Function admin_user_download

Scripts/ButSystem.py:16634–16675

Admin-only: download any user's vault file.

(username: str)

    try:
        data = request.get_json(silent=True) or {}
        filename = _safe_face_detector_filename(data.get("filename") or "")
        filedata = (data.get("filedata") or "").strip()
        m = re.match(r"^data:((?:image/(?:png|jpeg|jpg|webp))|(?:video/(?:webm|mp4)));base64,(.+)$", filedata, flags=re.I | re.S)
        if not m:
            return jsonify({"ok": False, "error": "invalid_data"}), 400
        payload = base64.b64decode(m.group(2), validate=True)
        if not payload or len(payload) > (35 * 1024 * 1024):
            return jsonify({"ok": False, "error": "invalid_size"}), 400
        out_path = os.path.join(FACE_DETECTOR_DIR, filename)
        with open(out_path, "wb") as f:
            f.write(payload)
        return jsonify({"ok": True, "path": out_path})
    except Exception as e:
        log.exception("Face detector save failed: %s", e)
        return jsonify({"ok": False, "error": "save_failed"}), 500


@app.route("/bounty")

@login_required
def bounty():
    """Admin page for adding/editing/removing profiler bounties."""
    require_admin()
    q = (request.args.get("q") or "").strip()
    selected_id = request.args.get("eid", type=int)

    entries: List[Dict[str, Any]] = []
    if q:
        entries = profiler_all_entries_for_bounty(q)[:100]

    selected = None
    if selected_id is not None:
        # fetch selected entry even when it is not shown because no search results are displayed by default
        for e in (entries + profiler_all_entries_for_bounty("")):
            if int(e["id"]) == int(selected_id):
                selected = e
                break

    class Obj:
        def __init__(self, d):
            self.__dict__.update(d)

    selected_bounty_value = ""
    selected_reason_value = ""
    selected_has_bounty = False