diff --git a/main b/main index dd458c0..2491f71 100644 --- a/main +++ b/main @@ -394,58 +394,6 @@ def apilogin(): "error": "https://http.cat/images/400.jpg" }, 400 -@app.route("/api/post", methods=("GET", "POST")) -def apipost(): - usersession = request.cookies.get("session_DO_NOT_SHARE") - if usersession: - if request.method == "POST": - - data = request.get_json() - title = data["id"] - - if title == "": - return { - "error": "no title" - }, 403 - - if "file" not in request.files: - return { - "error": "no file" - }, 403 - - file = request.files["file"] - if file.filename == "": - return { - "error": "no file" - }, 403 - - if not allowed_file(file.filename): - return { - "error": "invalid file format" - }, 403 - - filename = secure_filename(file.filename) - finalfilename = secrets.token_hex(64) + filename - - file.save(os.path.join(UPLOAD_FOLDER, finalfilename)) - imgurl = "/cdn/" + finalfilename - - userCookie = get_session(usersession) - user = get_user(userCookie["id"]) - - if not user["banned"] == "0": - return { - "error": "banned" - }, 403 - - conn = get_db_connection() - conn.execute("INSERT INTO posts (textstr, imageurl, creator, created) VALUES (?, ?, ?, ?)", - (title, imgurl, userCookie["id"], str(time.time()))) - conn.commit() - conn.close() - - return "success", 200 - @app.route("/apidocs", methods=("GET", "POST")) def apidocs(): usersession = request.cookies.get("session_DO_NOT_SHARE") @@ -750,4 +698,4 @@ if __name__ == "__main__": sock.bind(('', int(PORT))) serve(app, sockets=[sock]) - print("[INFO] Server stopped") \ No newline at end of file + print("[INFO] Server stopped") diff --git a/templates/apidocs.html b/templates/apidocs.html index 28c7118..5cb8f28 100644 --- a/templates/apidocs.html +++ b/templates/apidocs.html @@ -35,7 +35,7 @@ for API things that require authentication, you will need to set the session_DO_NOT_SHARE cookie. the key might expire after 180 days.

GET /api/frontpage - returns frontpage

- POST /api/post - post ctas - authentication required
+ POST /post - post ctas - authentication required
title, being the title of the post and file, being an image file.
Supported file extensions: "png", "apng", "jpg", "jpeg", "gif", "svg", "webp"

POST /api/comment - comment on posts - authentication required
@@ -50,4 +50,4 @@ - \ No newline at end of file +