rDrama/files/routes/votes.py

from files.helpers.wrappers import *
from files.helpers.get import *
from files.helpers.const import *
from files.classes import *
from flask import *
from files.__main__ import app, limiter, cache
from os import environ

@app.get("/votes")
@limiter.exempt
@admin_level_required(3)
def admin_vote_info_get(v):
	link = request.values.get("link")
	if not link: return render_template("votes.html", v=v)

	try:
		if "t2_" in link: thing = get_post(int(link.split("t2_")[1]), v=v)
		elif "t3_" in link: thing = get_comment(int(link.split("t3_")[1]), v=v)
		else: abort(400)
	except: abort(400)

	if thing.ghost and v.id != OWNER_ID: abort(403)

	if not thing.author:
		print(thing.id, flush=True)
	if isinstance(thing, Submission):
		if thing.author.shadowbanned and not (v and v.admin_level):
			thing_id = g.db.query(Submission.id).filter_by(upvotes=thing.upvotes, downvotes=thing.downvotes).order_by(Submission.id).first()[0]
		else: thing_id = thing.id

		ups = g.db.query(Vote).filter_by(submission_id=thing_id, vote_type=1).order_by(Vote.created_utc).all()

		downs = g.db.query(Vote).filter_by(submission_id=thing_id, vote_type=-1).order_by(Vote.created_utc).all()

	elif isinstance(thing, Comment):
		if thing.author.shadowbanned and not (v and v.admin_level):
			thing_id = g.db.query(Comment.id).filter_by(upvotes=thing.upvotes, downvotes=thing.downvotes).order_by(Comment.id).first()[0]
		else: thing_id = thing.id

		ups = g.db.query(CommentVote).filter_by(comment_id=thing_id, vote_type=1).order_by(CommentVote.created_utc).all()

		downs = g.db.query(CommentVote).filter_by(comment_id=thing_id, vote_type=-1 ).order_by(CommentVote.created_utc).all()

	else: abort(400)

	return render_template("votes.html",
						   v=v,
						   thing=thing,
						   ups=ups,
						   downs=downs)



@app.post("/vote/post/<post_id>/<new>")
@limiter.limit("5/second;60/minute;600/hour;1000/day")
@is_not_permabanned
def api_vote_post(post_id, new, v):

	# make sure we're allowed in (is this really necessary? I'm not sure)
	if request.headers.get("Authorization"): abort(403)

	# make sure new is valid
	if new == "-1" and environ.get('DISABLE_DOWNVOTES') == '1': return {"error": "forbidden."}, 403
	if new not in ["-1", "0", "1"]: abort(400)
	new = int(new)

	# get the post
	post = get_post(post_id)

	# get the old vote, if we have one
	vote = g.db.query(Vote).filter_by(user_id=v.id, submission_id=post.id).one_or_none()

	# should we just do nothing? we could just do nothing
	if vote and vote.vote_type == new: return "", 204

	# at this point we are guaranteed to be making a change

	# author votes don't matter if it's the author themselves
	points_matter = (v.id != post.author.id)

	if vote:
		# remove the old score data
		if points_matter:
			post.author.coins -= vote.vote_type
			post.author.truecoins -= vote.vote_type
			# we'll be saving later anyway, so don't bother doing so here
	else:
		# create new vote data
		vote = Vote(
						user_id=v.id,
						vote_type=new,
						submission_id=post_id,
						app_id=v.client.application.id if v.client else None,
					)
	
	# update the vote data
	vote.vote_type = new

	real = True
	if v.shadowbanned: real = False
	if v.is_banned and not v.unban_utc: real = False
	vote.real = real

	# add relevant points
	if points_matter:
		post.author.coins += vote.vote_type
		post.author.truecoins += vote.vote_type
	
	# database it up
	g.db.add(post.author)
	g.db.add(vote)
	
	# update post stats (this is horrendously slow?!)
	g.db.flush()
	post.upvotes = g.db.query(Vote.submission_id).filter_by(submission_id=post.id, vote_type=1).count()
	post.downvotes = g.db.query(Vote.submission_id).filter_by(submission_id=post.id, vote_type=-1).count()
	post.realupvotes = g.db.query(Vote.submission_id).filter_by(submission_id=post.id, vote_type=1, real=True).count()
	g.db.add(post)
	g.db.commit()
	return "", 204

@app.post("/vote/comment/<comment_id>/<new>")
@limiter.limit("5/second;60/minute;600/hour;1000/day")
@is_not_permabanned
def api_vote_comment(comment_id, new, v):

	# make sure we're allowed in (is this really necessary? I'm not sure)
	if request.headers.get("Authorization"): abort(403)

	# make sure new is valid
	if new == "-1" and environ.get('DISABLE_DOWNVOTES') == '1': return {"error": "forbidden."}, 403
	if new not in ["-1", "0", "1"]: abort(400)
	new = int(new)

	# get the comment
	comment = get_comment(comment_id)

	# get the old vote, if we have one
	vote = g.db.query(CommentVote).filter_by(user_id=v.id, comment_id=comment.id).one_or_none()

	# should we just do nothing? we could just do nothing
	if vote and vote.vote_type == new: return "", 204

	# at this point we are guaranteed to be making a change

	# author votes don't matter if it's the author themselves
	points_matter = (v.id != comment.author.id)

	if vote:
		# remove the old score data
		if points_matter:
			comment.author.coins -= vote.vote_type
			comment.author.truecoins -= vote.vote_type
			# we'll be saving later anyway, so don't bother doing so here
	else:
		# create new vote data
		vote = CommentVote(
						user_id=v.id,
						vote_type=new,
						comment_id=comment_id,
						app_id=v.client.application.id if v.client else None,
					)
	
	# update the vote data
	vote.vote_type = new

	real = True
	if v.shadowbanned: real = False
	if v.is_banned and not v.unban_utc: real = False
	vote.real = real

	# add relevant points
	if points_matter:
		comment.author.coins += vote.vote_type
		comment.author.truecoins += vote.vote_type
	
	# database it up
	g.db.add(comment.author)
	g.db.add(vote)
	
	# update comment stats (this is horrendously slow?!)
	g.db.flush()
	comment.upvotes = g.db.query(CommentVote.comment_id).filter_by(comment_id=comment.id, vote_type=1).count()
	comment.downvotes = g.db.query(CommentVote.comment_id).filter_by(comment_id=comment.id, vote_type=-1).count()
	comment.realupvotes = g.db.query(CommentVote.comment_id).filter_by(comment_id=comment.id, vote_type=1, real=True).count()
	g.db.add(comment)
	g.db.commit()
	return "", 204