Function _dm_store_remote_gif

Scripts/ButSystem.py:12812–12927

Download and store a remote GIF (or short MP4) as a DM attachment. This enables an Instagram-like GIF picker that sends a URL rather than an uploaded file. We keep this intentionally strict for safety: - only http(s) - size cap

(dm_id: int, gif_url: str)

        if not os.path.exists(target): return None
    except Exception: return None
    return row, target


@app.route("/s/<token>", methods=["GET", "POST"])
def public_share(token: str):
    loaded = _load_public_share(token)
    if not loaded: abort(404)
    row, target = loaded; access_key = "share:" + token
    locked = bool(row["pw_hash"] and not session.get(access_key))
    if request.method == "POST" and locked:
        try:
            limited = _rate_limit_hit("share_password", f"{token}:{_client_ip()}", 10, 10 * 60)
        except Exception:
            limited = False
        if limited:
            abort(429)
        if check_password_hash(row["pw_hash"], request.form.get("password") or ""):
            session[access_key] = True
            locked = False
        else:
            flash("Incorrect password.")
    size = _folder_size(target) if os.path.isdir(target) else os.path.getsize(target)
    return render_template("public_share.html", locked=locked, token=token, name=os.path.basename(target), kind="Folder" if os.path.isdir(target) else "File", size_h=human_size(size), expires_at=row["expires_at"])


@app.route("/s/<token>/download")
def public_share_download(token: str):
    loaded = _load_public_share(token)
    if not loaded: abort(404)
    row, target = loaded
    if row["pw_hash"] and not session.get("share:" + token): return redirect(url_for("public_share", token=token))
    if os.path.isdir(target):
        path = _zip_paths(row["owner"], [row["relpath"]], os.path.basename(target)); _log_file_activity(row["owner"], "share_folder_downloaded", row["relpath"], actor="public"); return _send_temporary_zip(path, os.path.basename(target) + ".zip")
    _log_file_activity(row["owner"], "share_file_downloaded", row["relpath"], actor="public")
    if is_encrypted_file(target):
        response = Response(aesgcm_decrypt_generator(target), mimetype=guess_mime(target)); response.headers["Content-Disposition"] = f'attachment; filename="{os.path.basename(target)}"'; return response
    return send_file(target, as_attachment=True, download_name=os.path.basename(target), conditional=True, max_age=0)


@app.route("/files/activity")
@login_required
def file_activity():
    conn = db_connect(); activity = conn.execute("SELECT action, relpath, detail, created_at FROM file_activity WHERE owner=? ORDER BY id DESC LIMIT 300", (current_user(),)).fetchall(); conn.close(); return render_template("file_activity.html", activity=activity)


@app.route("/view")
@login_required
def view_file():
    rel = request.args.get("p", "") or ""
    try:
        rel = safe_relpath(rel); target = abs_user_path(current_user(), rel)
        if os.path.isdir(target) or not os.path.exists(target): abort(404)
        filename = os.path.basename(target); mime = guess_mime(filename); inline_ok = is_inline_safe(mime, filename)
        if is_encrypted_file(target): response = Response(aesgcm_decrypt_generator(target), mimetype=mime if inline_ok else "application/octet-stream")
        else: response = send_file(target, mimetype=mime if inline_ok else "application/octet-stream", as_attachment=not inline_ok, conditional=True, max_age=0)
        response.headers["Content-Disposition"] = f'{"inline" if inline_ok else "attachment"}; filename="{filename}"'; response.headers["Cache-Control"] = "no-store"; return response
    except Exception as exc:
        if getattr(exc, "code", None) == 404: raise