Spaces:
Running
Running
File size: 2,648 Bytes
519a20c |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 |
import fs from 'node:fs';
import path from 'node:path';
import express from 'express';
import sanitize from 'sanitize-filename';
import { dimensions, invalidateThumbnail } from './thumbnails.js';
import { getImages } from '../util.js';
import { getFileNameValidationFunction } from '../middleware/validateFileName.js';
export const router = express.Router();
router.post('/all', function (request, response) {
const images = getImages(request.user.directories.backgrounds);
const config = { width: dimensions.bg[0], height: dimensions.bg[1] };
response.json({ images, config });
});
router.post('/delete', getFileNameValidationFunction('bg'), function (request, response) {
if (!request.body) return response.sendStatus(400);
if (request.body.bg !== sanitize(request.body.bg)) {
console.error('Malicious bg name prevented');
return response.sendStatus(403);
}
const fileName = path.join(request.user.directories.backgrounds, sanitize(request.body.bg));
if (!fs.existsSync(fileName)) {
console.error('BG file not found');
return response.sendStatus(400);
}
fs.unlinkSync(fileName);
invalidateThumbnail(request.user.directories, 'bg', request.body.bg);
return response.send('ok');
});
router.post('/rename', function (request, response) {
if (!request.body) return response.sendStatus(400);
const oldFileName = path.join(request.user.directories.backgrounds, sanitize(request.body.old_bg));
const newFileName = path.join(request.user.directories.backgrounds, sanitize(request.body.new_bg));
if (!fs.existsSync(oldFileName)) {
console.error('BG file not found');
return response.sendStatus(400);
}
if (fs.existsSync(newFileName)) {
console.error('New BG file already exists');
return response.sendStatus(400);
}
fs.copyFileSync(oldFileName, newFileName);
fs.unlinkSync(oldFileName);
invalidateThumbnail(request.user.directories, 'bg', request.body.old_bg);
return response.send('ok');
});
router.post('/upload', function (request, response) {
if (!request.body || !request.file) return response.sendStatus(400);
const img_path = path.join(request.file.destination, request.file.filename);
const filename = request.file.originalname;
try {
fs.copyFileSync(img_path, path.join(request.user.directories.backgrounds, filename));
fs.unlinkSync(img_path);
invalidateThumbnail(request.user.directories, 'bg', filename);
response.send(filename);
} catch (err) {
console.error(err);
response.sendStatus(500);
}
});
|