mirror of
https://github.com/DerTyp7/shop-ejs-expressjs.git
synced 2025-10-29 12:32:11 +01:00
fixed cookies again
This commit is contained in:
44
index.js
44
index.js
@@ -29,18 +29,19 @@ app.use(express.static(__dirname + "/static"));
|
|||||||
function authNoRedirectHandler(req, res, next){
|
function authNoRedirectHandler(req, res, next){
|
||||||
const authcookie = req.cookies.authcookie; // Get authcookie from cookie
|
const authcookie = req.cookies.authcookie; // Get authcookie from cookie
|
||||||
|
|
||||||
jwt.verify(authcookie, SECRET_KEY, (err, data) =>{ // Verify authcookie
|
if(authcookie){
|
||||||
if(err){ // If authcookie is invalid
|
jwt.verify(authcookie, SECRET_KEY, (err, data) =>{ // Verify authcookie
|
||||||
console.log(err);
|
if(err){ // If authcookie is invalid
|
||||||
next();
|
console.log(err);
|
||||||
} else if(data.user){ // If authcookie is valid
|
req.user = false;
|
||||||
req.user = data.user; // Set user to data.user
|
next();
|
||||||
mysql_handler.con.query(`SELECT * FROM users WHERE id = "${req.user}"`, (err, result) => { // Get user from database
|
} else if(data.user){ // If authcookie is valid
|
||||||
|
req.user = data.user; // Set user to data.user
|
||||||
|
mysql_handler.con.query(`SELECT * FROM users WHERE id = "${req.user}"`, (err, result) => { // Get user from database
|
||||||
|
|
||||||
if(err) console.log(err);
|
if(err) console.log(err);
|
||||||
let user = JSON.parse(JSON.stringify(result))[0]; // Parse user from database
|
let user = JSON.parse(JSON.stringify(result))[0]; // Parse user from database
|
||||||
try{
|
if(result.length > 0){
|
||||||
if(user.id){
|
|
||||||
// Set user to req.user
|
// Set user to req.user
|
||||||
req.isAdmin = user.isAdmin;
|
req.isAdmin = user.isAdmin;
|
||||||
req.username = user.username;
|
req.username = user.username;
|
||||||
@@ -48,14 +49,15 @@ function authNoRedirectHandler(req, res, next){
|
|||||||
req.lastname = user.lastname;
|
req.lastname = user.lastname;
|
||||||
req.email = user.email;
|
req.email = user.email;
|
||||||
}
|
}
|
||||||
}catch{
|
next(); // Continue to next handler
|
||||||
res.redirect('/logout')
|
});
|
||||||
return;
|
}
|
||||||
}
|
});
|
||||||
next(); // Continue to next handler
|
}else{
|
||||||
});
|
console.log("No Redirect: Not autheticated")
|
||||||
}
|
req.user = false;
|
||||||
});
|
next();
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
@@ -108,9 +110,11 @@ function notAuthenticatedHandler(req, res, next){
|
|||||||
|
|
||||||
// Homepage
|
// Homepage
|
||||||
app.get("/", authNoRedirectHandler, (req, res) => {
|
app.get("/", authNoRedirectHandler, (req, res) => {
|
||||||
|
|
||||||
mysql_handler.con.query("SELECT * FROM products", function(err, result){
|
mysql_handler.con.query("SELECT * FROM products", function(err, result){
|
||||||
if(err) throw err;
|
if(err) throw err;
|
||||||
let products = JSON.parse(JSON.stringify(result));
|
let products = JSON.parse(JSON.stringify(result));
|
||||||
|
|
||||||
mysql_handler.con.query("SELECT * FROM product_images", function(err, result){
|
mysql_handler.con.query("SELECT * FROM product_images", function(err, result){
|
||||||
if(err) throw err;
|
if(err) throw err;
|
||||||
let dict = {
|
let dict = {
|
||||||
@@ -176,7 +180,7 @@ app.get("/product/:productId", authNoRedirectHandler, (req, res) => {
|
|||||||
mysql_handler.con.query(`SELECT title, content ,rating, u.username AS name FROM reviews AS r LEFT JOIN users AS u ON r.userId = u.id WHERE productId=${productId}`,function(err,result){
|
mysql_handler.con.query(`SELECT title, content ,rating, u.username AS name FROM reviews AS r LEFT JOIN users AS u ON r.userId = u.id WHERE productId=${productId}`,function(err,result){
|
||||||
if(err) throw err;
|
if(err) throw err;
|
||||||
let reviews = JSON.parse(JSON.stringify(result));
|
let reviews = JSON.parse(JSON.stringify(result));
|
||||||
console.log(product)
|
|
||||||
mysql_handler.con.query(`SELECT * FROM categories WHERE id IN (SELECT category_id FROM product_categories WHERE product_id = ${product.id})`,function(err,result){
|
mysql_handler.con.query(`SELECT * FROM categories WHERE id IN (SELECT category_id FROM product_categories WHERE product_id = ${product.id})`,function(err,result){
|
||||||
if(err) throw err;
|
if(err) throw err;
|
||||||
let categories = JSON.parse(JSON.stringify(result));
|
let categories = JSON.parse(JSON.stringify(result));
|
||||||
|
|||||||
@@ -35,6 +35,10 @@
|
|||||||
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
.grid-item img{
|
||||||
|
cursor:pointer;
|
||||||
|
}
|
||||||
|
|
||||||
.grid-item p {
|
.grid-item p {
|
||||||
display: block;
|
display: block;
|
||||||
height: 50px;
|
height: 50px;
|
||||||
|
|||||||
Reference in New Issue
Block a user