HTML escape description to prevent code injection onto page

[selectricity-live] / app / models / selectricity_service.rb

diff --git a/app/models/selectricity_service.rb b/app/models/selectricity_service.rb
index c0adc8a7b438242dda11225d6099a20d176497f7..3f3e42ed4001796346d06d0278b0f8a8f704dd44 100644 (file)
--- a/app/models/selectricity_service.rb
+++ b/app/models/selectricity_service.rb
@@ -2,8 +2,37 @@ require 'action_controller/integration'
 
 class SelectricityService < ActionWebService::Base
   web_service_api SelectricityAPI
-  def cast_quickvote(election_id, vote_id, vote_list)
-    #Obviously not implemented
+  def cast_quickvote(election_name, voter_id, vote_list)
+    election = QuickVote.ident_to_quickvote election_name
+    if election
+      voter = QuickVoter.new
+      voter.election = election
+      voter.ipaddress = "XMLRPC Request"
+      voter.session_id = "XMLRPC:#{voter_id}"
+      voter.vote=Vote.new
+      voter.vote.votes=vote_list[0]
+      voter.vote.time = Time.now
+      voter.save!
+      voter.vote.confirm!
+      voter.save!
+    end
+  end
+  def quickvote_candidate_ids_to_names(shortname, id_list)
+    qv=QuickVote.ident_to_quickvote(shortname)
+    candidates={}
+    return [] unless qv
+    qv.results
+    qv.candidates.each {|c| candidates[c.id] = c}
+    results=[]
+    id_list.each { |id|
+      name=candidates[id]
+      if name
+        results << name
+      else
+        results << ""
+      end
+    }
+    results
   end
   def get_quickvote_results(shortname)
     #TODO: Validate shortname
@@ -20,10 +49,32 @@ class SelectricityService < ActionWebService::Base
     result.condorcet_winners=qv.condorcet_result.winners
     result.ssd_winners=qv.ssd_result.winners
     result.borda_winners=qv.borda_result.winners
+    result
+  end
+  def get_quickvote_candidate_map(shortname)
+    qv=QuickVote.ident_to_quickvote(shortname)
+    result=CandidateMap.new
+    result.errors=[]
+    unless qv
+      result.errors << "No quickvote with name #{shortname} found!"
+      return result
+    end
     candidates={}
     qv.candidates.each {|c| candidates[c.id] = c.name}
     result.candidate_ids=candidates.keys
     result.candidate_names=candidates.values
     result
   end
+  def get_quickvote_votes(shortname)
+    qv=QuickVote.ident_to_quickvote(shortname)
+    votes=Array.new
+    unless qv
+      return result
+    end
+    qv.votes.each  do |vote|
+      votes << VoteInfo.new(:voter_id => vote.voter.id, :voter_ipaddress => vote.voter.ipaddress, :vote_time => vote.time.to_i)
+    end
+    return votes
+  end
+   
 end