2017-01-13 07:34:21 +00:00
|
|
|
const path = require('path')
|
|
|
|
const config = require('../config.js')
|
|
|
|
const multer = require('multer')
|
|
|
|
const randomstring = require('randomstring')
|
|
|
|
const db = require('knex')(config.database)
|
2017-01-21 06:49:04 +00:00
|
|
|
const crypto = require('crypto')
|
2017-01-20 06:28:26 +00:00
|
|
|
const fs = require('fs')
|
2017-01-22 21:01:39 +00:00
|
|
|
const gm = require('gm')
|
2017-01-13 07:34:21 +00:00
|
|
|
|
|
|
|
let uploadsController = {}
|
|
|
|
|
|
|
|
const storage = multer.diskStorage({
|
|
|
|
destination: function (req, file, cb) {
|
|
|
|
cb(null, './' + config.uploads.folder + '/')
|
|
|
|
},
|
|
|
|
filename: function (req, file, cb) {
|
2017-01-14 08:50:18 +00:00
|
|
|
cb(null, randomstring.generate(config.uploads.fileLength) + path.extname(file.originalname))
|
2017-01-13 07:34:21 +00:00
|
|
|
}
|
|
|
|
})
|
|
|
|
|
|
|
|
const upload = multer({
|
|
|
|
storage: storage,
|
2017-01-18 23:38:13 +00:00
|
|
|
limits: { fileSize: config.uploads.maxSize }
|
2017-01-16 08:22:19 +00:00
|
|
|
}).array('files[]')
|
2017-01-13 07:34:21 +00:00
|
|
|
|
|
|
|
uploadsController.upload = function(req, res, next){
|
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
// Get the token
|
|
|
|
let token = req.headers.token
|
|
|
|
|
|
|
|
// If we're running in private and there's no token, error
|
2017-01-17 03:37:54 +00:00
|
|
|
if(config.private === true)
|
2017-01-30 01:51:54 +00:00
|
|
|
if(token === undefined) return res.status(401).json({ success: false, description: 'No token provided' })
|
|
|
|
|
2017-01-30 08:10:39 +00:00
|
|
|
// If there is no token then just leave it blank so the query fails
|
|
|
|
if(token === undefined) token = ''
|
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
db.table('users').where('token', token).then((user) => {
|
|
|
|
let userid
|
|
|
|
if(user.length > 0)
|
2017-01-30 07:42:15 +00:00
|
|
|
userid = user[0].id
|
2017-01-30 01:51:54 +00:00
|
|
|
|
|
|
|
// Check if user is trying to upload to an album
|
|
|
|
let album = undefined
|
|
|
|
if(userid !== undefined){
|
|
|
|
album = req.headers.albumid
|
|
|
|
if(album === undefined)
|
|
|
|
album = req.params.albumid
|
2017-01-13 07:34:21 +00:00
|
|
|
}
|
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
upload(req, res, function (err) {
|
|
|
|
if (err) {
|
|
|
|
console.error(err)
|
|
|
|
return res.json({
|
|
|
|
success: false,
|
|
|
|
description: err
|
|
|
|
})
|
|
|
|
}
|
2017-01-19 06:04:22 +00:00
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
if(req.files.length === 0) return res.json({ success: false, description: 'no-files' })
|
2017-01-19 06:34:48 +00:00
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
let files = []
|
|
|
|
let existingFiles = []
|
|
|
|
let iteration = 1
|
2017-01-19 06:34:48 +00:00
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
req.files.forEach(function(file) {
|
2017-01-19 06:34:48 +00:00
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
// Check if the file exists by checking hash and size
|
|
|
|
let hash = crypto.createHash('md5')
|
|
|
|
let stream = fs.createReadStream('./' + config.uploads.folder + '/' + file.filename)
|
2017-01-19 06:34:48 +00:00
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
stream.on('data', function (data) {
|
|
|
|
hash.update(data, 'utf8')
|
2017-01-21 06:49:04 +00:00
|
|
|
})
|
2017-01-19 06:34:48 +00:00
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
stream.on('end', function () {
|
|
|
|
let fileHash = hash.digest('hex') // 34f7a3113803f8ed3b8fd7ce5656ebec
|
|
|
|
|
|
|
|
db.table('files').where({
|
|
|
|
hash: fileHash,
|
|
|
|
size: file.size
|
|
|
|
}).then((dbfile) => {
|
|
|
|
|
|
|
|
if(dbfile.length !== 0){
|
|
|
|
uploadsController.deleteFile(file.filename).then(() => {}).catch((e) => console.error(e))
|
|
|
|
existingFiles.push(dbfile[0])
|
|
|
|
}else{
|
|
|
|
files.push({
|
|
|
|
name: file.filename,
|
|
|
|
original: file.originalname,
|
|
|
|
type: file.mimetype,
|
|
|
|
size: file.size,
|
|
|
|
hash: fileHash,
|
|
|
|
ip: req.ip,
|
|
|
|
albumid: album,
|
|
|
|
userid: userid,
|
|
|
|
timestamp: Math.floor(Date.now() / 1000)
|
|
|
|
})
|
|
|
|
}
|
2017-01-16 08:22:19 +00:00
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
if(iteration === req.files.length)
|
|
|
|
return uploadsController.processFilesForDisplay(req, res, files, existingFiles)
|
|
|
|
iteration++
|
2017-01-21 06:49:04 +00:00
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
}).catch(function(error) { console.log(error); res.json({success: false, description: 'error'}) })
|
|
|
|
})
|
|
|
|
})
|
|
|
|
})
|
|
|
|
}).catch(function(error) { console.log(error); res.json({success: false, description: 'error'}) })
|
2017-01-21 06:49:04 +00:00
|
|
|
}
|
|
|
|
|
2017-01-21 08:17:29 +00:00
|
|
|
uploadsController.processFilesForDisplay = function(req, res, files, existingFiles){
|
2017-01-21 06:49:04 +00:00
|
|
|
|
|
|
|
let basedomain = req.get('host')
|
|
|
|
for(let domain of config.domains)
|
|
|
|
if(domain.host === req.get('host'))
|
|
|
|
if(domain.hasOwnProperty('resolve'))
|
|
|
|
basedomain = domain.resolve
|
2017-01-21 20:24:20 +00:00
|
|
|
|
2017-01-21 06:49:04 +00:00
|
|
|
if(files.length === 0){
|
|
|
|
return res.json({
|
|
|
|
success: true,
|
|
|
|
files: existingFiles.map(file => {
|
|
|
|
return {
|
|
|
|
name: file.name,
|
|
|
|
size: file.size,
|
2017-01-21 20:21:29 +00:00
|
|
|
url: basedomain + '/' + file.name
|
2017-01-21 06:49:04 +00:00
|
|
|
}
|
2017-01-13 07:34:21 +00:00
|
|
|
})
|
2017-01-21 06:49:04 +00:00
|
|
|
})
|
|
|
|
}
|
2017-01-16 08:22:19 +00:00
|
|
|
|
2017-01-21 06:49:04 +00:00
|
|
|
db.table('files').insert(files).then(() => {
|
2017-01-13 07:34:21 +00:00
|
|
|
|
2017-01-21 06:49:04 +00:00
|
|
|
for(let efile of existingFiles) files.push(efile)
|
|
|
|
|
|
|
|
res.json({
|
|
|
|
success: true,
|
|
|
|
files: files.map(file => {
|
|
|
|
return {
|
|
|
|
name: file.name,
|
|
|
|
size: file.size,
|
2017-01-21 20:21:29 +00:00
|
|
|
url: basedomain + '/' + file.name
|
2017-01-21 06:49:04 +00:00
|
|
|
}
|
|
|
|
})
|
|
|
|
})
|
|
|
|
|
|
|
|
}).catch(function(error) { console.log(error); res.json({success: false, description: 'error'}) })
|
2017-01-13 07:34:21 +00:00
|
|
|
}
|
|
|
|
|
2017-01-20 06:28:26 +00:00
|
|
|
uploadsController.delete = function(req, res){
|
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
let token = req.headers.token
|
|
|
|
if(token === undefined) return res.status(401).json({ success: false, description: 'No token provided' })
|
2017-01-20 06:28:26 +00:00
|
|
|
|
|
|
|
let id = req.body.id
|
|
|
|
if(id === undefined || id === '')
|
|
|
|
return res.json({ success: false, description: 'No file specified' })
|
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
db.table('users').where('token', token).then((user) => {
|
|
|
|
if(user.length === 0) return res.status(401).json({ success: false, description: 'Invalid token'})
|
2017-01-20 06:28:26 +00:00
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
db.table('files')
|
|
|
|
.where('id', id)
|
|
|
|
.where(function(){
|
2017-01-30 07:42:15 +00:00
|
|
|
if(user[0].username !== 'root')
|
|
|
|
this.where('userid', user[0].id)
|
2017-01-20 06:28:26 +00:00
|
|
|
})
|
2017-01-30 01:51:54 +00:00
|
|
|
.then((file) => {
|
|
|
|
|
|
|
|
uploadsController.deleteFile(file[0].name).then(() => {
|
|
|
|
db.table('files').where('id', id).del().then(() =>{
|
|
|
|
return res.json({ success: true })
|
|
|
|
}).catch(function(error) { console.log(error); res.json({success: false, description: 'error'}) })
|
|
|
|
}).catch((e) => {
|
|
|
|
console.log(e.toString())
|
|
|
|
db.table('files').where('id', id).del().then(() =>{
|
|
|
|
return res.json({ success: true })
|
|
|
|
}).catch(function(error) { console.log(error); res.json({success: false, description: 'error'}) })
|
|
|
|
})
|
2017-01-20 06:28:26 +00:00
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
}).catch(function(error) { console.log(error); res.json({success: false, description: 'error'}) })
|
2017-01-20 06:28:26 +00:00
|
|
|
}).catch(function(error) { console.log(error); res.json({success: false, description: 'error'}) })
|
2017-01-30 01:51:54 +00:00
|
|
|
|
2017-01-20 06:28:26 +00:00
|
|
|
}
|
|
|
|
|
2017-01-21 06:49:04 +00:00
|
|
|
uploadsController.deleteFile = function(file){
|
|
|
|
|
|
|
|
return new Promise(function(resolve, reject){
|
|
|
|
fs.stat('./' + config.uploads.folder + '/' + file, function (err, stats) {
|
|
|
|
if (err) { return reject(err) }
|
|
|
|
fs.unlink('./' + config.uploads.folder + '/' + file, function(err){
|
|
|
|
if (err) { return reject(err) }
|
|
|
|
return resolve()
|
|
|
|
})
|
|
|
|
})
|
|
|
|
})
|
|
|
|
|
|
|
|
}
|
|
|
|
|
2017-01-16 07:21:46 +00:00
|
|
|
uploadsController.list = function(req, res){
|
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
let token = req.headers.token
|
|
|
|
if(token === undefined) return res.status(401).json({ success: false, description: 'No token provided' })
|
2017-01-16 07:21:46 +00:00
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
db.table('users').where('token', token).then((user) => {
|
|
|
|
if(user.length === 0) return res.status(401).json({ success: false, description: 'Invalid token'})
|
2017-01-21 08:17:29 +00:00
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
let offset = req.params.page
|
|
|
|
if(offset === undefined) offset = 0
|
2017-01-22 21:01:39 +00:00
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
db.table('files')
|
|
|
|
.where(function(){
|
|
|
|
if(req.params.id === undefined)
|
|
|
|
this.where('id', '<>', '')
|
|
|
|
else
|
|
|
|
this.where('albumid', req.params.id)
|
|
|
|
})
|
|
|
|
.where(function(){
|
2017-01-30 07:42:15 +00:00
|
|
|
if(user[0].username !== 'root')
|
|
|
|
this.where('userid', user[0].id)
|
2017-01-30 01:51:54 +00:00
|
|
|
})
|
|
|
|
.orderBy('id', 'DESC')
|
|
|
|
.limit(25)
|
|
|
|
.offset(25 * offset)
|
|
|
|
.then((files) => {
|
|
|
|
db.table('albums').then((albums) => {
|
|
|
|
|
|
|
|
let basedomain = req.get('host')
|
|
|
|
for(let domain of config.domains)
|
|
|
|
if(domain.host === req.get('host'))
|
|
|
|
if(domain.hasOwnProperty('resolve'))
|
|
|
|
basedomain = domain.resolve
|
|
|
|
|
|
|
|
for(let file of files){
|
|
|
|
file.file = basedomain + '/' + file.name
|
|
|
|
file.date = new Date(file.timestamp * 1000)
|
|
|
|
file.date = file.date.getFullYear() + '-' + (file.date.getMonth() + 1) + '-' + file.date.getDate() + ' ' + (file.date.getHours() < 10 ? '0' : '') + file.date.getHours() + ':' + (file.date.getMinutes() < 10 ? '0' : '') + file.date.getMinutes() + ':' + (file.date.getSeconds() < 10 ? '0' : '') + file.date.getSeconds()
|
|
|
|
|
|
|
|
file.album = ''
|
|
|
|
|
|
|
|
if(file.albumid !== undefined)
|
|
|
|
for(let album of albums)
|
|
|
|
if(file.albumid === album.id)
|
|
|
|
file.album = album.name
|
|
|
|
|
|
|
|
if(config.uploads.generateThumbnails === true){
|
|
|
|
|
|
|
|
let extensions = ['.jpg', '.jpeg', '.bmp', '.gif', '.png']
|
|
|
|
for(let ext of extensions){
|
|
|
|
if(path.extname(file.name) === ext){
|
|
|
|
|
|
|
|
file.thumb = basedomain + '/thumbs/' + file.name.slice(0, -4) + '.png'
|
|
|
|
|
|
|
|
let thumbname = path.join(__dirname, '..', 'uploads', 'thumbs') + '/' + file.name.slice(0, -4) + '.png'
|
|
|
|
fs.access(thumbname, function(err) {
|
|
|
|
if (err && err.code === 'ENOENT') {
|
|
|
|
// File doesnt exist
|
|
|
|
|
|
|
|
let size = {
|
|
|
|
width: 200,
|
|
|
|
height: 200
|
|
|
|
}
|
|
|
|
|
|
|
|
gm('./' + config.uploads.folder + '/' + file.name)
|
|
|
|
.resize(size.width, size.height + '>')
|
|
|
|
.gravity('Center')
|
|
|
|
.extent(size.width, size.height)
|
|
|
|
.background('transparent')
|
|
|
|
.write(thumbname, function (error) {
|
|
|
|
if (error) console.log('Error - ', error)
|
|
|
|
})
|
|
|
|
}
|
|
|
|
})
|
|
|
|
}
|
2017-01-22 21:01:39 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
2017-01-18 06:29:46 +00:00
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
return res.json({
|
|
|
|
success: true,
|
|
|
|
files
|
|
|
|
})
|
2017-01-16 07:21:46 +00:00
|
|
|
|
2017-01-30 01:51:54 +00:00
|
|
|
}).catch(function(error) { console.log(error); res.json({success: false, description: 'error'}) })
|
2017-01-22 21:01:39 +00:00
|
|
|
}).catch(function(error) { console.log(error); res.json({success: false, description: 'error'}) })
|
2017-01-30 01:51:54 +00:00
|
|
|
|
|
|
|
})
|
2017-01-16 07:21:46 +00:00
|
|
|
}
|
|
|
|
|
2017-01-13 07:34:21 +00:00
|
|
|
module.exports = uploadsController
|