mirror of
https://github.com/aljazceru/CTFd.git
synced 2025-12-18 06:24:23 +01:00
22c132358e
2.3.0 / 2020-02-17
==================
**General**
* During setup, admins can register their email address with the CTFd LLC newsletter for news and updates
* Fix editting hints from the admin panel
* Allow admins to insert HTML code directly into the header and footer (end of body tag) of pages. This replaces and supercedes the custom CSS feature.
* The `views.custom_css` route has been removed.
* Admins can now customize the content of outgoing emails and inject certain variables into email content.
* The `manage.py` script can now manipulate the CTFd Configs table via the `get_config` and `set_config` commands. (e.g. `python manage.py get_config ctf_theme` and `python manage.py set_config ctf_theme core`)
**Themes**
* Themes should now reference the `theme_header` and `theme_footer` configs instead of the `views.custom_css` endpoint to allow for user customizations. See the `base.html` file of the core theme.
**Plugins**
* Make `ezq` functions available to `CTFd.js` under `CTFd.ui.ezq`
**Miscellaneous**
* Python imports sorted with `isort` and import order enforced
* Black formatter running on a majority of Python code
78 lines
2.3 KiB
Python
78 lines
2.3 KiB
Python
from flask import request
|
|
from flask_restplus import Namespace, Resource
|
|
|
|
from CTFd.cache import clear_standings
|
|
from CTFd.models import Submissions, db
|
|
from CTFd.schemas.submissions import SubmissionSchema
|
|
from CTFd.utils.decorators import admins_only
|
|
|
|
submissions_namespace = Namespace(
|
|
"submissions", description="Endpoint to retrieve Submission"
|
|
)
|
|
|
|
|
|
@submissions_namespace.route("")
|
|
class SubmissionsList(Resource):
|
|
@admins_only
|
|
def get(self):
|
|
args = request.args.to_dict()
|
|
schema = SubmissionSchema(many=True)
|
|
if args:
|
|
submissions = Submissions.query.filter_by(**args).all()
|
|
else:
|
|
submissions = Submissions.query.all()
|
|
|
|
response = schema.dump(submissions)
|
|
|
|
if response.errors:
|
|
return {"success": False, "errors": response.errors}, 400
|
|
|
|
return {"success": True, "data": response.data}
|
|
|
|
@admins_only
|
|
def post(self):
|
|
req = request.get_json()
|
|
Model = Submissions.get_child(type=req.get("type"))
|
|
schema = SubmissionSchema(instance=Model())
|
|
response = schema.load(req)
|
|
if response.errors:
|
|
return {"success": False, "errors": response.errors}, 400
|
|
|
|
db.session.add(response.data)
|
|
db.session.commit()
|
|
|
|
response = schema.dump(response.data)
|
|
db.session.close()
|
|
|
|
# Delete standings cache
|
|
clear_standings()
|
|
|
|
return {"success": True, "data": response.data}
|
|
|
|
|
|
@submissions_namespace.route("/<submission_id>")
|
|
@submissions_namespace.param("submission_id", "A Submission ID")
|
|
class Submission(Resource):
|
|
@admins_only
|
|
def get(self, submission_id):
|
|
submission = Submissions.query.filter_by(id=submission_id).first_or_404()
|
|
schema = SubmissionSchema()
|
|
response = schema.dump(submission)
|
|
|
|
if response.errors:
|
|
return {"success": False, "errors": response.errors}, 400
|
|
|
|
return {"success": True, "data": response.data}
|
|
|
|
@admins_only
|
|
def delete(self, submission_id):
|
|
submission = Submissions.query.filter_by(id=submission_id).first_or_404()
|
|
db.session.delete(submission)
|
|
db.session.commit()
|
|
db.session.close()
|
|
|
|
# Delete standings cache
|
|
clear_standings()
|
|
|
|
return {"success": True}
|