Compare commits
2 Commits
recorded-v
...
6d7be5c45c
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
6d7be5c45c | ||
| 92c1261f6f |
@@ -0,0 +1,9 @@
|
||||
I will implement the requested changes to remove the delete functionality and redirect the upload interface while keeping the upload API intact.
|
||||
|
||||
### 1. Frontend: Song Selection Menu (`public/src/js/songselect.js`)
|
||||
* **Remove Delete Button**: I will remove the "Delete" (削除) button configuration from the `difficultyMenu` buttons array (around lines 313-319). This removes the option from the UI.
|
||||
* **Redirect Upload Action**: I will modify the handler for the "upload" action (around lines 954-958). Instead of redirecting to the local `/upload/` page, it will redirect to `https://zizhipu.taiko.asia`.
|
||||
|
||||
### 2. Backend: API Security (`app.py`)
|
||||
* **Disable Delete API**: I will modify the `/api/delete` route to return a 403 Forbidden error (or simply pass), ensuring that songs cannot be deleted even if someone calls the API directly.
|
||||
* **Keep Upload API**: The `/api/upload` route will remain unchanged, preserving the ability to upload songs via API as requested.
|
||||
13
app.py
13
app.py
@@ -911,19 +911,8 @@ def upload_file():
|
||||
return flask.jsonify({'success': True})
|
||||
|
||||
@app.route("/api/delete", methods=["POST"])
|
||||
@limiter.limit("1 per day")
|
||||
def delete():
|
||||
id = flask.request.get_json().get('id')
|
||||
client["taiko"]["songs"].delete_one({ "id": id })
|
||||
|
||||
parent_dir = pathlib.Path(os.getenv("TAIKO_WEB_SONGS_DIR", "public/songs"))
|
||||
target_dir = parent_dir / id
|
||||
if not (target_dir.resolve().parents and parent_dir.resolve() in target_dir.resolve().parents):
|
||||
return flask.jsonify({ "success": False, "reason": "PARENT IS NOT ALLOWED" })
|
||||
|
||||
shutil.rmtree(target_dir)
|
||||
|
||||
return "成功しました。"
|
||||
return flask.jsonify({ "success": False, "reason": "Deletion is disabled" }), 403
|
||||
|
||||
if __name__ == '__main__':
|
||||
import argparse
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
class ImportSongs{
|
||||
class ImportSongs{
|
||||
constructor(...args){
|
||||
this.init(...args)
|
||||
}
|
||||
@@ -322,6 +322,10 @@
|
||||
songTitle = songTitle.slice(0, uraPos)
|
||||
}
|
||||
}
|
||||
if(id === "cn" && !meta["titlecn"] && meta.titlezh){
|
||||
titleLang.cn = meta.titlezh
|
||||
titleLangAdded = true
|
||||
}
|
||||
if(meta["title" + id]){
|
||||
titleLang[id] = meta["title" + id]
|
||||
titleLangAdded = true
|
||||
@@ -329,6 +333,10 @@
|
||||
titleLang[id] = this.songTitle[songTitle][id] + ura
|
||||
titleLangAdded = true
|
||||
}
|
||||
if(id === "cn" && !meta["subtitlecn"] && meta.subtitlezh){
|
||||
subtitleLang.cn = meta.subtitlezh
|
||||
subtitleLangAdded = true
|
||||
}
|
||||
if(meta["subtitle" + id]){
|
||||
subtitleLang[id] = meta["subtitle" + id]
|
||||
subtitleLangAdded = true
|
||||
|
||||
@@ -310,12 +310,6 @@ class SongSelect{
|
||||
iconName: "download",
|
||||
iconFill: "#e7cbe1",
|
||||
letterSpacing: 4
|
||||
}, {
|
||||
text: "削除",
|
||||
fill: "silver",
|
||||
iconName: "trash",
|
||||
iconFill: "#111111",
|
||||
letterSpacing: 4
|
||||
}]
|
||||
this.optionsList = [strings.none, strings.auto, strings.netplay]
|
||||
|
||||
@@ -954,7 +948,7 @@ class SongSelect{
|
||||
} else if (currentSong.action === "upload") {
|
||||
this.playSound("se_don");
|
||||
setTimeout(() => {
|
||||
window.location.href = "/upload/";
|
||||
window.location.href = "https://zizhipu.taiko.asia";
|
||||
}, 100);
|
||||
} else if (currentSong.action === "keijiban") {
|
||||
this.playSound("se_don");
|
||||
@@ -3113,6 +3107,15 @@ class SongSelect{
|
||||
|
||||
getLocalTitle(title, titleLang){
|
||||
if(titleLang){
|
||||
if(strings.id === "cn"){
|
||||
if(titleLang.cn){
|
||||
return titleLang.cn
|
||||
}
|
||||
if(titleLang.ja){
|
||||
return titleLang.ja
|
||||
}
|
||||
return title
|
||||
}
|
||||
for(var id in titleLang){
|
||||
if(id === "en" && strings.preferEn && !(strings.id in titleLang) && titleLang.en || id === strings.id && titleLang[id]){
|
||||
return titleLang[id]
|
||||
|
||||
@@ -29,9 +29,9 @@
|
||||
<div id="screen" class="pattern-bg"></div>
|
||||
<div data-nosnippet id="version">
|
||||
{% if version.version and version.commit_short and version.commit %}
|
||||
<a href="{{version.url}}commit/{{version.commit}}" target="_blank" rel="noopener" id="version-link" class="stroke-sub" alt="taiko-web ver.{{version.version}} ({{version.commit_short}})">taiko-web ver.{{version.version}} ({{version.commit_short}})</a>
|
||||
<a href="{{version.url}}commit/{{version.commit}}" target="_blank" rel="noopener" id="version-link" class="stroke-sub" alt="vLightNova 1.0.0">vLightNova 1.0.0</a>
|
||||
{% else %}
|
||||
<a target="_blank" rel="noopener" id="version-link" class="stroke-sub" alt="taiko-web vRAINBOW-BETA4">taiko-web vRAINBOW-BETA4</a>
|
||||
<a target="_blank" rel="noopener" id="version-link" class="stroke-sub" alt="vLightNova 1.0.0">vLightNova 1.0.0</a>
|
||||
{% endif %}
|
||||
</div>
|
||||
<script src="src/js/browsersupport.js?{{version.commit_short}}"></script>
|
||||
|
||||
Reference in New Issue
Block a user