+# -*- coding: utf-8 -*-
import json
import os
+from zipfile import ZipFile
from urllib import quote
from django.conf import settings
-from django.http import HttpResponse, HttpResponseRedirect, HttpResponseForbidden, Http404
+from django.http import HttpResponse, Http404
from django.utils.decorators import method_decorator
+from django.utils.encoding import force_unicode
from django.views.decorators.vary import vary_on_headers
-from django.views.generic import FormView, View
+from django.views.generic import FormView, RedirectView
from .forms import UploadForm
except ImportError:
def thumbnail(relpath):
return settings.MEDIA_URL + relpath
+ default = None
else:
def thumbnail(relpath):
try:
class JSONResponse(HttpResponse):
"""JSON response class."""
- def __init__(self, obj='', mimetype="application/json", *args, **kwargs):
+ def __init__(self, obj=None, mimetype="application/json", *args, **kwargs):
content = json.dumps(obj)
super(JSONResponse, self).__init__(content, mimetype, *args, **kwargs)
-class UploadView(FormView):
+class UploadViewMixin(object):
+ def get_safe_path(self, filename=""):
+ """Finds absolute filesystem path of the browsed dir of file.
+
+ Makes sure it's inside MEDIA_ROOT.
+
+ """
+ path = os.path.abspath(os.path.join(settings.MEDIA_ROOT, self.get_directory(), filename))
+ # WTF how would that be possible?
+ if not path.startswith(os.path.abspath(settings.MEDIA_ROOT)):
+ raise Http404
+ if filename:
+ if not path.startswith(self.get_safe_path()):
+ raise Http404
+ return force_unicode(path)
+
+
+class UploadView(UploadViewMixin, FormView):
template_name = "fileupload/picture_form.html"
form_class = UploadForm
crumbs = [('media',)]
return crumbs
- def get_safe_path(self, filename=""):
- """Finds absolute filesystem path of the browsed dir of file.
-
- Makes sure it's inside MEDIA_ROOT.
-
- """
- path = os.path.abspath(os.path.join(
- settings.MEDIA_ROOT,
- self.get_directory(),
- filename))
- if not path.startswith(settings.MEDIA_ROOT):
- raise Http404
- if filename:
- if not path.startswith(self.get_safe_path()):
- raise Http404
- return path
-
def get_url(self, filename):
"""Finds URL of a file in browsed dir."""
return settings.MEDIA_URL + self.get_directory() + quote(filename.encode('utf-8'))
files = []
path = self.get_safe_path()
if os.path.isdir(path):
- for f in os.listdir(path):
+ for f in sorted(os.listdir(path)):
file_info = {
"name": f,
}
"url": "%s%s/" % (request.get_full_path(), f),
})
else:
+ thumbnail_url = thumbnail(self.get_directory() + f)
file_info.update({
"url": self.get_url(f),
- 'thumbnail_url': thumbnail(self.get_directory() + f),
+ 'thumbnail_url': thumbnail_url,
'delete_url': "%s?file=%s" % (
request.get_full_path(),
quote(f.encode('utf-8'))),
'delete_type': "DELETE"
})
- thumbnail_url = thumbnail(self.get_directory() + f),
files.append(file_info)
return JSONResponse(files)
else:
for chunk in f.chunks():
destination.write(chunk)
data.append({
- 'name': f.name,
+ 'name': f.name,
'url': self.get_url(f.name),
'thumbnail_url': thumbnail(self.get_directory() + f.name),
- 'delete_url': "%s?file=%s" % (
- request.get_full_path(),
- quote(f.name.encode('utf-8'))),
- 'delete_type': "DELETE"
+ 'delete_url': "%s?file=%s" % (
+ self.request.get_full_path(),
+ quote(f.name.encode('utf-8'))),
+ 'delete_type': "DELETE",
})
response = JSONResponse(data)
response['Content-Disposition'] = 'inline; filename=files.json'
response = JSONResponse(True)
response['Content-Disposition'] = 'inline; filename=files.json'
return response
+
+
+class PackageView(UploadViewMixin, RedirectView):
+ # usage of RedirectView here is really really ugly
+ permanent = False
+
+ def dispatch(self, request, *args, **kwargs):
+ self.object = self.get_object(request, *args, **kwargs)
+ path = self.get_safe_path()
+ with ZipFile(os.path.join(path, 'package.zip'), 'w') as zip_file:
+ for f in os.listdir(path):
+ if f == 'package.zip':
+ continue
+ zip_file.write(os.path.join(path, f), arcname=f)
+ return super(PackageView, self).dispatch(request, *args, **kwargs)