• web/root/api/files.ssjs

    From Rob Swindell@VERT to Git commit to sbbs/master on Mon Sep 7 00:33:22 2020
    https://gitlab.synchro.net/sbbs/sbbs/-/commit/a03cd7dfe8fd3ac0d6322348
    Modified Files:
    web/root/api/files.ssjs
    Log Message:
    Use User.downloaded_file() to do "all the things"

    The User.downloaded_file() method has been enhanced to accept a directory
    code and a filename to do "all the things" expected after a file has been successfully downloaded. Use the method.
    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From Rob Swindell@VERT to Git commit to sbbs/master on Mon Sep 7 00:33:22 2020
    https://gitlab.synchro.net/sbbs/sbbs/-/commit/aa48840eb066aac1c7880f85
    Modified Files:
    web/root/api/files.ssjs
    Log Message:
    Prevent download if !dir is_exempt and file credits > user
    total credits.
    Set an 'error' property on reply if file not found or not
    enough credits.
    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From Rob Swindell@VERT to Git commit to sbbs/master on Mon Sep 7 00:33:22 2020
    https://gitlab.synchro.net/sbbs/sbbs/-/commit/abef8a34f14aa8db1fee4b20
    Modified Files:
    web/root/api/files.ssjs
    Log Message:
    Don't allow downloads form non-accessible directories.

    Double-check that the user has access to both the directory and the containing library before allowing a download a file.
    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net