a3x
/
nyaa
mirror of https://gitlab.com/SIGBUS/nyaa.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

torrents: don't allow download of deleted torrents (#399) 

Only allow moderators to download torrent files that are deleted.
This commit is contained in:
Nicolas F 2017-11-03 17:54:08 +01:00 committed by Anna-Maria Meriniemi
parent 7095567b29
commit 96468a5a11
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
nyaa/views/torrents.py
View File

@ -316,6 +316,9 @@ def download_torrent(torrent_id):
if not torrent or not torrent.has_torrent:
flask.abort(404)
if torrent.deleted and not (flask.g.user and flask.g.user.is_moderator):
flask.abort(404)
torrent_file, torrent_file_size = _get_cached_torrent_file(torrent)
disposition = 'inline; filename="{0}"; filename*=UTF-8\'\'{0}'.format(
quote(torrent.torrent_name.encode('utf-8')))