1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
const express = require("express");
const db = require("../db");
const app = express.Router();
const { checkUser } = require("../auth");
app.use("/", checkUser, express.static(__dirname + "/public"));
app.post("/api/add", checkUser, async (req, res) => {
if (!req.body.author || !req.body.quote) return res.send("error");
try {
await db.query("INSERT INTO quotes (user_id, author_id, quote) VALUE (?,?,?)", [
req.session.uid,
parseInt(req.body.author),
req.body.quote,
]);
res.redirect("/quotes");
} catch (e) {
console.error(e);
res.json("error");
}
});
app.get("/api/list", checkUser, async (req, res) => {
const quotes = await db.query(
"SELECT q.id, a.name, a.middlename, a.surname, q.quote, c.name AS class FROM quotes AS q INNER JOIN users AS a ON author_id = a.id INNER JOIN class AS c ON a.class_id = c.id ORDER BY a.name"
);
res.json(quotes);
});
module.exports = app;
|
