Force openid callbacks to use GET to avoid CSRF validation issues

[rails.git] / app / controllers / site_controller.rb

diff --git a/app/controllers/site_controller.rb b/app/controllers/site_controller.rb
index 1478c5773cda99cf2b59c9b15f6fbfc4eaba6cb3..21ef26bacd3d63cf1af43d1d94eecd7a3862f289 100644 (file)
--- a/app/controllers/site_controller.rb
+++ b/app/controllers/site_controller.rb
@@ -30,4 +30,53 @@ class SiteController < ApplicationController
   def key
     expires_in 7.days, :public => true
   end
   def key
     expires_in 7.days, :public => true
   end

+
+  def edit
+    editor = params[:editor] || @user.preferred_editor || DEFAULT_EDITOR
+
+    if editor == "remote"
+      render :action => :index
+    else
+      # Decide on a lat lon to initialise potlatch with. Various ways of doing this
+      if params['lon'] and params['lat']
+        @lon = params['lon'].to_f
+        @lat = params['lat'].to_f
+        @zoom = params['zoom'].to_i
+
+      elsif params['mlon'] and params['mlat']
+        @lon = params['mlon'].to_f
+        @lat = params['mlat'].to_f
+        @zoom = params['zoom'].to_i
+
+      elsif params['bbox']
+        bbox = params['bbox'].split(",")
+
+        @lon = ( bbox[0].to_f + bbox[2].to_f ) / 2.0
+        @lat = ( bbox[1].to_f + bbox[3].to_f ) / 2.0
+        @zoom = 16
+
+      elsif params['minlon'] and params['minlat'] and params['maxlon'] and params['maxlat']
+        @lon = ( params['maxlon'].to_f + params['minlon'].to_f ) / 2.0
+        @lat = ( params['maxlat'].to_f + params['minlat'].to_f ) / 2.0
+        @zoom = 16
+
+      elsif params['gpx']
+        @lon = Trace.find(params['gpx']).longitude
+        @lat = Trace.find(params['gpx']).latitude
+
+      elsif cookies.key?("_osm_location")
+        @lon, @lat, @zoom, layers = cookies["_osm_location"].split("|")
+
+      elsif @user and !@user.home_lon.nil? and !@user.home_lat.nil?
+        @lon = @user.home_lon
+        @lat = @user.home_lat
+
+      else
+        #catch all.  Do nothing.  lat=nil, lon=nil
+        #Currently this results in potlatch starting up at 0,0 (Atlantic ocean).
+      end
+
+      @zoom = '17' if @zoom.nil?
+    end
+  end

 end
 end