func Verify(res http.ResponseWriter, req *http.Request, r render.Render, dbh *db.Dbh) { pk := req.FormValue("user_private_key") a := req.FormValue("file_album") album := dbh.GetAlbum(a) if album.Id > 0 && album.Privatekey == pk { return } if pk == "" || pk != utils.ImageCfg.SecretKey() { log.Printf("Upload failed: Invalid Private Key (%s)\n", pk) r.JSON(http.StatusUnauthorized, Response{"error": http.StatusUnauthorized, "code": "Invalid Private Key", "name": a}) return } if a == "" { log.Printf("Upload failed: Invalid Album Name (%s)\n", a) r.JSON(http.StatusUnauthorized, Response{"error": http.StatusUnauthorized, "code": "Invalid Album Name", "name": a}) return } log.Println("verify: good") return }
func ListDB(args martini.Params, su models.User, r render.Render, p *models.Page, dbh *db.Dbh) { images := dbh.GetAllImages() var album models.Album for _, image := range images { album = dbh.GetAlbum(image.Album) image.AlbumId = album.Id nImage := dbh.UpdateImage(image) log.Println(nImage) } return }
func QR(args martini.Params, su models.User, dbh *db.Dbh, session sessions.Session, r render.Render, res http.ResponseWriter, req *http.Request) { name := args["name"] album := dbh.GetAlbum(name) key := album.Privatekey private := album.Private if private && su.Id != album.User || album.Id == 0 { session.Set("flash", "Login Required") r.Redirect(strings.Join([]string{utils.AppCfg.Url(), "login"}, "/"), http.StatusFound) return } log.Printf("name: %s key: %s private: %t\n", name, key, private) file := createQR(name, key) dir := http.Dir(utils.ImageCfg.QR()) f, err := dir.Open(file) if err != nil { // discard the error? return } defer f.Close() fi, err := f.Stat() if err != nil { return } res.Header().Set("X-Content-Type-Options", "nosniff") res.Header().Set("Expires", utils.ExpiresHeader()) res.Header().Add("Content-Type", "image/png") http.ServeContent(res, req, file, fi.ModTime(), f) }
func UploadImage(w http.ResponseWriter, upload models.ImageUpload, req *http.Request, r render.Render, dbh *db.Dbh) { ur := &models.UploadResult{} rEmail := upload.Email rAlbum := upload.Album rPrivateKey := upload.PrivateKey fiName := upload.File.Filename upload_time := time.Now().Unix() ur.SetCode(200) ur.SetResult("success") ur.SetName(fiName) tmp_file := utils.ImageCfg.Root() + ur.GetName() if Exists(tmp_file) { log.Println("Error: File exists. (" + tmp_file + ")") ur.SetCode(2) ur.SetResult("File exists") r.JSON(500, ur) return } out, err := os.Create(tmp_file) if err != nil { log.Println("Error: Unable to open file.") ur.SetCode(500) ur.SetResult("Failed to open the file for writing.") r.JSON(500, ur) return } defer out.Close() fi, err := upload.File.Open() if err != nil { log.Println("fi err: ", err) ur.SetCode(500) ur.SetResult(err.Error()) r.JSON(500, ur) return } defer fi.Close() _, err = io.Copy(out, fi) if err != nil { log.Println("Error: Failed to copy file.") ur.SetCode(500) ur.SetResult("Failed to copy file to new location.") r.JSON(500, ur) return } log.Printf("tmp_file: %s\n", tmp_file) // Add image uploader to database dbh.AddUploader(models.Uploader{Email: rEmail, Timestamp: upload_time}) // Setup hashid to create unique file name var hid models.HashID hid.Init(utils.AppCfg.SecretKey(), 10) // Get user id user := dbh.GetUserByEmail(rEmail) log.Println("user: "******"uploader user: "******"album: ", album) nAlbum := dbh.GetAlbum(rAlbum) // Add image image := dbh.AddImage(models.Image{ Name: fiName, Album: rAlbum, User: user.Id, AlbumId: nAlbum.Id, Timestamp: upload_time}) // Add image id to hashid - seg 3 hid.AddId(int(image.Id)) // Add upload time to hashid - seg 4 hid.AddId(int(upload_time)) // Get file extension and create new file name extension := filepath.Ext(fiName) nname := hid.Encrypt() + extension log.Printf("New name: %s\n", nname) image.HashId = nname dbh.UpdateImage(image) // Rename file to new name hash_name := utils.ImageCfg.Root() + nname os.Rename(tmp_file, hash_name) ur.SetName(utils.AppCfg.Url() + "/image/" + nname) // Create Thumb tname := utils.ImageCfg.Thumbs() + nname if !Exists(string(tname)) { okc := make(chan bool, 1) utils.CreateThumb(okc, hash_name, tname, 150, 150) <-okc } log.Printf("%# v\n", pretty.Formatter(album)) log.Printf("%# v\n", image) log.Printf("%# v\n", pretty.Formatter(ur)) r.JSON(200, ur) }