fdfsa

src/index.mjs

@@ -20,9 +20,11 @@ import { handleMetaExtract } from "./meta_extract_handler.mjs";
 import { handleMetaStrip } from "./meta_strip_handler.mjs";
 import { handleCommentUpload, handleCommentUploadCancel } from "./comment_upload_handler.mjs";
 import { handleDmAttachmentUpload, handleDmAttachmentDownload, handleDmAttachmentDelete } from "./dm_attachment_handler.mjs";
-import { getManualApproval, setManualApproval, getMinTags, setMinTags, getRegistrationOpen, setRegistrationOpen, getTrustedUploads, setTrustedUploads, getBypassDuplicateCheck, setBypassDuplicateCheck, getProtectFiles, setProtectFiles, getPrivateMessages, setPrivateMessages, getDmAttachments, setDmAttachments, getDmUnencrypted, setDmUnencrypted, getDefaultLayout, setDefaultLayout, getEnablePdf, setEnablePdf, getEnableCleanup, setEnableCleanup, getCleanupStartDate, setCleanupStartDate, getCleanupEndDate, setCleanupEndDate, getCleanupIncludeEngaged, setCleanupIncludeEngaged, getLogUserIps, setLogUserIps, getHashUserIps, setHashUserIps, getShitpostMode, setShitpostMode, getAllowCommentDeletion, setAllowCommentDeletion, getNsfpIds, setNsfpIds } from "./inc/settings.mjs";
+import { getManualApproval, setManualApproval, getMinTags, setMinTags, getRegistrationOpen, setRegistrationOpen, getTrustedUploads, setTrustedUploads, getBypassDuplicateCheck, setBypassDuplicateCheck, getProtectFiles, setProtectFiles, getPrivateMessages, setPrivateMessages, getDmAttachments, setDmAttachments, getDmUnencrypted, setDmUnencrypted, getDefaultLayout, setDefaultLayout, getEnablePdf, setEnablePdf, getEnableCleanup, setEnableCleanup, getCleanupStartDate, setCleanupStartDate, getCleanupEndDate, setCleanupEndDate, getCleanupIncludeEngaged, setCleanupIncludeEngaged, getLogUserIps, setLogUserIps, getHashUserIps, setHashUserIps, getShitpostMode, setShitpostMode, getAllowCommentDeletion, setAllowCommentDeletion, getNsfpIds, setNsfpIds, getEnableExpiringUploads, getEnableItemSlugs, ensureAllItemsHaveSlugs } from "./inc/settings.mjs";
 import { updateHallsCache, getHalls } from "./inc/halls_cache.mjs";
 import { createI18n } from "./inc/i18n.mjs";
+import { safeDeleteMediaFile, purgeExpiredUploads } from "./inc/lib_delete.mjs";
+
 import security from "./inc/security.mjs";
 
 import { createRequire } from 'module';
@@ -516,6 +518,37 @@ process.on('uncaughtException', err => {
     }
   });
 
+  // Global CORS & OPTIONS preflight handler for API routes (enables standalone config_editor.html)
+  app.use(async (req, res) => {
+    if (req.url?.pathname?.startsWith('/api/')) {
+      const origin = req.headers?.origin || '*';
+      res.setHeader('Access-Control-Allow-Origin', origin);
+      res.setHeader('Access-Control-Allow-Credentials', 'true');
+      res.setHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
+      res.setHeader('Access-Control-Allow-Headers', 'Content-Type, X-Requested-With, X-CSRF-Token, Authorization');
+
+      if (req.method === 'OPTIONS') {
+        res.writeHead(204).end();
+        req.url.pathname = '/handled_options_bypass';
+        return;
+      }
+    }
+  });
+
+  // Serve standalone config_editor.html statically
+  app.use(async (req, res) => {
+    if (req.method === 'GET' && (req.url?.pathname === '/config_editor.html' || req.url?.pathname === '/config.html')) {
+      try {
+        const filePath = path.resolve(process.cwd(), "config_editor.html");
+        const content = await fs.promises.readFile(filePath, "utf-8");
+        res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' }).end(content);
+        req.url.pathname = '/handled_config_editor_bypass';
+      } catch (err) {
+        res.writeHead(404).end("config_editor.html not found");
+      }
+    }
+  });
+
   // Cache-Control headers for static assets.
   // flummpress router.static() sends no caching headers, which forces Chrome to
   // re-fetch all thumbnails on every grid visit even when they haven't changed.
@@ -1330,6 +1363,9 @@ process.on('uncaughtException', err => {
     console.warn(`[BOOT] NSFP setting fetch failed:`, e.message);
   }
 
+  // Ensure all items in database have a unique slug backfilled
+  ensureAllItemsHaveSlugs();
+
   const globals = {
     lul: cfg.websrv.lul,
     themes: cfg.websrv.themes,
@@ -1384,6 +1420,8 @@ process.on('uncaughtException', err => {
     site_description: cfg.websrv.description || "The webs dumpster",
     enable_nsfl: !!cfg.enable_nsfl,
     enable_private_uploads: cfg.enable_private_uploads !== false,
+    get enable_expiring_uploads() { return getEnableExpiringUploads(); },
+    get enable_item_slugs() { return getEnableItemSlugs(); },
     default_upload_visibility: (typeof cfg.default_upload_visibility === 'number' ? cfg.default_upload_visibility : (typeof cfg.websrv?.default_upload_visibility === 'number' ? cfg.websrv.default_upload_visibility : 0)),
     allow_user_upload_visibility: cfg.allow_user_upload_visibility !== false && cfg.websrv?.allow_user_upload_visibility !== false,
     nsfl_tag_id: cfg.nsfl_tag_id || 3,
@@ -1593,6 +1631,11 @@ process.on('uncaughtException', err => {
   setTimeout(cleanupStaleSessions, 30_000);
   setInterval(cleanupStaleSessions, CLEANUP_INTERVAL_MS);
 
+  // Expiring uploads background purge (every 30s)
+  setTimeout(purgeExpiredUploads, 10_000);
+  setInterval(purgeExpiredUploads, 30_000);
+
+
   // ── Inactivity ban — permanently ban accounts that haven't logged in for N days
   // Set websrv.inactivity_ban_days = 0 (or omit) to disable this feature entirely.
   const INACTIVITY_BAN_DAYS = parseInt(cfg.websrv.inactivity_ban_days) || 0;