diff --git a/main b/main
index dd458c0..2491f71 100644
--- a/main
+++ b/main
@@ -394,58 +394,6 @@ def apilogin():
"error": "https://http.cat/images/400.jpg"
}, 400
-@app.route("/api/post", methods=("GET", "POST"))
-def apipost():
- usersession = request.cookies.get("session_DO_NOT_SHARE")
- if usersession:
- if request.method == "POST":
-
- data = request.get_json()
- title = data["id"]
-
- if title == "":
- return {
- "error": "no title"
- }, 403
-
- if "file" not in request.files:
- return {
- "error": "no file"
- }, 403
-
- file = request.files["file"]
- if file.filename == "":
- return {
- "error": "no file"
- }, 403
-
- if not allowed_file(file.filename):
- return {
- "error": "invalid file format"
- }, 403
-
- filename = secure_filename(file.filename)
- finalfilename = secrets.token_hex(64) + filename
-
- file.save(os.path.join(UPLOAD_FOLDER, finalfilename))
- imgurl = "/cdn/" + finalfilename
-
- userCookie = get_session(usersession)
- user = get_user(userCookie["id"])
-
- if not user["banned"] == "0":
- return {
- "error": "banned"
- }, 403
-
- conn = get_db_connection()
- conn.execute("INSERT INTO posts (textstr, imageurl, creator, created) VALUES (?, ?, ?, ?)",
- (title, imgurl, userCookie["id"], str(time.time())))
- conn.commit()
- conn.close()
-
- return "success", 200
-
@app.route("/apidocs", methods=("GET", "POST"))
def apidocs():
usersession = request.cookies.get("session_DO_NOT_SHARE")
@@ -750,4 +698,4 @@ if __name__ == "__main__":
sock.bind(('', int(PORT)))
serve(app, sockets=[sock])
- print("[INFO] Server stopped")
\ No newline at end of file
+ print("[INFO] Server stopped")
diff --git a/templates/apidocs.html b/templates/apidocs.html
index 28c7118..5cb8f28 100644
--- a/templates/apidocs.html
+++ b/templates/apidocs.html
@@ -35,7 +35,7 @@
for API things that require authentication, you will need to set the session_DO_NOT_SHARE
cookie. the key might expire after 180 days.
GET /api/frontpage
- returns frontpage
- POST /api/post
- post ctas - authentication required
+ POST /post
- post ctas - authentication required
title
, being the title of the post and file
, being an image file.
Supported file extensions: "png", "apng", "jpg", "jpeg", "gif", "svg", "webp"
POST /api/comment
- comment on posts - authentication required
@@ -50,4 +50,4 @@