Check type and author in package details

2 files changed, 17 insertions, 1 deletions

diff --git a/app/models.py b/app/models.py
index 177e4c8..c5ce4b6 100644
--- a/app/models.py
+++ b/app/models.py
@@ -71,6 +71,17 @@ class PackageType(enum.Enum):
 		else:
 			return "TXP"
 
+	@staticmethod
+	def fromName(name):
+		if name == "mod":
+			return PackageType.MOD
+		elif name == "game":
+			return PackageType.GAME
+		elif name == "texturepacks":
+			return PackageType.TXP
+		else:
+			return None
+
 class Package(db.Model):
 	id           = db.Column(db.Integer, primary_key=True)
 
diff --git a/app/views/packages.py b/app/views/packages.py
index 73c9edd..8aaf324 100644
--- a/app/views/packages.py
+++ b/app/views/packages.py
@@ -24,7 +24,12 @@ def txp_page():
 
 @app.route("/<type>s/<author>/<name>/")
 def package_page(type, author, name):
-	package = Package.query.filter_by(name=name).first()
+	user = User.query.filter_by(username=author).first()
+	if user is None:
+		abort(404)
+
+	package = Package.query.filter_by(name=name, author_id=user.id,
+			type=PackageType.fromName(type)).first()
 	if package is None:
 		abort(404)