402 lines
11 KiB
Python
402 lines
11 KiB
Python
import time
|
|
import uuid
|
|
from hashlib import md5
|
|
|
|
from sqlalchemy.orm import load_only
|
|
from flask_socketio import SocketIO, emit, join_room, leave_room
|
|
from flask import request
|
|
|
|
from files.helpers.actions import *
|
|
from files.helpers.alerts import *
|
|
from files.helpers.config.const import *
|
|
from files.helpers.slurs_and_profanities import censor_slurs_profanities
|
|
from files.helpers.regex import *
|
|
from files.helpers.media import *
|
|
from files.helpers.sanitize import *
|
|
from files.helpers.alerts import push_notif
|
|
from files.helpers.can_see import *
|
|
from files.routes.wrappers import *
|
|
from files.classes.orgy import *
|
|
from files.classes.chats import *
|
|
|
|
from files.__main__ import app, cache, limiter, db_session
|
|
|
|
from engineio.payload import Payload
|
|
Payload.max_decode_packets = 50
|
|
|
|
socketio = SocketIO(
|
|
app,
|
|
async_mode='gevent',
|
|
max_http_buffer_size=8388608, #for images
|
|
)
|
|
|
|
muted = cache.get(f'muted') or {}
|
|
online = {"messages": set()}
|
|
typing = {}
|
|
|
|
cache.set('loggedin_chat', 0, timeout=86400)
|
|
|
|
def auth_required_socketio(f):
|
|
def wrapper(*args, **kwargs):
|
|
if not hasattr(g, 'db'): g.db = db_session()
|
|
v = get_logged_in_user()
|
|
if not v or v.is_permabanned: return ''
|
|
x = make_response(f(*args, v=v, **kwargs))
|
|
try: g.db.commit()
|
|
except: g.db.rollback()
|
|
g.db.close()
|
|
stdout.flush()
|
|
return x
|
|
wrapper.__name__ = f.__name__
|
|
return wrapper
|
|
|
|
@app.post('/chat/<int:chat_id>/refresh_chat')
|
|
def refresh_chat(chat_id):
|
|
emit('refresh_chat', namespace='/', to=f'{SITE_FULL}/chat/{chat_id}')
|
|
return ''
|
|
|
|
@socketio.on('speak')
|
|
@auth_required_socketio
|
|
def speak(data, v):
|
|
if v.is_suspended: return ''
|
|
|
|
try: chat_id = int(data['chat_id'])
|
|
except: return ''
|
|
|
|
chat = g.db.get(Chat, chat_id)
|
|
if not chat: return ''
|
|
|
|
if chat.id == 1:
|
|
if not v.allowed_in_chat: return ''
|
|
else:
|
|
is_member = g.db.query(ChatMembership.user_id).filter_by(user_id=v.id, chat_id=chat_id).one_or_none()
|
|
if not is_member: return ''
|
|
|
|
image = None
|
|
if data['file']:
|
|
name = f'/chat_images/{time.time()}'.replace('.','') + '.webp'
|
|
with open(name, 'wb') as f:
|
|
f.write(data['file'])
|
|
image = process_image(name, v)
|
|
|
|
text = data['message'].strip()[:1000]
|
|
if image: text += f'\n\n{image}'
|
|
if not text: return ''
|
|
|
|
if chat.id == 1:
|
|
vname = v.username.lower()
|
|
if vname in muted:
|
|
if time.time() < muted[vname]:
|
|
return ''
|
|
else:
|
|
del muted[vname]
|
|
refresh_online(f'{SITE_FULL}/chat/1')
|
|
if v.admin_level >= PERMS['USER_BAN']:
|
|
for i in mute_regex.finditer(text.lower()):
|
|
username = i.group(1).lower()
|
|
muted_until = int(int(i.group(2)) * 60 + time.time())
|
|
muted[username] = muted_until
|
|
refresh_online(f'{SITE_FULL}/chat/1')
|
|
for i in unmute_regex.finditer(text.lower()):
|
|
username = i.group(1).lower()
|
|
muted.pop(username, None)
|
|
refresh_online(f'{SITE_FULL}/chat/1')
|
|
|
|
text_html = sanitize(text, count_emojis=True, chat=True)
|
|
if isinstance(text_html , tuple): return ''
|
|
if len(text_html) > 5000: return ''
|
|
|
|
execute_blackjack(v, None, text, "chat")
|
|
execute_under_siege(v, None, text, "chat")
|
|
|
|
quotes = data['quotes']
|
|
if quotes: quotes = int(quotes)
|
|
else: quotes = None
|
|
|
|
chat_message = ChatMessage(
|
|
user_id=v.id,
|
|
chat_id=chat_id,
|
|
quotes=quotes,
|
|
text=text,
|
|
text_censored=censor_slurs_profanities(text, 'chat', True),
|
|
text_html=text_html,
|
|
text_html_censored=censor_slurs_profanities(text_html, 'chat'),
|
|
)
|
|
g.db.add(chat_message)
|
|
g.db.flush()
|
|
|
|
if v.id == chat.owner_id:
|
|
for i in chat_adding_regex.finditer(text):
|
|
user = get_user(i.group(1), graceful=True, attributes=[User.id])
|
|
if user and not user.has_muted(v) and not user.has_blocked(v):
|
|
existing = g.db.query(ChatMembership.user_id).filter_by(user_id=user.id, chat_id=chat_id).one_or_none()
|
|
if not existing:
|
|
chat_membership = ChatMembership(
|
|
user_id=user.id,
|
|
chat_id=chat_id,
|
|
)
|
|
g.db.add(chat_membership)
|
|
g.db.flush()
|
|
|
|
for i in chat_kicking_regex.finditer(text):
|
|
user = get_user(i.group(1), graceful=True, attributes=[User.id])
|
|
if user:
|
|
existing = g.db.query(ChatMembership).filter_by(user_id=user.id, chat_id=chat_id).one_or_none()
|
|
if existing:
|
|
g.db.delete(existing)
|
|
g.db.flush()
|
|
|
|
alrdy_here = list(online[request.referrer].keys())
|
|
memberships = g.db.query(ChatMembership).options(load_only(ChatMembership.user_id)).filter(
|
|
ChatMembership.chat_id == chat_id,
|
|
ChatMembership.user_id.notin_(alrdy_here),
|
|
ChatMembership.notification == False,
|
|
)
|
|
for membership in memberships:
|
|
membership.notification = True
|
|
g.db.add(membership)
|
|
|
|
uids = set(x.user_id for x in memberships)
|
|
title = 'New messages'
|
|
body = f'in "{chat.name}"'
|
|
url = f'{SITE_FULL}/chat/{chat.id}'
|
|
push_notif(uids, title, body, url)
|
|
|
|
data = {
|
|
"id": chat_message.id,
|
|
"quotes": chat_message.quotes,
|
|
"hat": chat_message.hat,
|
|
"user_id": chat_message.user_id,
|
|
"username": chat_message.username,
|
|
"namecolor": chat_message.namecolor,
|
|
"patron": chat_message.patron,
|
|
"pride_username": chat_message.pride_username,
|
|
"text": chat_message.text,
|
|
"text_censored": chat_message.text_censored,
|
|
"text_html": chat_message.text_html,
|
|
"text_html_censored": chat_message.text_html_censored,
|
|
"created_utc": chat_message.created_utc,
|
|
}
|
|
|
|
if v.shadowbanned:
|
|
emit('speak', data)
|
|
else:
|
|
emit('speak', data, room=request.referrer)
|
|
|
|
typing[request.referrer] = []
|
|
|
|
return ''
|
|
|
|
def refresh_online(room):
|
|
for k, val in list(online[room].items()):
|
|
if time.time() > val[0]:
|
|
del online[room][k]
|
|
if val[1] in typing[room]:
|
|
typing[room].remove(val[1])
|
|
|
|
data = [list(online[room].values()), muted]
|
|
emit("online", data, room=room)
|
|
if room == f'{SITE_FULL}/chat/1':
|
|
cache.set('loggedin_chat', len(online[room]), timeout=86400)
|
|
|
|
@socketio.on('connect')
|
|
@auth_required_socketio
|
|
def connect(v):
|
|
if not request.referrer: return ''
|
|
room = request.referrer
|
|
|
|
if room.startswith(f'{SITE_FULL}/notifications/messages'):
|
|
join_room(v.id)
|
|
online["messages"].add(v.id)
|
|
return ''
|
|
|
|
join_room(room)
|
|
|
|
if not online.get(room):
|
|
online[room] = {}
|
|
|
|
if not typing.get(room):
|
|
typing[room] = []
|
|
|
|
if v.username in typing.get(room):
|
|
typing[room].remove(v.username)
|
|
|
|
emit('typing', typing[room], room=room)
|
|
|
|
return ''
|
|
|
|
@socketio.on('disconnect')
|
|
@auth_required_socketio
|
|
def disconnect(v):
|
|
if not request.referrer: return ''
|
|
room = request.referrer
|
|
|
|
if room.startswith(f'{SITE_FULL}/notifications/messages'):
|
|
leave_room(v.id)
|
|
online["messages"].discard(v.id)
|
|
return ''
|
|
|
|
if online.get(room):
|
|
online[room].pop(v.id, None)
|
|
|
|
if v.username in typing[room]:
|
|
typing[room].remove(v.username)
|
|
|
|
leave_room(room)
|
|
|
|
if online.get(room):
|
|
refresh_online(room)
|
|
|
|
return ''
|
|
|
|
@socketio.on('heartbeat')
|
|
@auth_required_socketio
|
|
def heartbeat(v):
|
|
if not request.referrer: return ''
|
|
room = request.referrer
|
|
|
|
if not online.get(room):
|
|
online[room] = {}
|
|
|
|
expire_utc = int(time.time()) + 3610
|
|
already_there = online[room].get(v.id)
|
|
online[room][v.id] = (expire_utc, v.username, v.name_color, v.patron, v.id, bool(v.has_badge(303)))
|
|
if not already_there:
|
|
refresh_online(room)
|
|
|
|
return ''
|
|
|
|
@socketio.on('typing')
|
|
@auth_required_socketio
|
|
def typing_indicator(data, v):
|
|
if v.is_suspended: return ''
|
|
|
|
if not request.referrer: return ''
|
|
room = request.referrer
|
|
|
|
if not typing.get(room):
|
|
typing[room] = []
|
|
|
|
if v.shadowbanned:
|
|
if data and v.username not in typing[room]:
|
|
emit('typing', typing[room] + [v.username])
|
|
elif not data and v.username in typing[room]:
|
|
emit('typing', typing[room] - [v.username])
|
|
else:
|
|
if data and v.username not in typing[room]:
|
|
typing[room].append(v.username)
|
|
emit('typing', typing[room], room=room)
|
|
elif not data and v.username in typing[room]:
|
|
typing[room].remove(v.username)
|
|
emit('typing', typing[room], room=room)
|
|
|
|
return ''
|
|
|
|
|
|
@socketio.on('delete')
|
|
@auth_required_socketio
|
|
def delete(id, v):
|
|
if v.admin_level < PERMS['POST_COMMENT_MODERATION']:
|
|
return ''
|
|
|
|
message = g.db.get(ChatMessage, id)
|
|
g.db.delete(message)
|
|
emit('delete', id, room=f'{SITE_FULL}/chat/1')
|
|
|
|
return ''
|
|
|
|
|
|
@app.post("/reply")
|
|
@limiter.limit('1/second', scope=rpath)
|
|
@limiter.limit('1/second', scope=rpath, key_func=get_ID)
|
|
@limiter.limit("6/minute;50/hour;200/day", deduct_when=lambda response: response.status_code < 400)
|
|
@limiter.limit("6/minute;50/hour;200/day", deduct_when=lambda response: response.status_code < 400, key_func=get_ID)
|
|
@auth_required
|
|
def messagereply(v):
|
|
body = request.values.get("body", "").strip()
|
|
if len(body) > COMMENT_BODY_LENGTH_LIMIT:
|
|
abort(400, f'Message is too long (max {COMMENT_BODY_LENGTH_LIMIT} characters)')
|
|
|
|
id = request.values.get("parent_id")
|
|
parent = get_comment(id, v=v)
|
|
|
|
if parent.parent_post or parent.wall_user_id:
|
|
abort(403, "You can only reply to messages!")
|
|
|
|
user_id = parent.author.id
|
|
|
|
if v.is_permabanned and parent.sentto != MODMAIL_ID:
|
|
abort(403, "You are permabanned and may not reply to messages!")
|
|
elif v.is_muted and parent.sentto == MODMAIL_ID:
|
|
abort(403, "You are muted!")
|
|
|
|
if parent.sentto == MODMAIL_ID: user_id = None
|
|
elif v.id == user_id: user_id = parent.sentto
|
|
|
|
user = None
|
|
|
|
if user_id:
|
|
user = get_account(user_id, v=v, include_blocks=True)
|
|
if hasattr(user, 'is_blocking') and user.is_blocking:
|
|
abort(403, f"You're blocking @{user.username}")
|
|
elif (v.admin_level <= PERMS['MESSAGE_BLOCKED_USERS']
|
|
and hasattr(user, 'is_blocked') and user.is_blocked):
|
|
abort(403, f"You're blocked by @{user.username}")
|
|
|
|
if user.has_muted(v):
|
|
abort(403, f"@{user.username} is muting notifications from you, so messaging them is pointless!")
|
|
|
|
if not g.is_tor and get_setting("dm_media"):
|
|
body = process_files(request.files, v, body, is_dm=True, dm_user=user)
|
|
if len(body) > COMMENT_BODY_LENGTH_LIMIT:
|
|
abort(400, f'Message is too long (max {COMMENT_BODY_LENGTH_LIMIT} characters)')
|
|
|
|
if not body: abort(400, "Message is empty!")
|
|
|
|
body_html = sanitize(body)
|
|
|
|
if len(body_html) > COMMENT_BODY_HTML_LENGTH_LIMIT:
|
|
abort(400, "Rendered message is too long!")
|
|
|
|
if parent.sentto == MODMAIL_ID:
|
|
sentto = MODMAIL_ID
|
|
else:
|
|
sentto = user_id
|
|
|
|
c = Comment(author_id=v.id,
|
|
parent_post=None,
|
|
parent_comment_id=id,
|
|
top_comment_id=parent.top_comment_id,
|
|
level=parent.level + 1,
|
|
sentto=sentto,
|
|
body=body,
|
|
body_html=body_html,
|
|
)
|
|
g.db.add(c)
|
|
g.db.flush()
|
|
execute_blackjack(v, c, c.body_html, 'message')
|
|
execute_under_siege(v, c, c.body_html, 'message')
|
|
|
|
if user_id and user_id not in {v.id, MODMAIL_ID} | BOT_IDs and user_id not in online["messages"] and can_see(user, v):
|
|
notif = g.db.query(Notification).filter_by(comment_id=c.id, user_id=user_id).one_or_none()
|
|
if not notif:
|
|
notif = Notification(comment_id=c.id, user_id=user_id)
|
|
g.db.add(notif)
|
|
|
|
title = f'New message from @{c.author_name}'
|
|
url = f'{SITE_FULL}/notifications/messages'
|
|
push_notif({user_id}, title, body, url)
|
|
|
|
top_comment = c.top_comment
|
|
|
|
if top_comment.sentto == MODMAIL_ID:
|
|
if parent.author.id != v.id and parent.author.admin_level < PERMS['VIEW_MODMAIL']:
|
|
notif = Notification(comment_id=c.id, user_id=parent.author.id)
|
|
g.db.add(notif)
|
|
elif user_id and user_id not in {v.id, MODMAIL_ID} | BOT_IDs:
|
|
c.unread = True
|
|
rendered = render_template("comments.html", v=get_account(user_id), comments=[c])
|
|
emit('insert_reply', [parent.id, rendered], namespace='/', to=user_id)
|
|
|
|
return {"comment": render_template("comments.html", v=v, comments=[c])}
|