f"{t}+{session['session_id']}"
+
+ return generate_hash(s)
+
+
+def validate_logged_out_formkey(t, k):
+
+ now = int(time.time())
+ if now - t > 3600:
+ return False
+
+ s = f"{t}+{session['session_id']}"
+
+ return validate_hash(s, k)
diff --git a/ruqqus/helpers/sqla_values.py b/ruqqus/helpers/sqla_values.py
new file mode 100644
index 000000000..fb1745d31
--- /dev/null
+++ b/ruqqus/helpers/sqla_values.py
@@ -0,0 +1,33 @@
+from sqlalchemy.ext.compiler import compiles
+from sqlalchemy.sql.expression import FromClause
+
+
+class values(FromClause):
+ named_with_column = True
+
+ def __init__(self, columns, *args, **kw):
+ self._column_args = columns
+ self.list = args
+ self.alias_name = self.name = kw.pop('alias_name', None)
+
+ def _populate_column_collection(self):
+ for c in self._column_args:
+ c._make_proxy(self)
+
+
+@compiles(values)
+def compile_values(element, compiler, asfrom=False, **kw):
+ columns = element.columns
+ v = "VALUES %s" % ", ".join(
+ "(%s)" % ", ".join(
+ compiler.render_literal_value(elem, column.type)
+ for elem, column in zip(tup, columns))
+ for tup in element.list
+ )
+ if asfrom:
+ if element.alias_name:
+ v = "(%s) AS %s (%s)" % (v, element.alias_name,
+ (", ".join(c.name for c in element.columns)))
+ else:
+ v = "(%s)" % v
+ return v
diff --git a/ruqqus/helpers/thumbs.py b/ruqqus/helpers/thumbs.py
new file mode 100644
index 000000000..5152c5313
--- /dev/null
+++ b/ruqqus/helpers/thumbs.py
@@ -0,0 +1,20 @@
+from .get import *
+
+def expand_url(post_url, fragment_url):
+
+ # convert src into full url
+ if fragment_url.startswith("https://"):
+ return fragment_url
+ elif fragment_url.startswith("http://"):
+ return f"https://{fragment_url.split('http://')[1]}"
+ elif fragment_url.startswith('//'):
+ return f"https:{fragment_url}"
+ elif fragment_url.startswith('/'):
+ parsed_url = urlparse(post_url)
+ return f"https://{parsed_url.netloc}{fragment_url}"
+ else:
+ return f"{post_url}{'/' if not post_url.endswith('/') else ''}{fragment_url}"
+
+def thumbnail_thread(pid, debug=False):
+
+ return True, "Success"
\ No newline at end of file
diff --git a/ruqqus/helpers/wrappers.py b/ruqqus/helpers/wrappers.py
new file mode 100644
index 000000000..be30e8873
--- /dev/null
+++ b/ruqqus/helpers/wrappers.py
@@ -0,0 +1,557 @@
+from werkzeug.wrappers.response import Response as RespObj
+from .get import *
+from .alerts import send_notification
+from ruqqus.__main__ import Base, app, db_session
+
+
+def get_logged_in_user(db=None):
+
+ if not db:
+ db=g.db
+
+ if request.path.startswith("/api/v1"):
+
+ token = request.headers.get("Authorization")
+ if not token:
+
+ #let admins hit api/v1 from browser
+ # x=request.session.get('user_id')
+ # nonce=request.session.get('login_nonce')
+ # if not x or not nonce:
+ # return None, None
+ # user=g.db.query(User).filter_by(id=x).first()
+ # if not user:
+ # return None, None
+ # if user.admin_level >=3 and nonce>=user.login_nonce:
+ # return user, None
+ return None, None
+
+ token = token.split()
+ if len(token) < 2:
+ return None, None
+
+ token = token[1]
+ if not token:
+ return None, None
+
+ client = db.query(ClientAuth).filter(
+ ClientAuth.access_token == token).first()
+ #ClientAuth.access_token_expire_utc > int(time.time()
+
+ x = (client.user, client) if client else (None, None)
+
+
+ elif "user_id" in session:
+
+ uid = session.get("user_id")
+ nonce = session.get("login_nonce", 0)
+ if not uid:
+ x= (None, None)
+ v = db.query(User).options(
+ joinedload(User.moderates).joinedload(ModRelationship.board), #joinedload(Board.reports),
+ ).filter_by(
+ id=uid,
+ is_deleted=False
+ ).first()
+
+ if v and v.agendaposter_expires_utc and v.agendaposter_expires_utc < g.timestamp:
+ v.agendaposter_expires_utc = 0
+ v.agendaposter = False
+
+ g.db.add(v)
+
+ if v and (nonce < v.login_nonce):
+ x= (None, None)
+ else:
+ x=(v, None)
+
+ else:
+ x=(None, None)
+
+ if x[0]:
+ x[0].client=x[1]
+
+ return x
+
+def check_ban_evade(v):
+
+ if not v or not v.ban_evade or v.admin_level > 0:
+ return
+
+ if random.randint(0,30) < v.ban_evade:
+ v.ban(reason="ban evasion")
+ send_notification(1046, v, "Your Drama account has been permanently suspended for the following reason:\n\n> ban evasion")
+
+ for post in g.db.query(Submission).filter_by(author_id=v.id).all():
+ if post.is_banned:
+ continue
+
+ post.is_banned=True
+ post.ban_reason="ban evasion"
+ g.db.add(post)
+
+ ma=ModAction(
+ kind="ban_post",
+ user_id=2317,
+ target_submission_id=post.id,
+ board_id=post.board_id,
+ note="ban evasion"
+ )
+ g.db.add(ma)
+
+ g.db.commit()
+
+ for comment in g.db.query(Comment).filter_by(author_id=v.id).all():
+ if comment.is_banned:
+ continue
+
+ comment.is_banned=True
+ comment.ban_reason="ban evasion"
+ g.db.add(comment)
+
+ ma=ModAction(
+ kind="ban_comment",
+ user_id=2317,
+ target_comment_id=comment.id,
+ board_id=comment.post.board_id,
+ note="ban evasion"
+ )
+ g.db.add(ma)
+
+ g.db.commit()
+ try: abort(403)
+ except Exception as e: print(e)
+
+ else:
+ v.ban_evade +=1
+ g.db.add(v)
+ g.db.commit()
+
+
+
+
+# Wrappers
+def auth_desired(f):
+ # decorator for any view that changes if user is logged in (most pages)
+
+ def wrapper(*args, **kwargs):
+
+ v, c = get_logged_in_user()
+
+ if c:
+ kwargs["c"] = c
+
+ check_ban_evade(v)
+
+ resp = make_response(f(*args, v=v, **kwargs))
+ if v:
+ resp.headers.add("Cache-Control", "private")
+ resp.headers.add(
+ "Access-Control-Allow-Origin",
+ app.config["SERVER_NAME"])
+ else:
+ resp.headers.add("Cache-Control", "public")
+ return resp
+
+ wrapper.__name__ = f.__name__
+ return wrapper
+
+
+def auth_required(f):
+ # decorator for any view that requires login (ex. settings)
+
+ def wrapper(*args, **kwargs):
+
+ v, c = get_logged_in_user()
+
+ #print(v, c)
+
+ if not v:
+ abort(401)
+
+ check_ban_evade(v)
+
+ if c:
+ kwargs["c"] = c
+
+ g.v = v
+
+ # an ugly hack to make api work
+ resp = make_response(f(*args, v=v, **kwargs))
+
+ resp.headers.add("Cache-Control", "private")
+ resp.headers.add(
+ "Access-Control-Allow-Origin",
+ app.config["SERVER_NAME"])
+ return resp
+
+ wrapper.__name__ = f.__name__
+ return wrapper
+
+
+def is_not_banned(f):
+ # decorator that enforces lack of ban
+
+ def wrapper(*args, **kwargs):
+
+ v, c = get_logged_in_user()
+
+ #print(v, c)
+
+ if not v:
+ abort(401)
+
+ check_ban_evade(v)
+
+ if v.is_suspended:
+ abort(403)
+
+ if c:
+ kwargs["c"] = c
+
+ g.v = v
+
+ resp = make_response(f(*args, v=v, **kwargs))
+ resp.headers.add("Cache-Control", "private")
+ resp.headers.add(
+ "Access-Control-Allow-Origin",
+ app.config["SERVER_NAME"])
+ return resp
+
+ wrapper.__name__ = f.__name__
+ return wrapper
+
+# Require tos agreement
+
+
+def tos_agreed(f):
+
+ def wrapper(*args, **kwargs):
+
+ v = kwargs['v']
+
+ cutoff = int(environ.get("tos_cutoff", 0))
+
+ if v.tos_agreed_utc > cutoff:
+ return f(*args, **kwargs)
+ else:
+ return redirect("/terms#agreebox")
+
+ wrapper.__name__ = f.__name__
+ return wrapper
+
+def premium_required(f):
+
+ #decorator that enforces valid premium status
+ #use under auth_required or is_not_banned
+
+ def wrapper(*args, **kwargs):
+
+ v=kwargs["v"]
+
+ if not v.has_premium:
+ abort(403)
+
+ return f(*args, **kwargs)
+
+ wrapper.__name__=f.__name__
+ return wrapper
+
+
+def no_negative_balance(s):
+
+ def wrapper_maker(f):
+
+ #decorator that enforces valid premium status
+ #use under auth_required or is_not_banned
+
+ def wrapper(*args, **kwargs):
+
+ v=kwargs["v"]
+
+ if v.negative_balance_cents:
+ if s=="toast":
+ return jsonify({"error":"You can't do that while your account balance is negative. Visit your account settings to bring your balance up to zero."}), 402
+ elif s=="html":
+ raise(PaymentRequired)
+ else:
+ raise(PaymentRequired)
+
+ return f(*args, **kwargs)
+
+ wrapper.__name__=f.__name__
+ return wrapper
+
+ return wrapper_maker
+
+def is_guildmaster(*perms):
+ # decorator that enforces guildmaster status and verifies permissions
+ # use under auth_required
+ def wrapper_maker(f):
+
+ def wrapper(*args, **kwargs):
+
+ v = kwargs["v"]
+ boardname = kwargs.get("boardname")
+ board_id = kwargs.get("bid")
+ bid=request.values.get("bid", request.values.get("board_id"))
+
+ if boardname:
+ board = get_guild(boardname)
+ elif board_id:
+ board = get_board(board_id)
+ elif bid:
+ board = get_board(bid)
+ else:
+ return jsonify({"error": f"no guild specified"}), 400
+
+ m=board.has_mod(v)
+ if not m:
+ return jsonify({"error":f"You aren't a guildmaster of +{board.name}"}), 403
+
+ if perms:
+ for perm in perms:
+ if not m.__dict__.get(f"perm_{perm}") and not m.perm_full:
+ return jsonify({"error":f"Permission `{perm}` required"}), 403
+
+
+ if v.is_banned and not v.unban_utc:
+ abort(403)
+
+ return f(*args, board=board, **kwargs)
+
+ wrapper.__name__ = f.__name__
+ return wrapper
+
+ return wrapper_maker
+
+
+# this wrapper takes args and is a bit more complicated
+def admin_level_required(x):
+
+ def wrapper_maker(f):
+
+ def wrapper(*args, **kwargs):
+
+ v, c = get_logged_in_user()
+
+ if c:
+ return jsonify({"error": "No admin api access"}), 403
+
+ if not v:
+ abort(401)
+
+ if v.is_banned:
+ abort(403)
+
+ if v.admin_level < x:
+ abort(403)
+
+ g.v = v
+
+ response = f(*args, v=v, **kwargs)
+
+ if isinstance(response, tuple):
+ resp = make_response(response[0])
+ else:
+ resp = make_response(response)
+
+ resp.headers.add("Cache-Control", "private")
+ resp.headers.add(
+ "Access-Control-Allow-Origin",
+ app.config["SERVER_NAME"])
+ return resp
+
+ wrapper.__name__ = f.__name__
+ return wrapper
+
+ return wrapper_maker
+
+
+def validate_formkey(f):
+ """Always use @auth_required or @admin_level_required above @validate_form"""
+
+ def wrapper(*args, v, **kwargs):
+
+ if not request.path.startswith("/api/v1"):
+
+ submitted_key = request.values.get("formkey", "none")
+
+ if not submitted_key:
+
+ abort(401)
+
+ elif not v.validate_formkey(submitted_key):
+ abort(401)
+
+ return f(*args, v=v, **kwargs)
+
+ wrapper.__name__ = f.__name__
+ return wrapper
+
+
+def no_cors(f):
+ """
+ Decorator prevents content being iframe'd
+ """
+
+ def wrapper(*args, **kwargs):
+
+ origin = request.headers.get("Origin", None)
+
+ if origin and origin != "https://" + app.config["SERVER_NAME"] and app.config["FORCE_HTTPS"]==1:
+
+ return "This page may not be embedded in other webpages.", 403
+
+ resp = make_response(f(*args, **kwargs))
+ resp.headers.add("Access-Control-Allow-Origin",
+ app.config["SERVER_NAME"]
+ )
+
+ return resp
+
+ wrapper.__name__ = f.__name__
+ return wrapper
+
+# wrapper for api-related things that discriminates between an api url
+# and an html url for the same content
+# f should return {'api':lambda:some_func(), 'html':lambda:other_func()}
+
+
+def public(*scopes, no_ban=False):
+
+ def wrapper_maker(f):
+
+ def wrapper(*args, **kwargs):
+
+ if request.path.startswith(('/api/v1','/api/v2')):
+
+ v = kwargs.get('v')
+
+ result = f(*args, **kwargs)
+
+ if isinstance(result, dict):
+ resp = result['api']()
+ else:
+ resp = result
+
+ if not isinstance(resp, RespObj):
+ resp = make_response(resp)
+
+ resp.headers.add("Cache-Control", "private")
+ resp.headers.add(
+ "Access-Control-Allow-Origin",
+ app.config["SERVER_NAME"])
+ return resp
+
+ else:
+
+ result = f(*args, **kwargs)
+
+ if not isinstance(result, dict):
+ return result
+
+ try:
+ if request.path.startswith('/inpage/'):
+ return result['inpage']()
+ elif request.path.startswith(('/api/vue/','/test/')):
+ return result['api']()
+ else:
+ return result['html']()
+ except KeyError:
+ return result
+
+ wrapper.__name__ = f.__name__
+ return wrapper
+
+ return wrapper_maker
+
+
+def api(*scopes, no_ban=False):
+
+ def wrapper_maker(f):
+
+ def wrapper(*args, **kwargs):
+
+ if request.path.startswith(('/api/v1','/api/v2')):
+
+ v = kwargs.get('v')
+ client = kwargs.get('c')
+
+ if not v or not client:
+ return jsonify(
+ {"error": "401 Not Authorized. Invalid or Expired Token"}), 401
+
+ kwargs.pop('c')
+
+ # validate app associated with token
+ if client.application.is_banned:
+ return jsonify({"error": f"403 Forbidden. The application `{client.application.app_name}` is suspended."}), 403
+
+ # validate correct scopes for request
+ for scope in scopes:
+ if not client.__dict__.get(f"scope_{scope}"):
+ return jsonify({"error": f"401 Not Authorized. Scope `{scope}` is required."}), 403
+
+ if (request.method == "POST" or no_ban) and client.user.is_suspended:
+ return jsonify({"error": f"403 Forbidden. The user account is suspended."}), 403
+
+ result = f(*args, **kwargs)
+
+ if isinstance(result, dict):
+ resp = result['api']()
+ else:
+ resp = result
+
+ if not isinstance(resp, RespObj):
+ resp = make_response(resp)
+
+ resp.headers.add("Cache-Control", "private")
+ resp.headers.add(
+ "Access-Control-Allow-Origin",
+ app.config["SERVER_NAME"])
+ return resp
+
+ else:
+
+ result = f(*args, **kwargs)
+
+ if not isinstance(result, dict):
+ return result
+
+ try:
+ if request.path.startswith('/inpage/'):
+ return result['inpage']()
+ elif request.path.startswith(('/api/vue/','/test/')):
+ return result['api']()
+ else:
+ return result['html']()
+ except KeyError:
+ return result
+
+ wrapper.__name__ = f.__name__
+ return wrapper
+
+ return wrapper_maker
+
+
+SANCTIONS=[
+ "CU", #Cuba
+ "IR", #Iran
+ "KP", #North Korea
+ "SY", #Syria
+ "TR", #Turkey
+ "VE", #Venezuela
+]
+
+def no_sanctions(f):
+
+ def wrapper(*args, **kwargs):
+
+ if request.headers.get("cf-ipcountry","") in SANCTIONS:
+ abort(451)
+
+ return f(*args, **kwargs)
+
+ wrapper.__name__=f.__name__
+ return wrapper
\ No newline at end of file
diff --git a/ruqqus/mail/__init__.py b/ruqqus/mail/__init__.py
new file mode 100644
index 000000000..2db6c49d0
--- /dev/null
+++ b/ruqqus/mail/__init__.py
@@ -0,0 +1 @@
+from .mail import *
diff --git a/ruqqus/mail/mail.py b/ruqqus/mail/mail.py
new file mode 100644
index 000000000..a42412f82
--- /dev/null
+++ b/ruqqus/mail/mail.py
@@ -0,0 +1,98 @@
+from os import environ
+import requests
+import time
+from flask import *
+from urllib.parse import quote
+
+from ruqqus.helpers.security import *
+from ruqqus.helpers.wrappers import *
+from ruqqus.classes import *
+from ruqqus.__main__ import app
+
+
+def send_mail(to_address, subject, html, plaintext=None, files={},
+ from_address="Drama {post.body_html}")) + + return Response( ""+ doc.getvalue(), mimetype="application/xml") \ No newline at end of file diff --git a/ruqqus/routes/flagging.py b/ruqqus/routes/flagging.py new file mode 100644 index 000000000..60521dce1 --- /dev/null +++ b/ruqqus/routes/flagging.py @@ -0,0 +1,53 @@ +from ruqqus.helpers.wrappers import * +from ruqqus.helpers.get import * +from flask import g +from ruqqus.__main__ import app + + +@app.route("/api/flag/post/
Admin Tools
+{% filter markdown %} +* [Advanced Stats](/api/user_stat_data) +* [Ban Domain](/admin/domain/enter%20domain%20here) +* [Shadowbanned Users](/admin/shadowbanned) +* [Users with Agendaposter Theme](/admin/agendaposters) +* [Flagged Posts](/admin/flagged/posts) +* [Flagged Comments](/admin/flagged/comments) +* [Image Posts](/admin/image_posts) +* [Removed Posts](/admin/removed) +* [Users Feed](/admin/users) +* [Remove image from imgur and from cloudflare cache](/admin/image_purge) +* [Perceptive Hash Image Ban](/admin/image_ban) +* [Multi Vote Analysis](/admin/alt_votes) +* [App Queue](/admin/apps) +* [App Data](/admin/appdata) +* [Badges](/admin/badge_grant) +* [Content Stats](/admin/content_stats) + +{% endfilter %} + +
+
+
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/ruqqus/templates/admin/alt_votes.html b/ruqqus/templates/admin/alt_votes.html
new file mode 100644
index 000000000..9cdce00f8
--- /dev/null
+++ b/ruqqus/templates/admin/alt_votes.html
@@ -0,0 +1,94 @@
+{% extends "default.html" %}
+
+{% block sidebarblock %}{% endblock %}
+{% block sidebarLeftblock %}{% endblock %}
+
+{% block title %}
++ + + ++
Vote Info
+ + + +{% if u1 and u2 %} + + +Analysis
+ +{{u1.username}} Creation IP: {{u1.creation_ip}}
+{{u2.username}} Creation IP: {{u2.creation_ip}}
+ + + +| + | @{{u1.username}} only(% unique) | +Both | +@{{u2.username}} only (% unique) | +
|---|---|---|---|
| Post Upvotes | +{{data['u1_only_post_ups']}} ({{data['u1_post_ups_unique']}}%) | +{{data['both_post_ups']}} | +{{data['u2_only_post_ups']}} ({{data['u2_post_ups_unique']}}%) | +
| Post Downvotes | +{{data['u1_only_post_downs']}} ({{data['u1_post_downs_unique']}}%) | +{{data['both_post_downs']}} | +{{data['u2_only_post_downs']}} ({{data['u2_post_downs_unique']}}%) | +
| Comment Upvotes | +{{data['u1_only_comment_ups']}} ({{data['u1_comment_ups_unique']}}%) | +{{data['both_comment_ups']}} | +{{data['u2_only_comment_ups']}} ({{data['u2_comment_ups_unique']}}%) | +
| Comment Downvotes | +{{data['u1_only_comment_downs']}} ({{data['u1_comment_downs_unique']}}%) | +{{data['both_comment_downs']}} | +{{data['u2_only_comment_downs']}} ({{data['u2_comment_downs_unique']}}%) | +
Link Accounts
+ +{% if u2 in u1.alts %} +Accounts are known alts of eachother.
+{% else %} + +Two accounts controlled by different people should have most uniqueness percentages at or above 70-80%
+A sockpuppet account will have its uniqueness percentages significantly lower.
+ +Link Accounts + + +{% endif %} + +{% endif %} + + +{% endblock %} \ No newline at end of file diff --git a/ruqqus/templates/admin/app.html b/ruqqus/templates/admin/app.html new file mode 100644 index 000000000..e2b3be60f --- /dev/null +++ b/ruqqus/templates/admin/app.html @@ -0,0 +1,76 @@ +{% extends "default.html" %} + +{% block sidebarblock %}{% endblock %} +{% block sidebarLeftblock %}{% endblock %} + +{% block title %} +
+
+
+
+
+
+
+
+
+
+{% if listing %}
+ {% include "submission_listing.html" %}
+{% elif comments %}
+ {% include "comments.html" %}
+{% endif %}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/ruqqus/templates/admin/app_data.html b/ruqqus/templates/admin/app_data.html
new file mode 100644
index 000000000..8a72acabb
--- /dev/null
+++ b/ruqqus/templates/admin/app_data.html
@@ -0,0 +1,79 @@
+{% extends "default.html" %}
+
+{% block sidebarblock %}{% endblock %}
+{% block sidebarLeftblock %}{% endblock %}
+
+{% block title %}
+
+
+
++ + + ++
App Info
+ + + +{% if thing %} + +Info
+ + + +Author: @{{thing.author.username}}
+ +{% if thing.oauth_app %} + + +
+
+
+
+
+{% endif %}
+
+
+
+{% endif %}
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/ruqqus/templates/admin/apps.html b/ruqqus/templates/admin/apps.html
new file mode 100644
index 000000000..96aff06ba
--- /dev/null
+++ b/ruqqus/templates/admin/apps.html
@@ -0,0 +1,76 @@
+{% extends "default.html" %}
+
+{% block sidebarblock %}{% endblock %}
+{% block sidebarLeftblock %}{% endblock %}
+
+{% block title %}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+{% for app in apps %}
+
+
+
+{% endfor %}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {% if app.client_secret %}
+
+
+ {% endif %}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/ruqqus/templates/admin/badge_grant.html b/ruqqus/templates/admin/badge_grant.html
new file mode 100644
index 000000000..0e6ae8dcd
--- /dev/null
+++ b/ruqqus/templates/admin/badge_grant.html
@@ -0,0 +1,76 @@
+{% extends "default.html" %}
+
+{% block title %}
+
+
+
+
+
+
+ {{error}}
+
+
+
+ {% endif %}
+ {% if msg %}
+
+
+
+ {{msg}}
+
+
+
+ {% endif %}
+
+
+
+Badge Grant
+ + +{% endblock %} diff --git a/ruqqus/templates/admin/cache.html b/ruqqus/templates/admin/cache.html new file mode 100644 index 000000000..7ba222c17 --- /dev/null +++ b/ruqqus/templates/admin/cache.html @@ -0,0 +1,27 @@ +{% extends "default.html" %} + +{% block sidebarblock %}{% endblock %} +{% block sidebarLeftblock %}{% endblock %} + +{% block title %} +Cache Dump
+Clear internal cache + +
+
+
+
+
+
+
+{% endblock %}
\ No newline at end of file
diff --git a/ruqqus/templates/admin/content_stats.html b/ruqqus/templates/admin/content_stats.html
new file mode 100644
index 000000000..8d1e6253e
--- /dev/null
+++ b/ruqqus/templates/admin/content_stats.html
@@ -0,0 +1,28 @@
+{% extends "default.html" %}
+
+{% block sidebarblock %}{% endblock %}
+{% block sidebarLeftblock %}{% endblock %}
+
+{% block title %}
+
+
+
+| Statistic | +Value | +
|---|---|
| {{entry}} | +{{data[entry]}} | +
+ {% with comments=listing %}
+ {% include "comments.html" %}
+ {% endwith %}
+ {% if not listing %}
+
+
+{% endblock %}
+
diff --git a/ruqqus/templates/admin/flagged_posts.html b/ruqqus/templates/admin/flagged_posts.html
new file mode 100644
index 000000000..ef9cccba8
--- /dev/null
+++ b/ruqqus/templates/admin/flagged_posts.html
@@ -0,0 +1,115 @@
+{% extends "userpage.html" %}
+
+{% block adminpanel %}{% endblock %}
+{% block pagetype %}userpage{% endblock %}
+{% block banner %}{% endblock %}
+{% block mobileBanner %}{% endblock %}
+{% block desktopBanner %}{% endblock %}
+{% block sidebarLeftblock %}{% endblock %}
+{% block desktopUserBanner %}{% endblock %}
+{% block mobileUserBanner %}{% endblock %}
+
+{% block adminscripts %}
+
+{% endblock %}
+
+
+ {% block postNav %}
+
+
+ {% endif %}
+
+
+
+
+ There are no comments here (yet).
+
+
+ {% endblock %}
+
+
+{% block enlargeThumbJS %}
+
+{% endblock %}
+
+{% block fixedMobileBarJS %}
+
+{% endblock %}
+
+{% block title %}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+{% endblock %}
+
+{% block pagenav %}
+
+{% endblock %}
diff --git a/ruqqus/templates/admin/image_ban.html b/ruqqus/templates/admin/image_ban.html
new file mode 100644
index 000000000..e9c0b8fcf
--- /dev/null
+++ b/ruqqus/templates/admin/image_ban.html
@@ -0,0 +1,45 @@
+{% extends "default.html" %}
+
+{% block sidebarblock %}{% endblock %}
+{% block sidebarLeftblock %}{% endblock %}
+
+{% block title %}
+
+
+ {% block listing %}
+
+
+ {% include "submission_listing.html" %}
+
+ {% endblock %}
+ Image already banned for: {{existing.ban_reason}}
+{% elif success %} +Image banned.
+{% endif %} + ++ + + ++
Perceptive Hash Image Ban
+Upload an image to add its hash to the ban list.
+ + + + +{% endblock %} \ No newline at end of file diff --git a/ruqqus/templates/admin/image_posts.html b/ruqqus/templates/admin/image_posts.html new file mode 100644 index 000000000..32cd60a91 --- /dev/null +++ b/ruqqus/templates/admin/image_posts.html @@ -0,0 +1,105 @@ +{% extends "userpage.html" %} + +{% block adminpanel %}{% endblock %} +{% block pagetype %}userpage{% endblock %} +{% block banner %}{% endblock %} +{% block mobileBanner %}{% endblock %} +{% block desktopBanner %}{% endblock %} +{% block sidebarLeftblock %}{% endblock %} +{% block desktopUserBanner %}{% endblock %} +{% block mobileUserBanner %}{% endblock %} + +{% block adminscripts %} + +{% endblock %} + + +{% block postNav %}{% endblock %} + + +{% block enlargeThumbJS %} + +{% endblock %} + +{% block fixedMobileBarJS %} + +{% endblock %} + +{% block title %} +
+
+
+{% endblock %}
+
+{% block pagenav %}
+
+{% endblock %}
diff --git a/ruqqus/templates/admin/image_purge.html b/ruqqus/templates/admin/image_purge.html
new file mode 100644
index 000000000..557e76eae
--- /dev/null
+++ b/ruqqus/templates/admin/image_purge.html
@@ -0,0 +1,22 @@
+{% extends "default.html" %}
+
+{% block sidebarblock %}{% endblock %}
+{% block sidebarLeftblock %}{% endblock %}
+
+{% block title %}
+
+
+ {% block listing %}
+
+
+ {% include "submission_listing.html" %}
+
+ {% endblock %}
+ Imgur and Cloudflare Image Purge
+Paste an image link here to remove it from imgur and from cloudflare cache. You need to enter the full url of the image like this "https://i.imgur.com/63OclpM_d.png?maxwidth=9999"
+ + + + +{% endblock %} \ No newline at end of file diff --git a/ruqqus/templates/admin/manage_domain.html b/ruqqus/templates/admin/manage_domain.html new file mode 100644 index 000000000..7d332765c --- /dev/null +++ b/ruqqus/templates/admin/manage_domain.html @@ -0,0 +1,53 @@ +{% extends "default.html" %} + +{% block sidebarblock %}{% endblock %} +{% block sidebarLeftblock %}{% endblock %} + +{% block title %} +{{domain_name}}
+
+Current
+
+can_submit
+
{{domain.can_submit}}
+ +can_comment
+{{domain.can_comment}}
+ +reason
+{{domain.reason_text}}
+ +show_thumbnail
+{{domain.show_thumbnail}}
+ +embed_function
+{{domain.embed_function}}
+ +embed_template
+{{domain.embed_template}}
+ +Actions
+ + + +{% endblock %} \ No newline at end of file diff --git a/ruqqus/templates/admin/new_users.html b/ruqqus/templates/admin/new_users.html new file mode 100644 index 000000000..cb44eb421 --- /dev/null +++ b/ruqqus/templates/admin/new_users.html @@ -0,0 +1,19 @@ +{% extends "mine/mine.html" %} + +{% block maincontent %} +
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Removed Posts
+ +
+
+
+{% endblock %}
+
+{% block pagenav %}
+
+{% endblock %}
diff --git a/ruqqus/templates/admin/votes.html b/ruqqus/templates/admin/votes.html
new file mode 100644
index 000000000..117216c90
--- /dev/null
+++ b/ruqqus/templates/admin/votes.html
@@ -0,0 +1,64 @@
+{% extends "default.html" %}
+
+{% block sidebarblock %}{% endblock %}
+{% block sidebarLeftblock %}{% endblock %}
+
+{% block title %}
+
+
+ {% block listing %}
+
+
+ {% include "submission_listing.html" %}
+
+ {% endblock %}
+ Vote Info
+ + + +{% if thing %} + +Info
+ +Author: @{{thing.author.username}}
+Author Created At: {{thing.author.created_utc}} ({{thing.author.created_datetime}} UTC)
+Counted Upvotes: {{thing.upvotes}} out of {{ups | length}}
+Counted Downvotes: {{thing.downvotes}} out of {{downs | length}}
+ +Upvotes
+| User | +
|---|
| {{vote.user.username}} | +
Downvotes
+| User | +
|---|
| {{vote.user.username}} | +
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/ruqqus/templates/badge.html b/ruqqus/templates/badge.html
new file mode 100644
index 000000000..0793c2e35
--- /dev/null
+++ b/ruqqus/templates/badge.html
@@ -0,0 +1,5 @@
+{% if b.url %}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ Drama
+
+
+ {% block authtitle %}{% endblock %}
+ +{% block authtext %}{% endblock %}
+ + {% if error %} +
+
+
+ {{error}}
+
+
+
+ {% endif %}
+ {% if msg %}
+
+
+
+ {{msg}}
+
+
+
+ {% endif %}
+
+ {% block content %}
+ {% endblock %}
+
+
+
+
+
+
+
+
+
+ 
+
+
+ + {{i.text}} +
+ +
+{{bp[0].rendered | safe}}
+{% if bp|length > 1 %}
+{{bp[1].rendered | safe}}
+{% endif %}
+
\ No newline at end of file
diff --git a/ruqqus/templates/badges.html b/ruqqus/templates/badges.html
new file mode 100644
index 000000000..305e0a39d
--- /dev/null
+++ b/ruqqus/templates/badges.html
@@ -0,0 +1,69 @@
+{% extends "default.html" %}
+{% block content %}
++ + ++
User Badges
+This page describes the requirements for obtaining all profile badges.
+Badges are sorted into bronze, silver, gold, and diamond tiers, based on the relative difficulty of obtaining them.
+
+Unlockable Badges
+These badges are automatically granted through different kinds of activity on Drama.
+| Name | +Image | +Description | +
|---|---|---|
| {{badge.name}} | +{{badge.description}} | +
Granted Badges
+These badges can be granted by staff.
+| Name | +Image | +Description | +
|---|---|---|
| {{badge.name}} | +{{badge.description}} | +
Unobtainable Badges
+There is no way to acquire these badges if you don't already have them.
+| Name | +Image | +Description | +
|---|---|---|
| {{badge.name}} | +{{badge.description}} | +
| # | +Name | +Reason | +Banned by | +
|---|---|---|---|
| {{users.index(user)+1}} | +{{user.username}} | +{% if user.ban_reason %}{{user.ban_reason}}{% endif %} | +{{user.banned_by.username}} | +
Blocks
+ +| User | +Target | +
|---|---|
| {{user.username}} | +{{targets[loop.index-1].username}} | +
+
+
+{% endblock %}
+
+{% block content %}
+
+{% if v %}
+{{"Unubscribe" if v.changelogsub else "Subscribe"}}
+{% endif %}
+
+
+
+
+
+ {% block navbar %}
+
+
+
+
+ {% endblock %}
+
+
+
+
+{% endblock %}
+
+{% block pagenav %}
+{% if listing %}
+
+{% endif %}
+{% endblock %}
\ No newline at end of file
diff --git a/ruqqus/templates/comment_failed.html b/ruqqus/templates/comment_failed.html
new file mode 100644
index 000000000..890620717
--- /dev/null
+++ b/ruqqus/templates/comment_failed.html
@@ -0,0 +1,54 @@
+{% extends "default.html" %}
+
+{% block title %}
+
+
+
+
+
+ {% include "submission_listing.html" %}
+
+
+
+
+
+
+
+
+
+
+{% else %}
+
+{% set score=c.score %}
+
+{% if v %}
+{% set voted=c.voted %}
+{% set adjust = voted %}
+
+{% else %}
+{% set voted=-2 %}
+{% set adjust=0 %}
+
+{% endif %}
+
+{% if standalone and level==1 %}
+
+
+
+
+
+
+
+
+
+
+
+
+ {% if render_replies %}
+ {% if level<6 %}
+
+ {% if c.is_banned and c.ban_reason %}Reason: {{c.ban_reason}}{% endif %}
+
+
+ {% set standalone=False %}
+ {% for reply in c.children(v) %}
+ {{single_comment(reply, level=level+1)}}
+ {% endfor %}
+
+ {% elif c.children(v) %}
+
+ {% set standalone=False %}
+ {% for reply in c.children(v) %}
+ {{single_comment(reply, level=level+1)}}
+ {% endfor %}
+
+
+ More comments
+
+ {% endif %}
+ {% endif %}
+
+ {% if c.post and c.post.over_18 %}+18{% endif %}
+
+ {% if c.parent_submission %}
+ {% if c.author_id==v.id and c.child_comments and is_notification_page%}
+ Comment {{'Replies' if (c.child_comments | length)>1 else 'Reply'}}: {{c.post.title | safe}}
+ {% elif c.post.author_id==v.id and c.is_top_level and is_notification_page%}
+ Post Reply: {{c.post.title | safe}}
+ {% elif is_notification_page and c.parent_submission in v.subscribed_idlist() %}
+ Subscribed Thread: {{c.post.title | safe}}
+ {% elif is_notification_page %}
+ Username Mention: {{c.post.title | safe}}
+ {% else %}
+ {{c.post.title | safe}}
+ {% endif %}
+ {% elif c.author_id==1046 or c.author_id==2360 %}
+ Drama Notification
+ {% else %}
+ Private Message
+ {% endif %}
+
+
+{% endif %}
+
+
+
+
+
+
+
+{% endif %}
+
+{% endmacro %}
+
+{% for comment in comments %}
+
+ {{single_comment(comment)}}
+
+{% endfor %}
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {% if c.is_banned and c.ban_reason %}
+
+
+
+
+
+
+
+
+ {% if render_replies %}
+ {% if level<6 %}
+ Reason: {{c.ban_reason}}
+ {% endif %}
+
+
+ {{c.realbody(v) | safe}}
+
+ {% if not c.parent_submission and c.author_id!=1046 and c.author_id!=2360 and c.author_id!=v.id %}
+ Reply
+
+
+ {% endif %}
+
+
+ {% if c.parent_submission %}
+ {% if v and v.id==c.author_id and (standalone or is_allowed_to_comment) %}
+
+
+
+ {% endif %}
+
+ {% if c.active_flags %}
+
+ Reported by:
+
+ {% endif %}
+
+ -
+ {% for u in c.flagged_by %}
+
- @{{ u.username }} + {% endfor %} +
+
+ {% endif %}
+ -
+
+ {% if v and request.path.startswith('/@') and v.admin_level == 0%}
+
+ {% if voted==1 %}
+
+ {% endif %}
+
+ {% elif v %}
+
+
- + + + {% else %} +
- + + + {% endif %} + +
- + {{score}} + + + {% if v and request.path.startswith('/@') and v.admin_level == 0 %} + + {% if voted==-1 %} + + {% endif %} + + {% elif v %} +
- + + + {% else %} + +
- + + + {% endif %} + +
- Votes + + {% if v and c.id in v.saved_comment_idlist() %} +
- Unsave + {% else %} +
- Save + {% endif %} + + {% if v %} + {% if standalone or is_allowed_to_comment %} +
- Reply + {% endif %} + + {% endif %} +
- Context +
- Copy link + + {% if v and v.admin_level>=3 and request.path.startswith ('/admin') %} +
- Remove +
- Approve + {% endif %} +
-
+ + + + + + ++
+
- + + + {% if v and request.path.startswith('/@') and v.admin_level == 0 %} + {% if voted==1 %} +
- + {% endif %} + {% elif v %} +
- + + {% else %} +
- + + {% endif %} +
- + {{score}} + + {% if v and request.path.startswith('/@') and v.admin_level == 0 %} + {% if voted==-1 %} + + {% endif %} + {% elif v %} +
- + + {% else %} +
- + + {% endif %} +
+ {% for reply in c.children(v) %}
+ {{single_comment(reply, level=level+1)}}
+ {% endfor %}
+
+ {% elif c.children(v) %}
+
+ {% for reply in c.children(v) %}
+ {{single_comment(reply, level=level+1)}}
+ {% endfor %}
+
+
+ More comments
+
+ {% endif %}
+ {% endif %}
+
+
+
+
+ Comment posted!
+
+
+
+
+
+
++ + + ++
