[bugs] Made usernames case-unsensitive ++

Made usernames case-unsensitive and added redirect for admin page when
logged out
main
Joaquin 3 years ago
parent 6b618a584e
commit de4da7844c
Signed by: puly
GPG Key ID: 9E9299CD96C65EC6
  1. 18
      app.js

@ -134,19 +134,21 @@ app.get('/loginact', (request, response) => {
if(request.query.user && request.query.pass){ if(request.query.user && request.query.pass){
var quser = request.query.user.toLowerCase();
if(activity === 'pass'){ if(activity === 'pass'){
credentials[request.query.user].pass = crypto.createHash('sha256').update(request.query.pass).digest('hex'); credentials[quser].pass = crypto.createHash('sha256').update(quser).digest('hex');
report(request.query.user + " RESET THEIR PASSWORD"); report(quser + " RESET THEIR PASSWORD");
response.writeHead(200); response.writeHead(200);
response.end('PASSWORS SET SUCCESFULLY!'); response.end('PASSWORS SET SUCCESFULLY!');
return; return;
} }
if(credentials[request.query.user].pass === crypto.createHash('sha256').update(request.query.pass).digest('hex')){ if(credentials[quser].pass === crypto.createHash('sha256').update(request.query.pass).digest('hex')){
request.session.user = request.query.user; request.session.user = quser;
credentials[request.query.user].loggedIn = 1; credentials[quser].loggedIn = 1;
report("LOG IN: " + request.query.user); report("LOG IN: " + quser);
} }
} }
@ -337,6 +339,10 @@ app.get('/admin', (request, response) => {
response.end(content); response.end(content);
return; return;
}); });
}else{
response.redirect('/');
response.end();
return;
} }
}); });

Loading…
Cancel
Save