allow only AJAX requests for post votes, otherwise it makes CSRF possible

[osqa.git] / forum / models / question.py

diff --git a/forum/models/question.py b/forum/models/question.py
index ef4a37d814390a25f4de23734991570947db755c..6fae319e79088aeef1e9ccb5b625d11be12369c9 100644 (file)
--- a/forum/models/question.py
+++ b/forum/models/question.py
@@ -27,6 +27,9 @@ class Question(Node):
 
     @property
     def headline(self):
+        return self._headline()
+
+    def _headline(self):
         if self.nis.deleted:
             return _('[deleted] ') + self.title
 
@@ -60,21 +63,7 @@ class Question(Node):
 
         return [Question.objects.get(id=r['id']) for r in related_list]
     
-    def get_active_users(self):
-        active_users = set()
-        
-        active_users.add(self.author)
-        
-        for answer in self.answers:
-            active_users.add(answer.author)
-            
-            for comment in answer.comments:
-                active_users.add(comment.author)
-                        
-        for comment in self.comments:
-            active_users.add(comment.author)
-        
-        return active_users
+
 
 
 class QuestionSubscription(models.Model):