archive/sanifae
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Added more file extensions

Browse source
This commit is contained in:
Xodrium 2023-02-10 19:12:57 -05:00
parent 2b8158f666
commit c725313525
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
src/lib/db/db.js
View file

@ -6,6 +6,8 @@ const AUTH_ACTIONS = [
'vote' 'vote'
]; ];
const fileSizeLimit = 1024*1024*5;
import sqlite3 from 'sqlite3' import sqlite3 from 'sqlite3'
import { open } from 'sqlite' import { open } from 'sqlite'
import { hash, compare } from 'bcrypt' import { hash, compare } from 'bcrypt'
@ -248,14 +250,14 @@ backend.token = async ({cookies}) => {
backend.fileCreate = async({img, extension}) => { backend.fileCreate = async({img, extension}) => {
const imgHash = createHash('md5').update(img).digest('hex'); const imgHash = createHash('md5').update(img).digest('hex');
let lengthCheck = checkLength(img,'Image',0,1024*1024*5); let lengthCheck = checkLength(img,'Image',fileSizeLimit);
if (lengthCheck) if (lengthCheck)
return lengthCheck; return lengthCheck;
const extensionSafe = extension.replace(/(\s+)/g, '\\$1'); const extensionSafe = extension.replace(/(\s+)/g, '\\$1');
if (extensionSafe != 'png' && extensionSafe != 'jpg' && extensionSafe != 'svg' ) if (extensionSafe != 'png' && extensionSafe != 'jpg' && extensionSafe != 'svg' || extensionSafe != 'gif')
return { success: 'Illegal file extension.' }; return { success: 'Illegal file extension.' };
writeFile(`${process.cwd()}/db/post-${imgHash}.${extensionSafe}`,img,{encoding: 'base64'}); writeFile(`${process.cwd()}/db/post-${imgHash}.${extensionSafe}`,img,{encoding: 'base64'});