Function _client_ip

Scripts/ButSystem.py:3564–3585

Real client IP with anti-spoofing. We only trust forwarded headers when the request comes from loopback (i.e., a local reverse-proxy like cloudflared/tor on the SAME device).

()

    if row and row["pic_path"] and os.path.exists(row["pic_path"]):
        try:
            os.remove(row["pic_path"])
        except Exception:
            pass
    conn.execute("UPDATE profiles SET pic_path=NULL, pic_mime=NULL, updated_at=? WHERE username=?",
                 (now_z(), username))
    conn.commit()
    conn.close()

def user_root(username: str) -> str:
    """user_root.

Internal helper function.

This docstring was added automatically to improve maintainability.

Args:
    username: Parameter.

Returns:
    Varies.
"""
    p = os.path.join(STORAGE_DIR, username)
    os.makedirs(p, exist_ok=True)
    return p