input->get('item_id'); $item = ORM::factory("item", $item_id); access::required("view", $item); $comments = ORM::factory("comment") ->where("item_id", $item->id) ->where("state", "published") ->orderby("created", "ASC") ->find_all(); switch (rest::output_format()) { case "json": foreach ($comments as $comment) { $data[] = array( "id" => $comment->id, "author_name" => html::clean($comment->author_name()), "created" => $comment->created, "text" => nl2br(html::purify($comment->text))); } print json_encode($data); break; case "html": $view = new Theme_View("comments.html", "other", "page"); $view->comments = $comments; $view->item_id = $item_id; $view->thumb = $item->thumb_url(); print $view; break; } } /** * Add a new comment to the collection. * @see REST_Controller::_create($resource) */ public function _create($comment) { $item = ORM::factory("item", $this->input->post("item_id")); access::required("view", $item); $form = comment_3nids::get_add_form($item); $valid = $form->validate(); if ($valid) { if (user::active()->guest && !$form->add_comment->inputs["name"]->value) { $form->add_comment->inputs["name"]->add_error("missing", 1); $valid = false; } if (!$form->add_comment->text->value) { $form->add_comment->text->add_error("missing", 1); $valid = false; } } if ($valid) { $comment = comment::create( $item, user::active(), $form->add_comment->text->value, $form->add_comment->inputs["name"]->value, $form->add_comment->email->value, $form->add_comment->url->value); $active = user::active(); if ($active->guest) { $form->add_comment->inputs["name"]->value(""); $form->add_comment->email->value(""); $form->add_comment->url->value(""); } else { $form->add_comment->inputs["name"]->value($active->full_name); $form->add_comment->email->value($active->email); $form->add_comment->url->value($active->url); } } url::redirect(url::site("comments_3nids?item_id=".$item->id)); } /** * Display an existing comment. * @todo Set proper Content-Type in a central place (REST_Controller::dispatch?). * @see REST_Controller::_show($resource) */ public function _show($comment) { $item = ORM::factory("item", $comment->item_id); access::required("view", $item); if ($comment->state != "published") { return; } if (rest::output_format() == "json") { print json_encode( array("result" => "success", "data" => array( "id" => $comment->id, "author_name" => html::clean($comment->author_name()), "created" => $comment->created, "text" => nl2br(html::purify($comment->text))))); } else { $view = new Theme_View("comment.html", "other", "fragment"); $view->comment = $comment; print $view; } } /** * Change an existing comment. * @see REST_Controller::_update($resource) */ public function _update($comment) { $item = ORM::factory("item", $comment->item_id); access::required("view", $item); access::required("edit", $item); $form = comment_3nids::get_edit_form($comment); if ($form->validate()) { $comment->guest_name = $form->edit_comment->inputs["name"]->value; $comment->guest_email = $form->edit_comment->email->value; $comment->url = $form->edit_comment->url->value; $comment->text = $form->edit_comment->text->value; $comment->save(); print json_encode( array("result" => "success", "resource" => url::site("comments/{$comment->id}"))); } else { print json_encode( array("result" => "error", "html" => $form->__toString())); } } /** * Delete existing comment. * @see REST_Controller::_delete($resource) */ public function _delete($comment) { $item = ORM::factory("item", $comment->item_id); access::required("view", $item); access::required("edit", $item); $comment->delete(); print json_encode(array("result" => "success")); } /** * Present a form for adding a new comment to this item or editing an existing comment. * @see REST_Controller::form_add($resource) */ public function _form_add($item_id) { $item = ORM::factory("item", $item_id); access::required("view", $item); print comment_3nids::get_add_form($item); } /** * Present a form for editing an existing comment. * @see REST_Controller::form_edit($resource) */ public function _form_edit($comment) { if (!user::active()->admin) { access::forbidden(); } print comment_3nids::get_edit_form($comment); } }