X-Git-Url: https://git.pterodactylus.net/?p=Sone.git;a=blobdiff_plain;f=src%2Fmain%2Fkotlin%2Fnet%2Fpterodactylus%2Fsone%2Fweb%2Fpages%2FDeleteImagePage.kt;fp=src%2Fmain%2Fkotlin%2Fnet%2Fpterodactylus%2Fsone%2Fweb%2Fpages%2FDeleteImagePage.kt;h=dc272bec10060ea17b3cb0b72cd93f1e3a69e9aa;hp=183705a91608858f170d8069ff0b7f9815918dc0;hb=05fb821e72072bde52f383bdc5a988da67f66d0c;hpb=f0c1becb30b360bf414ca9cbdd5df61490a9393c

diff --git a/src/main/kotlin/net/pterodactylus/sone/web/pages/DeleteImagePage.kt b/src/main/kotlin/net/pterodactylus/sone/web/pages/DeleteImagePage.kt
index 183705a..dc272be 100644
--- a/src/main/kotlin/net/pterodactylus/sone/web/pages/DeleteImagePage.kt
+++ b/src/main/kotlin/net/pterodactylus/sone/web/pages/DeleteImagePage.kt
@@ -14,17 +14,21 @@ class DeleteImagePage(template: Template, webInterface: WebInterface):
 		SoneTemplatePage("deleteImage.html", template, "Page.DeleteImage.Title", webInterface, true) {
 
 	override fun handleRequest(request: FreenetRequest, templateContext: TemplateContext) {
-		val image = webInterface.core.getImage(request.httpRequest.getPartAsStringFailsafe("image", 36)) ?: throw RedirectException("invalid.html")
-		if (!image.sone.isLocal) {
-			throw RedirectException("noPermission.html")
-		}
 		if (request.isPOST) {
+			val image = webInterface.core.getImage(request.httpRequest.getPartAsStringFailsafe("image", 36)) ?: throw RedirectException("invalid.html")
+			if (!image.sone.isLocal) {
+				throw RedirectException("noPermission.html")
+			}
 			if (request.httpRequest.isPartSet("abortDelete")) {
 				throw RedirectException("imageBrowser.html?image=${image.id}")
 			}
 			webInterface.core.deleteImage(image)
 			throw RedirectException("imageBrowser.html?album=${image.album.id}")
 		}
+		val image = webInterface.core.getImage(request.httpRequest.getParam("image")) ?: throw RedirectException("invalid.html")
+		if (!image.sone.isLocal) {
+			throw RedirectException("noPermission.html")
+		}
 		templateContext["image"] = image
 	}