From 9ed426a853247eb6c51422013d3d05cea5dc98be Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20P=C3=A9ters?= <fpeters@entrouvert.com>
Date: Tue, 18 Aug 2015 11:09:33 +0200
Subject: [PATCH 3/3] forms: add a new option to prepend a CAPTCHA page for
 anonymous users (#7859)

---
 wcs/admin/forms.py |  7 ++++++-
 wcs/formdef.py     |  4 +++-
 wcs/forms/root.py  | 31 +++++++++++++++++++++++++++++++
 3 files changed, 40 insertions(+), 2 deletions(-)

diff --git a/wcs/admin/forms.py b/wcs/admin/forms.py
index 5a4dc64..cbdbc6e 100644
--- a/wcs/admin/forms.py
+++ b/wcs/admin/forms.py
@@ -342,6 +342,8 @@ class FormDefPage(Directory):
             r += htmltext('<li>%s</li>') % _('Publication Date: %s') % self.formdef.publication_date
         if self.formdef.expiration_date:
             r += htmltext('<li>%s</li>') % _('Expiration Date: %s') % self.formdef.expiration_date
+        if self.formdef.has_captcha:
+            r += htmltext('<li>%s</li>') % _('Add CAPTCHA for anonymous users')
         r += htmltext('</ul>')
         r += htmltext('</div>')
         r += htmltext('</div>')
@@ -614,6 +616,9 @@ class FormDefPage(Directory):
         form.add(DateTimeWidget, 'expiration_date',
                  title=_('Expiration Date'),
                  value=self.formdef.expiration_date)
+        form.add(CheckboxWidget, 'has_captcha',
+                title=_('Prepend a CAPTCHA page for anonymous users'),
+                value=self.formdef.has_captcha)
 
         form.add_submit('submit', _('Submit'))
         form.add_submit('cancel', _('Cancel'))
@@ -624,7 +629,7 @@ class FormDefPage(Directory):
             attrs = ['confirmation', 'only_allow_one', 'disabled',
                     'enable_tracking_codes', 'private_status_and_history',
                     'disabled_redirection', 'publication_date',
-                    'expiration_date', 'always_advertise']
+                    'expiration_date', 'always_advertise', 'has_captcha']
             for f in attrs:
                 widget = form.get_widget(f)
                 if widget:
diff --git a/wcs/formdef.py b/wcs/formdef.py
index 2e73eea..6368089 100644
--- a/wcs/formdef.py
+++ b/wcs/formdef.py
@@ -78,6 +78,7 @@ class FormDef(StorableObject):
     always_advertise = False
     publication_date = None
     expiration_date = None
+    has_captcha = False
 
     acl_read = 'owner'  # one of ('none', 'owner', 'roles', 'all')
     private_status_and_history = False
@@ -93,7 +94,8 @@ class FormDef(StorableObject):
             'disabled_redirection',]
     BOOLEAN_ATTRIBUTES = ['discussion', 'detailed_emails', 'disabled',
             'only_allow_one', 'enable_tracking_codes',
-            'always_advertise', 'private_status_and_history']
+            'always_advertise', 'private_status_and_history',
+            'has_captcha']
 
     def migrate(self):
         changed = False
diff --git a/wcs/forms/root.py b/wcs/forms/root.py
index c98a251..52afb7a 100644
--- a/wcs/forms/root.py
+++ b/wcs/forms/root.py
@@ -294,12 +294,34 @@ class FormPage(Directory):
         r += htmltext('</ol></div>')
         return r.getvalue()
 
+    def initial_captcha_page(self):
+        form = Form()
+        form.add_captcha(hint='')
+        form.add_submit('submit', _('Next'))
+        form.add_submit('cancel', _('Cancel'))
+
+        if form.get_submit() == 'cancel':
+            return redirect(get_publisher().get_root_url())
+
+        if not form.is_submitted() or form.has_errors():
+            self.html_top(self.formdef.name)
+            r = TemplateIO(html=True)
+            r += TextsDirectory.get_html_text('captcha-page')
+            r += form.render()
+            return r.getvalue()
+
+        return self.page(0)
+
     def page(self, page_no, page_change = True, log_detail = None, editing = None):
         r = TemplateIO(html=True)
         displayed_fields = []
 
         session = get_session()
 
+        if page_no == 0 and self.formdef.has_captcha:
+            if not session.get_user() and not session.won_captcha:
+                return self.initial_captcha_page()
+
         if page_no > 0:
             magictoken = get_request().form['magictoken']
             self.feed_current_data(magictoken)
@@ -1370,6 +1392,15 @@ TextsDirectory.register('welcome-logged',
 TextsDirectory.register('welcome-unlogged',
         N_('Welcome text on home page for unlogged users'))
 
+TextsDirectory.register('captcha-page',
+        N_('Explanation text on the CAPTCHA page'),
+        default = N_('''<h3>Verification</h3>
+
+<p>
+In order to proceed you need to complete this simple question.
+</p>'''))
+
+
 TextsDirectory.register('form-recorded',
         N_('Message when a form has been recorded'),
         hint = N_('Available variables: date, number'),
-- 
2.5.0