#

# Hooks to allow posting to Changelog.

#

# Authors:

#      Mark Smith <mark@dreamwidth.org>

#

# Copyright (c) 2009 by Dreamwidth Studios, LLC.

#

# This program is free software; you may redistribute it and/or modify it under

# the same terms as Perl itself.  For a copy of the license, please reference

# 'perldoc perlartistic' or 'perldoc perlgpl'.

#

package DW::Hooks::Changelog;;

use strict;

use LJ::Hooks;

LJ::Hooks::register_hook( 'post_noauth', sub {

    my $req = shift;

    # enable or not

    return 0 unless $LJ::CHANGELOG{enabled};

    # the user must be posting TO the changelog journal and the

    # username must be in the allow list

    return 0 unless $req->{usejournal} eq $LJ::CHANGELOG{community};

    return 0 unless grep { $_ eq $req->{username} } @{ $LJ::CHANGELOG{allowed_posters} || [] };

    # we also enforce that the IP the request is coming from be one of

    # some small list of IPs

    my $ip = BML::get_remote_ip();

    return 0 unless grep { $_ eq $ip } @{ $LJ::CHANGELOG{allowed_ips} || [] };

    # looks good

    return 1;

} );

1;