src/main/kotlin/App.kt


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

package space.anity

import io.javalin.*
import io.javalin.core.util.*
import java.io.*
import java.nio.file.*

fun main(args: Array<String>) {
    val fileHome = "files"
    val app = Javalin.create().enableStaticFiles("../resources/").start(7000)

    // TODO: Fix possible security issue with "../"
    app.get("/files/*") { ctx ->
        val files = ArrayList<String>()
        try {
            Files.list(Paths.get("$fileHome/${ctx.splats()[0]}/")).forEach {
                val fileName = it.toString()
                    .drop(fileHome.length + (if (ctx.splats()[0].isNotEmpty()) ctx.splats()[0].length + 2 else 1))
                val filePath = "$fileHome${it.toString().drop(fileHome.length)}"
                files.add(if (File(filePath).isDirectory) "$fileName/" else fileName)
            }
            ctx.json(files)
        } catch (_: java.nio.file.NoSuchFileException) {
            throw NotFoundResponse("Error: File or directory does not exist.")
        }
    }

    app.get("/upload") { ctx -> ctx.redirect("/upload.html") }

    // TODO: Fix possible security issue with "../"
    app.post("/upload") { ctx ->
        ctx.uploadedFiles("files").forEach { (contentType, content, name, extension) ->
            if (ctx.queryParam("dir") !== null) {
                FileUtil.streamToFile(content, "files/${ctx.queryParam("dir")}/$name")
                ctx.redirect("/upload.html")
            } else
                throw BadRequestResponse("Error: Please enter a filename.")
        }
    }
}