Upload 3 files

app.py

@@ -2,6 +2,7 @@
 from fastapi import FastAPI, File, UploadFile, Form
 from fastapi.middleware.cors import CORSMiddleware
 import hashlib
+import urllib.parse  # 【核心新增】：用于处理中文文件名的 URL 编码
 import 数据库连接 as db
 
 # 引入拆分后的四大业务模块
@@ -34,11 +35,21 @@ def read_root():
 async def upload_file(file: UploadFile = File(...), file_type: str = Form(...)):
     content = await file.read()
     file_hash = hashlib.md5(content).hexdigest()[:10]
+    
     new_filename = f"{file_hash}_{file.filename}"
+    
+    # 【核心修复】：由于标准的 HTTP URL 不支持直接包含中文，
+    # 我们对文件名进行 URL 安全转码 (如把 '测试' 转为 '%E6%B5%8B%E8%AF%95')
+    safe_filename = urllib.parse.quote(file.filename)
+    safe_url_filename = f"{file_hash}_{safe_filename}"
+    
     dir_mapping = {"avatar": "avatars", "cover": "covers", "tool": "tools", "app": "apps"}
     target_dir = dir_mapping.get(file_type, "others")
     full_path_in_repo = f"{target_dir}/{new_filename}"
     
+    # 保存文件时使用原始名称（文件系统支持中文）
     db.save_file(full_path_in_repo, content)
-    url = f"https://huggingface.co/datasets/{db.DATASET_REPO_ID}/resolve/main/{full_path_in_repo}"
+    
+    # 返回给前端的下载链接，必须使用 URL Encode 编码后的名称，防止客户端 ascii 报错
+    url = f"https://huggingface.co/datasets/{db.DATASET_REPO_ID}/resolve/main/{target_dir}/{safe_url_filename}"
     return {"status": "success", "url": url, "display_name": file.filename, "hashed_name": new_filename}

models.py

@@ -62,4 +62,10 @@ class FollowToggle(BaseModel):
 class PrivateMessage(BaseModel):
     sender: str
     receiver: str
-    content: str
+    content: str
+
+class PrivacySettings(BaseModel):
+    follows: bool
+    likes: bool
+    favorites: bool
+    downloads: bool

router_users.py

@@ -4,7 +4,7 @@ import time
 import re
 import 数据库连接 as db
 from notifications import add_notification
-from models import UserRegister, UserLogin, UserUpdate, PasswordReset, FollowToggle
+from models import UserRegister, UserLogin, UserUpdate, PasswordReset, FollowToggle, PrivacySettings
 
 router = APIRouter()
 
@@ -85,4 +85,14 @@ async def toggle_follow(follow: FollowToggle):
         if follow.user_id in target_followers: target_followers.remove(follow.user_id)
         if follow.target_account in current_following: current_following.remove(follow.target_account)
     db.save_data("users.json", users_db)
+    return {"status": "success"}
+
+@router.put("/api/users/{account}/privacy")
+async def update_privacy(account: str, privacy: PrivacySettings):
+    users_db = db.load_data("users.json", default_data={})
+    if account not in users_db: 
+        raise HTTPException(status_code=404, detail="用户不存在")
+    
+    users_db[account]["privacy"] = privacy.dict()
+    db.save_data("users.json", users_db)
     return {"status": "success"}