def create
name = params[:trace][:gpx_file].original_filename.gsub(/[^a-zA-Z0-9.]/, '_') # This makes sure filenames are sane
- do_create(name, params[:trace][:tagstring], params[:trace][:description]) do |f|
+ do_create(name, params[:trace][:tagstring], params[:trace][:description], params[:trace][:public]) do |f|
f.write(params[:trace][:gpx_file].read)
end
def data
trace = Trace.find(params[:id])
if trace and (trace.public? or (@user and @user == trace.user))
- send_file(trace.trace_name, :filename => "#{trace.id}.gpx", :type => trace.mime_type, :disposition => 'attachment')
+ send_file(trace.trace_name, :filename => "#{trace.id}#{trace.extension_name}", :type => trace.mime_type, :disposition => 'attachment')
else
render :nothing, :status => :not_found
end
end
def api_create
- do_create(params[:filename], params[:tags], params[:description]) do |f|
+ do_create(params[:filename], params[:tags], params[:description], true) do |f|
f.write(request.raw_post)
end
private
- def do_create(name, tags, description)
+ def do_create(name, tags, description, public)
filename = "/tmp/#{rand}"
File.open(filename, "w") { |f| yield f }
- @trace = Trace.new({:name => name, :tagstring => tags, :description => description})
+ @trace = Trace.new({:name => name, :tagstring => tags,
+ :description => description, :public => public})
@trace.inserted = false
@trace.user = @user
@trace.timestamp = Time.now