';
@@ -152,3 +218,120 @@ function live_comment_preview() {
print $output;
}
+
+/**
+ * Construct and Output node preview securely.
+ */
+function live_node_preview() {
+ global $user;
+
+ $node->title = isset($_POST['title']) ? $_POST['title'] : '';
+ $node->format = isset($_POST['format']) ? $_POST['format'] : 1;
+ $node->body = isset($_POST['body']) ? check_markup($_POST['body'], $node->format) : '';
+ $node->type = isset($_POST['node_type']) ? $_POST['node_type'] : '';
+ $node->created = isset($_POST['date']) ? strtotime($_POST['date']) : time();
+ $node->changed = time();
+ $node->name = isset($_POST['username']) ? $_POST['username'] : t('Anonymous');
+
+ $access = user_access('use live node preview');
+ $token = $_POST['token'] != "" ? $_POST['token'] : "";
+ $skip_anonymous = $user->uid == 0 ? TRUE : FALSE;
+ $token_value = isset($_POST['token_value']) ? $_POST['token_value'] : '';
+ $valid_token = drupal_valid_token($token, $token_value, $skip_anonymous);
+
+ if (!filter_access($node->format) || $node->title == "" || !$access || !$valid_token) {
+ // SECURITY CHECK!
+ // Deny access:
+ // 1) If the current user is not allowed to use specified input format; or
+ // 2) If the node title is empty
+ // 3) If user does not have the permission.
+ drupal_access_denied();
+ return;
+ }
+
+ // Avoid debug information(devel.module) from being added to the preview.
+ $GLOBALS['devel_shutdown'] = FALSE;
+
+ // Validate node
+ // @FIXME this simply doesn't work yet
+ $errors = live_node_validate($node);
+ if ($errors != TRUE) {
+ $print = print_r($errors, true);
+ print $print;
+ }
+
+ // Load the user's name when needed.
+ if (isset($node->name)) {
+ // The use of isset() is mandatory in the context of user IDs, because
+ // user ID 0 denotes the anonymous user.
+ if ($user = user_load(array('name' => $node->name))) {
+ $node->uid = $user->uid;
+ $node->picture = $user->picture;
+ }
+ else {
+ $node->uid = 0; // anonymous user
+ }
+ }
+
+ // Display a preview of the node.
+ // Previewing alters $node so it needs to be cloned.
+ $cloned_node = drupal_clone($node);
+ $cloned_node->build_mode = NODE_BUILD_PREVIEW;
+ $cloned_node->in_preview = 1;
+
+ $output = theme('node_preview', $cloned_node);
+ print $output;
+}
+
+/**
+ * Validate the node
+ */
+function live_node_validate($node) {
+ // Convert the node to an object, if necessary.
+ $node = (object)$node;
+ $type = node_get_types('type', $node);
+ $errors = array();
+
+ if ($node->title == '') {
+ $errors[] = t('Title field is required.');
+ }
+
+ // Make sure the body has the minimum number of words.
+ // TODO : use a better word counting algorithm that will work in other languages
+ if (!empty($type->min_word_count) && isset($node->body) && count(explode(' ', $node->body)) < $type->min_word_count) {
+ //form_set_error('body', t('The body of your @type is too short. You need at least %words words.', array('%words' => $type->min_word_count, '@type' => $type->name)));
+ $errors[] = t('The body of your @type is too short. You need at least %words words.', array('%words' => $type->min_word_count, '@type' => $type->name));
+ }
+
+ if (isset($node->nid) && (node_last_changed($node->nid) > $node->changed)) {
+ //form_set_error('changed', t('This content has been modified by another user, changes cannot be saved.'));
+ $errors[] = t('This content has been modified by another user, changes cannot be saved.');
+ }
+
+ if (user_access('administer nodes')) {
+ // Validate the "authored by" field.
+ if (!empty($node->name) && !($account = user_load(array('name' => $node->name)))) {
+ // The use of empty() is mandatory in the context of usernames
+ // as the empty string denotes the anonymous user. In case we
+ // are dealing with an anonymous user we set the user ID to 0.
+ //form_set_error('name', t('The username %name does not exist.', array('%name' => $node->name)));
+ $errors[] = t('The username %name does not exist.', array('%name' => $node->name));
+ }
+
+ // Validate the "authored on" field. As of PHP 5.1.0, strtotime returns FALSE instead of -1 upon failure.
+ if (!empty($node->date) && strtotime($node->date) <= 0) {
+ //form_set_error('date', t('You have to specify a valid date.'));
+ $errors[] = t('You have to specify a valid date.');
+ }
+ }
+
+ // Do node-type-specific validation checks.
+ //node_invoke($node, 'validate', $form);
+ //node_invoke_nodeapi($node, 'validate', $form);
+
+ if (count($errors)) {
+ return $errors;
+ }
+
+ return true;
+}
--- /dev/null 2008-07-02 12:47:48.000000000 +0200
+++ node/live-node.js 2008-10-24 13:18:40.000000000 +0200
@@ -0,0 +1,79 @@
+// $Id$
+
+Drupal.liveNodePreview = function() {
+ var element = Drupal.settings.live.node.element;
+ var node_type = Drupal.settings.live.node.node_type;
+ var base_url = Drupal.settings.live.node.basePath + '/';
+ var module_path = Drupal.settings.live.node.module_path + '/';
+ var token_value = Drupal.settings.live.node.token_value;
+ $('#node-form input#edit-preview').one('click', function() {
+ var box = '
';
+ switch (Drupal.settings.live.node.placement) {
+ case 'prepend':
+ $(box).prependTo(element);
+ break;
+ case 'append':
+ $(box).appendTo(element);
+ break;
+ case 'replace':
+ $(element).html(box);
+ break;
+ default:
+ $(box).appendTo('form#node-form');
+ break;
+ }
+ }).bind('click', updateNodePreview);
+
+ function updateNodePreview() {
+ var preview_button = $(this);
+ var title = $('input#edit-title').val() || '';
+ var body = $('textarea#edit-body').val() || '';
+ var username = $('input#edit-name').val() || '';
+ var date = $('input#edit-date').val() || '';
+ var format = $('input[@name=format][@type=radio][@checked]').val() || 1;
+ var token = $('input[@name=form_token]#edit-'+ node_type +'-node-form-form-token').val() || "";
+
+ var node_div = $('div#live-node-preview');
+ var node_div_background = $('div#live-node-preview-background');
+ var progress_panel = $('
Loading...
');
+
+ jQuery.ajax({
+ type: "POST",
+ url: base_url + 'index.php?q=live/node/preview',
+ data: {
+ node_type: node_type,
+ title: title,
+ body: body,
+ username: username,
+ date: date,
+ format: format,
+ token: token,
+ token_value: token_value
+ },
+ timeout: 5000,
+ beforeSend: function() {
+ progress_panel.appendTo('body').hide().fadeIn(200);
+ },
+ success: function(data){
+ node_div.html(data);
+ $('div.live-progress-panel').remove();
+ preview_button.val('Update Preview');
+ },
+ error: function() {
+ progress_panel.html('Error requesting data!');
+ preview_button.val('Preview');
+ node_div.parent().slideUp();
+ setTimeout(function() {
+ progress_panel.fadeTo(1500, 0, function() {
+ $(this).remove();
+ });
+ }, 2500);
+ }
+ });
+ return false;
+ }
+}
+
+if (Drupal.jsEnabled) {
+ $(document).ready(Drupal.liveNodePreview);
+}