From 2255bbed94e1459788203a92b5f0eec5370abcab Mon Sep 17 00:00:00 2001
From: Bobby <bobbyskhs@gmail.com>
Date: Wed, 16 Jul 2025 20:07:20 +0530
Subject: upload ui for images; registered users can upload

---
 controllers/posts.go | 70 +++++++++++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 69 insertions(+), 1 deletion(-)

(limited to 'controllers')

diff --git a/controllers/posts.go b/controllers/posts.go
index c14d793..6a2d01a 100644
--- a/controllers/posts.go
+++ b/controllers/posts.go
@@ -4,7 +4,12 @@ import (
 	"imageboard/config"
 	"imageboard/database"
 	"imageboard/utils/auth"
+	"imageboard/utils/format"
 	"imageboard/utils/shortcuts"
+	"imageboard/utils/validators"
+	"io"
+	"net/http"
+	"strings"
 
 	"github.com/gofiber/fiber/v2"
 )
@@ -57,5 +62,68 @@ func PostsUploadPageController(ctx *fiber.Ctx) error {
 		return nil
 	}
 
-	return shortcuts.Render(ctx, config.TEMPLATE_POST_NEW, nil)
+	allowedTypes := []string{}
+	for t := range strings.SplitSeq(config.Upload.AllowedTypes, ",") {
+		if idx := strings.Index(t, "/"); idx != -1 && idx+1 < len(t) {
+			subtype := t[idx+1:]
+			if subtype != "" {
+				allowedTypes = append(allowedTypes, "."+subtype)
+			}
+		}
+	}
+
+	return shortcuts.Render(ctx, config.TEMPLATE_POST_NEW, fiber.Map{
+		"AllowedTypes": allowedTypes,
+		"MaxSize":      format.FileSize(int64(config.Upload.MaxSize)),
+	})
+}
+
+func PostsUploadImageLinkProxyController(ctx *fiber.Ctx) error {
+	maxSize := int64(config.Upload.MaxSize)
+	if !auth.IsAuthenticated(ctx) {
+		return fiber.NewError(fiber.StatusForbidden, "Forbidden")
+	}
+
+	url := ctx.Query("url")
+	if url == "" {
+		return fiber.NewError(fiber.StatusBadRequest, "Missing url parameter")
+	}
+
+	client := &http.Client{}
+	req, err := http.NewRequest("GET", url, nil)
+	if err != nil {
+		return fiber.NewError(fiber.StatusBadRequest, "Invalid URL")
+	}
+
+	req.Header.Set("User-Agent", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36")
+
+	referer := validators.GetRefererForURL(url)
+	if referer != "" {
+		req.Header.Set("Referer", referer)
+	}
+
+	resp, err := client.Do(req)
+	if err != nil {
+		return fiber.NewError(fiber.StatusBadGateway, "Failed to fetch image")
+	}
+	if resp.StatusCode != 200 {
+		return fiber.NewError(fiber.StatusBadGateway, "Failed to fetch image")
+	}
+	defer resp.Body.Close()
+
+	contentType := resp.Header.Get("Content-Type")
+	if !strings.HasPrefix(contentType, "image/") {
+		return fiber.NewError(fiber.StatusBadRequest, "URL does not point to an image")
+	}
+
+	ctx.Set("Content-Type", contentType)
+	ctx.Set("Cache-Control", "no-store")
+	buf, err := io.ReadAll(resp.Body)
+	if err != nil {
+		return fiber.NewError(fiber.StatusInternalServerError, "Failed to read image data")
+	}
+	if int64(len(buf)) > maxSize {
+		return fiber.NewError(fiber.StatusRequestEntityTooLarge, "Image exceeds maximum allowed size of "+format.FileSize(maxSize))
+	}
+	return ctx.Send(buf)
 }
-- 
cgit v1.2.3