diff --git a/hole.py b/hole.py index 1e193ae..0d9cae7 100644 --- a/hole.py +++ b/hole.py @@ -182,6 +182,30 @@ def do_post(): 'date': p.id } +@app.route('/_api/v1/editcw', methods=['POST']) +@limiter.limit("50 / hour; 1 / 2 second") +def edit_cw(): + u = require_token() + + cw = request.form.get('cw') + pid = get_num(request.form.get('pid')) + + cw = cw.strip() if cw else None + if cw and len(cw)>32: abort(422) + + post = Post.query.get(pid) + if not post: abort(404) + if post.deleted: abort(451) + + if not (u.name in app.config.get('ADMINS') or hash_name(u.name) == post.name_hash): + abort(403) + + post.cw = cw; + db.session.commit() + + return {'code': 0} + + @app.route('/_api/v1/getcomment') def get_comment(): u = require_token() @@ -249,8 +273,6 @@ def attention(): at = Attention(name_hash=hash_name(u.name), pid=pid, disabled=True) db.session.add(at) - print(at.disabled, s=='0') - if(at.disabled != (s == '0')): at.disabled = (s == '0') post.likenum += 1 - 2 * int(s == '0');