discourse/app/controllers/uploads_controller.rb

49 lines
1.5 KiB
Ruby
Raw Normal View History

2013-02-05 14:16:51 -05:00
class UploadsController < ApplicationController
before_filter :ensure_logged_in, except: [:show]
skip_before_filter :check_xhr, only: [:show]
2013-04-02 19:17:17 -04:00
2013-02-05 14:16:51 -05:00
def create
file = params[:file] || params[:files].first
2015-02-03 12:44:18 -05:00
filesize = file.tempfile.size
upload = Upload.create_for(current_user.id, file.tempfile, file.original_filename, filesize, { content_type: file.content_type })
if upload.errors.empty? && current_user.admin?
retain_hours = params[:retain_hours].to_i
upload.update_columns(retain_hours: retain_hours) if retain_hours > 0
end
# HACK FOR IE9 to prevent the "download dialog"
response.headers["Content-Type"] = "text/plain" if request.user_agent =~ /MSIE 9/
2014-04-14 16:55:57 -04:00
if upload.errors.empty?
render_serialized(upload, UploadSerializer, root: false)
else
render status: 422, text: upload.errors.full_messages
end
2013-02-05 14:16:51 -05:00
end
2013-06-04 18:34:53 -04:00
def show
return render_404 if !RailsMultisite::ConnectionManagement.has_db?(params[:site])
RailsMultisite::ConnectionManagement.with_connection(params[:site]) do |db|
return render_404 unless Discourse.store.internal?
return render_404 if SiteSetting.prevent_anons_from_downloading_files && current_user.nil?
if upload = Upload.find_by(sha1: params[:sha])
opts = { filename: upload.original_filename }
opts[:disposition] = 'inline' if params[:inline]
send_file(Discourse.store.path_for(upload), opts)
2014-04-14 16:55:57 -04:00
else
render_404
2014-04-14 16:55:57 -04:00
end
end
end
protected
def render_404
render nothing: true, status: 404
end
2013-02-05 14:16:51 -05:00
end