|
|
|
@ -32,8 +32,8 @@ func (app *appContext) CreateBackup(gc *gin.Context) {
|
|
|
|
|
func (app *appContext) GetBackup(gc *gin.Context) {
|
|
|
|
|
fname := gc.Param("fname")
|
|
|
|
|
// Hopefully this is enough to ensure the path isn't malicious. Hidden behind bearer auth anyway so shouldn't matter too much I guess.
|
|
|
|
|
ok := strings.HasPrefix(fname, BACKUP_PREFIX) && strings.HasSuffix(fname, BACKUP_SUFFIX)
|
|
|
|
|
t, err := time.Parse(BACKUP_DATEFMT, strings.TrimSuffix(strings.TrimPrefix(fname, BACKUP_PREFIX), BACKUP_SUFFIX))
|
|
|
|
|
ok := (strings.HasPrefix(fname, BACKUP_PREFIX) || strings.HasPrefix(fname, BACKUP_UPLOAD_PREFIX+BACKUP_PREFIX)) && strings.HasSuffix(fname, BACKUP_SUFFIX)
|
|
|
|
|
t, err := time.Parse(BACKUP_DATEFMT, strings.TrimSuffix(strings.TrimPrefix(strings.TrimPrefix(fname, BACKUP_UPLOAD_PREFIX), BACKUP_PREFIX), BACKUP_SUFFIX))
|
|
|
|
|
if !ok || err != nil || t.IsZero() {
|
|
|
|
|
app.debug.Printf("Ignoring backup DL request due to fname: %v\n", err)
|
|
|
|
|
respondBool(400, false, gc)
|
|
|
|
@ -109,7 +109,7 @@ func (app *appContext) RestoreBackup(gc *gin.Context) {
|
|
|
|
|
}
|
|
|
|
|
app.debug.Printf("Got uploaded file \"%s\"\n", file.Filename)
|
|
|
|
|
path := app.config.Section("backups").Key("path").String()
|
|
|
|
|
fullpath := filepath.Join(path, "jfa-go-upload-bak-"+time.Now().Local().Format(BACKUP_DATEFMT)+BACKUP_SUFFIX)
|
|
|
|
|
fullpath := filepath.Join(path, BACKUP_UPLOAD_PREFIX+BACKUP_PREFIX+time.Now().Local().Format(BACKUP_DATEFMT)+BACKUP_SUFFIX)
|
|
|
|
|
gc.SaveUploadedFile(file, fullpath)
|
|
|
|
|
app.debug.Printf("Saved to \"%s\"\n", fullpath)
|
|
|
|
|
LOADBAK = fullpath
|
|
|
|
|