47 lines
1.1 KiB
Ruby
47 lines
1.1 KiB
Ruby
require 'fileutils'
|
|
require 'application'
|
|
require 'instiki_errors'
|
|
|
|
class FileController < ApplicationController
|
|
|
|
layout 'default'
|
|
|
|
def file
|
|
if have_file?
|
|
send_file(file_path)
|
|
else
|
|
logger.debug("File not found: #{file_path}")
|
|
# to template, which is a file upload form
|
|
end
|
|
end
|
|
|
|
private
|
|
|
|
def have_file?
|
|
sanitize_file_name
|
|
File.file?(file_path)
|
|
end
|
|
|
|
SANE_FILE_NAME = /[-_A-Za-z0-9]{1,255}/
|
|
|
|
def sanitize_file_name
|
|
raise Instiki::ValidationError.new("Invalid path: no file name") unless @file_name
|
|
unless @file_name =~ SANE_FILE_NAME
|
|
raise ValidationError.new("Invalid file name: '#{@file_name}'.\n" +
|
|
"Only latin characters, digits, underscores and dashes are accepted.")
|
|
end
|
|
end
|
|
|
|
def file_area
|
|
raise Instiki::ValidationError.new("Invalid path: no web name") unless @web_name
|
|
file_area = File.expand_path("#{@wiki.storage_path}/#{@web_name}")
|
|
FileUtils.mkdir_p(file_area) unless File.directory?(file_area)
|
|
file_area
|
|
end
|
|
|
|
def file_path
|
|
"#{file_area}/#{@file_name}"
|
|
end
|
|
|
|
end
|