shorter allowed upload filenames

[edumed.git] / wtem / views.py

diff --git a/wtem/views.py b/wtem/views.py
index 1647f09..0696174 100644 (file)
--- a/wtem/views.py
+++ b/wtem/views.py
@@ -1,48 +1,70 @@
-import os
+# -*- coding: utf-8 -*-
+import json
+from copy import deepcopy

 
 

-from django.shortcuts import render
-from django.utils import simplejson

 from django.conf import settings
 from django.conf import settings

-from django.http import Http404
+from django.http import HttpResponseForbidden
+from django.shortcuts import render
+from django.views.decorators.cache import never_cache
+from django.views.decorators.csrf import csrf_exempt

 
 

-from .models import Submission

 from .forms import WTEMForm
 from .forms import WTEMForm

+from .models import Submission, DEBUG_KEY, exercises

 
 WTEM_CONTEST_STAGE = getattr(settings, 'WTEM_CONTEST_STAGE', 'before')
 
 
 
 WTEM_CONTEST_STAGE = getattr(settings, 'WTEM_CONTEST_STAGE', 'before')
 
 

-def main(request):
-    pass
-
+@csrf_exempt

 def form(request, key):
     return globals()['form_' + WTEM_CONTEST_STAGE](request, key)
 def form(request, key):
     return globals()['form_' + WTEM_CONTEST_STAGE](request, key)

-    
+
+

 def form_before(request, key):
 def form_before(request, key):

-    return render(request, 'wtem/main_before.html')
+    try:
+        Submission.objects.get(key=key)
+    except Submission.DoesNotExist:
+        return render(request, 'wtem/key_not_found_before.html')
+    else:
+        return render(request, 'wtem/main_before.html')
+

 
 def form_after(request, key):
     return render(request, 'wtem/main_after.html')
 
 
 def form_after(request, key):
     return render(request, 'wtem/main_after.html')
 

+
+@never_cache
+@csrf_exempt

 def form_during(request, key):
 def form_during(request, key):

+
+    if WTEM_CONTEST_STAGE != 'during':
+        if request.META['REMOTE_ADDR'] not in getattr(settings, 'WTEM_CONTEST_IP_ALLOW', []):
+            return HttpResponseForbidden('Not allowed')
+

     try:
     try:

-        submission = Submission.objects.get(key = key)
+        submission = Submission.objects.get(key=key)

     except Submission.DoesNotExist:
     except Submission.DoesNotExist:

-        if settings.DEBUG and key == '12345':
-            submission = Submission.create(first_name = 'Debug', last_name = 'Debug', email = 'debug@debug.com', key = '12345')
+        if settings.DEBUG and key == DEBUG_KEY:
+            submission = Submission.create(
+                first_name='Debug', last_name='Debug', email='debug@debug.com', key=DEBUG_KEY)

         else:
         else:

-            raise Http404
-
-    ## @@ move this out of the view
-    f = file(os.path.dirname(__file__) + '/fixtures/exercises.json')
-    exercises = simplejson.loads(f.read())
-    f.close()
-
+            return render(request, 'wtem/key_not_found.html')
+    exercises_with_answers = deepcopy(exercises)
+    if submission.answers:
+        answers = json.loads(submission.answers)
+    else:
+        answers = {}
+    for exercise in exercises_with_answers:
+        exercise['saved_answer'] = answers.get(str(exercise['id']), '')
+        if exercise['type'] == 'open' and exercise.get('fields'):
+            field_answers = {field['id']: field['text'] for field in exercise['saved_answer']}
+            for field in exercise['fields']:
+                field['saved_answer'] = field_answers.get(field['id'], '')

     if request.method == 'GET':
     if request.method == 'GET':

-        return render(request, 'wtem/main.html', dict(exercises = exercises))
+        return render(request, 'wtem/main.html', {'exercises': exercises_with_answers, 'end_time': submission.end_time})

     elif request.method == 'POST':
     elif request.method == 'POST':

-        form = WTEMForm(request.POST, request.FILES, instance = submission)
+        form = WTEMForm(request.POST, request.FILES, instance=submission)

         if form.is_valid():
             form.save()
         if form.is_valid():
             form.save()

-            return render(request, 'wtem/thanks.html')
+            return render(request, 'wtem/thanks.html', dict(end_time=submission.end_time))

         else:
             raise Exception
         else:
             raise Exception