gosora/routes/user.go

package routes

import (
    "database/sql"
    "net/http"
    "strconv"
    "time"

    c "github.com/Azareal/Gosora/common"
)

func BanUserSubmit(w http.ResponseWriter, r *http.Request, u *c.User, suid string) c.RouteError {
    if !u.Perms.BanUsers {
        return c.NoPermissions(w, r, u)
    }
    uid, err := strconv.Atoi(suid)
    if err != nil {
        return c.LocalError("The provided UserID is not a valid number.", w, r, u)
    }
    if uid == -2 {
        return c.LocalError("Why don't you like Merlin?", w, r, u)
    }

    targetUser, err := c.Users.Get(uid)
    if err == sql.ErrNoRows {
        return c.LocalError("The user you're trying to ban no longer exists.", w, r, u)
    } else if err != nil {
        return c.InternalError(err, w, r)
    }
    // TODO: Is there a difference between IsMod and IsSuperMod? Should we delete the redundant one?
    if targetUser.IsMod {
        return c.LocalError("You may not ban another staff member.", w, r, u)
    }
    if uid == u.ID {
        return c.LocalError("Why are you trying to ban yourself? Stop that.", w, r, u)
    }
    if targetUser.IsBanned {
        return c.LocalError("The user you're trying to unban is already banned.", w, r, u)
    }

    durDays, err := strconv.Atoi(r.FormValue("dur-days"))
    if err != nil {
        return c.LocalError("You can only use whole numbers for the number of days", w, r, u)
    }
    durWeeks, err := strconv.Atoi(r.FormValue("dur-weeks"))
    if err != nil {
        return c.LocalError("You can only use whole numbers for the number of weeks", w, r, u)
    }
    durMonths, err := strconv.Atoi(r.FormValue("dur-months"))
    if err != nil {
        return c.LocalError("You can only use whole numbers for the number of months", w, r, u)
    }
    deletePosts := false
    switch r.FormValue("delete-posts") {
    case "1":
        deletePosts = true
    }

    var dur time.Duration
    if durDays > 1 && durWeeks > 1 && durMonths > 1 {
        dur, _ = time.ParseDuration("0")
    } else {
        var secs int
        secs += durDays * int(c.Day)
        secs += durWeeks * int(c.Week)
        secs += durMonths * int(c.Month)
        dur, _ = time.ParseDuration(strconv.Itoa(secs) + "s")
    }

    err = targetUser.Ban(dur, u.ID)
    if err == sql.ErrNoRows {
        return c.LocalError("The user you're trying to ban no longer exists.", w, r, u)
    } else if err != nil {
        return c.InternalError(err, w, r)
    }
    err = c.ModLogs.Create("ban", uid, "user", u.GetIP(), u.ID)
    if err != nil {
        return c.InternalError(err, w, r)
    }

    if deletePosts {
        err = targetUser.DeletePosts()
        if err == sql.ErrNoRows {
            return c.LocalError("The user you're trying to ban no longer exists.", w, r, u)
        } else if err != nil {
            return c.InternalError(err, w, r)
        }
        err = c.ModLogs.Create("delete-posts", uid, "user", u.GetIP(), u.ID)
        if err != nil {
            return c.InternalError(err, w, r)
        }
    }

    // TODO: Trickle the hookTable down from the router
    hTbl := c.GetHookTable()
    skip, rerr := hTbl.VhookSkippable("action_end_ban_user", targetUser.ID, u)
    if skip || rerr != nil {
        return rerr
    }

    http.Redirect(w, r, "/user/"+strconv.Itoa(uid), http.StatusSeeOther)
    return nil
}

func UnbanUser(w http.ResponseWriter, r *http.Request, u *c.User, suid string) c.RouteError {
    if !u.Perms.BanUsers {
        return c.NoPermissions(w, r, u)
    }
    uid, err := strconv.Atoi(suid)
    if err != nil {
        return c.LocalError("The provided UserID is not a valid number.", w, r, u)
    }

    targetUser, err := c.Users.Get(uid)
    if err == sql.ErrNoRows {
        return c.LocalError("The user you're trying to unban no longer exists.", w, r, u)
    } else if err != nil {
        return c.InternalError(err, w, r)
    }
    if !targetUser.IsBanned {
        return c.LocalError("The user you're trying to unban isn't banned.", w, r, u)
    }

    err = targetUser.Unban()
    if err == c.ErrNoTempGroup {
        return c.LocalError("The user you're trying to unban is not banned", w, r, u)
    } else if err == sql.ErrNoRows {
        return c.LocalError("The user you're trying to unban no longer exists.", w, r, u)
    } else if err != nil {
        return c.InternalError(err, w, r)
    }

    err = c.ModLogs.Create("unban", uid, "user", u.GetIP(), u.ID)
    if err != nil {
        return c.InternalError(err, w, r)
    }

    // TODO: Trickle the hookTable down from the router
    hTbl := c.GetHookTable()
    skip, rerr := hTbl.VhookSkippable("action_end_unban_user", targetUser.ID, u)
    if skip || rerr != nil {
        return rerr
    }

    http.Redirect(w, r, "/user/"+strconv.Itoa(uid), http.StatusSeeOther)
    return nil
}

func ActivateUser(w http.ResponseWriter, r *http.Request, u *c.User, suid string) c.RouteError {
    if !u.Perms.ActivateUsers {
        return c.NoPermissions(w, r, u)
    }
    uid, err := strconv.Atoi(suid)
    if err != nil {
        return c.LocalError("The provided UserID is not a valid number.", w, r, u)
    }

    targetUser, err := c.Users.Get(uid)
    if err == sql.ErrNoRows {
        return c.LocalError("The account you're trying to activate no longer exists.", w, r, u)
    } else if err != nil {
        return c.InternalError(err, w, r)
    }
    if targetUser.Active {
        return c.LocalError("The account you're trying to activate has already been activated.", w, r, u)
    }
    err = targetUser.Activate()
    if err != nil {
        return c.InternalError(err, w, r)
    }

    targetUser, err = c.Users.Get(uid)
    if err == sql.ErrNoRows {
        return c.LocalError("The account you're trying to activate no longer exists.", w, r, u)
    } else if err != nil {
        return c.InternalError(err, w, r)
    }
    err = c.GroupPromotions.PromoteIfEligible(targetUser, targetUser.Level, targetUser.Posts, targetUser.CreatedAt)
    if err != nil {
        return c.InternalError(err, w, r)
    }
    targetUser.CacheRemove()

    err = c.ModLogs.Create("activate", targetUser.ID, "user", u.GetIP(), u.ID)
    if err != nil {
        return c.InternalError(err, w, r)
    }

    // TODO: Trickle the hookTable down from the router
    hTbl := c.GetHookTable()
    skip, rerr := hTbl.VhookSkippable("action_end_activate_user", targetUser.ID, u)
    if skip || rerr != nil {
        return rerr
    }

    http.Redirect(w, r, "/user/"+strconv.Itoa(targetUser.ID), http.StatusSeeOther)
    return nil
}

func DeletePostsSubmit(w http.ResponseWriter, r *http.Request, u *c.User, suid string) c.RouteError {
    if !u.Perms.BanUsers {
        return c.NoPermissions(w, r, u)
    }
    uid, err := strconv.Atoi(suid)
    if err != nil {
        return c.LocalError("The provided UserID is not a valid number.", w, r, u)
    }

    targetUser, err := c.Users.Get(uid)
    if err == sql.ErrNoRows {
        return c.LocalError("The user you're trying to purge posts of no longer exists.", w, r, u)
    } else if err != nil {
        return c.InternalError(err, w, r)
    }
    // TODO: Is there a difference between IsMod and IsSuperMod? Should we delete the redundant one?
    if targetUser.IsMod {
        return c.LocalError("You may not purge the posts of another staff member.", w, r, u)
    }

    err = targetUser.DeletePosts()
    if err == sql.ErrNoRows {
        return c.LocalError("The user you're trying to purge posts of no longer exists.", w, r, u)
    } else if err != nil {
        return c.InternalError(err, w, r)
    }
    err = c.ModLogs.Create("delete-posts", uid, "user", u.GetIP(), u.ID)
    if err != nil {
        return c.InternalError(err, w, r)
    }

    // TODO: Trickle the hookTable down from the router
    hTbl := c.GetHookTable()
    skip, rerr := hTbl.VhookSkippable("action_end_delete_posts", targetUser.ID, u)
    if skip || rerr != nil {
        return rerr
    }

    http.Redirect(w, r, "/user/"+strconv.Itoa(uid), http.StatusSeeOther)
    return nil
}