From 69be2e64ef0d92de020ca1bc510ab37abf030196 Mon Sep 17 00:00:00 2001
From: Benjamin <ben@iddybiddygames.com>
Date: Wed, 20 Jun 2018 22:57:24 -0600
Subject: [PATCH 1/4] wip

---
 forms.py             |  2 +-
 templates/base.html  |  3 +--
 views/donateviews.py | 43 ++++++++++++++++++++++++++++++-------------
 3 files changed, 32 insertions(+), 16 deletions(-)

diff --git a/forms.py b/forms.py
index 9468f3008..d03d68f94 100755
--- a/forms.py
+++ b/forms.py
@@ -138,7 +138,7 @@ def clean_bid(self):
                 raise forms.ValidationError(
                     "This bid not open for new donations anymore.")
         except Exception as e:
-            raise forms.ValidationError("Bid does not exist.")
+            raise forms.ValidationError("Bid does not exist or is closed.")
         return bid
 
     def clean_amount(self):
diff --git a/templates/base.html b/templates/base.html
index 4e9c29e1d..b36c2edee 100644
--- a/templates/base.html
+++ b/templates/base.html
@@ -26,8 +26,7 @@
     <script type="application/javascript">
         $(document).ready(function() {
             $(".datetime").each(function() {
-                timestamp = Date.parse($(this).html());
-                time = new Date(timestamp);
+                var time = new Date(Date.parse($(this).html()));
                 $(this).html(time.format("mmmm dS, yyyy, h:MM:ss TT"));
             });
         });
diff --git a/views/donateviews.py b/views/donateviews.py
index 64cd6f582..9866364b0 100644
--- a/views/donateviews.py
+++ b/views/donateviews.py
@@ -44,21 +44,22 @@ def paypal_cancel(request):
 def paypal_return(request):
   return views_common.tracker_response(request, "tracker/paypal_return.html")
 
-@csrf_exempt
-def donate(request, event):
-  event = viewutil.get_event(event)
-  if event.locked:
-    raise Http404
+def process_form(request, event):
   bidsFormPrefix = "bidsform"
   prizeFormPrefix = "prizeForm"
   if request.method == 'POST':
-    commentform = forms.DonationEntryForm(event=event,data=request.POST)
+    commentform = forms.DonationEntryForm(event=event, data=request.POST)
     if commentform.is_valid():
-      prizesform = forms.PrizeTicketFormSet(amount=commentform.cleaned_data['amount'], data=request.POST, prefix=prizeFormPrefix)
-      bidsform = forms.DonationBidFormSet(amount=commentform.cleaned_data['amount'], data=request.POST, prefix=bidsFormPrefix)
+      prizesform = forms.PrizeTicketFormSet(amount=commentform.cleaned_data['amount'], data=request.POST,
+                                            prefix=prizeFormPrefix)
+      bidsform = forms.DonationBidFormSet(amount=commentform.cleaned_data['amount'], data=request.POST,
+                                          prefix=bidsFormPrefix)
       if bidsform.is_valid() and prizesform.is_valid():
         with transaction.atomic():
-          donation = models.Donation(amount=commentform.cleaned_data['amount'], timereceived=pytz.utc.localize(datetime.datetime.utcnow()), domain='PAYPAL', domainId=str(random.getrandbits(128)), event=event, testdonation=event.usepaypalsandbox)
+          donation = models.Donation(amount=commentform.cleaned_data['amount'],
+                                     timereceived=pytz.utc.localize(datetime.datetime.utcnow()), domain='PAYPAL',
+                                     domainId=str(random.getrandbits(128)), event=event,
+                                     testdonation=event.usepaypalsandbox)
           if commentform.cleaned_data['comment']:
             donation.comment = commentform.cleaned_data['comment']
             donation.commentstate = "PENDING"
@@ -80,9 +81,12 @@ def donate(request, event):
                 # suggest the same option at the exact same time
                 # also, I want to do case-insensitive comparison on the name
                 try:
-                  bid = models.Bid.objects.get(event=bid.event, speedrun=bid.speedrun, name__iexact=bidform.cleaned_data['customoptionname'], parent=bid)
+                  bid = models.Bid.objects.get(event=bid.event, speedrun=bid.speedrun,
+                                               name__iexact=bidform.cleaned_data['customoptionname'], parent=bid)
                 except models.Bid.DoesNotExist:
-                  bid = models.Bid.objects.create(event=bid.event, speedrun=bid.speedrun, name=bidform.cleaned_data['customoptionname'], parent=bid, state='PENDING', istarget=True)
+                  bid = models.Bid.objects.create(event=bid.event, speedrun=bid.speedrun,
+                                                  name=bidform.cleaned_data['customoptionname'], parent=bid,
+                                                  state='PENDING', istarget=True)
               donation.bids.add(models.DonationBid(bid=bid, amount=Decimal(bidform.cleaned_data['amount'])), bulk=False)
           for prizeform in prizesform:
             if 'prize' in prizeform.cleaned_data and prizeform.cleaned_data['prize']:
@@ -107,11 +111,13 @@ def donate(request, event):
         }
         # Create the form instance
         form = PayPalPaymentsForm(button_type="donate", sandbox=donation.event.usepaypalsandbox, initial=paypal_dict)
-        context = {"event": donation.event, "form": form }
-        return views_common.tracker_response(request, "tracker/paypal_redirect.html", context)
+        context = {"event": donation.event, "form": form}
+        return views_common.tracker_response(request, "tracker/paypal_redirect.html", context), None, None
     else:
       bidsform = forms.DonationBidFormSet(amount=Decimal('0.00'), data=request.POST, prefix=bidsFormPrefix)
+      bidsform.is_valid()
       prizesform = forms.PrizeTicketFormSet(amount=Decimal('0.00'), data=request.POST, prefix=prizeFormPrefix)
+      prizesform.is_valid()
   else:
     steamid = request.session.get('uid', None)
     donation_total = sum(models.Donation.objects.filter(steamid=steamid, transactionstate='COMPLETED', event=event).values_list('amount', flat=True)) if steamid else None
@@ -119,6 +125,17 @@ def donate(request, event):
     commentform = forms.DonationEntryForm(event=event)
     bidsform = forms.DonationBidFormSet(amount=Decimal('0.00'), prefix=bidsFormPrefix)
     prizesform = forms.PrizeTicketFormSet(amount=Decimal('0.00'), prefix=prizeFormPrefix)
+  return commentform, bidsform, prizesform
+
+@csrf_exempt
+@cache_page(300)
+def donate(request, event):
+  event = viewutil.get_event(event)
+  if event.locked:
+    raise Http404
+  commentform, bidsform, prizesform = process_form(request, event)
+  if not bidsform:  # redirect
+    return commentform
 
   def bid_parent_info(bid):
     if bid != None:

From bd843ebb844b075222f2c6e959b818526049113d Mon Sep 17 00:00:00 2001
From: Benjamin Cutler <benjamincutler@gamesdonequick.com>
Date: Sat, 23 Jun 2018 17:07:28 -0500
Subject: [PATCH 2/4] wip

---
 templates/admin/read_donations.html | 1 -
 1 file changed, 1 deletion(-)

diff --git a/templates/admin/read_donations.html b/templates/admin/read_donations.html
index 4bb9e86a5..191850f22 100644
--- a/templates/admin/read_donations.html
+++ b/templates/admin/read_donations.html
@@ -116,7 +116,6 @@
   row.append($("<td class='amount-column'>").append(makeAnchor(asMoney(donation['fields']['amount']), trackerAPI.createAdminEditURL('donation', id))));
   row.append($("<td class='donation-comment'>").append(safeHtml(donation['fields']['comment'])));
   row.append($("<td class='mod-comment'>").append(safeHtml(donation['fields']['modcomment'])));
-
   row.append($("<td class='button-column'>")
     .append(makeEditButton(row, donation, "Read", "Read on the Air", { readstate: "READ", commentstate: "APPROVED" }))
     .append(makeEditButton(row, donation, "Ignore", "Ignored", { readstate: "IGNORED", commentstate: "APPROVED" }))

From df2a290d52f18759e308d172299b132e900d6b62 Mon Sep 17 00:00:00 2001
From: Benjamin Cutler <benjamincutler@gamesdonequick.com>
Date: Fri, 29 Jun 2018 13:09:00 -0500
Subject: [PATCH 3/4] wip - do not use eval

---
 static/adminprocessing.js              | 2 +-
 templates/admin/process_donations.html | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/static/adminprocessing.js b/static/adminprocessing.js
index c1e1898dc..c4419e009 100644
--- a/static/adminprocessing.js
+++ b/static/adminprocessing.js
@@ -129,7 +129,7 @@ function makeEditButton(row, obj, text, resultText, fields) {
         if (status == 200) {
           $(row).children(".statuscell").html(resultText);
           
-          values = eval(response)[0];
+          values = JSON.parse(response)[0];
 
           for (var field in values['fields'])
           {
diff --git a/templates/admin/process_donations.html b/templates/admin/process_donations.html
index 164bf13cb..7a7576763 100644
--- a/templates/admin/process_donations.html
+++ b/templates/admin/process_donations.html
@@ -192,7 +192,7 @@
         "</thread>" +
         "<tbody");
 
-      var donations = eval(responseText);
+      var donations = JSON.parse(responseText);
 
       var language = $(partitionLanguageElem).val();
 

From 633f6923f76a6ceea4997e1de34b88ae8e68b9cb Mon Sep 17 00:00:00 2001
From: Alex Van Camp <vancamp.alex@gmail.com>
Date: Fri, 28 Sep 2018 22:07:03 -0500
Subject: [PATCH 4/4] feat(donateviews): include domain in postbackData (#34)

This is needed for our NodeCG graphics to play different animations for cash (`PAYPAL`) or item (`SCRAPTF`) donations. Without this, my code has to way to differentiate between these two donation types.
---
 views/donateviews.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/views/donateviews.py b/views/donateviews.py
index 9866364b0..d8508bf5a 100644
--- a/views/donateviews.py
+++ b/views/donateviews.py
@@ -240,7 +240,8 @@ def ipn(request):
         'amount': donation.amount,
         'donor__visibility': donation.donor.visibility,
         'donor__visiblename': donation.donor.visible_name(),
-        'new_total': agg['amount']
+        'new_total': agg['amount'],
+        'domain': donation.domain
       }
       postbackJSon = json.dumps(postbackData, ensure_ascii=False, cls=serializers.json.DjangoJSONEncoder).encode('utf-8')
       postbacks = models.PostbackURL.objects.filter(event=donation.event)