| @@ -33,11 +33,21 @@ while($request->Accept() >= 0) { | |||
| my $method = $ENV{REQUEST_METHOD}; | |||
| # QS sanity check | |||
| if ( exists $qs->{id} && $qs->{id} !~ /^\d+$/ ) { fatal_api_error(400,"invalid id"); } | |||
| if ( exists $qs->{maxWidth} && $qs->{maxWidth} !~ /^\d+$/ ) { fatal_api_error(400,"invalid maxWidth"); } | |||
| if ( exists $qs->{maxHeight} && $qs->{maxHeight} !~ /^\d+$/ ) { fatal_api_error(400,"invalid maxHeight"); } | |||
| if ( exists $qs->{pageSize} && $qs->{pageSize} !~ /^\d+$/ ) { fatal_api_error(400,"invalid pageSize"); } | |||
| if ( exists $qs->{pageIndex} && $qs->{pageIndex} !~ /^\d+$/ ) { fatal_api_error(400,"invalid pageIndex"); } | |||
| if ( exists $qs->{id} && $qs->{id} !~ /^\d+$/ ) { | |||
| fatal_api_error(400,"invalid id"); | |||
| } | |||
| if ( exists $qs->{maxWidth} && $qs->{maxWidth} !~ /^\d+$/ ) { | |||
| fatal_api_error(400,"invalid maxWidth"); | |||
| } | |||
| if ( exists $qs->{maxHeight} && $qs->{maxHeight} !~ /^\d+$/ ) { | |||
| fatal_api_error(400,"invalid maxHeight"); | |||
| } | |||
| if ( exists $qs->{pageSize} && $qs->{pageSize} !~ /^\d+$/ ) { | |||
| fatal_api_error(400,"invalid pageSize"); | |||
| } | |||
| if ( exists $qs->{pageIndex} && $qs->{pageIndex} !~ /^\d+$/ ) { | |||
| fatal_api_error(400,"invalid pageIndex"); | |||
| } | |||
| my $path = [ split(/\//,$ENV{SCRIPT_NAME}) ] if exists $ENV{SCRIPT_NAME}; | |||
| shift(@{$path}); | |||
| @@ -275,16 +285,27 @@ sub api_v1_POST_documents { | |||
| sub api_v1_POST_documents_id_data { | |||
| my($id, $qs, $post, $user) = @_; | |||
| open(TMP,">/tmp/upload.meta"); | |||
| print TMP $post->{ctype} . "\n"; | |||
| print TMP $post->{len} . "\n"; | |||
| print TMP Dumper(\%ENV); | |||
| close(TMP); | |||
| my $pageid; | |||
| open(TMP,">/tmp/upload.data"); | |||
| print TMP $post->{data} . "\n"; | |||
| close(TMP); | |||
| sqlquery($dbh, " | |||
| INSERT INTO | |||
| pages | |||
| SET | |||
| owner = ?, | |||
| documentId = ?, | |||
| contenttype = ?, | |||
| created = NOW(), | |||
| status = 'inprogress'", | |||
| $user, $id, $post->{ctype}); | |||
| my $q = sqlquery($dbh, "SELECT LAST_INSERT_ID()"); | |||
| while(my($last) = $q->fetchrow_array()) { | |||
| $pageid = $last; | |||
| } | |||
| my $file = $conf->{path}{global} . '/' . $conf->{path}{originals} . '/' . $pageid; | |||
| open(F,'>'.$file); | |||
| print F $post->{body}; | |||
| close(F); | |||
| return (200, "application/json", { }) | |||
| } | |||