diff --git a/interface.py b/interface.py index 28ae96a..7ce7fc1 100644 --- a/interface.py +++ b/interface.py @@ -121,13 +121,13 @@ def upload(): targetdir = request.form['targetdir'].strip() if targetdir == '': targetdir = 'uploads/' - elif '..' in targetdir: + elif '../' in targetdir: return redirect("./", code=406) - print('Uploading file:') - print('filename:', filename) - print('targetdir:', targetdir) - print('mimetype:', file.mimetype) + #print('Uploading file:') + #print('filename:', filename) + #print('targetdir:', targetdir) + #print('mimetype:', file.mimetype) if "audio" in file.mimetype: storagepath = os.path.abspath(os.path.join(var.music_folder, targetdir)) diff --git a/templates/index.html b/templates/index.html index 87e1b3d..1a68822 100644 --- a/templates/index.html +++ b/templates/index.html @@ -61,8 +61,9 @@
Upload into - + +