diff options
Diffstat (limited to 'profile/index.js')
| -rw-r--r-- | profile/index.js | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/profile/index.js b/profile/index.js index cc0972a..80603c1 100644 --- a/profile/index.js +++ b/profile/index.js @@ -120,9 +120,10 @@ app.put("/api/comment", async (req, res) => { const { pid, cid, comment } = req.body; if (!pid || !comment || !cid) return res.json({ success: false }); try { - await db.query("UPDATE profile_comments SET comment = ? WHERE user_id = ? AND profile_id = ? AND id = ?", [ + await db.query("UPDATE profile_comments SET comment = ? WHERE (user_id = ? OR ?) AND profile_id = ? AND id = ?", [ comment, req.session.uid, + req.session.isAdmin, pid, cid, ]); @@ -137,8 +138,9 @@ app.delete("/api/comment", async (req, res) => { const { pid, cid } = req.body; if (!pid || !cid) return res.json({ success: false }); try { - await db.query("DELETE FROM profile_comments WHERE user_id = ? AND profile_id = ? AND id = ?", [ + await db.query("DELETE FROM profile_comments WHERE (user_id = ? OR ?) AND profile_id = ? AND id = ?", [ req.session.uid, + req.session.isAdmin, pid, cid, ]); |