cgi-bin/delete-file.py


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

#!/usr/bin/env python
import os
from urllib.parse import parse_qs

print("Content-Type: application/json; charset=utf-8")
print("")

query = parse_qs(os.environ.get('QUERY_STRING', ''))
if "filename" in query:
    filename = query["filename"][0]
    if "/" in filename:
        exit()
    os.remove("uploads/" + filename)

print('{"ok": true}')