{passwd} (hover to reveal).'
750 | flash(s, 'success')
751 | uid, = uid
752 | session['user_id'] = uid
753 | session.permanent = True
754 | return True
755 | return False
756 |
757 |
758 | @app.context_processor
759 | def utility_processor():
760 | def _format_time_delta(n, t):
761 | # Try the sane thing first
762 | dt = (n - t) // 10 ** 9
763 | if dt < 1:
764 | return "less than a second"
765 | if dt < 2:
766 | return f"1 second"
767 | if dt < 60:
768 | return f"{dt} seconds"
769 | if dt < 119:
770 | return f"1 minute"
771 | if dt < 3600:
772 | return f"{dt // 60} minutes"
773 | if dt < 3600 * 2:
774 | return f"1 hour"
775 | if dt < 3600 * 24:
776 | return f"{dt // 3600} hours"
777 | if dt < 3600 * 24 * 31:
778 | return f"{dt // (3600 * 24)} days"
779 |
780 | # Try some very rough estimate, whatever
781 | f = lambda x: datetime.utcfromtimestamp(x // 10 ** 9)
782 | n, t = f(n), f(t)
783 | def f(x, y, s):
784 | return f'{y - x} {s}{"s" if y - x > 1 else ""}'
785 | if t.year < n.year:
786 | return f(t.year, n.year, "year")
787 | if t.month < n.month:
788 | return f(t.month, n.month, "month")
789 | assert False, 'unreachable'
790 |
791 | def format_since(t):
792 | n = time.time_ns()
793 | if n < t:
794 | return 'in a distant future'
795 | return _format_time_delta(n, t) + ' ago'
796 |
797 | def format_until(t):
798 | n = time.time_ns()
799 | if t <= n:
800 | return 'in a distant past'
801 | return _format_time_delta(t, n)
802 |
803 | def format_time(t):
804 | return datetime.utcfromtimestamp(t / 10 ** 9).replace(microsecond=0)
805 |
806 | def rand_password():
807 | '''
808 | Generate a random password.
809 |
810 | The current implementation returns 12 random lower- and uppercase alphabet characters.
811 | This gives up to `log((26 * 2) ** 12) / log(2) = ~68` bits of entropy, which should be
812 | enough for the foreseeable future.
813 | '''
814 | return ''.join(string.ascii_letters[secrets.randbelow(52)] for _ in range(12))
815 |
816 | def gen_captcha():
817 | return captcha.generate(config.captcha_key)
818 |
819 | return {
820 | 'format_since': format_since,
821 | 'format_time': format_time,
822 | 'format_until': format_until,
823 | 'minimd': minimd.html,
824 | 'rand_password': rand_password,
825 | 'gen_captcha': gen_captcha,
826 | }
827 |
828 |
829 | def restart():
830 | '''
831 | Shut down *all* workers and spawn new ones.
832 | This is necessary on e.g. a configuration change.
833 |
834 | Since restarting workers depends is platform-dependent this task is delegated to an external
835 | program.
836 | '''
837 | r = subprocess.call(['./restart.sh'])
838 | if r == 0:
839 | flash('Restart script exited successfully', 'success')
840 | else:
841 | flash(f'Restart script exited with error (code {r})', 'error')
842 |
843 | def trim_text(s):
844 | '''
845 | Because browsers LOVE \\r, trailing whitespace etc.
846 | '''
847 | return s.replace('\r', '')
848 |
--------------------------------------------------------------------------------
/minimd.py:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env python3
2 |
3 | import re
4 |
5 | # https://stackoverflow.com/a/6041965
6 | RE_URL = re.compile(r'(https?://([\w_-]+(?:(?:\.[\w_-]+)+))([\w.,@?^=%&:/~+#-]*[\w@?^=%&/~+#-]))')
7 | RE_EM = re.compile(r'\*(.*?)\*')
8 | RE_LIST = re.compile(r'(-|[0-9]\.) .*')
9 |
10 | def html(text):
11 | # Replace angle brackets to prevent XSS
12 | # Also replace ampersands to prevent surprises.
13 | text = text.replace('&', '&').replace('<', '<').replace('>', '>')
14 |
15 | html = [''] 16 | lines = text.split('\n') 17 | in_code = False 18 | in_list = False 19 | 20 | for l in lines: 21 | if l == '': 22 | in_list = False 23 | if in_code: 24 | html.append('') 25 | in_code = False 26 | html.append('
') 27 | continue 28 | if l.startswith(' '): 29 | in_list = False 30 | l = l[2:] 31 | if not in_code: 32 | html.append('
')
33 | in_code = True
34 | html.append(l)
35 | continue
36 | if in_code:
37 | html.append('')
38 | in_code = False
39 | l = RE_EM.sub(r'\1', l)
40 | l = RE_URL.sub(r'\1', l)
41 | if RE_LIST.match(l):
42 | if in_list:
43 | html.append('38 | Admin panel 39 | Home page 40 |
41 | {%- for category, msg in get_flashed_messages(True) -%} 42 |{{ msg }}
43 | {%- endfor %} 44 | {%- block content %}{% endblock -%} 45 | 46 | -------------------------------------------------------------------------------- /templates/admin/index.html: -------------------------------------------------------------------------------- 1 | {% extends 'admin/base.html' -%} 2 | {% block content -%} 3 |⚠ Only use queries if you know what you're doing ⚠
5 | 9 |28 |
31 | 32 |33 |
36 | 37 || ID | 41 |Name | 42 |Description | 43 |Actions | 44 |
|---|---|---|---|
| {{ id }} | 48 |49 | 53 | | 54 | 58 | | 59 |Remove | 60 |
| ID | 81 |Name | 82 |Join date | 83 |Role | 84 |Banned | 85 |
|---|---|---|---|---|
| {{ id }} | 89 |{{ name }} | 90 |{{ format_time(join_date) }} | 91 |92 | 100 | | 101 |102 | {%- if banned_until > 0 -%} 103 | 107 | {%- endif -%} 108 | 113 | | 114 |
| {{ c }} | 12 | {%- endfor -%} 13 |
{{ msg | safe }}
42 | {%- endfor -%} 43 | {%- block content %}{% endblock -%} 44 |Are you sure you want to delete this comment on "{{ thread_title }}"?
5 |7 |
10 | 13 | 14 | {% endblock %} 15 | -------------------------------------------------------------------------------- /templates/confirm_delete_thread.html: -------------------------------------------------------------------------------- 1 | {% extends 'base.html' %} 2 | 3 | {% block content %} 4 |Are you sure you want to delete "{{ thread_title }}"?
5 |6 |
9 | 12 | 13 | {% endblock %} 14 | -------------------------------------------------------------------------------- /templates/edit_comment.html: -------------------------------------------------------------------------------- 1 | {% extends 'base.html' %} 2 | 3 | {% block content %} 4 | 17 | {% endblock %} 18 | -------------------------------------------------------------------------------- /templates/edit_thread.html: -------------------------------------------------------------------------------- 1 | {% extends 'base.html' %} 2 | 3 | {% block content %} 4 | 17 | {% endblock %} 18 | -------------------------------------------------------------------------------- /templates/forum.html: -------------------------------------------------------------------------------- 1 | {% extends 'base.html' %} 2 | {%- from 'moderator.html' import moderate_thread with context %} 3 | 4 | {%- macro nav() -%} 5 |6 | {%- if prev_page is not none %}prev{% endif -%} 7 | {%- if prev_page is not none and next_page is not none %} | {% endif -%} 8 | {%- if next_page is not none %}next{% endif -%} 9 |
10 | {%- endmacro -%} 11 | 12 | {% block content -%} 13 |{{ minimd(description) | safe }}
14 | 15 | {{- nav() -}} 16 || Topic | 19 |Author | 20 |Created | 21 |Updated | 22 |Comments | 23 | {%- if user is not none and user.is_moderator() -%} 24 |Action | 25 | {%- endif -%} 26 |
|---|---|---|---|---|---|
| {{ '[hidden] ' if hidden else '' }}{{ title }} | 30 |{{ author }} | 31 |{{ format_since(ctime) }} | 32 |{{ format_since(utime) }} | 33 |{{ comment_count }} | 34 |35 | {%- if user is not none and user.is_moderator() %} 36 | {{- moderate_thread(id, hidden) }} 37 | {%- endif -%} 38 | | 39 |
{{ minimd(description) | safe }}
5 || Forum | 8 |Last update | 9 ||
|---|---|---|
|
13 |
14 | {{ minimd(description) | safe }} 15 | |
16 | {% if t_id %}
17 |
18 |
19 | {{ format_since(t_mtime) }} 20 | |
21 | {% else %}
22 | No threads | 23 | {% endif %} 24 |
Registrations are disabled.
16 | {%- endif %} 17 | {%- endblock %} 18 | -------------------------------------------------------------------------------- /templates/thread.html: -------------------------------------------------------------------------------- 1 | {%- extends 'base.html' %} 2 | {%- from 'comment.html' import render_comment, reply, thread_author with context %} 3 | {%- from 'moderator.html' import moderate_thread with context %} 4 | 5 | {%- block content %} 6 | {%- if user is not none and user.is_moderator() -%} 7 |{{ moderate_thread(thread_id, hidden) }}
8 | {%- endif -%} 9 | {{- thread_author(author_id, author, create_time, modify_time) }} 10 |{{ minimd(text) | safe }}
11 | 12 | {{- reply() }} 13 | 14 | {%- for c in comments %} 15 | {{- render_comment(c, thread_id) }} 16 | {%- endfor %} 17 | {%- endblock %} 18 | -------------------------------------------------------------------------------- /templates/user_edit.html: -------------------------------------------------------------------------------- 1 | {% extends 'base.html' %} 2 | 3 | {% block content %} 4 | 5 | 13 |6 |
11 | {%- if banned_until > 0 -%} 12 | 16 | {%- endif -%} 17 | 18 | {%- endif -%} 19 |{{ name }}
20 |{{ minimd(about) | safe }}
21 | {%- endblock %}
22 |
--------------------------------------------------------------------------------
/test/all.sh:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env bash
2 |
3 | SQLITE=sqlite3
4 | FLASK=flask
5 |
6 | set -e
7 | set -x
8 |
9 | tmp=$(mktemp -d)
10 | trap 'rm -rf $tmp' EXIT
11 | base=$(dirname "$0")
12 |
13 | db=$tmp/forum.db
14 |
15 | . $base/../venv/bin/activate
16 |
17 | # initialize db
18 | $base/../init_sqlite.sh $db --no-admin
19 | $SQLITE $db < $base/init_db.txt
20 | cd $base/..
21 |
22 | export DB=$db
23 | export SERVER=dev
24 | $FLASK --app main --debug run $TEST_FLASK_ARGS
25 |
--------------------------------------------------------------------------------
/test/init_db.txt:
--------------------------------------------------------------------------------
1 | insert into users (name, password, join_time) values (
2 | "foo",
3 | -- supasecret
4 | "$argon2id$v=19$m=65536,t=3,p=4$qBWCEAKgdA4BYOy915qzlg$KhGy3UF0QMlplt2eB7r7QNL2kDcggXUimRWUrWql8sI",
5 | 0
6 | );
7 | insert into users (name, password, join_time) values (
8 | "bar",
9 | -- abraca
10 | "$argon2id$v=19$m=65536,t=3,p=4$klJKCUFoDaF07j3nPCeEUA$lCphd5n1YIs8MaVop2vGNirwknkh91qJIZHMuBOlgWA",
11 | 0
12 | );
13 | insert into users (name, password, join_time, role) values (
14 | "bazzers",
15 | -- e
16 | "$argon2id$v=19$m=65536,t=3,p=4$9v5fS2ktxTinNEbIGUOoFQ$LMdEuAuuTCJ7utOE88+nXn7o6R/DEKY8ZA6wV+YkVGQ",
17 | 0,
18 | 2
19 | );
20 |
21 | insert into forums (name, description)
22 | values ("Earth", "The totality of all space and time; all that is, has been, and will be.");
23 |
24 | insert into threads (author_id, forum_id, create_time, modify_time, update_time, title, text)
25 | values (1, 1, 0, 0, 0, "Hello, world!",
26 | 'In its most general sense, the term "world" refers to the totality of entities, to the whole of reality or to everything that is.');
27 |
28 | insert into comments (author_id, thread_id, create_time, modify_time, text)
29 | values (2, 1, 0, 0, "Hi!");
30 | insert into comments (author_id, thread_id, create_time, modify_time, text, parent_id)
31 | values (3, 1, 0, 0, "Greetings.", 1);
32 |
33 | update config set registration_enabled = 1;
34 |
--------------------------------------------------------------------------------
/tool.py:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env python3
2 |
3 | import sys, password
4 |
5 | def arg(i, s):
6 | if i < len(sys.argv):
7 | return sys.argv[i]
8 | print(s)
9 | sys.exit(1)
10 |
11 | def arg_last(i, s):
12 | if i == len(sys.argv) - 1:
13 | return sys.argv[i]
14 | print(s)
15 | sys.exit(1)
16 |
17 | proc = 'tool.py' if len(sys.argv) < 1 else sys.argv[0]
18 | cmd = arg(1, f'usage: {proc}