from files.classes import * from files.helpers.alerts import * from files.helpers.get import * from files.helpers.regex import * from files.helpers.can_see import * from files.routes.wrappers import * from .front import frontlist from files.__main__ import app, cache, limiter @app.post("/exile/post/") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def exile_post(v, pid): p = get_post(pid) hole = p.hole_obj if not hole: abort(400) if hole.public_use: abort(403, "You can't exile users while Public Use mode is enabled!") hole = hole.name if not v.mods_hole(hole): abort(403) u = p.author if u.mods_hole(hole): abort(403) if not u.exiler_username(hole): exile = Exile(user_id=u.id, hole=hole, exiler_id=v.id) g.db.add(exile) send_notification(u.id, f"@{v.username} has exiled you from /h/{hole} for {p.textlink}") ma = HoleAction( hole=hole, kind='exile_user', user_id=v.id, target_user_id=u.id, _note=filter_emojis_only(f'for {p.title_html}'), ) g.db.add(ma) return {"message": f"@{u.username} has been exiled from /h/{hole} successfully!"} @app.post("/exile/comment/") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def exile_comment(v, cid): c = get_comment(cid) hole = c.post.hole_obj if not hole: abort(400) if hole.public_use: abort(403, "You can't exile users while Public Use mode is enabled!") hole = hole.name if not v.mods_hole(hole): abort(403) u = c.author if u.mods_hole(hole): abort(403) if not u.exiler_username(hole): exile = Exile(user_id=u.id, hole=hole, exiler_id=v.id) g.db.add(exile) send_notification(u.id, f"@{v.username} has exiled you from /h/{hole} for {c.textlink}") ma = HoleAction( hole=hole, kind='exile_user', user_id=v.id, target_user_id=u.id, _note=filter_emojis_only(f'for comment'), ) g.db.add(ma) return {"message": f"@{u.username} has been exiled from /h/{hole} successfully!"} @app.post("/h//unexile/") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def unexile(v, hole, uid): u = get_account(uid) if not v.mods_hole(hole): abort(403) if u.exiler_username(hole): exile = g.db.query(Exile).filter_by(user_id=u.id, hole=hole).one_or_none() g.db.delete(exile) send_notification(u.id, f"@{v.username} has revoked your exile from /h/{hole}") ma = HoleAction( hole=hole, kind='unexile_user', user_id=v.id, target_user_id=u.id ) g.db.add(ma) return {"message": f"@{u.username} has been unexiled from /h/{hole} successfully!"} @app.post("/h//block") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def block_sub(v, hole): hole = get_hole(hole) if hole.public_use: abort(403, f"/h/{hole} has Public Use mode enabled and is unblockable!") hole = hole.name existing = g.db.query(HoleBlock).filter_by(user_id=v.id, hole=hole).one_or_none() if not existing: block = HoleBlock(user_id=v.id, hole=hole) g.db.add(block) cache.delete_memoized(frontlist) return {"message": f"/h/{hole} blocked successfully!"} @app.post("/h//unblock") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def unblock_sub(v, hole): hole = get_hole(hole) if not can_see(v, hole): abort(403) block = g.db.query(HoleBlock).filter_by(user_id=v.id, hole=hole.name).one_or_none() if block: g.db.delete(block) cache.delete_memoized(frontlist) return {"message": f"/h/{hole.name} unblocked successfully!"} @app.post("/h//subscribe") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def subscribe_sub(v, hole): hole = get_hole(hole).name existing = g.db.query(StealthHoleUnblock).filter_by(user_id=v.id, hole=hole).one_or_none() if not existing: subscribe = StealthHoleUnblock(user_id=v.id, hole=hole) g.db.add(subscribe) cache.delete_memoized(frontlist) return {"message": f"/h/{hole} unblocked successfully!"} @app.post("/h//unsubscribe") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def unsubscribe_sub(v, hole): hole = get_hole(hole).name subscribe = g.db.query(StealthHoleUnblock).filter_by(user_id=v.id, hole=hole).one_or_none() if subscribe: g.db.delete(subscribe) cache.delete_memoized(frontlist) return {"message": f"/h/{hole} blocked successfully!"} @app.post("/h//follow") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def follow_sub(v, hole): hole = get_hole(hole) if not can_see(v, hole): abort(403) existing = g.db.query(HoleFollow).filter_by(user_id=v.id, hole=hole.name).one_or_none() if not existing: subscription = HoleFollow(user_id=v.id, hole=hole.name) g.db.add(subscription) return {"message": f"/h/{hole} followed successfully!"} @app.post("/h//unfollow") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def unfollow_sub(v, hole): hole = get_hole(hole) subscription = g.db.query(HoleFollow).filter_by(user_id=v.id, hole=hole.name).one_or_none() if subscription: g.db.delete(subscription) return {"message": f"/h/{hole} unfollowed successfully!"} @app.get("/h//mods") @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def mods_hole(v, hole): if hole == 'test': return redirect('/users') hole = get_hole(hole) if not can_see(v, hole): abort(403) users = g.db.query(User, Mod).join(Mod).filter_by(hole=hole.name).order_by(Mod.created_utc).all() return render_template("hole/mods.html", v=v, hole=hole, users=users) @app.get("/h//exilees") @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def hole_exilees(v, hole): hole = get_hole(hole) if not can_see(v, hole): abort(403) users = g.db.query(User, Exile).join(Exile, Exile.user_id==User.id) \ .filter_by(hole=hole.name) \ .order_by(Exile.created_utc.desc(), User.username).all() return render_template("hole/exilees.html", v=v, hole=hole, users=users) @app.get("/h//blockers") @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def hole_blockers(v, hole): hole = get_hole(hole) if not can_see(v, hole): abort(403) if hole.public_use: users = [] else: users = g.db.query(User, HoleBlock).join(HoleBlock) \ .filter_by(hole=hole.name) \ .order_by(HoleBlock.created_utc.desc(), User.username).all() return render_template("hole/blockers.html", v=v, hole=hole, users=users, verb="blocking") @app.get("/h//followers") @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def hole_followers(v, hole): hole = get_hole(hole) if not can_see(v, hole): abort(403) users = g.db.query(User, HoleFollow).join(HoleFollow) \ .filter_by(hole=hole.name) \ .order_by(HoleFollow.created_utc.desc(), User.username).all() return render_template("hole/blockers.html", v=v, hole=hole, users=users, verb="following") @app.post("/h//add_mod") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit("30/day", deduct_when=lambda response: response.status_code < 400) @limiter.limit("30/day", deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def add_mod(v, hole): if SITE_NAME == 'WPD': abort(403) if hole == 'test': abort(403, "Everyone is already a mod of this hole!") hole = get_hole(hole).name if not v.mods_hole(hole): abort(403) user = request.values.get('user') if not user: abort(400) user = get_user(user, v=v) if hole in {'furry','vampire','racist','femboy','edgy'} and not v.client and not user.house.lower().startswith(hole): abort(403, f"@{user.username} needs to be a member of House {hole.capitalize()} to be added as a mod there!") existing = g.db.query(Mod).filter_by(user_id=user.id, hole=hole).one_or_none() if not existing: mod = Mod(user_id=user.id, hole=hole) g.db.add(mod) if v.id != user.id: send_repeatable_notification(user.id, f"@{v.username} has added you as a mod to /h/{hole}") ma = HoleAction( hole=hole, kind='make_mod', user_id=v.id, target_user_id=user.id ) g.db.add(ma) return {"message": "Mod added successfully!"} @app.post("/h//remove_mod") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def remove_mod(v, hole): hole = get_hole(hole).name if not v.mods_hole(hole): abort(403) uid = request.values.get('uid') if not uid: abort(400) try: uid = int(uid) except: abort(400) user = get_account(uid) if not user: abort(404) mod = g.db.query(Mod).filter_by(user_id=user.id, hole=hole).one_or_none() if not mod: abort(400) if not (v.id == user.id or v.mod_date(hole) and v.mod_date(hole) < mod.created_utc): abort(403) g.db.delete(mod) if v.id != user.id: send_repeatable_notification(user.id, f"@{v.username} has removed you as a mod from /h/{hole}") ma = HoleAction( hole=hole, kind='remove_mod', user_id=v.id, target_user_id=user.id ) g.db.add(ma) return {"message": f"@{user.username} has been removed as a mod!"} @app.get("/create_hole") @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def create_sub(v): if not v.can_create_hole: abort(403) return render_template("hole/create_hole.html", v=v, cost=HOLE_COST) @app.post("/create_hole") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def create_sub2(v): if not v.can_create_hole: abort(403) name = request.values.get('name') if not name: abort(400) name = name.strip().lower() if not hole_group_name_regex.fullmatch(name): abort(400, "Name does not match the required format!") if not v.charge_account('coins/marseybux', HOLE_COST, f"Cost of creating /h/{name}")[0]: abort(400, "You don't have enough coins or marseybux!") hole = get_hole(name, graceful=True) if hole: abort(400, f"/h/{hole} already exists!") g.db.add(v) if v.shadowbanned: abort(500) hole = Hole(name=name) g.db.add(hole) g.db.flush() #Necessary, following statement errors out otherwise mod = Mod(user_id=v.id, hole=hole.name) g.db.add(mod) text = f":!marseyparty: /h/{hole} has been created by @{v.username} :marseyparty:" alert_active_users(text, v.id, User.hole_creation_notifs == True) return redirect(f"/h/{hole}") @app.post("/kick/") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def kick(v, pid): post = get_post(pid) if not post.hole: abort(403) if not v.mods_hole(post.hole): abort(403) old = post.hole post.hole = None post.hole_pinned = None ma = HoleAction( hole=old, kind='kick_post', user_id=v.id, target_post_id=post.id ) g.db.add(ma) if v.id != post.author_id: message = f"@{v.username} (a /h/{old} mod) has moved {post.textlink} from /h/{old} to the main feed!" send_repeatable_notification(post.author_id, message) g.db.add(post) cache.delete_memoized(frontlist) return {"message": f"Post kicked from /h/{old} successfully!"} @app.get('/h//settings') @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def hole_settings(v, hole): hole = get_hole(hole) if not v.mods_hole(hole.name): abort(403) return render_template('hole/settings.html', v=v, sidebar=hole.sidebar, hole=hole, css=hole.css, snappy_quotes=hole.snappy_quotes) @app.post('/h//sidebar') @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def post_hole_sidebar(v, hole): hole = get_hole(hole) if not v.mods_hole(hole.name): abort(403) if v.shadowbanned: abort(400) sidebar = request.values.get('sidebar', '').strip() if len(sidebar) > 10000: abort(400, "New sidebar is too long (max 10000 characters)") sidebar_html = sanitize(sidebar, blackjack=f"/h/{hole} sidebar") if len(sidebar_html) > 20000: abort(400, "New rendered sidebar is too long!") hole.sidebar = sidebar hole.sidebar_html = sidebar_html g.db.add(hole) ma = HoleAction( hole=hole.name, kind='edit_sidebar', user_id=v.id ) g.db.add(ma) return {"message": "Sidebar changed successfully!"} @app.post('/h//css') @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def post_hole_css(v, hole): hole = get_hole(hole) css = request.values.get('css', '').strip() if not hole: abort(404) if not v.mods_hole(hole.name): abort(403) if v.shadowbanned: abort(400) if len(css) > CSS_LENGTH_LIMIT: abort(400, f"Hole CSS is too long (max {CSS_LENGTH_LIMIT} characters)") valid, error = validate_css(css) if not valid: abort(400, error) hole.css = css g.db.add(hole) ma = HoleAction( hole=hole.name, kind='edit_css', user_id=v.id ) g.db.add(ma) return {"message": "CSS edited successfully!"} @app.get("/h//css") @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) def get_hole_css(hole): hole = g.db.query(Hole.css).filter_by(name=hole.strip().lower()).one_or_none() if not hole: abort(404) resp = make_response(hole.css or "") resp.headers.add("Content-Type", "text/css") return resp @app.post("/h//settings/sidebars/") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit("50/day", deduct_when=lambda response: response.status_code < 400) @limiter.limit("50/day", deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def upload_hole_sidebar(v, hole): if g.is_tor: abort(403, "File uploads are not allowed through TOR") hole = get_hole(hole) if not v.mods_hole(hole.name): abort(403) if v.shadowbanned: abort(500) file = request.files["sidebar"] name = f'/images/{time.time()}'.replace('.','') + '.webp' file.save(name) sidebarurl = process_image(name, v, resize=600) hole.sidebarurls.append(sidebarurl) g.db.add(hole) ma = HoleAction( hole=hole.name, kind='upload_sidebar_image', _note=filter_emojis_only(sidebarurl), user_id=v.id ) g.db.add(ma) return redirect(f'/h/{hole}/settings') @app.post("/h//settings/sidebars/delete/") @limiter.limit("1/second", deduct_when=lambda response: response.status_code < 400) @limiter.limit("1/second", deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def delete_hole_sidebar(v, hole, index): hole = get_hole(hole) if not v.mods_hole(hole.name): abort(403) if not hole.sidebarurls: abort(404, f"Sidebar image not found (/h/{hole.name} has no sidebar images)") if index < 0 or index >= len(hole.sidebarurls): abort(404, f'Sidebar image not found (sidebar index {index} is not between 0 and {len(hole.sidebarurls)})') sidebar = hole.sidebarurls[index] try: remove_media_using_link(sidebar) except FileNotFoundError: pass del hole.sidebarurls[index] g.db.add(hole) ma = HoleAction( hole=hole.name, kind='delete_sidebar_image', _note=filter_emojis_only(sidebar), user_id=v.id ) g.db.add(ma) return {"message": f"Deleted sidebar {index} from /h/{hole} successfully"} @app.post("/h//settings/sidebars/delete_all") @limiter.limit("1/10 second;30/day", deduct_when=lambda response: response.status_code < 400) @limiter.limit("1/10 second;30/day", deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def delete_all_hole_sidebars(v, hole): hole = get_hole(hole) if not v.mods_hole(hole.name): abort(403) for sidebar in hole.sidebarurls: try: remove_media_using_link(sidebar) except FileNotFoundError: pass hole.sidebarurls = [] g.db.add(hole) ma = HoleAction( hole=hole.name, kind='delete_sidebar_image', _note='all', user_id=v.id ) g.db.add(ma) return {"message": f"Deleted all sidebar images from /h/{hole} successfully"} @app.post("/h//settings/banners/") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit("50/day", deduct_when=lambda response: response.status_code < 400) @limiter.limit("50/day", deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def upload_hole_banner(v, hole): if g.is_tor: abort(403, "File uploads are not allowed through TOR") hole = get_hole(hole) if not v.mods_hole(hole.name): abort(403) if v.shadowbanned: abort(500) file = request.files["banner"] name = f'/images/{time.time()}'.replace('.','') + '.webp' file.save(name) bannerurl = process_image(name, v, resize=1600) hole.bannerurls.append(bannerurl) g.db.add(hole) ma = HoleAction( hole=hole.name, kind='upload_banner', _note=filter_emojis_only(bannerurl), user_id=v.id ) g.db.add(ma) return redirect(f'/h/{hole}/settings') @app.post("/h//settings/banners/delete/") @limiter.limit("1/second", deduct_when=lambda response: response.status_code < 400) @limiter.limit("1/second", deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def delete_hole_banner(v, hole, index): hole = get_hole(hole) if not v.mods_hole(hole.name): abort(403) if not hole.bannerurls: abort(404, f"Banner not found (/h/{hole.name} has no banners)") if index < 0 or index >= len(hole.bannerurls): abort(404, f'Banner not found (banner index {index} is not between 0 and {len(hole.bannerurls)})') banner = hole.bannerurls[index] try: remove_media_using_link(banner) except FileNotFoundError: pass del hole.bannerurls[index] g.db.add(hole) ma = HoleAction( hole=hole.name, kind='delete_banner', _note=filter_emojis_only(banner), user_id=v.id ) g.db.add(ma) return {"message": f"Deleted banner {index} from /h/{hole} successfully"} @app.post("/h//settings/banners/delete_all") @limiter.limit("1/10 second;30/day", deduct_when=lambda response: response.status_code < 400) @limiter.limit("1/10 second;30/day", deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def delete_all_hole_banners(v, hole): hole = get_hole(hole) if not v.mods_hole(hole.name): abort(403) for banner in hole.bannerurls: try: remove_media_using_link(banner) except FileNotFoundError: pass hole.bannerurls = [] g.db.add(hole) ma = HoleAction( hole=hole.name, kind='delete_banner', _note='all', user_id=v.id ) g.db.add(ma) return {"message": f"Deleted all banners from /h/{hole} successfully"} @app.post("/h//marsey_image") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit("5/minute;50/day", deduct_when=lambda response: response.status_code < 400) @limiter.limit("5/minute;50/day", deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def hole_marsey(v, hole): if g.is_tor: abort(403, "File uploads are not allowed through TOR!") hole = get_hole(hole) if not v.mods_hole(hole.name): abort(403) if v.shadowbanned: abort(500) file = request.files["marsey"] name = f'/images/{time.time()}'.replace('.','') + '.webp' file.save(name) marseyurl = process_image(name, v, resize=200) if marseyurl: if hole.marseyurl: remove_media_using_link(hole.marseyurl) hole.marseyurl = marseyurl g.db.add(hole) ma = HoleAction( hole=hole.name, kind='change_marsey', _note=filter_emojis_only(hole.marseyurl), user_id=v.id ) g.db.add(ma) return redirect(f'/h/{hole}/settings') @app.get("/flairs") @app.get("/holes") @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def subs(v): holes = g.db.query(Hole, func.count(Post.hole)).outerjoin(Post, Hole.name == Post.hole).group_by(Hole.name).order_by(Hole.created_utc).all() total_users = g.db.query(User).count() return render_template('hole/holes.html', v=v, holes=holes, total_users=total_users) @app.post("/hole_pin/") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def hole_pin(v, pid): p = get_post(pid) if not p.hole: abort(403) if not v.mods_hole(p.hole): abort(403) num = g.db.query(Post).filter(Post.hole == p.hole, Post.hole_pinned != None).count() if num >= 2: abort(403, f"You can only pin 2 posts to /h/{p.hole}") p.hole_pinned = v.username g.db.add(p) if v.id != p.author_id: message = f"@{v.username} (a /h/{p.hole} mod) has pinned {p.textlink} in /h/{p.hole}" send_repeatable_notification(p.author_id, message) ma = HoleAction( hole=p.hole, kind='pin_post', user_id=v.id, target_post_id=p.id ) g.db.add(ma) cache.delete_memoized(frontlist) return {"message": f"Post pinned to /h/{p.hole} successfully!"} @app.post("/hole_unpin/") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def hole_unpin(v, pid): p = get_post(pid) if not p.hole: abort(403) if not v.mods_hole(p.hole): abort(403) p.hole_pinned = None g.db.add(p) if v.id != p.author_id: message = f"@{v.username} (a /h/{p.hole} mod) has unpinned {p.textlink} in /h/{p.hole}" send_repeatable_notification(p.author_id, message) ma = HoleAction( hole=p.hole, kind='unpin_post', user_id=v.id, target_post_id=p.id ) g.db.add(ma) cache.delete_memoized(frontlist) return {"message": f"Post unpinned from /h/{p.hole} successfully!"} @app.post('/h//stealth') @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def hole_stealth(v, hole): hole = get_hole(hole) if hole.name in {'braincels','smuggies','mnn','glory','racist'} and v.admin_level < PERMS["MODS_EVERY_HOLE"]: abort(403) if not v.mods_hole(hole.name): abort(403) hole.stealth = not hole.stealth g.db.add(hole) cache.delete_memoized(frontlist) if hole.stealth: ma = HoleAction( hole=hole.name, kind='enable_stealth', user_id=v.id ) g.db.add(ma) return {"message": f"Stealth mode has been enabled for /h/{hole} successfully!"} else: ma = HoleAction( hole=hole.name, kind='disable_stealth', user_id=v.id ) g.db.add(ma) return {"message": f"Stealth mode has been disabled for /h/{hole} successfully!"} @app.post('/h//public_use') @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def hole_public_use(v, hole): hole = get_hole(hole) if not v.mods_hole(hole.name): abort(403) hole.public_use = not hole.public_use g.db.add(hole) exiles = g.db.query(Exile).filter_by(hole=hole.name) for exile in exiles: send_repeatable_notification(exile.user_id, f"Your exile from /h/{exile.hole} has been revoked due to its jannies enabling Public Use mode!") g.db.delete(exile) if hole.public_use: ma = HoleAction( hole=hole.name, kind='enable_public_use', user_id=v.id ) g.db.add(ma) return {"message": f"Public Use mode has been enabled for /h/{hole} successfully!"} else: ma = HoleAction( hole=hole.name, kind='disable_public_use', user_id=v.id ) g.db.add(ma) return {"message": f"Public Use mode has been disabled for /h/{hole} successfully!"} @app.post("/pin_comment_mod/") @feature_required('PINS') @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def pin_comment_mod(cid, v): comment = get_comment(cid, v=v) if not comment.pinned: if not v.mods_hole(comment.post.hole): abort(403) comment.pinned = v.username + " (Mod)" g.db.add(comment) comment.pin_parents() ma = HoleAction( hole=comment.post.hole, kind="pin_comment", user_id=v.id, target_comment_id=comment.id ) g.db.add(ma) if v.id != comment.author_id: message = f"@{v.username} (a /h/{comment.post.hole} mod) has pinned {comment.textlink}" send_repeatable_notification(comment.author_id, message) return {"message": "Comment pinned!"} @app.post("/unpin_comment_mod/") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def unpin_comment_mod(cid, v): comment = get_comment(cid, v=v) if comment.pinned: if not v.mods_hole(comment.post.hole): abort(403) comment.pinned = None comment.pinned_utc = None g.db.add(comment) comment.unpin_parents() ma = HoleAction( hole=comment.post.hole, kind="unpin_comment", user_id=v.id, target_comment_id=comment.id ) g.db.add(ma) if v.id != comment.author_id: message = f"@{v.username} (a /h/{comment.post.hole} mod) has unpinned {comment.textlink}" send_repeatable_notification(comment.author_id, message) return {"message": "Comment unpinned!"} @app.get("/h//log") @app.get("/h//modlog") @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def hole_log(v, hole): hole = get_hole(hole) if not can_see(v, hole): abort(403) page = get_page() mod = request.values.get("mod") if mod: mod_id = get_user(mod, attributes=[User.id]).id else: mod_id = 0 kind = request.values.get("kind") types = HOLEACTION_TYPES if kind and kind not in types: kind = None actions = [] total=0 else: actions = g.db.query(HoleAction).filter_by(hole=hole.name) if mod_id: actions = actions.filter_by(user_id=mod_id) kinds = set(x.kind for x in actions) if kind: kinds.add(kind) types2 = {} for k,val in types.items(): if k in kinds: types2[k] = val types = types2 if kind: actions = actions.filter_by(kind=kind) total = actions.count() actions = actions.order_by(HoleAction.id.desc()).offset(PAGE_SIZE*(page-1)).limit(PAGE_SIZE).all() mods = [x[0] for x in g.db.query(Mod.user_id).filter_by(hole=hole.name)] mods = [x[0] for x in g.db.query(User.username).filter(User.id.in_(mods)).order_by(User.username)] return render_template("log.html", v=v, admins=mods, types=types, admin=mod, type=kind, actions=actions, total=total, page=page, hole=hole, single_user_url='mod') @app.get("/h//log/") @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def hole_log_item(id, v, hole): hole = get_hole(hole) if not can_see(v, hole): abort(403) action = g.db.get(HoleAction, id) if not action: abort(404) mods = [x[0] for x in g.db.query(Mod.user_id).filter_by(hole=hole.name)] mods = [x[0] for x in g.db.query(User.username).filter(User.id.in_(mods)).order_by(User.username)] types = HOLEACTION_TYPES return render_template("log.html", v=v, actions=[action], total=1, page=1, action=action, admins=mods, types=types, hole=hole, single_user_url='mod') @app.post('/h//snappy_quotes') @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def post_hole_snappy_quotes(v, hole): hole = get_hole(hole) snappy_quotes = request.values.get('snappy_quotes', '').strip() if not hole: abort(404) if not v.mods_hole(hole.name): abort(403) if v.shadowbanned: abort(400) if snappy_quotes.endswith('[para]'): snappy_quotes = snappy_quotes[:-6].strip() if len(snappy_quotes) > HOLE_SNAPPY_QUOTES_LENGTH: abort(400, f"Quotes are too long (max {HOLE_SNAPPY_QUOTES_LENGTH} characters)") hole.snappy_quotes = snappy_quotes g.db.add(hole) ma = HoleAction( hole=hole.name, kind='edit_snappy_quotes', user_id=v.id ) g.db.add(ma) return {"message": "Snappy quotes edited successfully!"} @app.post("/change_hole/") @limiter.limit('1/second', scope=rpath) @limiter.limit('1/second', scope=rpath, key_func=get_ID) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400) @limiter.limit(DEFAULT_RATELIMIT, deduct_when=lambda response: response.status_code < 400, key_func=get_ID) @auth_required def change_hole(pid, v): post = get_post(pid) if post.ghost: abort(403, "You can't move ghost posts into holes!") hole_from = post.hole hole_to = request.values.get("hole_to", "").strip() hole_to = get_hole(hole_to, graceful=True) hole_to = hole_to.name if hole_to else None if not post.hole_changable(v): abort(403, "You can't change the hole of this post!") if hole_to == None: if HOLE_REQUIRED: abort(403, "All posts are required to be in holes!") hole_to_in_notif = 'the main feed' else: hole_to_in_notif = f'/h/{hole_to}' if hole_from == hole_to: abort(409, f"Post is already in {hole_to_in_notif}") if post.author.exiler_username(hole_to): abort(403, f"User is exiled from this hole!") if hole_to == 'changelog': abort(403, "/h/changelog is archived!") if hole_to in {'furry','vampire','racist','femboy','edgy'} and not v.client and not post.author.house.lower().startswith(hole_to): if v.id == post.author_id: abort(403, f"You need to be a member of House {hole_to.capitalize()} to post in /h/{hole_to}") else: abort(403, f"@{post.author_name} needs to be a member of House {hole_to.capitalize()} for their post to be moved to /h/{hole_to}") post.hole = hole_to post.hole_pinned = None if hole_to == 'chudrama': post.bannedfor = None post.chuddedfor = None for c in post.comments: c.bannedfor = None c.chuddedfor = None g.db.add(c) g.db.add(post) if v.id != post.author_id: hole_from_str = 'main feed' if hole_from is None else \ f'/h/{hole_from}' hole_to_str = 'main feed' if hole_to is None else \ f'/h/{hole_to}' if v.admin_level >= PERMS['POST_COMMENT_MODERATION']: ma = ModAction( kind='change_hole', user_id=v.id, target_post_id=post.id, _note=filter_emojis_only(f'{hole_from_str} → {hole_to_str}'), ) g.db.add(ma) position = 'a site admin' else: ma = HoleAction( hole=hole_from, kind='change_hole', user_id=v.id, target_post_id=post.id, _note=filter_emojis_only(f'{hole_from_str} → {hole_to_str}'), ) g.db.add(ma) position = f'a /h/{hole_from} mod' if hole_from == None: hole_from_in_notif = 'the main feed' else: hole_from_in_notif = f'/h/{hole_from}' message = f"@{v.username} ({position}) has moved {post.textlink} from {hole_from_in_notif} to {hole_to_in_notif}" send_repeatable_notification(post.author_id, message) cache.delete_memoized(frontlist) return {"message": f"Post moved to {hole_to_in_notif} successfully!"}