|
|
|
@ -24,13 +24,25 @@ app.get('/new', function (req, res) { |
|
|
|
}); |
|
|
|
}); |
|
|
|
|
|
|
|
|
|
|
|
app.post('/note', function (req, res) { |
|
|
|
app.post('/note', function (req, res) { |
|
|
|
var body = req.body, session = body.session, note = body.note; |
|
|
|
var body = req.body, |
|
|
|
|
|
|
|
session = body.session, |
|
|
|
|
|
|
|
note = body.note, |
|
|
|
|
|
|
|
password = md5(body.password); |
|
|
|
|
|
|
|
var goToNote = note => res.redirect("/" + note.id); |
|
|
|
if (session.indexOf(getTimeStamp()) != 0) |
|
|
|
if (session.indexOf(getTimeStamp()) != 0) |
|
|
|
return res.status(400).send("Session expired"); |
|
|
|
return res.status(400).send("Session expired"); |
|
|
|
var expectedSignature = md5(session + note.replace(/[\n\r]/g, "")); |
|
|
|
var expectedSignature = md5(session + note.replace(/[\n\r]/g, "")); |
|
|
|
if (expectedSignature != body.signature) |
|
|
|
if (expectedSignature != body.signature) |
|
|
|
return res.status(400).send("Signature mismatch"); |
|
|
|
return res.status(400).send("Signature mismatch"); |
|
|
|
storage.addNote(note, body.password).then(note => res.redirect("/" + note.id)); |
|
|
|
console.log(body) |
|
|
|
|
|
|
|
if (body.action == "POST") |
|
|
|
|
|
|
|
storage.addNote(note, password).then(goToNote); |
|
|
|
|
|
|
|
else |
|
|
|
|
|
|
|
storage.updateNote(body.id, password, note).then(note => { |
|
|
|
|
|
|
|
CACHE.del(note.id); |
|
|
|
|
|
|
|
goToNote(note); |
|
|
|
|
|
|
|
}, |
|
|
|
|
|
|
|
error => res.status(403).send(error.message)) |
|
|
|
}); |
|
|
|
}); |
|
|
|
|
|
|
|
|
|
|
|
app.get("/:year/:month/:day/:title", function (req, res) { |
|
|
|
app.get("/:year/:month/:day/:title", function (req, res) { |
|
|
|
|