'use strict' const express = require('express') const fs = require('fs') const path = require('path') const sqlite3 = require('sqlite3').verbose() const app = express() const port = 3000 const repositoryDirectory = './user-content-access/' const dbFile = './gitcub.db' app.set('view engine', 'pug') app.set('views', './views') const directoryExists = (path) => fs.existsSync(path) ? fs.statSync(path).isDirectory() : false const repositoryExists = (name, rows) => { return directoryExists(repositoryDirectory + name) && rows.some(x => x.name == name) } var db = new sqlite3.Database(dbFile, sqlite3.OPEN_READWRITE) app.get('*', (req, res) => { db.all('select name from repositories', (err, rows) => { if (req.originalUrl.indexOf('\0') == -1) { let pathNormalized = path.normalize(req.path) let pathArray = pathNormalized.split('/').filter((x) => x.length > 0) let pathIsValid = (pathArray) => { if (pathArray.length > 0) { if (repositoryExists(pathArray[0], rows)) { if (directoryExists(repositoryDirectory + pathArray.join('/'))) { return true } else return false } else return false } else return false } if (pathIsValid(pathArray)) { var dirList = fs.readdirSync(repositoryDirectory + pathArray.join('/'), (err, files) => { if (err) console.log(err) else return files }) res.render('index', { dirList: dirList }) } else res.send('Repository does not exist.') } else res.send('Null byte found in url. Nice try :)') }) }) app.listen(port, () => { console.log(`Example app listening on port ${port}`) })