Peps
/
v3.0.0
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Frontend ip blocking

This commit is contained in:
kanadeko 2017-01-14 06:06:01 -03:00
parent d25193bb31
commit 3b648ab45e
6 changed files with 15 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
README.md
View File

@ -1,3 +1,4 @@
![loli-safe](https://i.imgur.com/YqO1nuc.png)
# loli-safe
Pomf-like image uploading service, written in NodeJS

4
controllers/galleryController.js
View File

@ -6,7 +6,7 @@ let galleryController = {}
galleryController.list = function(req, res, next){
if(!config.privacy.public)
if(!config.privacy.IPs.includes(req.ip)) return res.status(401).send('Not Authorized!')
if(!config.privacy.IPs.includes(req.ip)) return res.status(401).send('not-authorized')
db.table('gallery').select('id', 'name').then((data) => {
res.json({ data })
@ -16,7 +16,7 @@ galleryController.list = function(req, res, next){
galleryController.test = function(req, res, next){
if(!config.privacy.public)
if(!config.privacy.IPs.includes(req.ip)) return res.status(401).send('Not Authorized!')
if(!config.privacy.IPs.includes(req.ip)) return res.status(401).send('not-authorized')
let testdata = [
{name: 'Test 1'},

2
controllers/uploadController.js
View File

@ -25,7 +25,7 @@ uploadsController.upload = function(req, res, next){
let gallery = req.headers.gallery
if(!config.privacy.public)
if(!config.privacy.IPs.includes(req.ip)) return res.status(401).send('Not Authorized!')
if(!config.privacy.IPs.includes(req.ip)) return res.status(401).send('not-authorized')
upload(req, res, function (err) {
if (err) {

3
public/css/style.css
View File

@ -28,7 +28,7 @@ div#dropzone {
background-color: rgba(0, 0, 0, 0);
border-color: #ff3860;
color: #ff3860;
display: flex;
display: none;
width: 100%;
border-radius: 3px;
box-shadow: none;
@ -49,6 +49,7 @@ div#dropzone:hover {
border-color: #ff3860;
color: #fff;
}
img.logo { height: 200px; margin-top: 20px; }
.dz-preview .dz-details { display: flex; }
.dz-preview .dz-details .dz-size, .dz-preview .dz-details .dz-filename { flex: 1 }

10
public/index.html
View File

@ -24,6 +24,7 @@
<div class="columns">
<div class="column"></div>
<div class="column">
<a class="button is-danger is-outlined" id='btnGithub' href='https://github.com/kanadeko/loli-safe' target='_blank'>View on Github</a>
<div id="dropzone">Click here or drag and drop files</div>
</div>
<div class="column"></div>
@ -57,10 +58,15 @@
var xhr = new XMLHttpRequest();
xhr.onreadystatechange = function() {
if (xhr.readyState == XMLHttpRequest.DONE) {
console.log(xhr.responseText)
if(xhr.responseText !== 'not-authorized'){
document.getElementById('btnGithub').style.display = 'none';
document.getElementById('dropzone').style.display = 'flex';
}
if(xhr.responseText.maxFileSize)
maxSize = xhr.responseText.maxFileSize
maxSize = xhr.responseText.maxFileSize;
if(xhr.responseText.urlPrefix)
urlPrefix = xhr.responseText.urlPrefix + '/'
urlPrefix = xhr.responseText.urlPrefix + '/';
}
}
xhr.open('GET', '/api/info', true);

2
routes/routes.js
View File

@ -5,7 +5,7 @@ const galleryController = require('../controllers/galleryController')
routes.get ('/info', (req, res, next) => {
if(!config.privacy.public)
if(!config.privacy.IPs.includes(req.ip)) return res.status(401).send('Not Authorized!')
if(!config.privacy.IPs.includes(req.ip)) return res.status(401).send('not-authorized')
return res.json({
maxFileSize: config.uploads.maxsize.slice(0, -2),