Changeset 246 for trunk/app/controllers/commentnews_controller.php

Timestamp:

02/22/08 13:58:35 (11 months ago)

Author:

aarkerio

Message:

Changes on users and entries

Files:

• trunk/app/controllers/commentnews_controller.php (modified) (5 diffs)

trunk/app/controllers/commentnews_controller.php

@@ -1 +1 @@
 <?php
 /** 
-Chipotle Software 
-GPL v3
+*   Chipotle Software 2002-2008
+*   GPLv3  manuel<arroba>mononeurona<punto>org 
 **/
 //File: /app/controllers/comentnews_controller.php
 
 uses('sanitize');
-loadModel('News');
-loadModel('User');
 
 class CommentnewsController extends AppController
 {
-    public $name       = 'Commentnews';
+ public $name       = 'Commentnews';
     
-    public $helpers    = array('Form', 'Javascript', 'Ajax', 'Time', 'Gags');
+ public $helpers    = array('Javascript', 'Ajax', 'Time', 'Gags');
     
-    public $components = array('Security', 'Captcha', 'Email');
+ public $components = array('Security', 'Captcha', 'Email');
+
+ public function isAuthorized() 
+ {
+   if ( $this->Auth->user('group') != 1 ) 
+   {
+     $this->Auth->deny(array('admin_delete', 'admin_listing', 'admin_edit'));
+   }
+   if ( $this->Auth->user() )
+   {
+     $this->Auth->allow(array('newcomment'));
+   }
+  return true;
+ }
     
- public function add()
- {      
-        if ( ! empty($this->data["Commentnews"]) )
-         {
-           $this->Sanitize = new Sanitize;
+ public function newcomment()
+ {
+   die('sadsadasdsa');  
+   die(var_dump($this->data));
+
+   if ( !empty($this->data["Commentnews"]) )
+   {
+     $this->Sanitize = new Sanitize;
            
-           $this->Sanitize->cleanArray($this->data);
+     $this->Sanitize->cleanArray($this->data);
            
-           $this->data["Commentnews"]["comment"] = nl2br($this->data["Commentnews"]["comment"]);
+     $this->data["Commentnews"]["comment"] = nl2br($this->data["Commentnews"]["comment"]);
            
-           if ( $this->othAuth->user('id') )
-           {
-              $this->data["Commentnews"]["user_id"] = $this->othAuth->user('id');
-           }
-           else
-           {
-               if ($this->data["Commentnews"]["captcha"] != $this->Session->read('captcha') || strlen($this->data["Commentnews"]["captcha"]) < 3)
-               {
-                  $this->flash('Code incorrect, please pulse back button', '/news/display/'.$this->data["Commentnews"]["new_id"], 20);  //    wrong captcha, spambot ??
-                  exit();
-               }
+     if ( $this->Auth->user('id') )
+     {
+              $this->data["Commentnews"]["user_id"] = $this->Auth->user('id');
+     }
+     else
+     {
+       if ($this->data["Commentnews"]["captcha"] != $this->Session->read('captcha') || strlen($this->data["Commentnews"]["captcha"]) < 3)
+       {
+         $this->flash('Code incorrect, please pulse back button', '/news/view/'.$this->data["Commentnews"]["new_id"], 6);  // wrong captcha, spambot ??
+         exit();
+       }
                 
-                $this->data["Commentnews"]["user_id"] = 0;
-           }
+         $this->data["Commentnews"]["user_id"] = 0;
+     }
             
-          if ( $this->Commentnews->save($this->data["Commentnews"]) ) //save the comment
-          {
-                $this->News = new News;
+      if ( $this->Commentnews->save($this->data["Commentnews"]) ) //save the comment
+      {
+          $this->News = new News;
                 
-                $user_id  = $this->News->field('user_id', array("News.id"=>$this->data["Commentnews"]["new_id"]));
+          $user_id  = $this->News->field('user_id', array("News.id"=>$this->data["Commentnews"]["new_id"]));
                 
-                $this->sendMail($user_id, $this->data["Commentnews"]["new_id"]);
+          $this->sendMail($user_id, $this->data["Commentnews"]["new_id"]);
                 
-                $this->redirect('/news/display/'.$this->data["Commentnews"]["new_id"].'#cnews');
-          }
+          $this->redirect('/news/view/'.$this->data["Commentnews"]["new_id"].'#cnews');
        }
+    }
  }
  
@@ -70 +84 @@
         $data = $this->User->find(array("User.id"=>$user_id), $fields);
         //exit($data["User"]["email"]);
-        $this->Email->sender    = '::MonoNeurona.org::';
+        $this->Email->sender    = '::Karamelo::';
         $this->Email->to        = $data["User"]["email"];
-        $this->Email->subject   = '::MonoNeurona.org:: New comment on your front-page New';
+        $this->Email->subject   = '::Karamelo:: New comment on your front-page New';
         $this->Email->sendAs    = 'html';
         $this->Email->template  = null;
@@ -80 +94 @@
         //Note: the text can be an array, each element will appear as a
         //seperate line in the message body.
-        $url   = '<img src="http://www.mononeurona.org/img/admin/new_user.jpg" alt="MonoNeurona" title="MonoNeurona" /><br />';
+        $url   = 'Karamelo<br />';
         $url  .= '<h2>'.$data["User"]["username"].'</h2><p>You have a new comment in your new: ';
-        $url  .= '<a href="http://'.$_SERVER['SERVER_NAME'].'/news/display/'.$new_id.'">';
-        $url  .= 'http://'.$_SERVER['SERVER_NAME'].'/news/display/'.$new_id.'</a></p>';
+        $url  .= '<a href="http://'.$_SERVER['SERVER_NAME'].'/news/view/'.$new_id.'">';
+        $url  .= 'http://'.$_SERVER['SERVER_NAME'].'/news/view/'.$new_id.'</a></p>';
         
         //die($url);
@@ -101 +115 @@
  public function admin_listing($limit=20)
  {
-      $this->layout    = 'admin';
-      $this->pageTitle = 'Comments on Blogs';
+   $this->layout    = 'admin';
+
+   $this->pageTitle = 'Comments on Blogs';
       
-      $conditions      = null;
-      $fields          = array("Commentnews.id", "News.title", "Commentnews.id", "Commentnews.comment", "Commentnews.created", "Commentnews.name", "Commentnews.user_id");
-      $order           = "Commentnews.id DESC";
+   $conditions  = null;
+
+   $fields = array("Commentnews.id", "News.title", "Commentnews.id", "Commentnews.comment", "Commentnews.created", "Commentnews.name", "Commentnews.user_id");
+   $order           = "Commentnews.id DESC";
        
-      $this->set('data', $this->Commentnews->findAll($conditions, $fields, $order, $limit, null, 2));
+   $this->set('data', $this->Commentnews->findAll($conditions, $fields, $order, $limit, null, 2));
  }
  
@@ -136 +152 @@
  public function admin_delete($id)
  {
-        // deletes task from database
-        $this->Commentnews->del($id);
-        $this->msgFlash('Comment deleted', '/admin/commentnews/listing');
+    // deletes comment on database
+    $this->Commentnews->del($id);
+    $this->msgFlash('Comment deleted', '/admin/commentnews/listing');
   }
 }