dnitza/adamantium
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Only allow images to be uploaded

Browse Source
This commit is contained in:
Daniel Nitsikopoulos
2023-02-11 15:45:00 +11:00
parent 7d1b23b943
commit cda3a10dc2
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
app/commands/media/upload.rb
View File

@@ -2,6 +2,7 @@
require "securerandom" require "securerandom"
require "dry/monads" require "dry/monads"
require "filemagic"
module Adamantium module Adamantium
module Commands module Commands
@@ -10,7 +11,15 @@ module Adamantium
include Deps["settings"] include Deps["settings"]
include Dry::Monads[:result] include Dry::Monads[:result]
VALID_UPLOAD_TYPES = %i[jpeg jpg png gif]
def call(file:) def call(file:)
mime = FileMagic.new
type = mime.file(file[:tempfile].path, true)
return Failure(:invalid_file_type) unless VALID_UPLOAD_TYPES.include? type.to_sym
pathname = Time.now.strftime("%m-%Y") pathname = Time.now.strftime("%m-%Y")
filename = "#{SecureRandom.uuid}#{File.extname(file[:filename])}" filename = "#{SecureRandom.uuid}#{File.extname(file[:filename])}"