Logo-Upload: Magic-Bytes-Pruefung (PNG/JPEG/WebP), dynamischer Dateiname

This commit is contained in:
Erik Thiele
2026-07-02 15:16:29 +02:00
parent 69a108e5b3
commit 93bf843903
2 changed files with 30 additions and 9 deletions

37
app.py
View File

@@ -168,25 +168,44 @@ def save_config_route():
@app.route('/upload_logo', methods=['POST'])
def upload_logo():
"""Logo-Datei hochladen und in static/logo.png speichern."""
"""Logo-Datei hochladen, auf gueltiges Bild pruefen und speichern."""
if 'logo' not in request.files:
return jsonify({'error': 'Keine Datei'}), 400
file = request.files['logo']
if file.filename == '':
return jsonify({'error': 'Keine Datei ausgewaehlt'}), 400
file.save(LOGO_FILE)
raw = file.read()
# Magic-Bytes-Pruefung
if raw[:8] == b'\x89PNG\r\n\x1a\n':
ext = 'png'
elif raw[:2] in (b'\xff\xd8',):
ext = 'jpg'
elif raw[:4] == b'RIFF' and raw[8:12] == b'WEBP':
ext = 'webp'
else:
return jsonify({'error': 'Nur PNG, JPEG oder WebP erlaubt'}), 400
filename = f'logo.{ext}'
filepath = os.path.join('static', filename)
with open(filepath, 'wb') as f:
f.write(raw)
config = load_config()
config['logo'] = 'logo.png'
config['logo'] = filename
save_config(config)
return jsonify({'status': 'ok', 'filename': 'logo.png'})
return jsonify({'status': 'ok', 'filename': filename})
@app.route('/delete_logo', methods=['POST'])
def delete_logo():
"""Logo loeschen."""
if os.path.exists(LOGO_FILE):
os.remove(LOGO_FILE)
config = load_config()
logo_name = config.get('logo', '')
if logo_name:
logo_path = os.path.join('static', logo_name)
if os.path.exists(logo_path):
os.remove(logo_path)
config['logo'] = ''
save_config(config)
return jsonify({'status': 'ok'})
@@ -251,8 +270,10 @@ def invoice_pdf():
pdf.cell(col_w, 4, " | ".join(contact_parts), ln=True)
# Logo rechts (Bild oder Text-Fallback)
if os.path.exists(LOGO_FILE):
pdf.image(LOGO_FILE, x=col_right, y=15, w=60)
logo_name = config.get('logo', '')
logo_path = os.path.join('static', logo_name) if logo_name else ''
if logo_name and os.path.exists(logo_path):
pdf.image(logo_path, x=col_right, y=15, w=60)
else:
pdf.set_font("Arial", "B", 22)
pdf.set_xy(col_right, 15)

View File

@@ -84,7 +84,7 @@
<div class="mb-3">
{% if config.logo %}
<div class="mb-2">
<img src="{{ url_for('static', filename='logo.png') }}" style="max-height:80px;max-width:240px" class="border rounded p-1">
<img src="{{ url_for('static', filename=config.logo) }}" style="max-height:80px;max-width:240px" class="border rounded p-1">
</div>
<button type="button" class="btn btn-outline-danger btn-sm mb-2" onclick="deleteLogo()">
<i class="ti ti-trash me-1"></i>Logo entfernen