index.cgi

#!/usr/bin/env ruby

############################################################################
# Copyright 2009-2019 Benjamin Kellermann                                  #
#                                                                          #
# This file is part of Dudle.                                              #
#                                                                          #
# Dudle is free software: you can redistribute it and/or modify it under   #
# the terms of the GNU Affero General Public License as published by       #
# the Free Software Foundation, either version 3 of the License, or        #
# (at your option) any later version.                                      #
#                                                                          #
# Dudle is distributed in the hope that it will be useful, but WITHOUT ANY #
# WARRANTY; without even the implied warranty of MERCHANTABILITY or        #
# FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public     #
# License for more details.                                                #
#                                                                          #
# You should have received a copy of the GNU Affero General Public License #
# along with dudle.  If not, see <http://www.gnu.org/licenses/>.           #
############################################################################

if __FILE__ == $0

	require_relative 'dudle'

	$d = Dudle.new

	if $cgi.include?('create_poll') && $cgi.include?('poll_url')
		polltitle = $cgi['create_poll']
		if polltitle == ''
			createnotice = _('Please enter a descriptive title.')
		else
			if $cgi['poll_url'] == ''
				require 'securerandom'
				true while File.exist?(pollurl = SecureRandom.urlsafe_base64($conf.random_chars))
			else
				pollurl = $cgi['poll_url']
			end

			if !(pollurl =~ /\A[\w\-_]*\Z/)
				createnotice = _('Custom address may only contain letters, numbers, and dashes.')
			elsif File.exist?(pollurl)
				createnotice = _('A poll with this address already exists.')
			else
				Dir.mkdir(pollurl)
				Dir.chdir(pollurl)
				begin
					VCS.init
					File.symlink('../participate.rb', 'index.cgi')
					%w[atom customize history overview edit_columns access_control delete_poll invite_participants].each { |f|
						File.symlink("../#{f}.rb", "#{f}.cgi")
					}
					['data.yaml', '.htaccess', '.htdigest'].each { |f|
						File.open(f, 'w').close
						VCS.add(f)
					}
					Poll.new(polltitle, $cgi['poll_type'])
					Dir.chdir('..')
					$d.html.header['status'] = 'REDIRECT'
					$d.html.header['Cache-Control'] = 'no-cache'
					$d.html.header['Location'] = $conf.siteurl + pollurl + '/edit_columns.cgi'
					$d << (format(_('The poll was created successfully. The link to your new poll is: %<link>s'), link: "<br /><a href=\"#{pollurl}\">#{pollurl}</a>"))
				rescue WrongPollTypeError # should only happen in case of hacking
					Dir.chdir('..')
					require 'fileutils'
					FileUtils.rm_r(pollurl)
					$d.html.header['status'] = 'REDIRECT'
					$d.html.header['Cache-Control'] = 'no-cache'
					$d.html.header['Location'] = 'http://localhost/'
					$d << _('Go away.')
				end
			end
		end
	end

	unless $d.html.header['status'] == 'REDIRECT'

		$d << ('<h2>' + _('Create new poll') + '</h2>')

		titlestr = _('Title')
		typestr = _('Type')
		timepollstr = _('Event-scheduling poll (e.&thinsp;g., schedule a meeting)')
		normalpollstr = _('Normal poll (e.&thinsp;g., vote for what is the best coffee)')
		customaddrstr = _('Custom address (optional)')
		customaddrhintstr = _('May contain letters, numbers, and dashes.')

		createstr = _('Create')
		$d << <<CREATE
<form method='post' action='.'>
<table  class='settingstable'>
<tr>
	<td class='label'><label for="poll_name">#{titlestr}:</label></td>
	<td><input id="poll_name" size='40' type='text' name='create_poll' value="#{CGI.escapeHTML($cgi['create_poll'])}" /></td>
</tr>
		<tr>
	<td class='label'>#{typestr}:</td>
		<td>
		<input id='chooseTime' type='radio' value='time' name='poll_type' checked='checked' />
		<label for='chooseTime'>#{timepollstr}</label>
		<br />
		<input id='chooseNormal' type='radio' value='normal' name='poll_type' />
		<label for='chooseNormal'>#{normalpollstr}</label>
	</td>
</tr>
		<tr>
	<td colspan='2' class='separator_top'>#{customaddrstr}:
	<span class='hint'>#{customaddrhintstr}</span></td>
		</tr>
<tr>
	<td colspan='2'><label for="poll_url">#{$conf.siteurl}</label><input id="poll_url" size='16' type='text' name='poll_url' value="#{CGI.escapeHTML($cgi['poll_url'])}" />
	</td>
</tr>
		</table>
<div class = 'error' aria-atomic="true" aria-live='assertive'>
#{createnotice}
</div>
<input type='submit' value='#{createstr}' /></td>
</form>
CREATE

		$d << $conf.indexnotice
	end

	$d.out
end