eoor fix

Author: devsayed2602

src/workers/generatorworker.cpp

@@ -24,7 +24,9 @@ void GeneratorWorker::run() {
         emit status("Fetching game data...");
 
         // Build URL
-        QString url = QString("https://crackworld.vercel.app/api/free-download?appid=%1&user=luamanifest").arg(m_appId);
+        QString url = QString("%1/api/free-download?appid=%2&user=luamanifest")
+            .arg(Config::WEBSERVER_BASE_URL)
+            .arg(m_appId);
         QString cacheDirStr = Paths::getLocalCacheDir();
         QString archivePath = QDir(cacheDirStr).filePath(m_appId + "_gen.zip");
         QString extractDir = QDir(cacheDirStr).filePath(m_appId + "_gen");

webserver/app.py

@@ -3,9 +3,11 @@
 Flask application to serve Lua files for the Steam Lua Patcher desktop app.
 """
 
-from flask import Flask, send_from_directory, jsonify, abort, request, Response
+from flask import Flask, send_from_directory, jsonify, abort, request, Response, send_file
 import os
 import json
+import io
+import zipfile
 from datetime import datetime
 from functools import wraps
 from dotenv import load_dotenv
@@ -229,6 +231,43 @@ def serve_index():
     abort(404, description="games_index.json not found. Run generate_index.py first.")
 
 
+@app.route('/api/free-download')
+def free_download():
+    """Download a game Lua file packaged as a ZIP archive"""
+    app_id = request.args.get('appid')
+    if not app_id:
+        return jsonify({'error': 'Missing appid parameter'}), 400
+    
+    # Clean app_id to prevent path traversal
+    import re
+    app_id = re.sub(r'[^0-9]', '', str(app_id))
+    
+    filename = f"{app_id}.lua"
+    file_path = os.path.join(GAMES_DIR, filename)
+    
+    if not os.path.exists(file_path):
+        return jsonify({'error': f'Game patch {app_id} not found'}), 404
+    
+    try:
+        # Create ZIP in memory
+        memory_file = io.BytesIO()
+        with zipfile.ZipFile(memory_file, 'w', zipfile.ZIP_DEFLATED) as zf:
+            zf.write(file_path, arcname=filename)
+        
+        memory_file.seek(0)
+        
+        return send_file(
+            memory_file,
+            mimetype='application/zip',
+            as_attachment=True,
+            download_name=f"{app_id}_patch.zip"
+        )
+    except Exception as e:
+        return jsonify({'error': 'Generation failed', 'message': str(e)}), 500
+
+
+
+
 @app.route('/api/check/<app_id>')
 @require_token
 def check_availability(app_id):