display 404 when file not found

deck9 · Jul 19, 2024 · f6981d9 · f6981d9
1 parent be1c28c
commit f6981d9
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/app/Http/Controllers/FormUploadsDownloadController.php b/app/Http/Controllers/FormUploadsDownloadController.php
@@ -12,6 +12,10 @@ public function __invoke(Request $request, $upload)
     {
         $upload = FormSessionUpload::whereUuid($upload)->firstOrFail();
 
+        if (!Storage::fileExists($upload->path)) {
+            abort(404);
+        }
+
         return Storage::download($upload->path, $upload->name);
     }
 }