1. Forum
  2. DOVE-Net
  3. Synchronet Programming

  • web/root/api/files.ssjs

    From Rob Swindell to Git commit to sbbs/master on Monday, September 07, 2020 00:33:22
    https://gitlab.synchro.net/sbbs/sbbs/-/commit/a03cd7dfe8fd3ac0d6322348
    Modified Files:
    web/root/api/files.ssjs
    Log Message:
    Use User.downloaded_file() to do "all the things"

    The User.downloaded_file() method has been enhanced to accept a directory
    code and a filename to do "all the things" expected after a file has been successfully downloaded. Use the method.
  • From Rob Swindell to Git commit to sbbs/master on Monday, September 07, 2020 00:33:22
    https://gitlab.synchro.net/sbbs/sbbs/-/commit/aa48840eb066aac1c7880f85
    Modified Files:
    web/root/api/files.ssjs
    Log Message:
    Prevent download if !dir is_exempt and file credits > user
    total credits.
    Set an 'error' property on reply if file not found or not
    enough credits.
  • From Rob Swindell to Git commit to sbbs/master on Monday, September 07, 2020 00:33:22
    https://gitlab.synchro.net/sbbs/sbbs/-/commit/abef8a34f14aa8db1fee4b20
    Modified Files:
    web/root/api/files.ssjs
    Log Message:
    Don't allow downloads form non-accessible directories.

    Double-check that the user has access to both the directory and the containing library before allowing a download a file.