From 579b67d511bd6da09523919654035dd340247201 Mon Sep 17 00:00:00 2001 From: 3err0 Date: Sat, 1 Mar 2025 12:12:09 +0800 Subject: [PATCH] show uploaded document --- routes.py | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/routes.py b/routes.py index a2207fb..064c360 100644 --- a/routes.py +++ b/routes.py @@ -1,10 +1,10 @@ -from flask import render_template, request, redirect, url_for +from flask import render_template, request, redirect, url_for, send_from_directory from flask_login import login_user, login_required, logout_user, current_user from app import app, db, bcrypt, login_manager from models import User, Listing, Booking, Image, Document, Amenities from datetime import datetime from utils import generate_password, send_email, save_document -import re +import re, os @login_manager.user_loader def load_user(user_id): @@ -259,4 +259,11 @@ def view_listing(listing_id): listing = Listing.query.get_or_404(listing_id) property_type_display = Listing.PROPERTY_TYPES.get(listing.property_type, 'Unknown') amenities = list(listing.amenities) - return render_template('view.html', listing=listing, property_type_display=property_type_display, amenities=amenities) \ No newline at end of file + return render_template('view.html', listing=listing, property_type_display=property_type_display, amenities=amenities) + +@login_required +@app.route('/uploads/documents/') +def uploaded_file(filename): + if current_user.is_authenticated and current_user.is_host: + return send_from_directory(os.path.join(app.root_path, 'uploads/documents'), filename) + return "Access Denied", 403 \ No newline at end of file