dxs/learn-request-queue
1
0
Fork 0
Code Issues 12 Pull requests Projects Releases 11 Wiki Activity

Block banned users from adding requests or voting

Browse source 
Also, some minor refactoring.
This commit is contained in:
Dessa Simpson 2020-09-14 23:01:11 -07:00
parent ccfcc57540
commit 7de73c9565
3 changed files with 21 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

12
src/app.ts
View file

@ -71,6 +71,12 @@ app.post("/api/addRequest", async (request, response) => {
response.send("Must be logged in");
return;
}
var banned = await db.query(queries.checkBan).then((result: pg.QueryResult) => result.rowCount > 0);
if (banned) {
response.status(401);
response.send("You are banned; you may not add new requests.");
return;
}
if (!request.body.url) {
response.status(400);
response.send("Missing url");
@ -186,6 +192,12 @@ app.post("/api/addVote", async (request,response) => {
response.send("Must be logged in");
return;
}
var banned = await db.query(queries.checkBan).then((result: pg.QueryResult) => result.rowCount > 0);
if (banned) {
response.status(401);
response.send("You are banned; you may not vote on requests.");
return;
}
if (!request.body.url) {
response.status(400);
response.send("Missing url");