Browse Source

change /storage routes to use slugs over filenames (HTTP POST).

stable
Craig Oates 2 years ago
parent
commit
104ac264a8
  1. 23
      src/web.lisp

23
src/web.lisp

@ -769,7 +769,7 @@
(utils:set-alert "File with that name already exists. File not saved.") (utils:set-alert "File with that name already exists. File not saved.")
(redirect "/storage/manage")) (redirect "/storage/manage"))
(t (storage:store-file "" "media" file-name storage-file) (t (storage:store-file "" "media" (utils:slugify file-name) storage-file)
(nera:add-storage-file file-name (nera:add-storage-file file-name
(utils:slugify file-name) (utils:slugify file-name)
(caddr storage-file)) (caddr storage-file))
@ -831,12 +831,12 @@
(redirect "/storage/manage")) (redirect "/storage/manage"))
(t (storage:rename-content-file (t (storage:rename-content-file
"" "media" (files::name-of (nera:get-storage-file :slug slug)) "" "media" (files::slug-of (nera:get-storage-file :slug slug))
new-file-name) (utils:slugify new-file-name))
(nera:rename-storage-file (nera:rename-storage-file
(files::name-of (nera:get-storage-file :slug slug)) (files::name-of (nera:get-storage-file :slug slug))
new-file-name) new-file-name)
(utils:set-alert "File uploaded.") (utils:set-alert "File renamed.")
(redirect "/storage/manage"))) (redirect "/storage/manage")))
;; Not Authorised ;; Not Authorised
(progn (progn
@ -844,28 +844,29 @@
(redirect "/login")))))) (redirect "/login"))))))
;; TODO: FINISH WORKING ON /STORAGE/DELETE DEFROUTE -- NEED TO TEST IT. ;; TODO: FINISH WORKING ON /STORAGE/DELETE DEFROUTE -- NEED TO TEST IT.
(defroute ("/storage/delete/:slug" :method :POST) () (defroute ("/storage/delete/:slug" :method :POST) (&key slug)
(destructuring-bind (destructuring-bind
(&key authenticity-token &allow-other-keys) (&key authenticity-token &allow-other-keys)
(utils:request-params (lack.request:request-body-parameters ningle:*request*)) (utils:request-params (lack.request:request-body-parameters ningle:*request*))
(step
(cond ((not (string= authenticity-token (auth:csrf-token))) (cond ((not (string= authenticity-token (auth:csrf-token)))
`(,+forbidden+ (:content-type "text/plain") ("Denied"))) `(,+forbidden+ (:content-type "text/plain") ("Denied")))
(t (hermetic:auth (t (hermetic:auth
(:administrator) (:administrator)
;; Authorised ;; Authorised
(cond ((and (null (storage:file-exists-p "" "media" :slug slug)) (cond ((and (null (storage:file-exists-p "" "media" slug))
(null (nera:get-storage-file :slug slug))) (null (nera:get-storage-file :slug slug)))
(utils:set-alert "Unable to find file. Nothing deleted.") (utils:set-alert "Unable to find file. Nothing deleted.")
(redirect "/storage/manage")) (redirect "/storage/manage"))
((and (storage:file-exists-p "" "media" :slug slug) ((and (not (null (storage:file-exists-p "" "media" slug)))
(null (nera:get-storage-file :slug slug))) (null (nera:get-storage-file :slug slug)))
(utils:set-alert "Unable to entry in database. Delete file from system.") (utils:set-alert "Unable to find entry in database. Deleted file from system.")
(storage:remove-file "" "media" slug) (storage:remove-file "" "media" slug)
(redirect "/storage/manage")) (redirect "/storage/manage"))
((and (null (storage:file-exists-p "" "media" :slug slug)) ((and (null (storage:file-exists-p "" "media" slug))
((nera:get-storage-file :slug slug))) (not (null (nera:get-storage-file :slug slug))))
(utils:set-alert "Unable to find file. Deleted entry from database.") (utils:set-alert "Unable to find file. Deleted entry from database.")
(nera:delete-storage-file :slug slug) (nera:delete-storage-file :slug slug)
(redirect "/storage/manage")) (redirect "/storage/manage"))
@ -878,7 +879,7 @@
(redirect "/storage/manage"))) (redirect "/storage/manage")))
;; Not Authorised ;; Not Authorised
(progn (utils:set-alert "You are not authorised to delete page.") (progn (utils:set-alert "You are not authorised to delete page.")
(redirect "/login"))))))) (redirect "/login"))))))))
;; ;;
;; Error pages ;; Error pages

Loading…
Cancel
Save