1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
|
const express = require("express");
const db = require("../db");
const app = express.Router();
const { checkUser } = require("../auth");
app.use("/", checkUser, express.static(__dirname + "/public"));
app.post("/api/answer", checkUser, async (req, res) => {
if (!req.body.answer || !req.body.question || !req.query.type) return res.send("error");
if (req.body.answer == req.session.uid) return res.send("error");
try {
if (req.query.type == "pupil") {
const user_class = (await db.query("SELECT class_id FROM users WHERE id = ?", [req.session.uid]))[0]
.class_id;
const answer_class = (
await db.query("SELECT class_id FROM users WHERE id = ?", [parseInt(req.body.answer)])
)[0].class_id;
if (user_class != answer_class) return res.send("error");
} else if (req.query.type == "teacher") {
const answer_type = (
await db.query(
"SELECT t.name FROM users AS u INNER JOIN types AS t ON u.type_id = t.id WHERE u.id = ?",
[parseInt(req.body.answer)],
)
)[0].name;
if (answer_type != "teacher") return res.send("error");
} else {
return res.send("error");
}
await db.query("INSERT INTO ranking_answers (question_id, user_id, answer_id) VALUE (?,?,?)", [
parseInt(req.body.question),
req.session.uid,
parseInt(req.body.answer),
]);
res.redirect("/poll?type=" + req.query.type);
} catch (e) {
console.error(e);
res.send("error");
}
});
app.get("/api/get", checkUser, async (req, res) => {
try {
const question = (
await db.query(
"SELECT q.id, q.question, t.name FROM ranking_questions AS q INNER JOIN types AS t ON type_id = t.id WHERE q.id NOT IN (SELECT question_id FROM ranking_answers WHERE user_id = ?) AND t.name = ? LIMIT 1",
[req.session.uid, req.query.type],
)
)[0];
res.json(question);
} catch (e) {
console.error(e);
res.send("error");
}
});
module.exports = app;
|
