X-Git-Url: https://git.mdrn.pl/edumed.git/blobdiff_plain/8414132bf4986426ceb86086719fcbc8b8eb55d5..311cf9de47c3790bc8b0563091ac25e304099a7a:/wtem/views.py?ds=sidebyside

diff --git a/wtem/views.py b/wtem/views.py
index 1647f09..551a781 100644
--- a/wtem/views.py
+++ b/wtem/views.py
@@ -3,17 +3,14 @@ import os
 from django.shortcuts import render
 from django.utils import simplejson
 from django.conf import settings
-from django.http import Http404
+from django.http import Http404, HttpResponseForbidden
 
-from .models import Submission
+from .models import Submission, DEBUG_KEY, exercises
 from .forms import WTEMForm
 
 WTEM_CONTEST_STAGE = getattr(settings, 'WTEM_CONTEST_STAGE', 'before')
 
 
-def main(request):
-    pass
-
 def form(request, key):
     return globals()['form_' + WTEM_CONTEST_STAGE](request, key)
     
@@ -24,19 +21,18 @@ def form_after(request, key):
     return render(request, 'wtem/main_after.html')
 
 def form_during(request, key):
+
+    if WTEM_CONTEST_STAGE != 'during':
+        if request.META['REMOTE_ADDR'] != getattr(settings, 'WTEM_CONTEST_IP_ALLOW', 'xxx'):
+            return HttpResponseForbidden('Not allowed')
+
     try:
         submission = Submission.objects.get(key = key)
     except Submission.DoesNotExist:
-        if settings.DEBUG and key == '12345':
-            submission = Submission.create(first_name = 'Debug', last_name = 'Debug', email = 'debug@debug.com', key = '12345')
+        if settings.DEBUG and key == DEBUG_KEY:
+            submission = Submission.create(first_name = 'Debug', last_name = 'Debug', email = 'debug@debug.com', key = DEBUG_KEY)
         else:
             raise Http404
-
-    ## @@ move this out of the view
-    f = file(os.path.dirname(__file__) + '/fixtures/exercises.json')
-    exercises = simplejson.loads(f.read())
-    f.close()
-
     if request.method == 'GET':
         return render(request, 'wtem/main.html', dict(exercises = exercises))
     elif request.method == 'POST':