get '/site_files/new_page' do require_login erb :'site_files/new_page' end # Redirect from original path get '/site_files/new' do require_login redirect '/site_files/new_page' end post '/site_files/create' do require_login @errors = [] filename = params[:pagefilename] || params[:filename] filename.gsub!(/[^a-zA-Z0-9_\-.]/, '') redirect_uri = '/dashboard' redirect_uri += "?dir=#{Rack::Utils.escape params[:dir]}" if params[:dir] if filename.nil? || filename.strip.empty? flash[:error] = 'You must provide a file name.' redirect redirect_uri end name = "#{filename}" name = "#{params[:dir]}/#{name}" if params[:dir] name = current_site.scrubbed_path name if current_site.file_exists?(name) flash[:error] = %{Web page "#{name}" already exists! Choose another name.} redirect redirect_uri end extname = File.extname name unless extname.match /^\.#{Site::EDITABLE_FILE_EXT}/i flash[:error] = "Must be an text editable file type (#{Site::VALID_EDITABLE_EXTENSIONS.join(', ')})." redirect redirect_uri end site_file = current_site.site_files_dataset.where(path: name).first if site_file flash[:error] = 'File already exists, cannot create.' redirect redirect_uri end if extname.match(/^\.html|^\.htm/i) current_site.install_new_html_file name else file_path = current_site.files_path(name) FileUtils.touch file_path File.chmod 0640, file_path site_file ||= SiteFile.new site_id: current_site.id, path: name site_file.set_all( size: 0, sha1_hash: Digest::SHA1.hexdigest(''), updated_at: Time.now ) site_file.save end flash[:success] = %{#{name} was created! Click here to edit it.} redirect redirect_uri end def file_upload_response(error=nil) http_error_code = 406 flash[:error] = error if error if params[:from_button] query_string = params[:dir] ? "?"+Rack::Utils.build_query(dir: params[:dir]) : '' redirect "/dashboard#{query_string}" else halt http_error_code, error if error halt 200, 'File(s) successfully uploaded.' end end post '/site_files/upload' do require_login @errors = [] http_error_code = 406 if params[:files].nil? file_upload_response "Uploaded files were not seen by the server, cancelled. We don't know what's causing this yet. Please contact us so we can help fix it. Thanks!" end params[:files].each_with_index do |file,i| dir_name = '' dir_name = params[:dir] if params[:dir] unless params[:file_paths].nil? || params[:file_paths].empty? || params[:file_paths].length == 0 file_path = params[:file_paths].select {|file_path| file[:filename] == Pathname(file_path).basename.to_s }.first unless file_path.nil? dir_name += '/' + Pathname(file_path).dirname.to_s end end file[:filename] = "#{dir_name}/#{file[:filename]}" if current_site.file_size_too_large? file[:tempfile].size file_upload_response "#{file[:filename]} is too large, upload cancelled." end if !current_site.okay_to_upload? file file_upload_response %{#{file[:filename]}: file type (or content in file) is only supported by supporter accounts. Why We Do This} end end uploaded_size = params[:files].collect {|f| f[:tempfile].size}.inject{|sum,x| sum + x } if current_site.file_size_too_large? uploaded_size file_upload_response "File(s) do not fit in your available space, upload cancelled." end if current_site.too_many_files? params[:files].length file_upload_response "Too many files, cannot upload" end results = current_site.store_files params[:files] file_upload_response end post '/site_files/delete' do require_login current_site.delete_file params[:filename] flash[:success] = "Deleted #{params[:filename]}." dirname = Pathname(params[:filename]).dirname dir_query = dirname.nil? || dirname.to_s == '.' ? '' : "?dir=#{Rack::Utils.escape dirname}" redirect "/dashboard#{dir_query}" end get '/site_files/:username.zip' do |username| require_login zipfile_path = current_site.files_zip content_type 'application/octet-stream' attachment "neocities-#{current_site.username}.zip" send_file zipfile_path end get '/site_files/download/:filename' do |filename| require_login content_type 'application/octet-stream' attachment filename current_site.get_file filename end get %r{\/site_files\/text_editor\/(.+)} do require_login @filename = params[:captures].first extname = File.extname @filename @ace_mode = case extname when /htm|html/ then 'html' when /js/ then 'javascript' when /md/ then 'markdown' when /css/ then 'css' else nil end begin @file_data = current_site.get_file @filename rescue Errno::ENOENT flash[:error] = 'We could not find the requested file.' redirect '/dashboard' rescue Errno::EISDIR flash[:error] = 'Cannot edit a directory.' redirect '/dashboard' end erb :'site_files/text_editor' end post %r{\/site_files\/save\/(.+)} do require_login_ajax filename = params[:captures].first tempfile = Tempfile.new 'neocities_saving_file' input = request.body.read tempfile.set_encoding input.encoding tempfile.write input tempfile.close if current_site.file_size_too_large? tempfile.size halt 'File is too large to fit in your space, it has NOT been saved. You will need to reduce the size or upgrade to a new plan.' end current_site.store_files [{filename: filename, tempfile: tempfile}] 'ok' end get '/site_files/allowed_types' do erb :'site_files/allowed_types' end get '/site_files/mount_info' do erb :'site_files/mount_info' end