NodeBB/src/controllers/write/posts.js

'use strict';

const validator = require('validator');
const _ = require('lodash');

const meta = require('../../meta');
const privileges = require('../../privileges');
const groups = require('../../groups');
const posts = require('../../posts');
const topics = require('../../topics');
const events = require('../../events');
const utils = require('../../utils');

const helpers = require('../helpers');
const sockets = require('../../socket.io');
const socketPostHelpers = require('../../socket.io/posts/helpers');	// eehhh...
const socketTopics = require('../../socket.io/topics');	// eehhh...

const Posts = module.exports;

Posts.edit = async (req, res) => {
	if (meta.config.minimumPostLength !== 0 && !req.body.content) {
		throw new Error('[[error:invalid-data]]');
	}

	// Trim and remove HTML (latter for composers that send in HTML, like redactor)
	var contentLen = utils.stripHTMLTags(req.body.content).trim().length;

	if (req.body.title && req.body.title.length < meta.config.minimumTitleLength) {
		throw new Error('[[error:title-too-short, ' + meta.config.minimumTitleLength + ']]');
	} else if (req.body.title && req.body.title.length > meta.config.maximumTitleLength) {
		throw new Error('[[error:title-too-long, ' + meta.config.maximumTitleLength + ']]');
	} else if (meta.config.minimumPostLength !== 0 && contentLen < meta.config.minimumPostLength) {
		throw new Error('[[error:content-too-short, ' + meta.config.minimumPostLength + ']]');
	} else if (contentLen > meta.config.maximumPostLength) {
		throw new Error('[[error:content-too-long, ' + meta.config.maximumPostLength + ']]');
	}

	// Payload construction
	var payload = {
		req,
		uid: req.user.uid,
		pid: req.params.pid,
		content: req.body.content,
		options: {},
	};
	['handle', 'title'].forEach((prop) => {
		if (req.body.hasOwnProperty(prop)) {
			payload[prop] = req.body[prop];
		}
	});
	['topic_thumb', 'tags'].forEach((prop) => {
		if (req.body.hasOwnProperty(prop)) {
			payload.options[prop] = req.body[prop];
		}
	});

	const editResult = await posts.edit(payload);
	helpers.formatApiResponse(200, res, await posts.getPostSummaryByPids([editResult.pid], req.user.uid, {}));

	if (editResult.topic.renamed) {
		await events.log({
			type: 'topic-rename',
			uid: req.user.uid,
			ip: req.ip,
			tid: editResult.topic.tid,
			oldTitle: validator.escape(String(editResult.topic.oldTitle)),
			newTitle: validator.escape(String(editResult.topic.title)),
		});
	}

	if (!editResult.post.deleted) {
		sockets.in('topic_' + editResult.topic.tid).emit('event:post_edited', editResult);
	}

	const memberData = await groups.getMembersOfGroups([
		'administrators',
		'Global Moderators',
		'cid:' + editResult.topic.cid + ':privileges:moderate',
		'cid:' + editResult.topic.cid + ':privileges:groups:moderate',
	]);

	const uids = _.uniq(_.flatten(memberData).concat(req.user.uid.toString()));
	uids.forEach(uid =>	sockets.in('uid_' + uid).emit('event:post_edited', editResult));
};

Posts.purge = async (req, res) => {
	const results = await isMainAndLastPost(req.params.pid);
	if (results.isMain && !results.isLast) {
		throw new Error('[[error:cant-purge-main-post]]');
	}

	const isMainAndLast = results.isMain && results.isLast;
	const postData = await posts.getPostFields(req.params.pid, ['pid', 'toPid', 'tid']);

	const canPurge = await privileges.posts.canPurge(req.params.pid, req.user.uid);
	if (!canPurge) {
		throw new Error('[[error:no-privileges]]');
	}
	require('../../posts/cache').del(req.params.pid);

	await posts.purge(req.params.pid, req.user.uid);
	helpers.formatApiResponse(200, res);

	sockets.in('topic_' + postData.tid).emit('event:post_purged', postData);
	const topicData = await topics.getTopicFields(postData.tid, ['title', 'cid']);

	await events.log({
		type: 'post-purge',
		uid: req.user.uid,
		pid: req.params.pid,
		ip: req.ip,
		tid: postData.tid,
		title: String(topicData.title),
	});

	if (isMainAndLast) {
		await socketTopics.doTopicAction('purge', 'event:topic_purged', {
			ip: req.ip,
			uid: req.user.uid,
		}, { tids: [postData.tid], cid: topicData.cid });
	}
};

Posts.restore = async (req, res) => {
	await deleteOrRestore(req, {
		pid: req.params.pid,
	}, {
		command: 'restore',
		event: 'event:post_restored',
		type: 'post-restore',
	});

	helpers.formatApiResponse(200, res);
};

Posts.delete = async (req, res) => {
	await deleteOrRestore(req, {
		pid: req.params.pid,
	}, {
		command: 'delete',
		event: 'event:post_deleted',
		type: 'post-delete',
	});

	helpers.formatApiResponse(200, res);
};

Posts.vote = async (req, res) => {
	const tid = await posts.getPostField(req.params.pid, 'tid');
	const data = { pid: req.params.pid, room_id: `topic_${tid}` };
	const socketMock = { uid: req.user.uid };

	if (req.body.delta > 0) {
		await socketPostHelpers.postCommand(socketMock, 'upvote', 'voted', 'notifications:upvoted_your_post_in', data);
	} else if (req.body.delta < 0) {
		await socketPostHelpers.postCommand(socketMock, 'downvote', 'voted', '', data);
	} else {
		await socketPostHelpers.postCommand(socketMock, 'unvote', 'voted', '', data);
	}

	helpers.formatApiResponse(200, res);
};

Posts.unvote = async (req, res) => {
	const tid = await posts.getPostField(req.params.pid, 'tid');
	const data = { pid: req.params.pid, room_id: `topic_${tid}` };
	const socketMock = { uid: req.user.uid };

	await socketPostHelpers.postCommand(socketMock, 'unvote', 'voted', '', data);
	helpers.formatApiResponse(200, res);
};

async function isMainAndLastPost(pid) {
	const [isMain, topicData] = await Promise.all([
		posts.isMain(pid),
		posts.getTopicFields(pid, ['postcount']),
	]);
	return {
		isMain: isMain,
		isLast: topicData && topicData.postcount === 1,
	};
}

async function deleteOrRestoreTopicOf(command, pid, req) {
	const topic = await posts.getTopicFields(pid, ['tid', 'cid', 'deleted']);
	if (command === 'delete' && !topic.deleted) {
		await socketTopics.doTopicAction('delete', 'event:topic_deleted', {
			uid: req.user.uid,
			ip: req.ip,
		}, { tids: [topic.tid], cid: topic.cid });
	} else if (command === 'restore' && topic.deleted) {
		await socketTopics.doTopicAction('restore', 'event:topic_restored', {
			uid: req.user.uid,
			ip: req.ip,
		}, { tids: [topic.tid], cid: topic.cid });
	}
}

async function deleteOrRestore(req, data, params) {
	if (!data || !data.pid) {
		throw new Error('[[error:invalid-data]]');
	}
	const postData = await posts.tools[params.command](req.user.uid, data.pid);
	const results = await isMainAndLastPost(data.pid);
	if (results.isMain && results.isLast) {
		await deleteOrRestoreTopicOf(params.command, data.pid, req);
	}

	sockets.in('topic_' + postData.tid).emit(params.event, postData);

	await events.log({
		type: params.type,
		uid: req.user.uid,
		pid: data.pid,
		tid: postData.tid,
		ip: req.ip,
	});
}