public IHttpActionResult Update(int siteId, int channelId, int id)
{
try
{
var request = new AuthRequest(AccessTokenManager.ScopeContents);
if (request.IsApiAuthenticated && !request.IsApiAuthorized)
{
return(Unauthorized());
}
if (!request.IsAdminLoggin)
{
return(Unauthorized());
}
var attributes = request.GetPostCollection();
if (attributes == null)
{
return(BadRequest("无法从body中获取内容实体"));
}
var contentInfo = new ContentInfo();
contentInfo.Load(attributes);
contentInfo.SiteId = siteId;
contentInfo.ChannelId = channelId;
contentInfo.Id = id;
var siteInfo = SiteManager.GetSiteInfo(siteId);
if (siteInfo == null)
{
return(BadRequest("无法确定内容对应的站点"));
}
var channelInfo = ChannelManager.GetChannelInfo(siteId, channelId);
if (channelInfo == null)
{
return(BadRequest("无法确定内容对应的栏目"));
}
if (!request.AdminPermissions.HasChannelPermissions(siteId, channelId,
ConfigManager.ChannelPermissions.ContentEdit))
{
return(Unauthorized());
}
if (!request.AdminPermissions.HasChannelPermissions(siteId, channelId,
ConfigManager.ChannelPermissions.ContentCheck))
{
contentInfo.IsChecked = false;
}
var tableName = ChannelManager.GetTableName(siteInfo, channelInfo);
if (!DataProvider.ContentDao.ApiIsExists(tableName, id))
{
return(NotFound());
}
DataProvider.ContentDao.Update(tableName, siteInfo, contentInfo);
return(Ok(new OResponse(contentInfo.ToDictionary())));
}
catch (Exception ex)
{
LogUtils.AddErrorLog(ex);
return(InternalServerError(ex));
}
}
public IHttpActionResult Main()
{
try
{
var request = new AuthRequest();
var form = request.GetPostCollection();
var isAllSites = request.GetPostBool(StlSearch.IsAllSites.Name.ToLower());
var siteName = PageUtils.FilterSqlAndXss(request.GetPostString(StlSearch.SiteName.Name.ToLower()));
var siteDir = PageUtils.FilterSqlAndXss(request.GetPostString(StlSearch.SiteDir.Name.ToLower()));
var siteIds = PageUtils.FilterSqlAndXss(request.GetPostString(StlSearch.SiteIds.Name.ToLower()));
var channelIndex = PageUtils.FilterSqlAndXss(request.GetPostString(StlSearch.ChannelIndex.Name.ToLower()));
var channelName = PageUtils.FilterSqlAndXss(request.GetPostString(StlSearch.ChannelName.Name.ToLower()));
var channelIds = PageUtils.FilterSqlAndXss(request.GetPostString(StlSearch.ChannelIds.Name.ToLower()));
var type = PageUtils.FilterSqlAndXss(request.GetPostString(StlSearch.Type.Name.ToLower()));
var word = PageUtils.FilterSql(request.GetPostString(StlSearch.Word.Name.ToLower()));
var dateAttribute = PageUtils.FilterSqlAndXss(request.GetPostString(StlSearch.DateAttribute.Name.ToLower()));
var dateFrom = PageUtils.FilterSqlAndXss(request.GetPostString(StlSearch.DateFrom.Name.ToLower()));
var dateTo = PageUtils.FilterSqlAndXss(request.GetPostString(StlSearch.DateTo.Name.ToLower()));
var since = PageUtils.FilterSqlAndXss(request.GetPostString(StlSearch.Since.Name.ToLower()));
var pageNum = request.GetPostInt(StlSearch.PageNum.Name.ToLower());
var isHighlight = request.GetPostBool(StlSearch.IsHighlight.Name.ToLower());
var siteId = request.GetPostInt("siteid");
var ajaxDivId = PageUtils.FilterSqlAndXss(request.GetPostString("ajaxdivid"));
var template = TranslateUtils.DecryptStringBySecretKey(request.GetPostString("template"));
var pageIndex = request.GetPostInt("page", 1) - 1;
var templateInfo = new TemplateInfo(0, siteId, string.Empty, TemplateType.FileTemplate, string.Empty, string.Empty, string.Empty, ECharset.utf_8, false);
var siteInfo = SiteManager.GetSiteInfo(siteId);
var pageInfo = new PageInfo(siteId, 0, siteInfo, templateInfo, new Dictionary <string, object>())
{
UserInfo = request.UserInfo
};
var contextInfo = new ContextInfo(pageInfo);
var contentBuilder = new StringBuilder(StlRequestEntities.ParseRequestEntities(form, template));
var stlLabelList = StlParserUtility.GetStlLabelList(contentBuilder.ToString());
if (StlParserUtility.IsStlElementExists(StlPageContents.ElementName, stlLabelList))
{
var stlElement = StlParserUtility.GetStlElement(StlPageContents.ElementName, stlLabelList);
var stlPageContentsElement = stlElement;
var stlPageContentsElementReplaceString = stlElement;
var whereString = DataProvider.ContentDao.GetWhereStringByStlSearch(isAllSites, siteName, siteDir, siteIds, channelIndex, channelName, channelIds, type, word, dateAttribute, dateFrom, dateTo, since, siteId, ApiRouteActionsSearch.ExlcudeAttributeNames, form);
var stlPageContents = new StlPageContents(stlPageContentsElement, pageInfo, contextInfo, pageNum, siteInfo.TableName, whereString);
int totalNum;
var pageCount = stlPageContents.GetPageCount(out totalNum);
if (totalNum == 0)
{
return(NotFound());
}
for (var currentPageIndex = 0; currentPageIndex < pageCount; currentPageIndex++)
{
if (currentPageIndex != pageIndex)
{
continue;
}
var pageHtml = stlPageContents.Parse(totalNum, currentPageIndex, pageCount, false);
var pagedBuilder = new StringBuilder(contentBuilder.ToString().Replace(stlPageContentsElementReplaceString, pageHtml));
StlParserManager.ReplacePageElementsInSearchPage(pagedBuilder, pageInfo, stlLabelList, ajaxDivId, pageInfo.PageChannelId, currentPageIndex, pageCount, totalNum);
if (isHighlight && !string.IsNullOrEmpty(word))
{
var pagedContents = pagedBuilder.ToString();
pagedBuilder = new StringBuilder();
pagedBuilder.Append(RegexUtils.Replace(
$"({word.Replace(" ", "\\s")})(?!</a>)(?![^><]*>)", pagedContents,
$"<span style='color:#cc0000'>{word}</span>"));
}
Parser.Parse(siteInfo, pageInfo, contextInfo, pagedBuilder, string.Empty, false);
return(Ok(pagedBuilder.ToString()));
}
}
Parser.Parse(siteInfo, pageInfo, contextInfo, contentBuilder, string.Empty, false);
return(Ok(contentBuilder.ToString()));
}
catch (Exception ex)
{
return(InternalServerError(ex));
}
}
