#!/usr/bin/env python
import os
from flask import Flask, request

app = Flask(__name__)
ADMIN_TOKEN = "1064aeb6c01fbd0b8c52b44988c258b4"


class File(object):
    def __init__(self, name):
        self.name = name

    def __repr__(self):
        if ".." in self.name:
            return "You are not allowed to read this file"
        if not os.path.isfile(self.name):
            return "File not found"
        return open(self.name).read()


@app.route("/")
def index():
    filename = request.args.get("filename", "")
    template = "Filename " + filename + "<br><textarea>{0}</textarea>"
    return template.format(File("./tpl/" + filename))

if __name__ == "__main__":
    app.run()