local Luan = require "luan:Luan.luan"
local error = Luan.error
local Parsers = require "luan:Parsers.luan"
local json_string = Parsers.json_string or error()
local Io = require "luan:Io.luan"
local Http = require "luan:http/Http.luan"
local Pic = require "site:/lib/Pic.luan"
local User = require "site:/lib/User.luan"
local Db = require "site:/lib/Db.luan"
local run_in_transaction = Db.run_in_transaction or error()


return function()
	local user = User.current() or error()
	local pic_id = Http.request.parameters.pic or error()
	local uuid = Http.request.parameters.uuid or error()
	local filename = Http.request.parameters.filename or error()
	local pic = Pic.get_by_id(pic_id)
	pic.user_id == user.id or error()
	run_in_transaction( function()
		pic = pic.reload()
		pic.uuid = uuid
		pic.filename = filename
		pic.save()
	end )
	Io.stdout = Http.response.text_writer()
%>
	document.querySelector('div[pic] img').src = <%= json_string(pic.get_url()) %>;
<%
end