Show a 404 error page if attachment can not be read.

git-svn-id: http://redmine.rubyforge.org/svn/trunk@544 e93f8b46-1217-0410-a6f0-8f06a7374b81

Show a 404 error page if attachment can not be read.
git-svn-id: http://redmine.rubyforge.org/svn/trunk@544 e93f8b46-1217-0410-a6f0-8f06a7374b81
c99da154 · Jean-Philippe Lang · ef39db23 · c99da154
Commit c99da154 authored May 26, 2007 by Jean-Philippe Lang
Hide whitespace changes
Inline Side-by-side

Showing with 5 additions and 0 deletions

attachments_controller.rb app/controllers/attachments_controller.rb +5 -0

No files found.
--- a/app/controllers/attachments_controller.rb
+++ b/app/controllers/attachments_controller.rb
@@ -16,17 +16,22 @@
 # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

 class AttachmentsController < ApplicationController
+  layout 'base'
  before_filter :find_project, :check_project_privacy

  # sends an attachment
  def download
    send_file @attachment.diskfile, :filename => @attachment.filename
+  rescue
+    render_404
  end
    
  # sends an image to be displayed inline
  def show
    render(:nothing => true, :status => 404) and return unless @attachment.diskfile =~ /\.(jpeg|jpg|gif|png)$/i
    send_file @attachment.diskfile, :type => "image/#{$1}", :disposition => 'inline'
+  rescue
+    render_404
  end
 
 private