From 37bff46f33d5f64fb60177279f7c4a14a15bb89e Mon Sep 17 00:00:00 2001
From: rubenwardy <rw@rubenwardy.com>
Date: Sun, 26 May 2024 15:21:57 +0100
Subject: [PATCH] Add remove profile picture button

---
 app/blueprints/users/profile.py       | 12 ++++++++++++
 app/templates/users/profile_edit.html |  8 ++++++--
 2 files changed, 18 insertions(+), 2 deletions(-)

diff --git a/app/blueprints/users/profile.py b/app/blueprints/users/profile.py
index cb18fae8..1a327ead 100644
--- a/app/blueprints/users/profile.py
+++ b/app/blueprints/users/profile.py
@@ -259,6 +259,18 @@ def user_check_forums(username):
 	return redirect(url_for("tasks.check", id=task.id, r=next_url))
 
 
+@bp.route("/users/<username>/remove-profile-pic/", methods=["POST"])
+@login_required
+def user_remove_profile_pic(username):
+	user = User.query.filter_by(username=username).one_or_404()
+	if current_user != user and not current_user.rank.at_least(UserRank.MODERATOR):
+		abort(403)
+
+	user.profile_pic = None
+	db.session.commit()
+	return redirect(url_for("users.profile_edit", username=username))
+
+
 @bp.route("/user/stats/")
 @login_required
 def statistics_redirect():
diff --git a/app/templates/users/profile_edit.html b/app/templates/users/profile_edit.html
index 51ce27f5..953923c3 100644
--- a/app/templates/users/profile_edit.html
+++ b/app/templates/users/profile_edit.html
@@ -22,18 +22,22 @@
 	</div>
 	<div class="col">
 		{% if user.forums_username %}
-			<form method="post" action="{{ url_for('users.user_check_forums', username=user.username) }}" class="" style="display:inline-block;">
+			<form method="post" action="{{ url_for('users.user_check_forums', username=user.username) }}" class="me-2" style="display:inline-block;">
 				<input type="hidden" name="csrf_token" value="{{ csrf_token() }}" />
 				<input type="submit" class="btn btn-primary" value="{{  _('Import from forums') }}" />
 			</form>
 		{% endif %}
 		{% if user.profile_pic %}
+			<form method="post" action="{{ url_for('users.user_remove_profile_pic', username=user.username) }}" class="me-2" style="display:inline-block;">
+				<input type="hidden" name="csrf_token" value="{{ csrf_token() }}" />
+				<input type="submit" class="btn btn-secondary" value="{{  _('Remove profile picture') }}" />
+			</form>
 		{% elif user.email %}
 			<a class="btn btn-primary" href="https://en.gravatar.com/">
 				Gravatar
 			</a>
 		{% else %}
-			<a class="btn btn-primary disabled"
+			<a class="btn btn-secondary disabled"
 					data-toggle="tooltip" data-placement="bottom"
 					title="Please add an email address to use Gravatar"
 					style="pointer-events: all;">