X-Git-Url: https://git.pterodactylus.net/?p=Sone.git;a=blobdiff_plain;f=src%2Fmain%2Fkotlin%2Fnet%2Fpterodactylus%2Fsone%2Fweb%2Fpages%2FDeleteImagePage.kt;h=de118be9f65fe57d1d88986983806ec045352524;hp=183705a91608858f170d8069ff0b7f9815918dc0;hb=5ba707d40f9d2a20094aaabc21647aeec1feed46;hpb=de7568a82eb4150bf6d2b0553841b7b69f84c968

diff --git a/src/main/kotlin/net/pterodactylus/sone/web/pages/DeleteImagePage.kt b/src/main/kotlin/net/pterodactylus/sone/web/pages/DeleteImagePage.kt
index 183705a..de118be 100644
--- a/src/main/kotlin/net/pterodactylus/sone/web/pages/DeleteImagePage.kt
+++ b/src/main/kotlin/net/pterodactylus/sone/web/pages/DeleteImagePage.kt
@@ -1,7 +1,6 @@
 package net.pterodactylus.sone.web.pages
 
 import net.pterodactylus.sone.utils.isPOST
-import net.pterodactylus.sone.web.pages.SoneTemplatePage
 import net.pterodactylus.sone.web.WebInterface
 import net.pterodactylus.sone.web.page.FreenetRequest
 import net.pterodactylus.util.template.Template
@@ -14,17 +13,21 @@ class DeleteImagePage(template: Template, webInterface: WebInterface):
 		SoneTemplatePage("deleteImage.html", template, "Page.DeleteImage.Title", webInterface, true) {
 
 	override fun handleRequest(request: FreenetRequest, templateContext: TemplateContext) {
-		val image = webInterface.core.getImage(request.httpRequest.getPartAsStringFailsafe("image", 36)) ?: throw RedirectException("invalid.html")
-		if (!image.sone.isLocal) {
-			throw RedirectException("noPermission.html")
-		}
 		if (request.isPOST) {
+			val image = webInterface.core.getImage(request.httpRequest.getPartAsStringFailsafe("image", 36)) ?: throw RedirectException("invalid.html")
+			if (!image.sone.isLocal) {
+				throw RedirectException("noPermission.html")
+			}
 			if (request.httpRequest.isPartSet("abortDelete")) {
 				throw RedirectException("imageBrowser.html?image=${image.id}")
 			}
 			webInterface.core.deleteImage(image)
 			throw RedirectException("imageBrowser.html?album=${image.album.id}")
 		}
+		val image = webInterface.core.getImage(request.httpRequest.getParam("image")) ?: throw RedirectException("invalid.html")
+		if (!image.sone.isLocal) {
+			throw RedirectException("noPermission.html")
+		}
 		templateContext["image"] = image
 	}