1574c46d0a
the random c.sentto == 2 magic numbers in the code is... pretty unmaintainable and unless you were aware of who "2" was, it's hard to know what's going on. in addition, we force modmail to go through the modmail path instead of letting users bypass validation checks.
278 lines
10 KiB
Python
278 lines
10 KiB
Python
from os import environ, listdir
|
|
import re
|
|
from copy import deepcopy
|
|
from json import loads
|
|
from files.__main__ import db_session
|
|
from files.classes.sub import Sub
|
|
from files.classes.marsey import Marsey
|
|
from flask import request
|
|
|
|
SITE = environ.get("DOMAIN", '').strip()
|
|
SITE_ID = environ.get("SITE_ID", '').strip()
|
|
SITE_TITLE = environ.get("SITE_TITLE", '').strip()
|
|
SCHEME = environ.get('SCHEME', 'http' if 'localhost' in SITE else 'https')
|
|
SITE_FULL = SCHEME + '://' + SITE
|
|
|
|
CC = "COUNTRY CLUB"
|
|
CC_TITLE = CC.title()
|
|
|
|
NOTIFICATIONS_ID = 1
|
|
AUTOJANNY_ID = 2
|
|
MODMAIL_ID = 2
|
|
SNAPPY_ID = 3
|
|
LONGPOSTBOT_ID = 4
|
|
ZOZBOT_ID = 5
|
|
AUTOPOLLER_ID = 6
|
|
AUTOBETTER_ID = 7
|
|
AUTOCHOICE_ID = 8
|
|
BASEDBOT_ID = 0
|
|
|
|
GIFT_NOTIF_ID = 9
|
|
OWNER_ID = 9
|
|
BUG_THREAD = 0
|
|
WELCOME_MSG = f"Welcome to {SITE_TITLE}! Please read [the rules](/rules) first. Then [read some of our current conversations](/) and feel free to comment or post!\n\nWe encourage people to comment even if they aren't sure they fit in; as long as your comment follows [community rules](/rules), we are happy to have posters from all backgrounds, education levels, and specialties."
|
|
ROLES={}
|
|
|
|
THEMES = {"TheMotte", "dramblr", "reddit", "transparent", "win98", "dark",
|
|
"light", "coffee", "tron", "4chan", "midnight"}
|
|
SORTS_COMMON = {
|
|
"top": 'fa-arrow-alt-circle-up',
|
|
"bottom": 'fa-arrow-alt-circle-down',
|
|
"new": 'fa-sparkles',
|
|
"old": 'fa-book',
|
|
"controversial": 'fa-bullhorn',
|
|
"comments": 'fa-comments'
|
|
}
|
|
SORTS_POSTS = {
|
|
"hot": "fa-fire",
|
|
"bump": "fa-arrow-up"
|
|
}
|
|
SORTS_POSTS.update(SORTS_COMMON)
|
|
SORTS_COMMENTS = SORTS_COMMON
|
|
|
|
IMGUR_KEY = environ.get("IMGUR_KEY").strip()
|
|
PUSHER_ID = environ.get("PUSHER_ID", "").strip()
|
|
PUSHER_KEY = environ.get("PUSHER_KEY", "").strip()
|
|
DEFAULT_COLOR = environ.get("DEFAULT_COLOR", "fff").strip()
|
|
COLORS = {'ff66ac','805ad5','62ca56','38a169','80ffff','2a96f3','eb4963','ff0000','f39731','30409f','3e98a7','e4432d','7b9ae4','ec72de','7f8fa6', 'f8db58','8cdbe6', DEFAULT_COLOR}
|
|
|
|
ERROR_MESSAGES = {
|
|
400: "That request was bad and you should feel bad",
|
|
401: "You need an account for this. Please make one!",
|
|
403: "You don't have access to this page.",
|
|
404: "That page doesn't exist. If you got here from a link on the website, please report this issue. Thanks!",
|
|
405: "Something went wrong and it's probably my fault. If you can do it reliably, or it's causing problems for you, please report it!",
|
|
409: "There's a conflict between what you're trying to do and what you or someone else has done and because of that you can't do what you're trying to do.",
|
|
413: "Max file size is 8 MB",
|
|
422: "Something is wrong about your request. If you keep getting this unexpectedly, please report it!",
|
|
429: "Are you hammering the site? Stop that, yo.",
|
|
500: "Something went wrong and it's probably my fault. If you can do it reliably, or it's causing problems for you, please report it!",
|
|
}
|
|
|
|
LOGGEDIN_ACTIVE_TIME = 15 * 60
|
|
RENDER_DEPTH_LIMIT = 9
|
|
'''
|
|
The maximum depth at which a comment tree is rendered
|
|
'''
|
|
|
|
WERKZEUG_ERROR_DESCRIPTIONS = {
|
|
400: "The browser (or proxy) sent a request that this server could not understand.",
|
|
401: "The server could not verify that you are authorized to access the URL requested. You either supplied the wrong credentials (e.g. a bad password), or your browser doesn't understand how to supply the credentials required.",
|
|
403: "You don't have the permission to access the requested resource. It is either read-protected or not readable by the server.",
|
|
404: "The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.",
|
|
405: "The method is not allowed for the requested URL.",
|
|
409: "A conflict happened while processing the request. The resource might have been modified while the request was being processed.",
|
|
413: "The data value transmitted exceeds the capacity limit.",
|
|
415: "The server does not support the media type transmitted in the request.",
|
|
422: "The request was well-formed but was unable to be followed due to semantic errors.",
|
|
429: "This user has exceeded an allotted request count. Try again later.",
|
|
500: "The server encountered an internal error and was unable to complete your request. Either the server is overloaded or there is an error in the application.",
|
|
}
|
|
|
|
IMAGE_FORMATS = ['png','gif','jpg','jpeg','webp']
|
|
VIDEO_FORMATS = ['mp4','webm','mov','avi','mkv','flv','m4v','3gp']
|
|
AUDIO_FORMATS = ['mp3','wav','ogg','aac','m4a','flac']
|
|
NO_TITLE_EXTENSIONS = IMAGE_FORMATS + VIDEO_FORMATS + AUDIO_FORMATS
|
|
|
|
FEATURES = {
|
|
"AWARDS": False,
|
|
}
|
|
|
|
PERMS = {
|
|
"DEBUG_LOGIN_TO_OTHERS": 3,
|
|
}
|
|
|
|
AWARDS = {}
|
|
|
|
if FEATURES['AWARDS']:
|
|
AWARDS_ENABLED = deepcopy(AWARDS)
|
|
for k, val in AWARDS.items():
|
|
if val['description'] == '???': AWARDS_ENABLED.pop(k)
|
|
|
|
AWARDS_JL2_PRINTABLE = {}
|
|
for k, val in AWARDS_ENABLED.items():
|
|
if val['price'] == 300: AWARDS_JL2_PRINTABLE[k] = val
|
|
else:
|
|
AWARDS_ENABLED = {}
|
|
AWARDS_JL2_PRINTABLE = {}
|
|
|
|
|
|
NOTIFIED_USERS = {
|
|
# format: 'substring' ↦ User ID to notify
|
|
}
|
|
|
|
patron = 'Patron'
|
|
|
|
discounts = {
|
|
69: 0.02,
|
|
70: 0.04,
|
|
71: 0.06,
|
|
72: 0.08,
|
|
73: 0.10,
|
|
}
|
|
|
|
CF_KEY = environ.get("CF_KEY", "").strip()
|
|
CF_ZONE = environ.get("CF_ZONE", "").strip()
|
|
CF_HEADERS = {"Authorization": f"Bearer {CF_KEY}", "Content-Type": "application/json"}
|
|
|
|
dues = int(environ.get("DUES").strip())
|
|
|
|
christian_emojis = (':#marseyjesus:',':#marseyimmaculate:',':#marseymothermary:',':#marseyfatherjoseph:',':#gigachadorthodox:',':#marseyorthodox:',':#marseyorthodoxpat:')
|
|
|
|
db = db_session()
|
|
marseys_const = [x[0] for x in db.query(Marsey.name).filter(Marsey.name!='chudsey').all()]
|
|
marseys_const2 = marseys_const + ['chudsey','a','b','c','d','e','f','g','h','i','j','k','l','m','n','o','p','q','r','s','t','u','v','w','x','y','z','0','1','2','3','4','5','6','7','8','9','exclamationpoint','period','questionmark']
|
|
db.close()
|
|
|
|
valid_username_chars = 'a-zA-Z0-9_\\-'
|
|
valid_username_regex = re.compile("^[a-zA-Z0-9_\\-]{3,25}$", flags=re.A)
|
|
mention_regex = re.compile('(^|\\s|<p>)@(([a-zA-Z0-9_\\-]){1,25})', flags=re.A)
|
|
mention_regex2 = re.compile('<p>@(([a-zA-Z0-9_\\-]){1,25})', flags=re.A)
|
|
|
|
valid_password_regex = re.compile("^.{8,100}$", flags=re.A)
|
|
|
|
marsey_regex = re.compile("[a-z0-9]{1,30}", flags=re.A)
|
|
|
|
tags_regex = re.compile("[a-z0-9: ]{1,200}", flags=re.A)
|
|
|
|
valid_sub_regex = re.compile("^[a-zA-Z0-9_\\-]{3,20}$", flags=re.A)
|
|
|
|
query_regex = re.compile("(\\w+):(\\S+)", flags=re.A)
|
|
|
|
title_regex = re.compile("[^\\w ]", flags=re.A)
|
|
|
|
based_regex = re.compile("based and (.{1,20}?)(-| )pilled", flags=re.I|re.A)
|
|
|
|
controversial_regex = re.compile('["> ](https:\\/\\/old\\.reddit\\.com/r/[a-zA-Z0-9_]{3,20}\\/comments\\/[\\w\\-.#&/=\\?@%+]{5,250})["< ]', flags=re.A)
|
|
|
|
fishylinks_regex = re.compile("https?://\\S+", flags=re.A)
|
|
|
|
spoiler_regex = re.compile('''\\|\\|(.+)\\|\\|''', flags=re.A)
|
|
reddit_regex = re.compile('(^|\\s|<p>)\\/?((r|u)\\/(\\w|-){3,25})(?![^<]*<\\/(code|pre|a)>)', flags=re.A)
|
|
sub_regex = re.compile('(^|\\s|<p>)\\/?(h\\/(\\w|-){3,25})', flags=re.A)
|
|
|
|
# Bytes that shouldn't be allowed in user-submitted text
|
|
# U+200E is LTR toggle, U+200F is RTL toggle, U+200B and U+FEFF are Zero-Width Spaces,
|
|
# and U+1242A is a massive and terrifying cuneiform numeral
|
|
unwanted_bytes_regex = re.compile("\u200e|\u200f|\u200b|\ufeff|\U0001242a")
|
|
|
|
whitespace_regex = re.compile('\\s+')
|
|
|
|
strikethrough_regex = re.compile('''~{1,2}([^~]+)~{1,2}''', flags=re.A)
|
|
|
|
mute_regex = re.compile("/mute @([a-z0-9_\\-]{3,25}) ([0-9])+", flags=re.A)
|
|
|
|
emoji_regex = re.compile(f"[^a]>\\s*(:[!#@]{{0,3}}[{valid_username_chars}]+:\\s*)+<\\/", flags=re.A)
|
|
emoji_regex2 = re.compile(f"(?<!\"):([!#@{valid_username_chars}]{{1,31}}?):", flags=re.A)
|
|
emoji_regex3 = re.compile(f"(?<!\"):([!@{valid_username_chars}]{{1,31}}?):", flags=re.A)
|
|
|
|
snappy_url_regex = re.compile('<a href=\\"(https?:\\/\\/[a-z]{1,20}\\.[\\w:~,()\\-.#&\\/=?@%;+]{5,250})\\" rel=\\"nofollow noopener noreferrer\\" target=\\"_blank\\">([\\w:~,()\\-.#&\\/=?@%;+]{5,250})<\\/a>', flags=re.A)
|
|
|
|
# Technically this allows stuff that is not a valid email address, but realistically
|
|
# we care "does this email go to the correct person" rather than "is this email
|
|
# address syntactically valid", so if we care we should be sending a confirmation
|
|
# link, and otherwise should be pretty liberal in what we accept here.
|
|
email_regex = re.compile('[^@]+@[^@]+\\.[^@]+', flags=re.A)
|
|
|
|
utm_regex = re.compile('utm_[a-z]+=[a-z0-9_]+&', flags=re.A)
|
|
utm_regex2 = re.compile('[?&]utm_[a-z]+=[a-z0-9_]+', flags=re.A)
|
|
|
|
YOUTUBE_KEY = environ.get("YOUTUBE_KEY", "").strip()
|
|
|
|
proxies = {}
|
|
|
|
approved_embed_hosts = [
|
|
'rdrama.net',
|
|
'pcmemes.net',
|
|
'cringetopia.org',
|
|
'devrama.xyz',
|
|
'imgur.com',
|
|
'ibb.co',
|
|
'lain.la',
|
|
'pngfind.com',
|
|
'kym-cdn.com',
|
|
'redd.it',
|
|
'substack.com',
|
|
'blogspot.com',
|
|
'catbox.moe',
|
|
'pinimg.com',
|
|
'kindpng.com',
|
|
'shopify.com',
|
|
'discordapp.com',
|
|
'discordapp.net',
|
|
'twimg.com',
|
|
'wikimedia.org',
|
|
'wp.com',
|
|
'wordpress.com',
|
|
'seekpng.com',
|
|
'dailymail.co.uk',
|
|
'cdc.gov',
|
|
'media-amazon.com',
|
|
'ssl-images-amazon.com',
|
|
'washingtonpost.com',
|
|
'imgflip.com',
|
|
'flickr.com',
|
|
'9cache.com',
|
|
'ytimg.com',
|
|
'foxnews.com',
|
|
'duckduckgo.com',
|
|
'forbes.com',
|
|
'gr-assets.com',
|
|
'tenor.com',
|
|
'giphy.com',
|
|
'makeagif.com',
|
|
'gfycat.com',
|
|
'tumblr.com',
|
|
'yarn.co',
|
|
'gifer.com',
|
|
'prnt.sc',
|
|
'staticflickr.com',
|
|
'kiwifarms.net',
|
|
'amazonaws.com',
|
|
'githubusercontent.com',
|
|
'unilad.co.uk',
|
|
'grrrgraphics.com',
|
|
'redditmedia.com'
|
|
]
|
|
|
|
hosts = "|".join(approved_embed_hosts).replace('.','\\.')
|
|
|
|
image_check_regex = re.compile(f'!\\[\\]\\(((?!(https:\\/\\/([a-z0-9-]+\\.)*({hosts})\\/|\\/)).*?)\\)', flags=re.A)
|
|
|
|
embed_fullmatch_regex = re.compile(f'https:\\/\\/([a-z0-9-]+\\.)*({hosts})\\/[\\w:~,()\\-.#&\\/=?@%;+]*', flags=re.A)
|
|
|
|
video_sub_regex = re.compile(f'(<p>[^<]*)(https:\\/\\/([a-z0-9-]+\\.)*({hosts})\\/[\\w:~,()\\-.#&\\/=?@%;+]*?\\.(mp4|webm|mov))', flags=re.A)
|
|
|
|
youtube_regex = re.compile('(<p>[^<]*)(https:\\/\\/youtube\\.com\\/watch\\?v\\=([a-z0-9-_]{5,20})[\\w\\-.#&/=\\?@%+]*)', flags=re.I|re.A)
|
|
|
|
yt_id_regex = re.compile('[a-z0-9-_]{5,20}', flags=re.I|re.A)
|
|
|
|
image_regex = re.compile("(^|\\s)(https:\\/\\/[\\w\\-.#&/=\\?@%;+]{5,250}(\\.png|\\.jpg|\\.jpeg|\\.gif|\\.webp|maxwidth=9999|fidelity=high))($|\\s)", flags=re.I|re.A)
|
|
|
|
procoins_li = (0,2500,5000,10000,25000,50000,125000,250000)
|
|
|
|
linefeeds_regex = re.compile("([^\\n])\\n([^\\n])", flags=re.A)
|
|
|
|
html_title_regex = re.compile("<title>(.{1,200})</title>", flags=re.I)
|
|
|
|
def make_name(*args, **kwargs): return request.base_url
|