No OneTemporary
Actions

Size

61 KB

Subscribers

None

View Options

	diff --git a/app.go b/app.go
	index 3cc8059..902253c 100644
	--- a/app.go
	+++ b/app.go
	@@ -1,1003 +1,998 @@
	/*
	* Copyright © 2018-2021 Musing Studio LLC.
	*
	* This file is part of WriteFreely.
	*
	* WriteFreely is free software: you can redistribute it and/or modify
	* it under the terms of the GNU Affero General Public License, included
	* in the LICENSE file in this source code package.
	*/

	package writefreely

	import (
	"crypto/tls"
	"database/sql"
	_ "embed"
	"fmt"
	"html/template"
	"net"
	"net/http"
	"net/url"
	"os"
	"os/signal"
	"path/filepath"
	"regexp"
	"strings"
	"syscall"
	"time"

	"github.com/gorilla/mux"
	"github.com/gorilla/schema"
	"github.com/gorilla/sessions"
	"github.com/manifoldco/promptui"
	stripmd "github.com/writeas/go-strip-markdown/v2"
	"github.com/writeas/impart"
	"github.com/writeas/web-core/auth"
	"github.com/writeas/web-core/converter"
	"github.com/writeas/web-core/log"
	"golang.org/x/crypto/acme/autocert"

	"github.com/writefreely/writefreely/author"
	"github.com/writefreely/writefreely/config"
	"github.com/writefreely/writefreely/key"
	"github.com/writefreely/writefreely/migrations"
	"github.com/writefreely/writefreely/page"
	)

	const (
	staticDir = "static"
	assumedTitleLen = 80
	postsPerPage = 10

	serverSoftware = "WriteFreely"
	softwareURL = "https://writefreely.org"
	)

	var (
	debugging bool

	// Software version can be set from git env using -ldflags
	softwareVer = "0.15.0-c7"

	// DEPRECATED VARS
	isSingleUser bool
	)

	// App holds data and configuration for an individual WriteFreely instance.
	type App struct {
	router *mux.Router
	shttp *http.ServeMux
	db *datastore
	cfg *config.Config
	cfgFile string
	keys *key.Keychain
	sessionStore sessions.Store
	formDecoder *schema.Decoder
	updates *updatesCache

	timeline *localTimeline
	}

	// DB returns the App's datastore
	func (app App) DB() datastore {
	return app.db
	}

	// Router returns the App's router
	func (app App) Router() mux.Router {
	return app.router
	}

	// Config returns the App's current configuration.
	func (app App) Config() config.Config {
	return app.cfg
	}

	// SetConfig updates the App's Config to the given value.
	func (app App) SetConfig(cfg config.Config) {
	app.cfg = cfg
	}

	// SetKeys updates the App's Keychain to the given value.
	func (app App) SetKeys(k key.Keychain) {
	app.keys = k
	}

	func (app *App) SessionStore() sessions.Store {
	return app.sessionStore
	}

	func (app *App) SetSessionStore(s sessions.Store) {
	app.sessionStore = s
	}

	// Apper is the interface for getting data into and out of a WriteFreely
	// instance (or "App").
	//
	// App returns the App for the current instance.
	//
	// LoadConfig reads an app configuration into the App, returning any error
	// encountered.
	//
	// SaveConfig persists the current App configuration.
	//
	// LoadKeys reads the App's encryption keys and loads them into its
	// key.Keychain.
	type Apper interface {
	App() *App

	LoadConfig() error
	SaveConfig(*config.Config) error

	LoadKeys() error

	ReqLog(r *http.Request, status int, timeSince time.Duration) string
	}

	// App returns the App
	func (app App) App() App {
	return app
	}

	// LoadConfig loads and parses a config file.
	func (app *App) LoadConfig() error {
	log.Info("Loading %s configuration...", app.cfgFile)
	cfg, err := config.Load(app.cfgFile)
	if err != nil {
	log.Error("Unable to load configuration: %v", err)
	os.Exit(1)
	return err
	}
	app.cfg = cfg
	return nil
	}

	// SaveConfig saves the given Config to disk -- namely, to the App's cfgFile.
	func (app App) SaveConfig(c config.Config) error {
	return config.Save(c, app.cfgFile)
	}

	// LoadKeys reads all needed keys from disk into the App. In order to use the
	// configured `Server.KeysParentDir`, you must call initKeyPaths(App) before
	// this.
	func (app *App) LoadKeys() error {
	var err error
	app.keys = &key.Keychain{}

	if debugging {
	log.Info(" %s", emailKeyPath)
	}

	executable, err := os.Executable()
	if err != nil {
	executable = "writefreely"
	} else {
	executable = filepath.Base(executable)
	}

	app.keys.EmailKey, err = os.ReadFile(emailKeyPath)
	if err != nil {
	return err
	}

	if debugging {
	log.Info(" %s", cookieAuthKeyPath)
	}
	app.keys.CookieAuthKey, err = os.ReadFile(cookieAuthKeyPath)
	if err != nil {
	return err
	}

	if debugging {
	log.Info(" %s", cookieKeyPath)
	}
	app.keys.CookieKey, err = os.ReadFile(cookieKeyPath)
	if err != nil {
	return err
	}

	if debugging {
	log.Info(" %s", csrfKeyPath)
	}
	app.keys.CSRFKey, err = os.ReadFile(csrfKeyPath)
	if err != nil {
	if os.IsNotExist(err) {
	log.Error(`Missing key: %s.

	Run this command to generate missing keys:
	%s keys generate

	`, csrfKeyPath, executable)
	}
	return err
	}

	return nil
	}

	func (app App) ReqLog(r http.Request, status int, timeSince time.Duration) string {
	return fmt.Sprintf("\"%s %s\" %d %s \"%s\"", r.Method, r.RequestURI, status, timeSince, r.UserAgent())
	}

	// handleViewHome shows page at root path. It checks the configuration and
	// authentication state to show the correct page.
	func handleViewHome(app App, w http.ResponseWriter, r http.Request) error {
	if app.cfg.App.SingleUser {
	// Render blog index
	return handleViewCollection(app, w, r)
	}

	// Multi-user instance
	forceLanding := r.FormValue("landing") == "1"
	if !forceLanding {
	// Show correct page based on user auth status and configured landing path
	u := getUserSession(app, r)

	if app.cfg.App.Chorus {
	// This instance is focused on reading, so show Reader on home route if not
	// private or a private-instance user is logged in.
	if !app.cfg.App.Private \|\| u != nil {
	return viewLocalTimeline(app, w, r)
	}
	}

	- if u != nil {
	- // User is logged in, so show the Pad
	- return handleViewPad(app, w, r)
	- }
	-
	if app.cfg.App.Private {
	return viewLogin(app, w, r)
	}

	if land := app.cfg.App.LandingPath(); land != "/" {
	return impart.HTTPError{http.StatusFound, land}
	}
	}

	return handleViewLanding(app, w, r)
	}

	func handleViewLanding(app App, w http.ResponseWriter, r http.Request) error {
	forceLanding := r.FormValue("landing") == "1"

	p := struct {
	page.StaticPage
	*OAuthButtons
	Flashes []template.HTML
	Banner template.HTML
	Content template.HTML

	ForcedLanding bool
	}{
	StaticPage: pageForReq(app, r),
	OAuthButtons: NewOAuthButtons(app.Config()),
	ForcedLanding: forceLanding,
	}

	banner, err := getLandingBanner(app)
	if err != nil {
	log.Error("unable to get landing banner: %v", err)
	return impart.HTTPError{http.StatusInternalServerError, fmt.Sprintf("Could not get banner: %v", err)}
	}
	p.Banner = template.HTML(applyMarkdown([]byte(banner.Content), "", app.cfg))

	content, err := getLandingBody(app)
	if err != nil {
	log.Error("unable to get landing content: %v", err)
	return impart.HTTPError{http.StatusInternalServerError, fmt.Sprintf("Could not get content: %v", err)}
	}
	p.Content = template.HTML(applyMarkdown([]byte(content.Content), "", app.cfg))

	// Get error messages
	session, err := app.sessionStore.Get(r, cookieName)
	if err != nil {
	// Ignore this
	log.Error("Unable to get session in handleViewHome; ignoring: %v", err)
	}
	flashes, _ := getSessionFlashes(app, w, r, session)
	for _, flash := range flashes {
	p.Flashes = append(p.Flashes, template.HTML(flash))
	}

	// Show landing page
	return renderPage(w, "landing.tmpl", p)
	}

	func handleTemplatedPage(app App, w http.ResponseWriter, r http.Request, t *template.Template) error {
	p := struct {
	page.StaticPage
	ContentTitle string
	Content template.HTML
	PlainContent string
	Updated string

	AboutStats *InstanceStats
	}{
	StaticPage: pageForReq(app, r),
	}
	if r.URL.Path == "/about" \|\| r.URL.Path == "/contact" \|\| r.URL.Path == "/privacy" {
	var c *instanceContent
	var err error

	if r.URL.Path == "/about" {
	c, err = getAboutPage(app)

	// Fetch stats
	p.AboutStats = &InstanceStats{}
	p.AboutStats.NumPosts, _ = app.db.GetTotalPosts()
	p.AboutStats.NumBlogs, _ = app.db.GetTotalCollections()
	} else if r.URL.Path == "/contact" {
	c, err = getContactPage(app)
	if c.Updated.IsZero() {
	// Page was never set up, so return 404
	return ErrPostNotFound
	}
	} else {
	c, err = getPrivacyPage(app)
	}

	if err != nil {
	return err
	}
	p.ContentTitle = c.Title.String
	p.Content = template.HTML(applyMarkdown([]byte(c.Content), "", app.cfg))
	p.PlainContent = shortPostDescription(stripmd.Strip(c.Content))
	if !c.Updated.IsZero() {
	p.Updated = c.Updated.Format("January 2, 2006")
	}
	}

	// Serve templated page
	err := t.ExecuteTemplate(w, "base", p)
	if err != nil {
	log.Error("Unable to render page: %v", err)
	}
	return nil
	}

	func pageForReq(app App, r http.Request) page.StaticPage {
	p := page.StaticPage{
	AppCfg: app.cfg.App,
	Path: r.URL.Path,
	Version: "v" + softwareVer,
	}

	// Use custom style, if file exists
	if _, err := os.Stat(filepath.Join(app.cfg.Server.StaticParentDir, staticDir, "local", "custom.css")); err == nil {
	p.CustomCSS = true
	}

	// Add user information, if given
	var u *User
	accessToken := r.FormValue("t")
	if accessToken != "" {
	userID := app.db.GetUserID(accessToken)
	if userID != -1 {
	var err error
	u, err = app.db.GetUserByID(userID)
	if err == nil {
	p.Username = u.Username
	}
	}
	} else {
	u = getUserSession(app, r)
	if u != nil {
	p.Username = u.Username
	p.IsAdmin = u != nil && u.IsAdmin()
	p.CanInvite = canUserInvite(app.cfg, p.IsAdmin)
	}
	}
	p.CanViewReader = !app.cfg.App.Private \|\| u != nil

	return p
	}

	var fileRegex = regexp.MustCompile("/([^/]\\.[^/])$")

	// Initialize loads the app configuration and initializes templates, keys,
	// session, route handlers, and the database connection.
	func Initialize(apper Apper, debug bool) (*App, error) {
	debugging = debug

	apper.LoadConfig()

	// Load templates
	err := InitTemplates(apper.App().Config())
	if err != nil {
	return nil, fmt.Errorf("load templates: %s", err)
	}

	// Load keys and set up session
	initKeyPaths(apper.App()) // TODO: find a better way to do this, since it's unneeded in all Apper implementations
	err = InitKeys(apper)
	if err != nil {
	return nil, fmt.Errorf("init keys: %s", err)
	}
	apper.App().InitUpdates()

	apper.App().InitSession()

	apper.App().InitDecoder()

	err = ConnectToDatabase(apper.App())
	if err != nil {
	return nil, fmt.Errorf("connect to DB: %s", err)
	}

	initActivityPub(apper.App())

	if apper.App().cfg.Email.Domain != "" \|\| apper.App().cfg.Email.MailgunPrivate != "" {
	if apper.App().cfg.Email.Domain == "" {
	log.Error("[FAILED] Starting publish jobs queue: no [letters]domain config value set.")
	} else if apper.App().cfg.Email.MailgunPrivate == "" {
	log.Error("[FAILED] Starting publish jobs queue: no [letters]mailgun_private config value set.")
	} else {
	log.Info("Starting publish jobs queue...")
	go startPublishJobsQueue(apper.App())
	}
	}

	// Handle local timeline, if enabled
	if apper.App().cfg.App.LocalTimeline {
	log.Info("Initializing local timeline...")
	initLocalTimeline(apper.App())
	}

	return apper.App(), nil
	}

	func Serve(app App, r mux.Router) {
	log.Info("Going to serve...")

	isSingleUser = app.cfg.App.SingleUser
	app.cfg.Server.Dev = debugging

	// Handle shutdown
	c := make(chan os.Signal, 2)
	signal.Notify(c, os.Interrupt, syscall.SIGTERM)
	go func() {
	<-c
	log.Info("Shutting down...")
	shutdown(app)
	log.Info("Done.")
	os.Exit(0)
	}()

	// Start gopher server
	if app.cfg.Server.GopherPort > 0 && !app.cfg.App.Private {
	go initGopher(app)
	}

	// Start web application server
	var bindAddress = app.cfg.Server.Bind
	if bindAddress == "" {
	bindAddress = "localhost"
	}
	var err error
	if app.cfg.IsSecureStandalone() {
	if app.cfg.Server.Autocert {
	m := &autocert.Manager{
	Prompt: autocert.AcceptTOS,
	Cache: autocert.DirCache(app.cfg.Server.TLSCertPath),
	}
	host, err := url.Parse(app.cfg.App.Host)
	if err != nil {
	log.Error("[WARNING] Unable to parse configured host! %s", err)
	log.Error(`[WARNING] ALL hosts are allowed, which can open you to an attack where
	clients connect to a server by IP address and pretend to be asking for an
	incorrect host name, and cause you to reach the CA's rate limit for certificate
	requests. We recommend supplying a valid host name.`)
	log.Info("Using autocert on ANY host")
	} else {
	log.Info("Using autocert on host %s", host.Host)
	m.HostPolicy = autocert.HostWhitelist(host.Host)
	}
	s := &http.Server{
	Addr: ":https",
	Handler: r,
	TLSConfig: &tls.Config{
	GetCertificate: m.GetCertificate,
	},
	}
	s.SetKeepAlivesEnabled(false)

	go func() {
	log.Info("Serving redirects on http://%s:80", bindAddress)
	err = http.ListenAndServe(":80", m.HTTPHandler(nil))
	log.Error("Unable to start redirect server: %v", err)
	}()

	log.Info("Serving on https://%s:443", bindAddress)
	log.Info("---")
	err = s.ListenAndServeTLS("", "")
	} else {
	go func() {
	log.Info("Serving redirects on http://%s:80", bindAddress)
	err = http.ListenAndServe(fmt.Sprintf("%s:80", bindAddress), http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
	http.Redirect(w, r, app.cfg.App.Host, http.StatusMovedPermanently)
	}))
	log.Error("Unable to start redirect server: %v", err)
	}()

	log.Info("Serving on https://%s:443", bindAddress)
	log.Info("Using manual certificates")
	log.Info("---")
	err = http.ListenAndServeTLS(fmt.Sprintf("%s:443", bindAddress), app.cfg.Server.TLSCertPath, app.cfg.Server.TLSKeyPath, r)
	}
	} else {
	network := "tcp"
	protocol := "http"
	if strings.HasPrefix(bindAddress, "/") {
	network = "unix"
	protocol = "http+unix"

	// old sockets will remain after server closes;
	// we need to delete them in order to open new ones
	err = os.Remove(bindAddress)
	if err != nil && !os.IsNotExist(err) {
	log.Error("%s already exists but could not be removed: %v", bindAddress, err)
	os.Exit(1)
	}
	} else {
	bindAddress = fmt.Sprintf("%s:%d", bindAddress, app.cfg.Server.Port)
	}

	log.Info("Serving on %s://%s", protocol, bindAddress)
	log.Info("---")
	listener, err := net.Listen(network, bindAddress)
	if err != nil {
	log.Error("Could not bind to address: %v", err)
	os.Exit(1)
	}

	if network == "unix" {
	err = os.Chmod(bindAddress, 0o666)
	if err != nil {
	log.Error("Could not update socket permissions: %v", err)
	os.Exit(1)
	}
	}

	defer listener.Close()
	err = http.Serve(listener, r)
	}
	if err != nil {
	log.Error("Unable to start: %v", err)
	os.Exit(1)
	}
	}

	func (app *App) InitDecoder() {
	// TODO: do this at the package level, instead of the App level
	// Initialize modules
	app.formDecoder = schema.NewDecoder()
	app.formDecoder.RegisterConverter(converter.NullJSONString{}, converter.ConvertJSONNullString)
	app.formDecoder.RegisterConverter(converter.NullJSONBool{}, converter.ConvertJSONNullBool)
	app.formDecoder.RegisterConverter(sql.NullString{}, converter.ConvertSQLNullString)
	app.formDecoder.RegisterConverter(sql.NullBool{}, converter.ConvertSQLNullBool)
	app.formDecoder.RegisterConverter(sql.NullInt64{}, converter.ConvertSQLNullInt64)
	app.formDecoder.RegisterConverter(sql.NullFloat64{}, converter.ConvertSQLNullFloat64)
	}

	// ConnectToDatabase validates and connects to the configured database, then
	// tests the connection.
	func ConnectToDatabase(app *App) error {
	// Check database configuration
	if app.cfg.Database.Type == driverMySQL && app.cfg.Database.User == "" {
	return fmt.Errorf("Database user not set.")
	}
	if app.cfg.Database.Host == "" {
	app.cfg.Database.Host = "localhost"
	}
	if app.cfg.Database.Database == "" {
	app.cfg.Database.Database = "writefreely"
	}

	// TODO: check err
	connectToDatabase(app)

	// Test database connection
	err := app.db.Ping()
	if err != nil {
	return fmt.Errorf("Database ping failed: %s", err)
	}

	return nil
	}

	// FormatVersion constructs the version string for the application
	func FormatVersion() string {
	return serverSoftware + " " + softwareVer
	}

	// OutputVersion prints out the version of the application.
	func OutputVersion() {
	fmt.Println(FormatVersion())
	}

	// NewApp creates a new app instance.
	func NewApp(cfgFile string) *App {
	return &App{
	cfgFile: cfgFile,
	}
	}

	// CreateConfig creates a default configuration and saves it to the app's cfgFile.
	func CreateConfig(app *App) error {
	log.Info("Creating configuration...")
	c := config.New()
	log.Info("Saving configuration %s...", app.cfgFile)
	err := config.Save(c, app.cfgFile)
	if err != nil {
	return fmt.Errorf("Unable to save configuration: %v", err)
	}
	return nil
	}

	// DoConfig runs the interactive configuration process.
	func DoConfig(app *App, configSections string) {
	if configSections == "" {
	configSections = "server db app"
	}
	// let's check there aren't any garbage in the list
	configSectionsArray := strings.Split(configSections, " ")
	for _, element := range configSectionsArray {
	if element != "server" && element != "db" && element != "app" {
	log.Error("Invalid argument to --sections. Valid arguments are only \"server\", \"db\" and \"app\"")
	os.Exit(1)
	}
	}
	d, err := config.Configure(app.cfgFile, configSections)
	if err != nil {
	log.Error("Unable to configure: %v", err)
	os.Exit(1)
	}
	app.cfg = d.Config
	connectToDatabase(app)
	defer shutdown(app)

	if !app.db.DatabaseInitialized() {
	err = adminInitDatabase(app)
	if err != nil {
	log.Error(err.Error())
	os.Exit(1)
	}
	} else {
	log.Info("Database already initialized.")
	}

	if d.User != nil {
	u := &User{
	Username: d.User.Username,
	HashedPass: d.User.HashedPass,
	Created: time.Now().Truncate(time.Second).UTC(),
	}

	// Create blog
	log.Info("Creating user %s...\n", u.Username)
	err = app.db.CreateUser(app.cfg, u, app.cfg.App.SiteName, "")
	if err != nil {
	log.Error("Unable to create user: %s", err)
	os.Exit(1)
	}
	log.Info("Done!")
	}
	os.Exit(0)
	}

	// GenerateKeyFiles creates app encryption keys and saves them into the configured KeysParentDir.
	func GenerateKeyFiles(app *App) error {
	// Read keys path from config
	app.LoadConfig()

	// Create keys dir if it doesn't exist yet
	fullKeysDir := filepath.Join(app.cfg.Server.KeysParentDir, keysDir)
	if _, err := os.Stat(fullKeysDir); os.IsNotExist(err) {
	err = os.Mkdir(fullKeysDir, 0700)
	if err != nil {
	return err
	}
	}

	// Generate keys
	initKeyPaths(app)
	// TODO: use something like https://github.com/hashicorp/go-multierror to return errors
	var keyErrs error
	err := generateKey(emailKeyPath)
	if err != nil {
	keyErrs = err
	}
	err = generateKey(cookieAuthKeyPath)
	if err != nil {
	keyErrs = err
	}
	err = generateKey(cookieKeyPath)
	if err != nil {
	keyErrs = err
	}
	err = generateKey(csrfKeyPath)
	if err != nil {
	keyErrs = err
	}

	return keyErrs
	}

	// CreateSchema creates all database tables needed for the application.
	func CreateSchema(apper Apper) error {
	apper.LoadConfig()
	connectToDatabase(apper.App())
	defer shutdown(apper.App())
	err := adminInitDatabase(apper.App())
	if err != nil {
	return err
	}
	return nil
	}

	// Migrate runs all necessary database migrations.
	func Migrate(apper Apper) error {
	apper.LoadConfig()
	connectToDatabase(apper.App())
	defer shutdown(apper.App())

	err := migrations.Migrate(migrations.NewDatastore(apper.App().db.DB, apper.App().db.driverName))
	if err != nil {
	return fmt.Errorf("migrate: %s", err)
	}
	return nil
	}

	// ResetPassword runs the interactive password reset process.
	func ResetPassword(apper Apper, username string) error {
	// Connect to the database
	apper.LoadConfig()
	connectToDatabase(apper.App())
	defer shutdown(apper.App())

	// Fetch user
	u, err := apper.App().db.GetUserForAuth(username)
	if err != nil {
	log.Error("Get user: %s", err)
	os.Exit(1)
	}

	// Prompt for new password
	prompt := promptui.Prompt{
	Templates: &promptui.PromptTemplates{
	Success: "{{ . \| bold \| faint }}: ",
	},
	Label: "New password",
	Mask: '*',
	}
	newPass, err := prompt.Run()
	if err != nil {
	log.Error("%s", err)
	os.Exit(1)
	}

	// Do the update
	log.Info("Updating...")
	err = adminResetPassword(apper.App(), u, newPass)
	if err != nil {
	log.Error("%s", err)
	os.Exit(1)
	}
	log.Info("Success.")
	return nil
	}

	// DoDeleteAccount runs the confirmation and account delete process.
	func DoDeleteAccount(apper Apper, username string) error {
	// Connect to the database
	apper.LoadConfig()
	connectToDatabase(apper.App())
	defer shutdown(apper.App())

	// check user exists
	u, err := apper.App().db.GetUserForAuth(username)
	if err != nil {
	log.Error("%s", err)
	os.Exit(1)
	}
	userID := u.ID

	// do not delete the admin account
	// TODO: check for other admins and skip?
	if u.IsAdmin() {
	log.Error("Can not delete admin account")
	os.Exit(1)
	}

	// confirm deletion, w/ w/out posts
	prompt := promptui.Prompt{
	Templates: &promptui.PromptTemplates{
	Success: "{{ . \| bold \| faint }}: ",
	},
	Label: fmt.Sprintf("Really delete user : %s", username),
	IsConfirm: true,
	}
	_, err = prompt.Run()
	if err != nil {
	log.Info("Aborted...")
	os.Exit(0)
	}

	log.Info("Deleting...")
	err = apper.App().db.DeleteAccount(userID)
	if err != nil {
	log.Error("%s", err)
	os.Exit(1)
	}
	log.Info("Success.")
	return nil
	}

	func connectToDatabase(app *App) {
	log.Info("Connecting to %s database...", app.cfg.Database.Type)

	var db *sql.DB
	var err error
	if app.cfg.Database.Type == driverMySQL {
	db, err = sql.Open(app.cfg.Database.Type, fmt.Sprintf("%s:%s@tcp(%s:%d)/%s?charset=utf8mb4&parseTime=true&loc=%s&tls=%t", app.cfg.Database.User, app.cfg.Database.Password, app.cfg.Database.Host, app.cfg.Database.Port, app.cfg.Database.Database, url.QueryEscape(time.Local.String()), app.cfg.Database.TLS))
	db.SetMaxOpenConns(50)
	} else if app.cfg.Database.Type == driverSQLite {
	if !SQLiteEnabled {
	log.Error("Invalid database type '%s'. Binary wasn't compiled with SQLite3 support.", app.cfg.Database.Type)
	os.Exit(1)
	}
	if app.cfg.Database.FileName == "" {
	log.Error("SQLite database filename value in config.ini is empty.")
	os.Exit(1)
	}
	db, err = sql.Open("sqlite3_with_regex", app.cfg.Database.FileName+"?parseTime=true&cached=shared")
	db.SetMaxOpenConns(2)
	} else {
	log.Error("Invalid database type '%s'. Only 'mysql' and 'sqlite3' are supported right now.", app.cfg.Database.Type)
	os.Exit(1)
	}
	if err != nil {
	log.Error("%s", err)
	os.Exit(1)
	}
	app.db = &datastore{db, app.cfg.Database.Type}
	}

	func shutdown(app *App) {
	log.Info("Closing database connection...")
	app.db.Close()
	if strings.HasPrefix(app.cfg.Server.Bind, "/") {
	// Clean up socket
	log.Info("Removing socket file...")
	err := os.Remove(app.cfg.Server.Bind)
	if err != nil {
	log.Error("Unable to remove socket: %s", err)
	os.Exit(1)
	}
	log.Info("Success.")
	}
	}

	// CreateUser creates a new admin or normal user from the given credentials.
	func CreateUser(apper Apper, username, password string, isAdmin bool) error {
	// Create an admin user with --create-admin
	apper.LoadConfig()
	connectToDatabase(apper.App())
	defer shutdown(apper.App())

	// Ensure an admin / first user doesn't already exist
	firstUser, _ := apper.App().db.GetUserByID(1)
	if isAdmin {
	// Abort if trying to create admin user, but one already exists
	if firstUser != nil {
	return fmt.Errorf("Admin user already exists (%s). Create a regular user with: writefreely --create-user", firstUser.Username)
	}
	} else {
	// Abort if trying to create regular user, but no admin exists yet
	if firstUser == nil {
	return fmt.Errorf("No admin user exists yet. Create an admin first with: writefreely --create-admin")
	}
	}

	// Create the user
	// Normalize and validate username
	desiredUsername := username
	username = getSlug(username, "")

	usernameDesc := username
	if username != desiredUsername {
	usernameDesc += " (originally: " + desiredUsername + ")"
	}

	if !author.IsValidUsername(apper.App().cfg, username) {
	return fmt.Errorf("Username %s is invalid, reserved, or shorter than configured minimum length (%d characters).", usernameDesc, apper.App().cfg.App.MinUsernameLen)
	}

	// Hash the password
	hashedPass, err := auth.HashPass([]byte(password))
	if err != nil {
	return fmt.Errorf("Unable to hash password: %v", err)
	}

	u := &User{
	Username: username,
	HashedPass: hashedPass,
	Created: time.Now().Truncate(time.Second).UTC(),
	}

	userType := "user"
	if isAdmin {
	userType = "admin"
	}
	log.Info("Creating %s %s...", userType, usernameDesc)
	err = apper.App().db.CreateUser(apper.App().Config(), u, desiredUsername, "")
	if err != nil {
	return fmt.Errorf("Unable to create user: %s", err)
	}
	log.Info("Done!")
	return nil
	}

	//go:embed schema.sql
	var schemaSql string

	//go:embed sqlite.sql
	var sqliteSql string

	func adminInitDatabase(app *App) error {
	var schema string
	if app.cfg.Database.Type == driverSQLite {
	schema = sqliteSql
	} else {
	schema = schemaSql
	}

	tblReg := regexp.MustCompile("CREATE TABLE (IF NOT EXISTS )?`([a-z_]+)`")

	queries := strings.Split(string(schema), ";\n")
	for _, q := range queries {
	if strings.TrimSpace(q) == "" {
	continue
	}
	parts := tblReg.FindStringSubmatch(q)
	if len(parts) >= 3 {
	log.Info("Creating table %s...", parts[2])
	} else {
	log.Info("Creating table ??? (Weird query) No match in: %v", parts)
	}
	_, err := app.db.Exec(q)
	if err != nil {
	log.Error("%s", err)
	} else {
	log.Info("Created.")
	}
	}

	// Set up migrations table
	log.Info("Initializing appmigrations table...")
	err := migrations.SetInitialMigrations(migrations.NewDatastore(app.db.DB, app.db.driverName))
	if err != nil {
	return fmt.Errorf("Unable to set initial migrations: %v", err)
	}

	log.Info("Running migrations...")
	err = migrations.Migrate(migrations.NewDatastore(app.db.DB, app.db.driverName))
	if err != nil {
	return fmt.Errorf("migrate: %s", err)
	}

	log.Info("Done.")
	return nil
	}

	// ServerUserAgent returns a User-Agent string to use in external requests. The
	// hostName parameter may be left empty.
	func ServerUserAgent(hostName string) string {
	hostUAStr := ""
	if hostName != "" {
	hostUAStr = "; +" + hostName
	}
	return "Go (" + serverSoftware + "/" + softwareVer + hostUAStr + ")"
	}
	diff --git a/templates/base.tmpl b/templates/base.tmpl
	index 37173f7..0e507f0 100644
	--- a/templates/base.tmpl
	+++ b/templates/base.tmpl
	@@ -1,94 +1,82 @@
	{{define "base"}}<!DOCTYPE HTML>
	<html>
	<head>
	{{ template "head" . }}
	<link rel="stylesheet" type="text/css" href="/css/{{.Theme}}.css" />
	{{if .CustomCSS}}<link rel="stylesheet" type="text/css" href="/local/custom.css" />{{end}}
	<link rel="shortcut icon" href="/favicon.ico" />
	<meta name="viewport" content="width=device-width, initial-scale=1.0" />

	<meta name="application-name" content="{{.SiteName}}">
	<meta name="application-url" content="{{.Host}}">
	<meta property="og:site_name" content="{{.SiteName}}" />
	</head>
	<body {{template "body-attrs" .}}>
	<div id="overlay"></div>
	<header>
	- {{ if .Chorus }}<nav id="full-nav">
	- <div class="left-side">
	- <h2><a href="/">{{.SiteName}}</a></h2>
	- </div>
	- {{ else }}
	<h2><a href="/">{{.SiteName}}</a></h2>
	- {{ end }}
	{{if not .SingleUser}}
	<nav id="user-nav">
	{{if .Username}}
	<nav class="dropdown-nav">
	<ul><li class="has-submenu"><a>{{.Username}}</a> <img class="ic-18dp" src="/img/ic_down_arrow_dark@2x.png" /><ul>
	+ <li><a href="/{{.Username}}/">My blog</a>
	{{if .IsAdmin}}<li><a href="/admin">Admin dashboard</a></li>{{end}}
	<li><a href="/me/import">Import posts</a></li>
	<li><a href="/me/export">Export</a></li>
	{{if .CanInvite}}<li><a href="/me/invites">Invite people</a></li>{{end}}
	<li class="separator"><hr /></li>
	<li><a href="/me/logout">Log out</a></li>
	</ul></li>
	</ul>
	</nav>
	{{end}}
	<nav class="tabs">
	{{ if and .SimpleNav (not .SingleUser) }}
	{{if and (and .LocalTimeline .CanViewReader) .Chorus}}<a href="/"{{if eq .Path "/"}} class="selected"{{end}}>Home</a>{{end}}
	{{ end }}
	- {{if or .Chorus (not .Username)}}<a href="/about"{{if eq .Path "/about"}} class="selected"{{end}}>About</a>{{end}}
	{{ if not .SingleUser }}
	{{ if .Username }}
	- {{if or (not .Chorus) (gt .MaxBlogs 1)}}<a href="/me/c/"{{if eq .Path "/me/c/"}} class="selected"{{end}}>Blogs</a>{{end}}
	- {{if and (and .Chorus (eq .MaxBlogs 1)) .Username}}<a href="/{{.Username}}/"{{if eq .Path (printf "/%s/" .Username)}} class="selected"{{end}}>My Posts</a>{{end}}
	{{if not .DisableDrafts}}<a href="/me/posts/"{{if eq .Path "/me/posts/"}} class="selected"{{end}}>Drafts</a>{{end}}
	{{ end }}
	{{if and (and .LocalTimeline .CanViewReader) (not .Chorus)}}<a href="/read"{{if eq .Path "/read"}} class="selected"{{end}}>Reader</a>{{end}}
	+ <a href="/about"{{if eq .Path "/about"}} class="selected"{{end}}>About</a>
	{{if eq .SignupPath "/signup"}}<a href="/signup"{{if eq .Path "/signup"}} class="selected"{{end}}>Sign up</a>{{end}}
	{{if and (not .Username) (not .Private)}}<a href="/login"{{if eq .Path "/login"}} class="selected"{{end}}>Log in</a>{{else if .SimpleNav}}<a href="/me/logout">Log out</a>{{end}}
	{{ end }}
	</nav>
	- {{if .Chorus}}{{if .Username}}<div class="right-side" style="font-size: 0.86em;">
	- <a class="simple-btn" href="/new">New Post</a>
	- </div>{{end}}
	- </nav>
	- {{end}}
	</nav>
	{{end}}
	</header>

	<div id="official-writing">
	{{ template "content" . }}
	</div>

	{{ template "footer" . }}

	{{if not .JSDisabled}}
	<script type="text/javascript" src="/js/menu.js"></script>
	<script type="text/javascript">
	{{if .WebFonts}}
	try { // Google Fonts
	WebFontConfig = {
	custom: { families: [ 'Lora:400,700:latin', 'Open+Sans:400,700:latin' ], urls: [ '/css/fonts.css' ] }
	};
	(function() {
	var wf = document.createElement('script');
	wf.src = '/js/webfont.js';
	wf.type = 'text/javascript';
	wf.async = 'true';
	var s = document.getElementsByTagName('script')[0];
	s.parentNode.insertBefore(wf, s);
	})();
	} catch (e) { /* ¯\_(ツ)_/¯ */ }
	{{end}}
	</script>
	{{else}}
	{{if .WebFonts}}<link href="/css/fonts.css" rel="stylesheet" type="text/css" />{{end}}
	{{end}}
	</body>
	</html>{{end}}
	{{define "body-attrs"}}{{end}}
	diff --git a/templates/collection.tmpl b/templates/collection.tmpl
	index 93a01c5..f780ac9 100644
	--- a/templates/collection.tmpl
	+++ b/templates/collection.tmpl
	@@ -1,261 +1,257 @@
	{{define "collection"}}<!DOCTYPE HTML>
	<html {{if .Language}}lang="{{.Language}}"{{end}} dir="{{.Direction}}">
	<head>
	<meta charset="utf-8">

	<title>{{.DisplayTitle}}{{if not .SingleUser}} — {{.SiteName}}{{end}}</title>

	<link rel="stylesheet" type="text/css" href="/css/write.css" />
	{{if .CustomCSS}}<link rel="stylesheet" type="text/css" href="/local/custom.css" />{{end}}
	<link rel="shortcut icon" href="/favicon.ico" />
	<link rel="canonical" href="{{.CanonicalURL}}">
	{{if gt .CurrentPage 1}}<link rel="prev" href="{{.PrevPageURL .Prefix .NavSuffix .CurrentPage .IsTopLevel}}">{{end}}
	{{if lt .CurrentPage .TotalPages}}<link rel="next" href="{{.NextPageURL .Prefix .NavSuffix .CurrentPage .IsTopLevel}}">{{end}}
	{{if not .IsPrivate}}<link rel="alternate" type="application/rss+xml" title="{{.DisplayTitle}} » Feed" href="{{.CanonicalURL}}feed/" />{{end}}
	<meta name="viewport" content="width=device-width, initial-scale=1.0" />

	<meta name="generator" content="WriteFreely">
	<meta name="description" content="{{.PlainDescription}}">
	<meta itemprop="name" content="{{.DisplayTitle}}">
	<meta itemprop="description" content="{{.PlainDescription}}">
	<meta name="twitter:card" content="summary">
	<meta name="twitter:title" content="{{.DisplayTitle}}">
	<meta name="twitter:image" content="{{.AvatarURL}}">
	<meta name="twitter:description" content="{{.PlainDescription}}">
	<meta property="og:title" content="{{.DisplayTitle}}" />
	<meta property="og:site_name" content="{{.DisplayTitle}}" />
	<meta property="og:type" content="article" />
	<meta property="og:url" content="{{.CanonicalURL}}" />
	<meta property="og:description" content="{{.PlainDescription}}" />
	<meta property="og:image" content="{{.AvatarURL}}">
	{{template "collection-meta" .}}
	{{if .StyleSheet}}<style type="text/css">{{.StyleSheetDisplay}}</style>{{end}}

	{{if .RenderMathJax}}
	<!-- Add mathjax logic -->
	{{template "mathjax" .}}
	{{end}}

	<!-- Add highlighting logic -->
	{{template "highlighting" . }}

	</head>
	<body id="collection" itemscope itemtype="http://schema.org/WebPage">
	{{if or .IsOwner .SingleUser}}
	<nav id="manage"><ul>
	<li class="has-submenu"><a onclick="void(0)">☰ Menu</a>
	<ul>
	{{ if .IsOwner }}
	- {{if .SingleUser}}
	- <li><a href="/me/new">New Post</a></li>
	- {{else}}
	- <li><a href="/#{{.Alias}}" class="write">{{.SiteName}}</a></li>
	- {{end}}
	- {{if .SimpleNav}}<li><a href="/new#{{.Alias}}">New Post</a></li>{{end}}
	+ <li><a href="/new#{{.Alias}}">New Post</a></li>
	<li><a href="/me/c/{{.Alias}}">Customize</a></li>
	<li><a href="/me/c/{{.Alias}}/stats">Stats</a></li>
	<li><a href="/me/c/{{.Alias}}/subscribers">Subscribers</a></li>
	- <li class="separator"><hr /></li>
	- {{if not .SingleUser}}<li><a href="/me/c/"><img class="ic-18dp" src="/img/ic_blogs_dark@2x.png" /> View Blogs</a></li>{{end}}
	- <li><a href="/me/posts/"><img class="ic-18dp" src="/img/ic_list_dark@2x.png" /> View Drafts</a></li>
	+ <li><a href="/me/posts/"><img class="ic-18dp" src="/img/ic_list_dark@2x.png" /> View Drafts</a></li>
	+ <li class="separator"><hr /></li>
	+ <li><a href="/">{{.SiteName}}</a></li>
	+ <li><a href="/me/logout">Log out</a></li>
	{{ else }}
	<li><a href="/login">Log in{{if .IsProtected}} to {{.DisplayTitle}}{{end}}</a></li>
	{{if .IsProtected}}
	<li class="separator"><hr /></li>
	<li><a href="/logout">Log out</a></li>
	{{end}}
	{{ end }}
	</ul>
	</li>
	</ul></nav>
	{{else if .IsCollLoggedIn}}
	<nav id="manage" class="shiny"><ul>
	<li class="has-submenu"><a onclick="void(0)">☰ Menu</a>
	<ul>
	<li class="menu-heading" style="padding: .5rem .75rem; box-sizing: border-box;">{{.DisplayTitle}}</li>
	<li><a href="{{.CanonicalURL}}logout">Log out</a></li>
	</ul>
	</li>
	</ul></nav>
	{{end}}

	<header>
	{{if .Silenced}}
	{{template "user-silenced"}}
	{{end}}
	<h1 dir="{{.Direction}}" id="blog-title">{{if .Posts}}{{else}}<span class="writeas-prefix"><a href="/">write.as</a></span> {{end}}<a href="/{{if .IsTopLevel}}{{else}}{{.Prefix}}{{.Alias}}/{{end}}" class="h-card p-author u-url" rel="me author">{{.DisplayTitle}}</a></h1>
	{{if .Description}}<p class="description p-note">{{.DisplayDescription}}</p>{{end}}
	{{/if not .Public/}}
	<!--p class="meta-note"><span>Private collection</span>. Only you can see this page.</p-->
	{{/end/}}
	{{if .PinnedPosts}}<nav>
	{{range .PinnedPosts}}<a class="pinned" href="{{if not $.SingleUser}}/{{$.Alias}}/{{.Slug.String}}{{else}}{{.CanonicalURL $.Host}}{{end}}">{{.PlainDisplayTitle}}</a>{{end}}</nav>
	{{end}}
	</header>

	{{if .Posts}}<section id="wrapper" itemscope itemtype="http://schema.org/Blog">{{else}}<div id="wrapper">{{end}}

	{{if .IsWelcome}}
	<div id="welcome">
	<h2>Welcome, <strong>{{.Username}}</strong>!</h2>
	<p>This is your new blog.</p>
	<p><a class="simple-cta" href="/#{{.Alias}}">Start writing</a>, or <a class="simple-cta" href="/me/c/{{.Alias}}">customize</a> your blog.</p>
	<p>Check out our <a class="simple-cta" href="https://guides.write.as/writing/?pk_campaign=welcome">writing guide</a> to see what else you can do, and <a class="simple-cta" href="/contact">get in touch</a> anytime with questions or feedback.</p>
	</div>
	{{end}}

	{{if .Flash}}
	<div class="alert success flash">
	<p>{{.Flash}}</p>
	</div>
	{{end}}

	{{template "posts" .}}

	{{if gt .TotalPages 1}}<nav id="paging" class="content-container clearfix">
	{{if or (and .Format.Ascending (le .CurrentPage .TotalPages)) (isRTL .Direction)}}
	{{if gt .CurrentPage 1}}<a href="{{.PrevPageURL .Prefix .NavSuffix .CurrentPage .IsTopLevel}}">⇠ {{if and .Format.Ascending (le .CurrentPage .TotalPages)}}Previous{{else}}Newer{{end}}</a>{{end}}
	{{if lt .CurrentPage .TotalPages}}<a style="float:right;" href="{{.NextPageURL .Prefix .NavSuffix .CurrentPage .IsTopLevel}}">{{if and .Format.Ascending (lt .CurrentPage .TotalPages)}}Next{{else}}Older{{end}} ⇢</a>{{end}}
	{{else}}
	{{if lt .CurrentPage .TotalPages}}<a href="{{.NextPageURL .Prefix .NavSuffix .CurrentPage .IsTopLevel}}">⇠ Older</a>{{end}}
	{{if gt .CurrentPage 1}}<a style="float:right;" href="{{.PrevPageURL .Prefix .NavSuffix .CurrentPage .IsTopLevel}}">Newer ⇢</a>{{end}}
	{{end}}
	</nav>{{end}}

	{{if not .IsWelcome}}{{template "emailsubscribe" .}}{{end}}

	{{if .Posts}}</section>{{else}}</div>{{end}}

	{{if .ShowFooterBranding }}
	<footer>
	<hr />
	<nav dir="ltr">
	{{if not .SingleUser}}<a class="home pubd" href="/">{{.SiteName}}</a> · {{end}}powered by <a style="margin-left:0" href="https://writefreely.org">writefreely</a>
	</nav>
	</footer>
	{{ end }}
	</body>

	{{if .CanShowScript}}
	{{range .ExternalScripts}}<script type="text/javascript" src="{{.}}" async></script>{{end}}
	{{if .Script}}<script type="text/javascript">{{.ScriptDisplay}}</script>{{end}}
	{{end}}
	<script src="/js/h.js"></script>
	<script src="/js/postactions.js"></script>
	<script src="/js/localdate.js"></script>
	<script type="text/javascript" src="/js/menu.js"></script>
	<script type="text/javascript">
	var deleting = false;
	function delPost(e, id, owned) {
	e.preventDefault();
	if (deleting) {
	return;
	}

	// TODO: UNDO!
	if (window.confirm('Are you sure you want to delete this post?')) {
	// AJAX
	deletePost(id, "", function() {
	// Remove post from list
	var $postEl = document.getElementById('post-' + id);
	$postEl.parentNode.removeChild($postEl);
	// TODO: add next post from this collection at the bottom
	});
	}
	}

	var deletePost = function(postID, token, callback) {
	deleting = true;

	var $delBtn = document.getElementById('post-' + postID).getElementsByClassName('delete action')[0];
	$delBtn.innerHTML = '...';

	var http = new XMLHttpRequest();
	var url = "/api/posts/" + postID;
	http.open("DELETE", url, true);
	http.onreadystatechange = function() {
	if (http.readyState == 4) {
	deleting = false;
	if (http.status == 204) {
	callback();
	} else if (http.status == 409) {
	$delBtn.innerHTML = 'delete';
	alert("Post is synced to another account. Delete the post from that account instead.");
	// TODO: show "remove" button instead of "delete" now
	// Persist that state.
	// Have it remove the post locally only.
	} else {
	$delBtn.innerHTML = 'delete';
	alert("Failed to delete." + (http.status>=500?" Please try again.":""));
	}
	}
	}
	http.send();
	};

	var pinning = false;
	function pinPost(e, postID, slug, title) {
	e.preventDefault();
	if (pinning) {
	return;
	}
	pinning = true;

	var callback = function() {
	// Visibly remove post from collection
	var $postEl = document.getElementById('post-' + postID);
	$postEl.parentNode.removeChild($postEl);
	var $header = document.getElementsByTagName('header')[0];
	var $pinnedNavs = $header.getElementsByTagName('nav');
	// Add link to nav
	var link = '<a class="pinned" href="{{if not .SingleUser}}/{{.Alias}}/{{end}}'+slug+'">'+title+'</a>';
	if ($pinnedNavs.length == 0) {
	$header.insertAdjacentHTML("beforeend", '<nav>'+link+'</nav>');
	} else {
	$pinnedNavs[0].insertAdjacentHTML("beforeend", link);
	}
	};

	var $pinBtn = document.getElementById('post-' + postID).getElementsByClassName('pin action')[0];
	$pinBtn.innerHTML = '...';

	var http = new XMLHttpRequest();
	var url = "/api/collections/{{.Alias}}/pin";
	var params = [ { "id": postID } ];
	http.open("POST", url, true);
	http.setRequestHeader("Content-type", "application/json");
	http.onreadystatechange = function() {
	if (http.readyState == 4) {
	pinning = false;
	if (http.status == 200) {
	callback();
	} else if (http.status == 409) {
	$pinBtn.innerHTML = 'pin';
	alert("Post is synced to another account. Delete the post from that account instead.");
	// TODO: show "remove" button instead of "delete" now
	// Persist that state.
	// Have it remove the post locally only.
	} else {
	$pinBtn.innerHTML = 'pin';
	alert("Failed to pin." + (http.status>=500?" Please try again.":""));
	}
	}
	}
	http.send(JSON.stringify(params));
	};

	try {
	WebFontConfig = {
	custom: { families: [ 'Lora:400,700:latin', 'Open+Sans:400,700:latin' ], urls: [ '/css/fonts.css' ] }
	};
	(function() {
	var wf = document.createElement('script');
	wf.src = '/js/webfont.js';
	wf.type = 'text/javascript';
	wf.async = 'true';
	var s = document.getElementsByTagName('script')[0];
	s.parentNode.insertBefore(wf, s);
	})();
	} catch (e) {}
	</script>
	</html>{{end}}
	diff --git a/templates/post.tmpl b/templates/post.tmpl
	index ca1c1f9..1b3b815 100644
	--- a/templates/post.tmpl
	+++ b/templates/post.tmpl
	@@ -1,102 +1,102 @@
	{{define "post"}}<!DOCTYPE HTML>
	<html {{if .Language}}lang="{{.Language}}"{{end}} dir="{{.Direction}}">
	<head prefix="og: http://ogp.me/ns#">
	<meta charset="utf-8">

	<title>{{if .Title}}{{.Title}}{{else}}{{.GenTitle}}{{end}} {{localhtml "title dash" .Language}} {{.SiteName}}</title>

	{{if .IsCode}}
	<link rel="stylesheet" href="/css/lib/mono-blue.min.css">
	{{end}}
	<link rel="stylesheet" type="text/css" href="/css/write.css" />
	{{if .CustomCSS}}<link rel="stylesheet" type="text/css" href="/local/custom.css" />{{end}}
	<link rel="shortcut icon" href="/favicon.ico" />
	<link rel="canonical" href="{{.Host}}/{{if .SingleUser}}d/{{end}}{{.ID}}" />
	<meta name="viewport" content="width=device-width, initial-scale=1.0" />

	<meta name="generator" content="{{.SiteName}}">
	<meta name="title" content="{{if .Title}}{{.Title}}{{else}}{{.GenTitle}}{{end}}">
	<meta name="description" content="{{.Description}}">
	<meta itemprop="name" content="{{.SiteName}}">
	<meta itemprop="description" content="{{.Description}}">
	<meta name="twitter:card" content="{{if gt (len .Images) 0}}summary_large_image{{else}}summary{{end}}">
	<meta name="twitter:title" content="{{if .Title}}{{.Title}}{{else}}{{.GenTitle}}{{end}}">
	<meta name="twitter:description" content="{{.Description}}">
	{{if gt .Views 1}}<meta name="twitter:label1" value="Views">
	<meta name="twitter:data1" value="{{largeNumFmt .Views}}">{{end}}
	{{if gt (len .Images) 0}}<meta name="twitter:image" content="{{index .Images 0}}">{{else}}<meta name="twitter:image" content="{{.Host}}/img/wf-sq.png">{{end}}
	<meta property="og:title" content="{{if .Title}}{{.Title}}{{else}}{{.GenTitle}}{{end}}" />
	<meta property="og:site_name" content="{{.SiteName}}" />
	<meta property="og:type" content="article" />
	<meta property="og:url" content="{{.Host}}/{{if .SingleUser}}d/{{end}}{{.ID}}" />
	<meta property="og:description" content="{{.Description}}" />
	{{range .Images}}<meta property="og:image" content="{{.}}" />{{else}}<meta property="og:image" content="{{.Host}}/img/wf-sq.png">{{end}}
	{{if .Author}}<meta property="article:author" content="https://{{.Author}}" />{{end}}
	<!-- Add highlighting logic -->
	{{template "highlighting" .}}
	</head>
	<body id="post">
	<header>
	<h1 dir="{{.Direction}}"><a href="/">{{.SiteName}}</a></h1>
	<nav>
	<span class="views{{if not .IsOwner}} owner-visible{{end}}" dir="ltr"><strong>{{largeNumFmt .Views}}</strong> {{pluralize "view" "views" .Views}}</span>
	{{if .IsCode}}<a href="/{{.ID}}.txt" rel="noindex" dir="{{.Direction}}">View raw</a>{{end}}
	{{ if .Username }}
	{{if .IsOwner}}
	<a href="/{{if .SingleUser}}d/{{end}}{{.ID}}/edit" dir="{{.Direction}}">Edit</a>
	{{end}}
	- <a class="xtra-feature dash-nav" href="/me/posts/" dir="{{.Direction}}">Drafts</a>
	+ <a class="xtra-feature dash-nav" href="/me/posts/" dir="{{.Direction}}">All Drafts</a>
	{{ end }}
	</nav>
	</header>

	{{if .Silenced}}
	{{template "user-silenced"}}
	{{end}}

	<article class="{{.Font}} h-entry">{{if .Title}}<h2 id="title" class="p-name">{{.Title}}</h2>{{end}}{{ if .IsPlainText }}<p id="post-body" class="e-content">{{.Content}}</p>{{ else }}<div id="post-body" class="e-content">{{.HTMLContent}}</div>{{ end }}</article>

	<footer dir="ltr"><hr><nav><p style="font-size: 0.9em">{{localhtml "published with write.as" .Language}}</p></nav></footer>
	</body>

	{{if .IsCode}}
	<script src="/js/highlight.min.js"></script>
	<script>
	hljs.highlightBlock(document.getElementById('post-body'));
	</script>
	{{else}}
	<script src="/js/h.js"></script>
	{{if .IsPlainText}}<script src="/js/twitter-text.min.js"></script>{{end}}
	{{end}}
	<script type="text/javascript">
	try {
	WebFontConfig = {
	custom: { families: [ 'Lora:400,700:latin'{{if eq .Font "sans"}}, 'Open+Sans:400,700:latin'{{end}} ], urls: [ '/css/fonts.css' ] }
	};
	(function() {
	var wf = document.createElement('script');
	wf.src = '/js/webfont.js';
	wf.type = 'text/javascript';
	wf.async = 'true';
	var s = document.getElementsByTagName('script')[0];
	s.parentNode.insertBefore(wf, s);
	})();
	} catch (e) { /* ¯\_(ツ)_/¯ */ }

	var posts = localStorage.getItem('posts');
	if (posts != null) {
	posts = JSON.parse(posts);
	var $nav = document.getElementsByTagName('nav')[0];
	for (var i=0; i<posts.length; i++) {
	if (posts[i].id == "{{.ID}}") {
	$nav.innerHTML = $nav.innerHTML + '<a class="xtra-feature" href="/edit/{{.ID}}" dir="{{.Direction}}">Edit</a>';
	var $ownerVis = document.querySelectorAll('.owner-visible');
	for (var i=0; i<$ownerVis.length; i++) {
	$ownerVis[i].classList.remove('owner-visible');
	}
	break;
	}
	}
	}
	</script>
	</html>{{end}}
	diff --git a/templates/user/articles.tmpl b/templates/user/articles.tmpl
	index 92f9c40..f31404a 100644
	--- a/templates/user/articles.tmpl
	+++ b/templates/user/articles.tmpl
	@@ -1,227 +1,226 @@
	{{define "articles"}}
	{{template "header" .}}
	<style type="text/css">
	a.loading {
	font-style: italic;
	color: #666;
	}
	#move-tmpl {
	display: none;
	}
	</style>

	<div class="snug content-container">

	{{if .Flashes}}<ul class="errors">
	{{range .Flashes}}<li class="urgent">{{.}}</li>{{end}}
	</ul>{{end}}
	{{if .Silenced}}
	{{template "user-silenced"}}
	{{end}}

	<h1 id="posts-header">Drafts</h1>

	{{ if .AnonymousPosts }}
	<p>These are your draft posts. You can share them individually (without a blog) or move them to your blog when you're ready.</p>

	<div id="anon-posts" class="atoms posts">
	{{ range $el := .AnonymousPosts }}<div id="post-{{.ID}}" class="post">
	<h3><a href="/{{if $.SingleUser}}d/{{end}}{{.ID}}" itemprop="url">{{.DisplayTitle}}</a></h3>
	<h4>
	<date datetime="{{.Created}}" pubdate itemprop="datePublished" content="{{.Created}}">{{.DisplayDate}}</date>
	<a class="action" href="/{{if $.SingleUser}}d/{{end}}{{.ID}}/edit">edit</a>
	<a class="delete action" href="/{{.ID}}" onclick="delPost(event, '{{.ID}}', true)">delete</a>
	{{ if $.Collections }}
	{{if gt (len $.Collections) 1}}<div class="action flat-select">
	<select id="move-{{.ID}}" onchange="postActions.multiMove(this, '{{.ID}}', {{if $.SingleUser}}true{{else}}false{{end}})" title="Move this post to one of your blogs">
	<option style="display:none"></option>
	{{range $.Collections}}<option value="{{.Alias}}">{{.DisplayTitle}}</option>{{end}}
	</select>
	<label for="move-{{.ID}}">move to...</label>
	<img class="ic-18dp" src="/img/ic_down_arrow_dark@2x.png" />
	</div>{{else}}
	{{range $.Collections}}
	<a class="action" href="/{{$el.ID}}" title="Publish this post to your blog '{{.DisplayTitle}}'" onclick="postActions.move(this, '{{$el.ID}}', '{{.Alias}}', {{if $.SingleUser}}true{{else}}false{{end}});return false">move to {{.DisplayTitle}}</a>
	{{end}}
	{{end}}
	{{ end }}
	</h4>
	{{if .Summary}}<p>{{.SummaryHTML}}</p>{{end}}
	</div>{{end}}
	</div>
	{{if eq (len .AnonymousPosts) 10}}<p id="load-more-p"><a href="#load">Load more...</a></p>{{end}}
	{{ else }}<div id="no-posts-published">
	<p>Your anonymous and draft posts will show up here once you've published some. You'll be able to share them individually (without a blog) or move them to a blog when you're ready.</p>
	- {{if not .SingleUser}}<p>Alternatively, see your blogs and their posts on your <a href="/me/c/">Blogs</a> page.</p>{{end}}

	- <p class="text-cta"><a href="{{if .SingleUser}}/me/new{{else}}/{{end}}">Start writing</a></p></div>{{ end }}
	+ <p class="text-cta"><a href="{{if .SingleUser}}/me/new{{else}}/new{{end}}">Start writing</a></p></div>{{ end }}

	<div id="moving"></div>

	<h2 id="unsynced-posts-header" style="display: none">unsynced posts</h2>
	<div id="unsynced-posts-info" style="margin-top: 1em"></div>
	<div id="unsynced-posts" class="atoms"></div>

	</div>

	{{ if .Collections }}
	<div id="move-tmpl">
	{{if gt (len .Collections) 1}}
	<div class="action flat-select">
	<select id="move-POST_ID" onchange="postActions.multiMove(this, 'POST_ID', {{if .SingleUser}}true{{else}}false{{end}})" title="Move this post to one of your blogs">
	<option style="display:none"></option>
	{{range .Collections}}<option value="{{.Alias}}">{{.DisplayTitle}}</option>{{end}}
	</select>
	<label for="move-POST_ID">move to...</label>
	<img class="ic-18dp" src="/img/ic_down_arrow_dark@2x.png" />
	</div>
	{{else}}
	{{range .Collections}}
	<a class="action" href="/POST_ID" title="Publish this post to your blog '{{.DisplayTitle}}'" onclick="postActions.move(this, 'POST_ID', '{{.Alias}}', {{if $.SingleUser}}true{{else}}false{{end}});return false">move to {{.DisplayTitle}}</a>
	{{end}}
	{{end}}
	</div>
	{{ end }}

	<script src="/js/h.js"></script>
	<script src="/js/postactions.js"></script>
	<script>
	var auth = true;
	function postsLoaded(n) {
	if (n == 0) {
	return;
	}
	document.getElementById('unsynced-posts-header').style.display = 'block';
	var syncing = false;
	var $pInfo = document.getElementById('unsynced-posts-info');
	$pInfo.className = 'alert info';
	var plural = n != 1;
	$pInfo.innerHTML = '<p>You have <strong>'+n+'</strong> post'+(plural?'s that aren\'t':' that isn\'t')+' synced to your account yet. <a href="#" id="btn-sync">Sync '+(plural?'them':'it')+' now</a>.</p>';

	var $noPosts = document.getElementById('no-posts-published');
	if ($noPosts != null) {
	$noPosts.style.display = 'none';
	document.getElementById('posts-header').style.display = 'none';
	}

	H.getEl('btn-sync').on('click', function(e) {
	e.preventDefault();
	if (syncing) {
	return;
	}
	var http = new XMLHttpRequest();
	var params = [];
	var posts = JSON.parse(H.get('posts', '[]'));
	if (posts.length > 0) {
	for (var i=0; i<posts.length; i++) {
	params.push({id: posts[i].id, token: posts[i].token});
	}
	}

	this.style.fontWeight = 'bold';
	this.innerText = 'Syncing '+(plural?'them':'it')+' now...';

	http.open("POST", "/api/posts/claim", true);

	// Send the proper header information along with the request
	http.setRequestHeader("Content-type", "application/json");

	http.onreadystatechange = function() {
	if (http.readyState == 4) {
	syncing = false;
	this.innerText = 'Importing '+(plural?'them':'it')+' now...';

	if (http.status == 200) {
	var res = JSON.parse(http.responseText);
	if (res.data.length > 0) {
	if (res.data.length != posts.length) {
	// TODO: handle something that royally fucked up
	console.error("Request and result array length didn't match!");
	return;
	}
	for (var i=0; i<res.data.length; i++) {
	if (res.data[i].code == 200) {
	// Post successfully claimed.
	for (var j=0; j<posts.length; j++) {
	// Find post in local store
	if (posts[j].id == res.data[i].post.id) {
	// Remove this post
	posts.splice(j, 1);
	break;
	}
	}
	} else {
	for (var j=0; j<posts.length; j++) {
	// Find post in local store
	if (posts[j].id == res.data[i].id) {
	// Note the error in the local post
	posts[j].error = res.data[i].error_msg;
	break;
	}
	}
	}
	}
	H.set('posts', JSON.stringify(posts));
	location.reload();
	}
	} else {
	// TODO: handle error visually (option to retry)
	console.error("Didn't work at all, man.");
	this.style.fontWeight = 'normal';
	this.innerText = 'Sync '+(plural?'them':'it')+' now';
	}
	}
	}
	http.send(JSON.stringify(params));
	syncing = true;
	});
	}

	var $loadMore = H.getEl("load-more-p");
	var curPage = 1;
	var isLoadingMore = false;
	function loadMorePosts() {
	if (isLoadingMore === true) {
	return;
	}
	var $link = this;
	isLoadingMore = true;

	$link.className = 'loading';
	$link.textContent = 'Loading posts...';

	var $posts = H.getEl("anon-posts");

	curPage++;

	var http = new XMLHttpRequest();
	var url = "/api/me/posts?anonymous=1&page=" + curPage;
	http.open("GET", url, true);
	http.setRequestHeader("Content-type", "application/json");
	http.onreadystatechange = function() {
	if (http.readyState == 4) {
	if (http.status == 200) {
	var data = JSON.parse(http.responseText);
	for (var i=0; i<data.data.length; i++) {
	$posts.el.appendChild(createPostEl(data.data[i], true));
	}
	if (data.data.length < 10) {
	$loadMore.el.parentNode.removeChild($loadMore.el);
	}
	} else {
	alert("Failed to load more posts. Please try again.");
	curPage--;
	}
	isLoadingMore = false;
	$link.className = '';
	$link.textContent = 'Load more...';
	}
	}
	http.send();
	}
	$loadMore.el.querySelector('a').addEventListener('click', loadMorePosts);
	</script>
	<script src="/js/posts.js"></script>

	{{template "footer" .}}
	{{end}}
	diff --git a/templates/user/include/header.tmpl b/templates/user/include/header.tmpl
	index 81d3c43..6e3e9d1 100644
	--- a/templates/user/include/header.tmpl
	+++ b/templates/user/include/header.tmpl
	@@ -1,115 +1,113 @@
	{{define "user-navigation"}}
	<header class="{{if .SingleUser}}singleuser{{else}}multiuser{{end}}">
	<nav id="full-nav">
	{{if .SingleUser}}
	<nav id="user-nav">
	<nav class="dropdown-nav">
	<ul><li><a href="/" title="View blog" class="title">{{.SiteName}}</a> <img class="ic-18dp" src="/img/ic_down_arrow_dark@2x.png" />
	<ul>
	{{if .IsAdmin}}<li><a href="/admin">Admin dashboard</a></li>{{end}}
	<li><a href="/me/import">Import posts</a></li>
	<li><a href="/me/export">Export</a></li>
	<li class="separator"><hr /></li>
	<li><a href="/me/logout">Log out</a></li>
	</ul></li>
	</ul>
	</nav>
	<nav class="tabs">
	<a href="/me/c/{{.Username}}" {{if and (hasPrefix .Path "/me/c/") (hasSuffix .Path .Username)}}class="selected"{{end}}>Customize</a>
	<a href="/me/c/{{.Username}}/stats" {{if hasSuffix .Path "/stats"}}class="selected"{{end}}>Stats</a>
	<a href="/me/c/{{.Username}}/subscribers" {{if hasSuffix .Path "/subscribers"}}class="selected"{{end}}>Subscribers</a>
	<a href="/me/posts/"{{if eq .Path "/me/posts/"}} class="selected"{{end}}>Drafts</a>
	</nav>
	</nav>
	<div class="right-side">
	<a class="simple-btn" href="/me/new">New Post</a>
	</div>
	{{else}}
	<div class="left-side">
	- <h1><a href="/" title="Return to editor">{{.SiteName}}</a></h1>
	+ <h1><a href="/{{.Username}}/">Back to blog</a></h1>
	</div>
	<nav id="user-nav">
	{{if .Username}}
	<nav class="dropdown-nav">
	<ul><li class="has-submenu"><a>{{.Username}}</a> <img class="ic-18dp" src="/img/ic_down_arrow_dark@2x.png" /><ul>
	{{if .IsAdmin}}<li><a href="/admin">Admin dashboard</a></li>{{end}}
	<li><a href="/me/import">Import posts</a></li>
	<li><a href="/me/export">Export</a></li>
	{{if .CanInvite}}<li><a href="/me/invites">Invite people</a></li>{{end}}
	<li class="separator"><hr /></li>
	<li><a href="/me/logout">Log out</a></li>
	</ul></li>
	</ul>
	</nav>
	{{end}}
	<nav class="tabs">
	{{if .SimpleNav}}
	{{ if not .SingleUser }}
	{{if and (and .LocalTimeline .CanViewReader) .Chorus}}<a href="/"{{if eq .Path "/"}} class="selected"{{end}}>Home</a>{{end}}
	{{ end }}
	<a href="/about">About</a>
	{{ if not .SingleUser }}
	{{ if .Username }}
	{{if gt .MaxBlogs 1}}<a href="/me/c/"{{if eq .Path "/me/c/"}} class="selected"{{end}}>Blogs</a>{{end}}
	{{if and .Chorus (eq .MaxBlogs 1)}}<a href="/{{.Username}}/"{{if eq .Path (printf "/%s/" .Username)}} class="selected"{{end}}>My Posts</a>{{end}}
	- {{if not .DisableDrafts}}<a href="/me/posts/"{{if eq .Path "/me/posts/"}} class="selected"{{end}}>Drafts</a>{{end}}
	+ <a href="/me/posts/"{{if eq .Path "/me/posts/"}} class="selected"{{end}}>Drafts</a>
	{{ end }}
	{{if and (and .LocalTimeline .CanViewReader) (not .Chorus)}}<a href="/read">Reader</a>{{end}}
	{{if and (and (and .Chorus .OpenRegistration) (not .Username)) (or (not .Private) (ne .Landing ""))}}<a href="/signup"{{if eq .Path "/signup"}} class="selected"{{end}}>Sign up</a>{{end}}
	{{if .Username}}<a href="/me/logout">Log out</a>{{else}}<a href="/login">Log in</a>{{end}}
	{{ end }}
	{{else}}
	- <a href="/me/c/"{{if eq .Path "/me/c/"}} class="selected"{{end}}>Blogs</a>
	- {{if not .DisableDrafts}}<a href="/me/posts/"{{if eq .Path "/me/posts/"}} class="selected"{{end}}>Drafts</a>{{end}}
	- {{if and (and .LocalTimeline .CanViewReader) (not .Chorus)}}<a href="/read">Reader</a>{{end}}
	+ <a href="/me/posts/"{{if eq .Path "/me/posts/"}} class="selected"{{end}}>Drafts</a>
	{{end}}
	</nav>
	</nav>
	{{if .Username}}
	<div class="right-side">
	- <a class="simple-btn" href="/{{if .CollAlias}}#{{.CollAlias}}{{end}}">New Post</a>
	+ <a class="simple-btn" href="/new{{if .CollAlias}}#{{.CollAlias}}{{end}}">New Post</a>
	</div>
	{{end}}
	{{end}}
	</nav>
	</header>
	{{end}}
	{{define "header"}}<!DOCTYPE HTML>
	<html>
	<head>
	<meta charset="utf-8">

	<title>{{.PageTitle}} {{if .Separator}}{{.Separator}}{{else}}—{{end}} {{.SiteName}}</title>

	<link rel="stylesheet" type="text/css" href="/css/write.css" />
	{{if .CustomCSS}}<link rel="stylesheet" type="text/css" href="/local/custom.css" />{{end}}
	<link rel="shortcut icon" href="/favicon.ico" />
	<meta name="viewport" content="width=device-width, initial-scale=1.0" />
	<meta name="theme-color" content="#888888" />
	<meta name="apple-mobile-web-app-title" content="{{.SiteName}}">
	<link rel="apple-touch-icon" sizes="152x152" href="/img/touch-icon-152.png">
	<link rel="apple-touch-icon" sizes="167x167" href="/img/touch-icon-167.png">
	<link rel="apple-touch-icon" sizes="180x180" href="/img/touch-icon-180.png">
	</head>
	<body id="me">
	{{template "user-navigation" .}}
	<div id="official-writing">
	{{end}}

	{{define "admin-header"}}
	<header class="admin">
	<h1>Admin</h1>
	<nav id="admin" class="pager">
	<a href="/admin" {{if eq .Path "/admin"}}class="selected"{{end}}>Dashboard</a>
	<a href="/admin/settings" {{if eq .Path "/admin/settings"}}class="selected"{{end}}>Settings</a>
	{{if not .SingleUser}}
	<a href="/admin/users" {{if eq .Path "/admin/users"}}class="selected"{{end}}>Users</a>
	<a href="/admin/pages" {{if eq .Path "/admin/pages"}}class="selected"{{end}}>Pages</a>
	{{if .UpdateChecks}}<a href="/admin/updates" {{if eq .Path "/admin/updates"}}class="selected"{{end}}>Updates{{if .UpdateAvailable}}<span class="blip">!</span>{{end}}</a>{{end}}
	{{end}}
	{{if not .Forest}}
	<a href="/admin/monitor" {{if eq .Path "/admin/monitor"}}class="selected"{{end}}>Monitor</a>
	{{end}}
	</nav>
	</header>
	{{end}}
	diff --git a/templates/user/include/nav.tmpl b/templates/user/include/nav.tmpl
	index 735019d..f82f6e7 100644
	--- a/templates/user/include/nav.tmpl
	+++ b/templates/user/include/nav.tmpl
	@@ -1,17 +1,17 @@
	{{define "collection-breadcrumbs"}}
	{{if and .Collection (not .SingleUser)}}<nav id="org-nav"><a href="/me/c/">Blogs</a> / <a class="coll-name" href="/{{.Collection.Alias}}/">{{.Collection.DisplayTitle}}</a></nav>{{end}}
	{{end}}

	{{define "collection-nav"}}
	{{if not .SingleUser}}
	<header class="admin">
	<nav class="pager">
	- {{if .CanPost}}<a href="{{if .SingleUser}}/me/new{{else}}/#{{.Alias}}{{end}}" class="btn gentlecta">New Post</a>{{end}}
	+ {{if .CanPost}}<a href="{{if .SingleUser}}/me/new{{else}}/new#{{.Alias}}{{end}}" class="btn gentlecta">New Post</a>{{end}}
	<a href="/me/c/{{.Alias}}" {{if and (hasPrefix .Path "/me/c/") (hasSuffix .Path .Alias)}}class="selected"{{end}}>Customize</a>
	<a href="/me/c/{{.Alias}}/stats" {{if hasSuffix .Path "/stats"}}class="selected"{{end}}>Stats</a>
	<a href="/me/c/{{.Alias}}/subscribers" {{if hasSuffix .Path "/subscribers"}}class="selected"{{end}}>Subscribers</a>
	<a href="{{if .SingleUser}}/{{else}}/{{.Alias}}/{{end}}">View Blog →</a>
	</nav>
	</header>
	{{end}}
	{{end}}

File Metadata

Mime Type: text/x-diff
Expires: Fri, Apr 25, 6:20 AM (1 h, 52 m)
Storage Engine: blob
Storage Format: Raw Data
Storage Handle: 3214971

No OneTemporaryActions

View Options

File Metadata

Event Timeline

No OneTemporary
Actions