only show images which are tied to approved posts

graphs-n-shit
lza_menace 4 years ago
parent f78e5ad065
commit d1cde8f63e

@ -73,7 +73,7 @@ def create():
if file.filename == "":
flash("You didn't upload a caliente meme, bro! You're fuckin up!")
return redirect(request.url)
if post_title is "":
if post_title == "":
flash("You didn't give your meme a spicy title, bro! You're fuckin up!")
return redirect(request.url)
if file and allowed_file(file.filename):
@ -139,4 +139,10 @@ def delete(id):
@bp.route("/uploads/<path:filename>")
def uploaded_file(filename):
file_path = path.join(current_app.config["DATA_FOLDER"], "uploads")
return send_from_directory(file_path, filename)
post = Post.select().where(Post.image_name==filename).first()
is_mod = is_moderator(get_session_user())
if is_mod or post.approved:
return send_from_directory(file_path, filename)
else:
flash("This image not available to view.")
return redirect(url_for("index"))

Loading…
Cancel
Save