• web/root/api/files.ssjs

    From Rob Swindell@1:103/705 to Git commit to sbbs/master on Mon Sep 7 00:33:22 2020
    https://gitlab.synchro.net/sbbs/sbbs/-/commit/a03cd7dfe8fd3ac0d6322348
    Modified Files:
    web/root/api/files.ssjs
    Log Message:
    Use User.downloaded_file() to do "all the things"The User.downloaded_file() method has been enhanced to accept a directorycode and a filename to do "all the things" expected after a file has beensuccessfully downloaded. Use the method.
    --- SBBSecho 3.11-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Rob Swindell@1:103/705 to Git commit to sbbs/master on Mon Sep 7 00:33:22 2020
    https://gitlab.synchro.net/sbbs/sbbs/-/commit/aa48840eb066aac1c7880f85
    Modified Files:
    web/root/api/files.ssjs
    Log Message:
    Prevent download if !dir is_exempt and file credits > usertotal credits.Set an 'error' property on reply if file not found or notenough credits.
    --- SBBSecho 3.11-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Rob Swindell@1:103/705 to Git commit to sbbs/master on Mon Sep 7 00:33:22 2020
    https://gitlab.synchro.net/sbbs/sbbs/-/commit/abef8a34f14aa8db1fee4b20
    Modified Files:
    web/root/api/files.ssjs
    Log Message:
    Don't allow downloads form non-accessible directories.Double-check that the user has access to both the directory and the containinglibrary before allowing a download a file.
    --- SBBSecho 3.11-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)