Add extra validation to messages and diary entries.

[rails.git] / app / controllers / api_controller.rb

diff --git a/app/controllers/api_controller.rb b/app/controllers/api_controller.rb
index 8e4004dd15652aa3bb4f1dfa5c7cf83da2f5f5fe..7e8017f4e3736dabf1471d6d1f6730f045506ad5 100644 (file)
--- a/app/controllers/api_controller.rb
+++ b/app/controllers/api_controller.rb
@@ -1,11 +1,8 @@
 class ApiController < ApplicationController
 
 class ApiController < ApplicationController
 

-  before_filter :authorize
+  session :off

   after_filter :compress_output
 
   after_filter :compress_output
 

-  helper :user
-  model :user
-

   #COUNT is the number of map requests to allow before exiting and starting a new process
   @@count = COUNT
 
   #COUNT is the number of map requests to allow before exiting and starting a new process
   @@count = COUNT
 


@@ -18,7 +15,6 @@ class ApiController < ApplicationController
   
   def trackpoints
     @@count+=1
   
   def trackpoints
     @@count+=1

-    response.headers["Content-Type"] = 'text/xml'

     #retrieve the page number
     page = params['page'].to_i
     unless page
     #retrieve the page number
     page = params['page'].to_i
     unless page


@@ -73,7 +69,7 @@ class ApiController < ApplicationController
     min_lon = min_lon * 1000000
     max_lon = max_lon * 1000000
     # get all the points
     min_lon = min_lon * 1000000
     max_lon = max_lon * 1000000
     # get all the points

-    points = Tracepoint.find(:all, :conditions => ['gps_points.latitude > ? AND gps_points.longitude > ? AND gps_points.latitude < ? AND gps_points.longitude < ? AND ( public = 1 OR gpx_files.user_id = ? ) AND visible = 1', min_lat.to_i, min_lon.to_i, max_lat.to_i, max_lon.to_i, @user.id ], :select => "gps_points.*", :joins => "INNER JOIN gpx_files ON gpx_files.id = gpx_id", :offset => offset, :limit => TRACEPOINTS_PER_PAGE, :order => "timestamp DESC" )
+    points = Tracepoint.find(:all, :conditions => ['latitude BETWEEN ? AND ? AND longitude BETWEEN ? AND ?', min_lat.to_i, max_lat.to_i, min_lon.to_i, max_lon.to_i], :select => "DISTINCT *", :offset => offset, :limit => TRACEPOINTS_PER_PAGE, :order => "timestamp DESC" )

 
     doc = XML::Document.new
     doc.encoding = 'UTF-8'
 
     doc = XML::Document.new
     doc.encoding = 'UTF-8'


@@ -96,12 +92,12 @@ class ApiController < ApplicationController
 
     #exit when we have too many requests
     if @@count > MAX_COUNT
 
     #exit when we have too many requests
     if @@count > MAX_COUNT

-      render :text => doc.to_s
+      render :text => doc.to_s, :content_type => "text/xml"

       @@count = COUNT
       exit!
     end
 
       @@count = COUNT
       exit!
     end
 

-    render :text => doc.to_s
+    render :text => doc.to_s, :content_type => "text/xml"

 
   end
 
 
   end
 


@@ -109,7 +105,6 @@ class ApiController < ApplicationController
     GC.start
     @@count+=1
 
     GC.start
     @@count+=1
 

-    response.headers["Content-Type"] = 'text/xml'

     # Figure out the bbox
     bbox = params['bbox']
     unless bbox and bbox.count(',') == 3
     # Figure out the bbox
     bbox = params['bbox']
     unless bbox and bbox.count(',') == 3


@@ -152,10 +147,11 @@ class ApiController < ApplicationController
 
     if node_ids.length > 50_000
       report_error("You requested too many nodes (limit is 50,000). Either request a smaller area, or use planet.osm")
 
     if node_ids.length > 50_000
       report_error("You requested too many nodes (limit is 50,000). Either request a smaller area, or use planet.osm")

+      return

     end
 
     if node_ids.length == 0
     end
 
     if node_ids.length == 0

-      render :text => '<osm></osm>'
+      render :text => "<osm version='0.4'></osm>", :content_type => "text/xml"

       return
     end
 
       return
     end
 


@@ -195,9 +191,12 @@ class ApiController < ApplicationController
 
       list_of_way_segments = list_of_way_segs.collect { |way_seg| way_seg.segment_id }
 
 
       list_of_way_segments = list_of_way_segs.collect { |way_seg| way_seg.segment_id }
 

+       else
+         list_of_way_segments = Array.new

     end
 
     end
 

-    segments_to_fetch = list_of_way_segments.uniq - segment_ids
+    # - [0] in case some thing links to segment 0 which doesn't exist. Shouldn't actually ever happen but it does. FIXME: file a ticket for this
+    segments_to_fetch = (list_of_way_segments.uniq - segment_ids) - [0]

 
     if segments_to_fetch.length > 0
       segments += Segment.find(segments_to_fetch)
 
     if segments_to_fetch.length > 0
       segments += Segment.find(segments_to_fetch)


@@ -237,13 +236,30 @@ class ApiController < ApplicationController
       doc.root << way.to_xml_node(visible_segments, user_display_name_cache) if way.visible?
     end 
 
       doc.root << way.to_xml_node(visible_segments, user_display_name_cache) if way.visible?
     end 
 

-    render :text => doc.to_s
+    render :text => doc.to_s, :content_type => "text/xml"

     
     #exit when we have too many requests
     if @@count > MAX_COUNT
       @@count = COUNT
     
     #exit when we have too many requests
     if @@count > MAX_COUNT
       @@count = COUNT

+      

       exit!
     end
       exit!
     end

+  end
+
+  def capabilities
+    doc = OSM::API.new.get_xml_doc
+
+    api = XML::Node.new 'api'
+    version = XML::Node.new 'version'
+    version['minimum'] = '0.4';
+    version['maximum'] = '0.4';
+    api << version
+    area = XML::Node.new 'area'
+    area['maximum'] = MAX_REQUEST_AREA.to_s;
+    api << area
+    
+    doc.root << api

 
 

+    render :text => doc.to_s, :content_type => "text/xml"

   end
 end
   end
 end