|
|
|
@ -169,10 +169,4 @@ def delete(id):
|
|
|
|
|
@bp.route("/uploads/<path:filename>")
|
|
|
|
|
def uploaded_file(filename):
|
|
|
|
|
file_path = path.join(current_app.config["DATA_FOLDER"], "uploads")
|
|
|
|
|
post = Post.select().where(Post.image_name==filename).first()
|
|
|
|
|
is_mod = is_moderator(get_session_user())
|
|
|
|
|
if is_mod or post.approved:
|
|
|
|
|
return send_from_directory(file_path, filename)
|
|
|
|
|
else:
|
|
|
|
|
flash("This image not available to view.")
|
|
|
|
|
return redirect(url_for("index"))
|
|
|
|
|
return send_from_directory(file_path, filename)
|
|
|
|
|