mirror of
https://github.com/postgres/pgweb.git
synced 2025-08-03 15:38:59 +00:00
b405302d97
With the new django, alerts are raised for everything with status 500, not juse exceptions. This put a light on a number of places where we were returning 500 server error code for things that are not actually server errors. Some should be a regular 200 ok with an error message, and others should be a permissions error.
65 lines
2.2 KiB
Python
65 lines
2.2 KiB
Python
from django.shortcuts import get_object_or_404
|
|
from django.http import HttpResponseRedirect
|
|
from django.db import connection
|
|
from django.template.defaultfilters import slugify
|
|
from django.views.decorators.csrf import csrf_exempt
|
|
|
|
from pgweb.util.contexts import render_pgweb
|
|
from pgweb.util.misc import get_client_ip, varnish_purge
|
|
from pgweb.util.helpers import HttpSimpleResponse
|
|
|
|
from .models import Survey, SurveyAnswer, SurveyLock
|
|
|
|
|
|
def results(request, surveyid, junk=None):
|
|
survey = get_object_or_404(Survey, pk=surveyid)
|
|
surveylist = Survey.objects.all().order_by('-posted')
|
|
|
|
return render_pgweb(request, 'community', 'survey/results.html', {
|
|
'survey': survey,
|
|
'surveylist': surveylist,
|
|
})
|
|
|
|
|
|
# Served over insecure HTTP, the Varnish proxy strips cookies
|
|
@csrf_exempt
|
|
def vote(request, surveyid):
|
|
surv = get_object_or_404(Survey, pk=surveyid)
|
|
|
|
# Check that we have a valid answer number
|
|
try:
|
|
ansnum = int(request.POST['answer'])
|
|
if ansnum < 1 or ansnum > 8:
|
|
return HttpSimpleResponse(request, "Response error", "Invalid answer")
|
|
except Exception as e:
|
|
# When no answer is given, redirect to results instead
|
|
return HttpResponseRedirect("/community/survey/%s-%s" % (surv.id, slugify(surv.question)))
|
|
attrname = "tot%s" % ansnum
|
|
|
|
# Do IP based locking...
|
|
addr = get_client_ip(request)
|
|
|
|
# Clean out any old junk
|
|
curs = connection.cursor()
|
|
curs.execute("DELETE FROM survey_surveylock WHERE (\"time\" + '15 minutes') < now()")
|
|
|
|
# Check if we are locked
|
|
lock = SurveyLock.objects.filter(ipaddr=addr)
|
|
if len(lock) > 0:
|
|
return HttpSimpleResponse(request, "Rate limited", "Too many requests from your IP in the past 15 minutes")
|
|
|
|
# Generate a new lock item, and store it
|
|
lock = SurveyLock(ipaddr=addr)
|
|
lock.save()
|
|
|
|
answers = SurveyAnswer.objects.get_or_create(survey=surv)[0]
|
|
setattr(answers, attrname, getattr(answers, attrname) + 1)
|
|
answers.save()
|
|
|
|
# Do explicit varnish purge, since it seems that the model doesn't
|
|
# do it properly. Possibly because of the cute stuff we do with
|
|
# getattr/setattr above.
|
|
varnish_purge("/community/survey/%s/" % surveyid)
|
|
|
|
return HttpResponseRedirect("/community/survey/%s/" % surveyid)
|