<%pre>

#include <setup.h>
#include <filecache.h>
#include <tntfeatures.h>

using namespace vdrlive;

</%pre>
<%session scope="global">
bool logged_in(false);
</%session>
<%cpp>
std::string mime("image/png");
if (request.getArgsCount() > 0) {
#if TNT_MAPURL_NAMED_ARGS
  mime = request.getArg("mime-type");
#else
  mime = request.getArg(0);
#endif
  // dsyslog("vdrlive::content found mime arg (%s)", mime.c_str());
}
reply.setContentType(mime);
// dsyslog("vdrlive::content::mimetype(%s)", mime.c_str());

std::string const path(request.getPathInfo());
// dsyslog("vdrlive::content: path = %s", path.c_str());

// security checking of path. In order to not allow exploits the
// path must be absolute and not contain any upward references (e.g '../')
if (path.empty()) {
  return HTTP_BAD_REQUEST;
}
if ('/' != path[0]) {
  return HTTP_BAD_REQUEST;
}
if (std::string::npos != path.find("../", 1)) {
  return HTTP_BAD_REQUEST;
}

FileCache::ptr_type f = LiveFileCache().get(path);

if (f.get() == 0) {
  // dsyslog("vdrlive::content: DECLINED");
  return DECLINED;
}
std::string ctime = tnt::HttpMessage::htdate(f->ctime());
std::string browserTime = request.getHeader(tnt::httpheader::ifModifiedSince);
if (browserTime == ctime) {
  // dsyslog("vdrlive::content: HTTP_NOT_MODIFIED");
  return HTTP_NOT_MODIFIED;
}

// dsyslog("vdrlive::content: send %d bytes of data", f->size());
reply.setHeader(tnt::httpheader::lastModified, ctime);
reply.out().write(f->data(), f->size());
</%cpp>
