Changeset 448

Timestamp:

07/08/08 01:14:42 (3 months ago)

Author:

eevee

Message:

Removed ability for anon users to post to the shoutbox. (#329)

Location:

veekun/trunk

Files:

• lib/Vee/Controller/Index.pm (modified) (2 diffs)
• lib/Vee/Controller/Shoutbox.pm (modified) (2 diffs)
• templates/index.tt (modified) (1 diff)

veekun/trunk/lib/Vee/Controller/Index.pm

@@ -30 +30 @@
 
 my $shoutbox_fields = {
-    name => { type => 'text', size => 20, maxlength => 20 },
     content => { type => 'textarea', rows => 3, cols => 20 },
 };
@@ -77 +76 @@
 
     my $shoutbox_form = Vee::Form->new(
-        id => 'shoutbox',
+        id     => 'shoutbox',
         fields => $shoutbox_fields,
         params => $c->req->params,
     );
-
-    if ($c->user) {
-        $shoutbox_form->force( name => $c->user->name );
-    }
     $s->{shoutbox_form} = $shoutbox_form;
 

veekun/trunk/lib/Vee/Controller/Shoutbox.pm

@@ -59 +59 @@
     my $s = $c->stash;
 
+    if (not $c->user) {
+        $c->vee_abort("Only registered users may post in the shoutbox.");
+    }
+
     my $content = Vee::Utils::fix_newlines( $c->req->params->{content} );
-    my $name    = $c->req->params->{name}
-                || ($c->user ? $c->user->name : 'Anonymous');
 
-    if (!$content) {
+    if (not $content) {
         $c->vee_abort("Sorry, no mimes allowed.");
     }
@@ -78 +80 @@
 
     $c->model('DBIC::Shoutbox')->create({
-        name => $name,
-        user_id => ($c->user ? $c->user->obj->id : undef),
-        ip => Vee::Utils::inet_aton($c->req->address),
-        time => time,
+        name    => $c->user->name,
+        user_id => $c->user->obj->id,
+        ip      => Vee::Utils::inet_aton($c->req->address),
+        time    => time,
         content => $content,
     });

veekun/trunk/templates/index.tt

@@ -115 +115 @@
         <p> Shoutbox is empty. </p>
 [% END %]
-[%# TODO: permissions here would be nice I suppose~ %]
-[% IF 1 OR allowed('shoutbox.post') %]
+[% IF c.user  # allowed('shoutbox.post') %]
         <form class="front-shout-form" action="/shoutbox/post" method="post">
             <p> [% shoutbox_form.get_tag('content') %] </p>
-            <p>
-                <label> Name: [% shoutbox_form.get_tag('name') %] </label>
-                <input type="submit" name="submit" value="Post"/> <input type="reset" value="Clear"/>
-            </p>
+            <p> <input type="submit" name="submit" value="Post"/> <input type="reset" value="Clear"/> </p>
         </form>
 [% END %]