'use strict'; const path = require('path'); const nconf = require('nconf'); const winston = require('winston'); const db = require('../database'); const file = require('../file'); const batch = require('../batch'); module.exports = function (User) { User.deleteUpload = async function (callerUid, uid, uploadName) { const [isUsersUpload, isAdminOrGlobalMod] = await Promise.all([ db.isSortedSetMember(`uid:${callerUid}:uploads`, uploadName), User.isAdminOrGlobalMod(callerUid), ]); if (!isAdminOrGlobalMod && !isUsersUpload) { throw new Error('[[error:no-privileges]]'); } const finalPath = path.join(nconf.get('upload_path'), uploadName); if (!finalPath.startsWith(nconf.get('upload_path'))) { throw new Error('[[error:invalid-path]]'); } winston.verbose(`[user/deleteUpload] Deleting ${uploadName}`); await Promise.all([ file.delete(finalPath), file.delete(file.appendToFileName(finalPath, '-resized')), ]); await db.sortedSetRemove(`uid:${uid}:uploads`, uploadName); }; User.collateUploads = async function (uid, archive) { await batch.processSortedSet(`uid:${uid}:uploads`, (files, next) => { files.forEach((file) => { archive.file(path.join(nconf.get('upload_path'), file), { name: path.basename(file), }); }); setImmediate(next); }, { batch: 100 }); }; };