From 1ef35f74ddc62bc4b4d630c9cef6e77fbfa6624c Mon Sep 17 00:00:00 2001
From: Uriel <u@berlinblue.org>
Date: Wed, 22 Oct 2008 09:21:53 +0200
Subject: [PATCH] Update blog posting code to use new auth api, also create
 _apps/brag/

---
 lib/_apps/brag/post_form.tpl | 27 +++++++++++++++++++++++++++
 lib/feeds/html.tpl           |  6 +++---
 2 files changed, 30 insertions(+), 3 deletions(-)
 create mode 100644 lib/_apps/brag/post_form.tpl

diff --git a/lib/_apps/brag/post_form.tpl b/lib/_apps/brag/post_form.tpl
new file mode 100644
index 0000000..ea89dc9
--- /dev/null
+++ b/lib/_apps/brag/post_form.tpl
@@ -0,0 +1,27 @@
+%{
+get_post_args target_blog_dir post_title post_body
+
+if(~ $REQUEST_METHOD POST && ! ~ $#target_blog_dir 0 && ! ~ $#post_title 0) {
+
+    get_user
+
+    if(test -f $sitedir/$target_blog_dir/_werc/config)
+        . $sitedir/$target_blog_dir/_werc/config
+
+    if(~ $#blog_editors_group 0)
+        echo Cant post to $target_blog_dir, no editors group set.
+    if not if (! user_in_group $blog_editors_group)
+        echo Post to $target_blog_dir denied, user $logged_user not in group $blog_editors_group
+    if not if(! make_blog_post $target_blog_dir $post_title $post_body)
+        echo Posting to $target_blog_dir failed: $status
+    if not
+        echo Posted to $target_blog_dir.
+}
+%}
+<form method="POST">
+    Submit a new blog post
+    Post title: <input type="text" name="post_title" /><br />
+    <textarea name="post_body"></textarea><br />
+    <input type="text" name="target_blog_dir" value="%($target_blog_dir%)" /><br />
+    <input type="submit" value="Post" />
+</form>
diff --git a/lib/feeds/html.tpl b/lib/feeds/html.tpl
index 9e8bffc..384de10 100644
--- a/lib/feeds/html.tpl
+++ b/lib/feeds/html.tpl
@@ -14,9 +14,9 @@ for (f in `{ sortedBlogPostList $blogDirs }) {
 get_user
 if(~ $#logged_user 1) {
 %}
-<form method="POST" action="/_apps/blog/post_form">
-% echo '<input type="text" name="target_blog_dir" value="'^$blogDirs(1)^'" />'
-    <input type="submit" name="Submit" value="New post" /> 
+<form method="POST" action="/_apps/brag/post_form">
+    <input type="hidden" name="target_blog_dir" value="%($blogDirs(1)%)" />
+    <input type="submit" name="Submit" value="New blog post" /> 
 </form>
 % }
 <hr />