X-Git-Url: https://git.mdrn.pl/edumed.git/blobdiff_plain/0029595caa78abc831724d22b4c1b45b9867cec0..db3d82c09c614b072f5f6006a6c195a9f7874e08:/contact/views.py diff --git a/contact/views.py b/contact/views.py index 6ec18e5..b9a411f 100644 --- a/contact/views.py +++ b/contact/views.py @@ -1,21 +1,27 @@ +# -*- coding: utf-8 -*- +from urllib import unquote + from django.contrib.auth.decorators import permission_required -from django.http import Http404, HttpResponse +from django.http import Http404 from django.shortcuts import get_object_or_404, redirect, render -from django.utils.translation import ugettext_lazy as _ from fnpdjango.utils.views import serve_file +from honeypot.decorators import check_honeypot + from .forms import contact_forms from .models import Attachment -def form(request, form_tag): +@check_honeypot +def form(request, form_tag, force_enabled=False): try: form_class = contact_forms[form_tag] except KeyError: raise Http404 - if getattr(form_class, 'disabled', False): + if (getattr(form_class, 'disabled', False) and + not (force_enabled and request.user.is_superuser)): template = getattr(form_class, 'disabled_template', None) if template: - return render(request, template) + return render(request, template, {'title': form_class.form_title}) raise Http404 if request.method == 'POST': form = form_class(request.POST, request.FILES) @@ -34,10 +40,10 @@ def form(request, form_tag): formsets = [] for formset in getattr(form, 'form_formsets', ()): formsets.append(formset()) - return render(request, - ['contact/%s/form.html' % form_tag, 'contact/form.html'], - {'form': form, 'formsets': formsets} - ) + return render( + request, ['contact/%s/form.html' % form_tag, 'contact/form.html'], + {'form': form, 'formsets': formsets} + ) def thanks(request, form_tag): @@ -46,13 +52,13 @@ def thanks(request, form_tag): except KeyError: raise Http404 - return render(request, - ['contact/%s/thanks.html' % form_tag, 'contact/thanks.html'], - dict(base_template = getattr(form_class, 'base_template', None)) - ) + return render( + request, ['contact/%s/thanks.html' % form_tag, 'contact/thanks.html'], + {'base_template': getattr(form_class, 'base_template', None)}) @permission_required('contact.change_attachment') def attachment(request, contact_id, tag): attachment = get_object_or_404(Attachment, contact_id=contact_id, tag=tag) - return serve_file(attachment.file.url) + attachment_url = unquote(attachment.file.url) + return serve_file(attachment_url)