Page Actions:
|
en |
… #macro(displayCommentForm) #if($xwiki.hasAccessLevel('comment')) ##!! <form action="$doc.getURL('commentadd', "xpage=view&viewer=comments#commentform")" method="post" id="AddComment"> <form name="frm" action="/Submit" method="post" id="AddComment"> <fieldset class="expanded" id="commentform"> <noscript> #set($warn=$msg.get("custom.javascriptneeded.${context.language}")) #warning($warn) </noscript> <legend>$msg.get('core.viewers.comments.add.title')</legend> ##!!<div class="commentavatar">#mediumUserAvatar($context.user)</div> #if($xcontext.user != 'XWiki.XWikiGuest') <label>$msg.get('core.viewers.comments.add.guestName.prompt') $xwiki.getUserName($xcontext.user)</label> <input type="hidden" name="${xCommentClass}_author" value="$xcontext.user"/> #else <label for="${xCommentClass}_author">$msg.get('core.viewers.comments.add.guestName.prompt') <input type="text" id="${xCommentClass}_author" name="${xCommentClass}_author" value="$author"/></label> <strong><a href='$xwiki.getURL('XWiki.XWikiLogin', 'login', "xredirect=$escapetool.url($xwiki.getRequestURL())")'>$msg.get('login')</a></strong> #end ## CSRF prevention <input type="hidden" name="form_token" value="$!{services.csrf.getToken()}" /> <input type="hidden" name="${xCommentClass}_date" value=""/> <input type="hidden" name="${xCommentClass}_replyto" value="$!replyTo"/> <input type="hidden" name="spacedoc" value="$doc.space/$doc.name"/> <div class="commentcontainer"> <label for="${xCommentClass}_comment">$msg.get('core.viewers.comments.add.comment.label')</label> <textarea id='${xCommentClass}_comment' rows='5' cols="80" name='${xCommentClass}_comment'>$!comment</textarea> </div> #if($xcontext.user == 'XWiki.XWikiGuest' && $offerGuestsCaptcha) #displayCaptcha() #end <div> ##!!<span class="buttonwrapper"><input type="submit" value="$msg.get('core.viewers.comments.add.submit')" class="button"/></span> <span class="buttonwrapper"><input name="sub" type="button" value="$msg.get('core.viewers.comments.add.submit')" class="button" onClick="submitComment()"/></span> <span class="buttonwrapper"><a class="cancel secondary button" href="$doc.getURL()">$msg.get('core.viewers.comments.add.cancel')</a></span> </div> </fieldset> </form> #end #end ...
… ////////////////////////// // Custom functions // ////////////////////////// // Adding comments using JavaScript // Adjust action value to RewriteRule in /etc/apache2/sites-available/default file function submitComment() { var spacedoc = document.frm.spacedoc.value; spacedoc = '/xwiki/bin/commentaddXXX/'+spacedoc+'?xpage=view&viewer=comments#commentform'; document.frm.action = spacedoc; document.frm.submit(); }
… ## Xwiki comments # Redirect new location set in ../webapps/xwiki/recources/js/xwiki/xwiki.js to the original place RewriteRule ^/xwiki/bin/commentaddXXX/(.*)$ http://localhost:8180/xwiki/bin/commentadd/$1 [P,L] # Redirect original location to the honeypot RewriteRule ^/xwiki/bin/commentadd/(.*)$ /Submit [L] ...
/etc/init.d/apache2 reload