2013-02-06 03:16:51 +08:00
|
|
|
class UploadsController < ApplicationController
|
2013-09-07 01:18:42 +08:00
|
|
|
before_filter :ensure_logged_in, except: [:show]
|
2014-08-04 14:43:57 +08:00
|
|
|
skip_before_filter :check_xhr, only: [:show]
|
2013-04-03 07:17:17 +08:00
|
|
|
|
2013-02-06 03:16:51 +08:00
|
|
|
def create
|
|
|
|
file = params[:file] || params[:files].first
|
2015-02-04 01:44:18 +08:00
|
|
|
filesize = file.tempfile.size
|
2014-04-15 23:15:47 +08:00
|
|
|
upload = Upload.create_for(current_user.id, file.tempfile, file.original_filename, filesize, { content_type: file.content_type })
|
2013-06-15 15:54:49 +08:00
|
|
|
|
2015-01-29 02:33:11 +08:00
|
|
|
if upload.errors.empty? && current_user.admin?
|
2014-09-23 13:50:26 +08:00
|
|
|
retain_hours = params[:retain_hours].to_i
|
2015-01-29 02:33:11 +08:00
|
|
|
upload.update_columns(retain_hours: retain_hours) if retain_hours > 0
|
2014-09-23 13:50:26 +08:00
|
|
|
end
|
|
|
|
|
2015-01-29 02:33:11 +08:00
|
|
|
# HACK FOR IE9 to prevent the "download dialog"
|
|
|
|
response.headers["Content-Type"] = "text/plain" if request.user_agent =~ /MSIE 9/
|
|
|
|
|
2014-04-15 04:55:57 +08:00
|
|
|
if upload.errors.empty?
|
|
|
|
render_serialized(upload, UploadSerializer, root: false)
|
|
|
|
else
|
|
|
|
render status: 422, text: upload.errors.full_messages
|
|
|
|
end
|
2013-02-06 03:16:51 +08:00
|
|
|
end
|
2013-06-05 06:34:53 +08:00
|
|
|
|
2013-09-07 01:18:42 +08:00
|
|
|
def show
|
2014-05-14 08:51:09 +08:00
|
|
|
return render_404 if !RailsMultisite::ConnectionManagement.has_db?(params[:site])
|
|
|
|
|
2014-03-25 07:37:31 +08:00
|
|
|
RailsMultisite::ConnectionManagement.with_connection(params[:site]) do |db|
|
2014-05-14 08:51:09 +08:00
|
|
|
return render_404 unless Discourse.store.internal?
|
2014-09-10 00:40:11 +08:00
|
|
|
return render_404 if SiteSetting.prevent_anons_from_downloading_files && current_user.nil?
|
2013-09-07 01:18:42 +08:00
|
|
|
|
2015-05-19 18:31:12 +08:00
|
|
|
if upload = Upload.find_by(sha1: params[:sha])
|
|
|
|
opts = { filename: upload.original_filename }
|
2014-11-13 05:50:55 +08:00
|
|
|
opts[:disposition] = 'inline' if params[:inline]
|
2015-05-19 18:31:12 +08:00
|
|
|
send_file(Discourse.store.path_for(upload), opts)
|
2014-04-15 04:55:57 +08:00
|
|
|
else
|
2014-05-14 08:51:09 +08:00
|
|
|
render_404
|
2014-04-15 04:55:57 +08:00
|
|
|
end
|
2014-03-25 07:37:31 +08:00
|
|
|
end
|
2013-09-07 01:18:42 +08:00
|
|
|
end
|
|
|
|
|
2014-05-14 08:51:09 +08:00
|
|
|
protected
|
|
|
|
|
|
|
|
def render_404
|
|
|
|
render nothing: true, status: 404
|
|
|
|
end
|
|
|
|
|
2013-02-06 03:16:51 +08:00
|
|
|
end
|