Software: Apache/2.4.41 (Ubuntu). PHP/8.0.30 

uname -a: Linux apirnd 5.4.0-204-generic #224-Ubuntu SMP Thu Dec 5 13:38:28 UTC 2024 x86_64 

uid=33(www-data) gid=33(www-data) groups=33(www-data) 

Safe-mode: OFF (not secure)

/usr/local/lib/node_modules/homebridge-camera-ui/server/components/files/   drwxr-xr-x
Free 13.31 GB of 57.97 GB (22.95%)
                            Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Self remove    Logout    

Viewing file:     files.controller.js (829 B)      -rw-r--r--

/* eslint-disable unicorn/prevent-abbreviations */
'use-strict';

const path = require('path');

const SettingsModel = require('../settings/settings.model');

const config = require('../../../services/config/config.service.js');
let userPath = path.join(config.ui.dbPath, 'db', 'users');

exports.serve = async (req, res) => {
  try {
    const recordingSettings = await SettingsModel.getByTarget('recordings');

    let file = req.params.file;
    let recPath = recordingSettings.path;

    if (file.includes('photo_')) {
      file = file.includes('?r=') ? file.split('?r=')[0] : file;
      recPath = userPath;
    }

    let options = {
      root: path.join(recPath),
    };

    res.sendFile(file, options);
  } catch (error) {
    res.status(500).send({
      statusCode: 500,
      message: error.message,
    });
  }
};