import sqlite3 #all the imports from flask import abort, Flask, request, session, g, redirect,\ url_for, render_template, jsonify from functools import wraps from pytz import timezone from docutils import core from datetime import datetime from email import utils from bs4 import BeautifulSoup from urllib.parse import urljoin import locale import logging import pytz import time from smartypants import smartypants, Attr from email_helpers import GmailMessage locale.setlocale(locale.LC_ALL, 'fr_FR.UTF-8') def rstify(string): result = smartypants(core.publish_parts(string, writer_name='html')['fragment'], Attr.set2 | Attr.w) return result # configuration app = Flask(__name__) app.config.from_envvar('CONF') @app.template_filter('shortify') def shortify(string): soup = BeautifulSoup(string) try: return soup("p")[0].get_text()[:50] except IndexError: return string @app.template_filter('format_date') def format_date(date_object, format="%a %d %b %Y à %Hh%M"): if not date_object: return "" return (date_object.replace(tzinfo=timezone('utc')). astimezone(timezone(session['timezone'])). strftime(format)) @app.template_filter('format_ago') def format_ago(date_object, format): if not date_object: return "" readable = date_object.replace(tzinfo=timezone('utc')).\ astimezone(timezone(session['timezone'])).strftime(format) iso_format = date_object.strftime('%Y-%m-%dT%H:%M:%SZ') return '{1}'.\ format(iso_format, readable) @app.template_filter('format_rfc2822') def format_rfc2822(date_object): timestamp = time.mktime(date_object.timetuple()) return utils.formatdate(timestamp) @app.template_filter('pluralize') def pluralize(word, count, plural=None): if count == 0: return "Aucun {0}".format(word) elif count == 1: return "1 {0}".format(word) elif plural: return "{0} {1}".format(count, plural) else: return "{0} {1}s".format(count, word) def query_db(query, args=(), one=False): cur = get_db().execute(query, args) rv = cur.fetchone() if one else cur.fetchall() cur.close() return rv def connect_db(): conn = sqlite3.connect(app.config['DATABASE'], detect_types=sqlite3.PARSE_DECLTYPES) conn.row_factory = sqlite3.Row conn.execute("PRAGMA foreign_keys=ON") return conn def get_db(): db = getattr(g, 'sqlite_db', None) if db is None: db = g.sqlite_db = connect_db() return db @app.teardown_appcontext def close_db(error): """Closes the database again at the end of the request.""" db = getattr(g, 'sqlite_db', None) if db: db.close() def login_required(f): @wraps(f) def decorated_function(*args, **kwargs): if 'user_name' not in session: remote_user = request.headers.get("X-Remote-User") if remote_user is None: logging.error("missing header X-Remote-User") return abort(401) user = query_db('select * from users where id = ?', (remote_user,), True) session['user_name'] = user['user_name'] session['user_id'] = user['id'] session['timezone'] = user['timezone'] or "UTC" db = get_db() db.execute("UPDATE users SET last_seen=? WHERE id=?", (datetime.utcnow(), session['user_id'])) db.commit() return f(*args, **kwargs) return decorated_function @app.route('/') @app.route('/news/') @login_required def list_news(): news = query_db("SELECT news.*, users.user_name, " "count(comments.id) as ncomments FROM news " "LEFT JOIN users ON news.user_id = users.id " "LEFT JOIN comments ON news.id=comments.news_id " "GROUP BY news.id ORDER BY news.date DESC") comments = query_db("SELECT * from comments LEFT JOIN users " "ON comments.user_id = users.id " "ORDER BY date DESC LIMIT 5") users = query_db("SELECT * from users ORDER BY last_seen DESC") return render_template("news/list.html", news=news, comments=comments, users=users) @app.route('/news/add/', methods=['GET', 'POST']) @login_required def add_news(): if request.method == 'POST': content = request.form['content'] content_cache = rstify(content) if 'Add' in request.form: db = get_db() cur = db.execute("INSERT INTO news " "('title', 'content', 'user_id','content_cache') " "VALUES (?, ?, ?, ?)", (request.form['title'], content, session['user_id'], content_cache)) news_id = cur.lastrowid db.commit() # send email emails = query_db("SELECT email from users where notify=1") emails = [email["email"] for email in emails if email["email"]] if emails: message = GmailMessage() message['to'] = emails message['subject'] = request.form['title'] message['reply-to'] = "news.horel+{}@gmail.com".format(news_id) message.set_content(content) url = url_for('show_news', news_id=news_id, _external=True) html_content = content_cache + \ ("

Vous pouvez " "Lire cette nouvelle " "sur le site de la famille.

").format(url) message.add_alternative(html_content, subtype='html') message.send() return redirect(url_for('show_news', news_id=news_id)) else: news = {'content': content, 'content_cache': content_cache, 'title': request.form['title']} return render_template("news/news.html", news=news) elif request.method == 'GET': return render_template("news/news.html", news=None) @app.route('/news//', methods=['GET', 'POST']) @login_required def show_news(news_id): news = query_db("SELECT * FROM news LEFT JOIN users " "ON news.user_id = users.id " "WHERE news.id = ?", (news_id,), True) if request.method == 'GET': comments = query_db("SELECT * FROM comments LEFT JOIN users " "ON comments.user_id = users.id " "WHERE comments.news_id = ? " "ORDER BY date", (news_id,)) return render_template("news/show.html", news=news, comments=comments) elif request.method == 'POST': user_id = session['user_id'] content = request.form['content'] if content: content_cache = rstify(content) db = get_db() db.execute("INSERT INTO comments " "('user_id', 'content', 'news_id', 'content_cache') " "VALUES (?, ?, ?, ?)", (user_id, content, news_id, content_cache)) db.commit() return redirect(url_for('show_news', news_id=news_id)) @app.route('/comment/', methods=['POST']) @login_required def update_comment(comment_id): comment = query_db("SELECT * FROM comments WHERE comments.id = ?", (comment_id,), True) if comment["user_id"] == session["user_id"]: content = request.form['content'] content_cache = rstify(content) db = get_db() db.execute("UPDATE comments set content=?, content_cache=? " "WHERE comments.id=?", (content, content_cache, comment_id)) db.commit() return jsonify(content=content, content_cache=content_cache) @app.route('/news//edit', methods=['GET', 'POST']) @login_required def edit_news(news_id): if request.method == 'GET': news = query_db("SELECT * from news WHERE news.id = ?", (news_id,), True) if news["user_id"] == session['user_id']: return render_template('news/news.html', news=news) elif request.method == 'POST': title = request.form['title'] content = request.form['content'] content_cache = rstify(content) db = get_db() db.execute("UPDATE news SET 'title'=?, 'content'=?, 'content_cache'=? " "WHERE news.id =?", (title, content, content_cache, news_id)) db.commit() return redirect(url_for('show_news', news_id=news_id)) @app.route('/user//') @login_required def view_user(user_id): user = query_db('SELECT * FROM users WHERE id= ?', (user_id,), True) return render_template("user/show.html", user=user) @app.route('/articles/') @login_required def articles(): return render_template("articles/list.html") @app.route('/user/edit/', methods=['GET', 'POST']) @login_required def edit_user(): if request.method == 'GET': user = query_db('SELECT * FROM users WHERE id= ?', (session['user_id'],), True) user = {k: user[k] for k in user.keys() if user[k]} return render_template("user/edit.html", user=user, timezones=pytz.common_timezones) elif request.method == 'POST': result = {} result['notify'] = "notify" in request.form for k in ["birthday", "nameday", "email", "phone", "address_line1", "address_line2", "address_city_line", "timezone"]: if k in request.form: result[k] = request.form[k] set_string = ",".join([f"{k}=?" for k in result.keys()]) sqlstr = f"UPDATE users SET {set_string} WHERE id=?" db = get_db() args = (*result.values(), session['user_id']) db.execute(sqlstr, args) db.commit() session["timezone"] = request.form["timezone"] return redirect(url_for('view_user', user_id=session['user_id'])) @app.route('/logout/') @login_required def logout(): session.clear() return redirect(urljoin(app.config["ID_SERVER"], "logout"), 303) @app.route('/rss.xml') def rss(): news = query_db("SELECT * FROM news LEFT JOIN users ON " "news.user_id=users.id ORDER BY news.date desc") return render_template('rss.xml', news=news) if __name__ == "__main__": app.run()