68 lines
2.3 KiB
JavaScript
68 lines
2.3 KiB
JavaScript
|
const express = require('express');
|
||
|
|
const apiPanel = express.Router();
|
||
|
|
const fs = require('fs');
|
||
|
|
|
||
|
|
require('dotenv').config();
|
||
|
|
//mysql
|
||
|
|
var mysql = require('mysql2');
|
||
|
|
var con = mysql.createConnection({
|
||
|
|
host: process.env.MYSQLHOST,
|
||
|
|
user: process.env.MYSQLUSER,
|
||
|
|
password: process.env.MYSQLPASS,
|
||
|
|
port : process.env.MYSQLPORT,
|
||
|
|
database: process.env.MYSQLDB,
|
||
|
|
insecureAuth : true
|
||
|
|
});
|
||
|
|
con.connect(function(err) {
|
||
|
|
if (err) throw err;
|
||
|
|
console.log('Connected!');
|
||
|
|
});
|
||
|
|
var bodyParser = require('body-parser');
|
||
|
|
apiPanel.use(bodyParser.json());
|
||
|
|
const {checkPesel, loger, sendToDiscord, sendEmail, makeid, checkSendEmail, baza, massEmail} = require('./func.js');
|
||
|
|
|
||
|
|
|
||
|
|
//sprawdź czy token jest w bazie i jest 24h od generacji, jeżeli starszy zwróć że trzeba się zalogować ponownie
|
||
|
|
apiPanel.use(function(req, res, next) {
|
||
|
|
var token = req.headers.token || req.body.token;
|
||
|
|
con.query("SELECT * FROM tokeny WHERE token = ? AND aktywny = 1", [token], function(err, result) {
|
||
|
|
if(result.length > 0) {
|
||
|
|
var czas = new Date(result[0].czasAktywacji);
|
||
|
|
var now = new Date();
|
||
|
|
if(now.getTime() - czas.getTime() > 86400000) {
|
||
|
|
res.send(403, {response: "Zaloguj się ponownie"});
|
||
|
|
} else {
|
||
|
|
next();
|
||
|
|
}
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
res.send(403, {response: "Nie jesteś zalogowany"});
|
||
|
|
}
|
||
|
|
});
|
||
|
|
});
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
apiPanel.post("/liczacy", function(req, res) {
|
||
|
|
var imie = req.body.imie;
|
||
|
|
var nazwisko = req.body.nazwisko;
|
||
|
|
var qr = makeid(24);
|
||
|
|
con.query("SELECT * FROM liczacy WHERE qr = ?", [qr], function(err, result) {
|
||
|
|
if(result.length > 0) {
|
||
|
|
res.send(400, {response: "Błąd, spróbuj ponownie"});
|
||
|
|
} else {
|
||
|
|
con.query("SELECT * FROM liczacy WHERE imie = ? AND nazwisko = ? AND aktywne = 1", [imie, nazwisko], function(err, result) {
|
||
|
|
if(result.length > 0) {
|
||
|
|
res.send(403, {response: "Błąd, spróbuj ponownie, taka osoba istnieje"});
|
||
|
|
} else {
|
||
|
|
con.query("INSERT INTO liczacy (imie, nazwisko, qr) VALUES (?, ?, ?)", [imie, nazwisko, qr], function(err, result) {
|
||
|
|
res.send({response: "Dodano", qr: qr});
|
||
|
|
});
|
||
|
|
}
|
||
|
|
});
|
||
|
|
}
|
||
|
|
});
|
||
|
|
});
|
||
|
|
|
||
|
|
|
||
|
|
module.exports = apiPanel;
|