How it Works

How GPHosting Works

A simple guide to direct uploads, secure link sharing, and API endpoints.

1. Direct Upload Process

To make uploads as fast as possible, files stream directly from your browser to Cloudflare R2 storage. Your file content never passes through our application servers.

How an upload happens:

Your browser asks for an upload slot (POST /api/files/initiate-upload).
The server checks your storage quota and gives you a temporary, secure direct-upload link.
Your browser uploads the file directly to storage.
Your browser notifies the server that the upload is done (POST /api/files/complete-upload).

2. Main API Endpoints

Endpoint	Method	Access	Limit	What it does
/api/files/initiate-upload	POST	Logged in	30 / hr	Start an upload and get a direct upload link.
/api/files/complete-upload	POST	Logged in	60 / hr	Confirm upload is finished and save the file.
/api/share/create	POST	Logged in	60 / hr	Create a share link with password/expiry.
/api/share/[slug]	GET	Public	120 / min	Get public details for a shared file.
/api/share/[slug]/claim	POST	Public	10 / min	Get a temporary download link.

3. Key Security Features

Safe Downloads: All files download as attachments to prevent potentially dangerous scripts from opening in your browser.
Self-Destructing Links: Once a single-use file is downloaded, its link expires immediately.
Protected Storage: Internal storage paths and server keys are never sent to the browser.