moebooru/app/controllers/inline_controller.rb

class InlineController < ApplicationController
  layout "default"
  before_filter :member_only, :only => [:create, :copy]
  verify :method => :post, :only => [:delete_image, :delete, :update, :copy]

  def create
    # If this user already has an inline with no images, use it.
    inline = Inline.find(:first, :conditions => ["(SELECT count(*) FROM inline_images WHERE inline_images.inline_id = inlines.id) = 0 AND user_id = ?", @current_user.id])
    inline ||= Inline.create(:user_id => @current_user.id)
    redirect_to :action => "edit", :id => inline.id
  end

  def index
    order = []
    if not @current_user.is_anonymous?
      order << ["user_id = #{@current_user.id} DESC"]
    end
    order << ["created_at desc"]

    options = {
      :per_page => 20,
      :page => params[:page],
      # Mods can view all inlines; sort the user's own inlines first.
      :order => order.join(", ")
    }

    @inlines = Inline.paginate options

    respond_to_list("inlines")
  end

  def delete
    @inline = Inline.find_by_id(params[:id])
    if @inline.nil?
      redirect_to "/404"
      return
    end

    unless @current_user.has_permission?(@inline)
      access_denied()
      return
    end

    @inline.destroy
    respond_to_success("Image group deleted", :action => "index")
  end

  def add_image
    @inline = Inline.find_by_id(params[:id])
    if @inline.nil?
      redirect_to "/404"
      return
    end

    unless @current_user.has_permission?(@inline)
      access_denied()
      return
    end

    if request.post?
      new_image = InlineImage.create(params[:image].merge(:inline_id => @inline.id))
      if not new_image.errors.empty?
        respond_to_error(new_image, :action => "edit", :id => @inline.id)
        return
      end

      redirect_to :action => "edit", :id => @inline.id
      return
    end
  end

  def delete_image
    image = InlineImage.find_by_id(params[:id])
    if image.nil?
      redirect_to "/404"
      return
    end

    inline = image.inline
    unless @current_user.has_permission?(inline)
      access_denied()
      return
    end

    image.destroy
    redirect_to :action => "edit", :id => inline.id
  end

  def update
    inline = Inline.find_by_id(params[:id].to_i)
    if inline.nil?
      redirect_to "/404"
      return
    end
    unless @current_user.has_permission?(inline)
      access_denied()
      return
    end

    inline.update_attributes(params[:inline])
    params[:image] ||= []
    params[:image].each do |id, p|
      image = InlineImage.find(:first, :conditions => ["id = ? AND inline_id = ?", id, inline.id])
      image.update_attributes(:description => p[:description]) if p[:description]
      image.update_attributes(:sequence => p[:sequence]) if p[:sequence]
    end

    inline.reload
    inline.renumber_sequences

    flash[:notice] = "Image updated"
    redirect_to :action => "edit", :id => inline.id
  end

  # Create a copy of an inline image and all of its images.  Allow copying from images
  # owned by someone else.
  def copy
    inline = Inline.find_by_id(params[:id])
    if inline.nil?
      redirect_to "/404"
      return
    end

    new_inline = Inline.create(:user_id => @current_user.id)
    new_inline.update_attributes(:description => inline.description)

    for image in inline.inline_images do
      new_attributes = image.attributes.merge(:inline_id => new_inline.id)
      new_attributes.delete(:id)
      new_image = InlineImage.create(new_attributes)
      new_image.save!
    end

    respond_to_success("Image copied", :action => "edit", :id => new_inline.id)
  end

  def edit
    @inline = Inline.find_by_id(params[:id])
    if @inline.nil?
      redirect_to "/404"
      return
    end
  end

  def crop
    @inline = Inline.find_by_id(params[:id])
    @image = @inline.inline_images[0] rescue nil
    if @inline.nil? || @image.nil?
      redirect_to "/404"
      return
    end
    unless @current_user.has_permission?(@inline)
      access_denied()
      return
    end

    if request.post?
      if @inline.crop(params) then
        redirect_to :action => "edit", :id => @inline.id
      else
        respond_to_error(@inline, :action => "edit", :id => @inline.id)
      end
    end

    @params = params
  end
end