67 lines
2.3 KiB
TypeScript
67 lines
2.3 KiB
TypeScript
"use server";
|
|
|
|
import { revalidatePath } from "next/cache";
|
|
import { redirect } from "next/navigation";
|
|
import { writeFile, mkdir } from "fs/promises";
|
|
import path from "path";
|
|
import { requireStaff } from "@/lib/admin/guard";
|
|
|
|
const MEDIA_DIR = "public/assets/images/media";
|
|
const MAX_SIZE = 5 * 1024 * 1024; // 5MB
|
|
const ALLOWED = ["image/png", "image/jpeg", "image/gif", "image/webp"];
|
|
|
|
export async function uploadMedia(formData: FormData): Promise<void> {
|
|
await requireStaff();
|
|
const file = formData.get("file") as File | null;
|
|
if (!file || file.size === 0) return;
|
|
if (file.size > MAX_SIZE) throw new Error("File too large (max 5MB)");
|
|
if (!ALLOWED.includes(file.type)) throw new Error("Invalid file type");
|
|
|
|
const dir = path.join(process.cwd(), MEDIA_DIR);
|
|
await mkdir(dir, { recursive: true });
|
|
|
|
const ext = file.name.split(".").pop() ?? "png";
|
|
const name = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}.${ext}`;
|
|
const bytes = await file.arrayBuffer();
|
|
await writeFile(path.join(dir, name), Buffer.from(bytes));
|
|
|
|
revalidatePath("/api/media");
|
|
revalidatePath("/admin/media");
|
|
}
|
|
|
|
export async function deleteMedia(name: string): Promise<void> {
|
|
await requireStaff();
|
|
const { unlink } = await import("fs/promises");
|
|
const dir = path.join(process.cwd(), MEDIA_DIR);
|
|
const filePath = path.join(dir, name);
|
|
// Prevent path traversal
|
|
if (name.includes("..") || name.includes("/")) return;
|
|
try {
|
|
await unlink(filePath);
|
|
} catch {
|
|
// File may not exist
|
|
}
|
|
revalidatePath("/api/media");
|
|
revalidatePath("/admin/media");
|
|
}
|
|
|
|
export async function uploadMediaAndReturn(formData: FormData): Promise<string> {
|
|
await requireStaff();
|
|
const file = formData.get("file") as File | null;
|
|
if (!file || file.size === 0) return "";
|
|
if (file.size > MAX_SIZE) return "";
|
|
if (!ALLOWED.includes(file.type)) return "";
|
|
|
|
const dir = path.join(process.cwd(), MEDIA_DIR);
|
|
await mkdir(dir, { recursive: true });
|
|
|
|
const ext = file.name.split(".").pop() ?? "png";
|
|
const name = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}.${ext}`;
|
|
const bytes = await file.arrayBuffer();
|
|
await writeFile(path.join(dir, name), Buffer.from(bytes));
|
|
|
|
revalidatePath("/api/media");
|
|
revalidatePath("/admin/media");
|
|
return `/assets/images/media/${name}`;
|
|
}
|