Include basic handling for improper unique/file IDs.

Author: mcab

app/Http/Controllers/FilesController.php

@@ -41,4 +41,14 @@ public function store()
 
         return back();
     }
+    public function get($unique_id, $file_id)
+    {
+        if ($unique_id !== auth()->user()->unique_id){
+            return back();
+        }
+        if (! \Storage::disk('public')->exists($unique_id . '/' . $file_id)) {
+            return back();
+        }
+        return \Storage::url($unique_id . '/' . $file_id);
+    }
 }

routes/web.php

@@ -20,4 +20,4 @@
 Route::get('/home', 'HomeController@index')->name('home');
 Route::get('/files', 'FilesController@index')->name('files');
 Route::post('/files', 'FilesController@store');
-Route::get('/files/{unique_id}/{file_id}', 'FilesController@get');
+Route::get('/storage/{unique_id}/{file_id}', 'FilesController@get');