admin/mixio
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update-admin-API

Browse Source
This commit is contained in:
Eason010212
2023-06-13 00:23:44 +08:00
parent fb3963757c
commit 47e39b78d4
1 changed files with 9 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
mixio.js
View File

@@ -1046,7 +1046,7 @@ var mixioServer = function() {
})
app.post('/addAccount', function(req, res) {
if (req.body.userName && req.body.password && req.body.question && req.body.answer) {
if (req.body.userName && req.body.password) {
db.get("select * from `user` where username=?", [req.body.userName], function(err, row) {
if (err)
res.send("Internal Error", 500)
@@ -1057,9 +1057,11 @@ var mixioServer = function() {
"reason": "user already exists"
})
} else {
var question = req.body.question ? req.body.question : ""
var answer = req.body.answer ? req.body.answer : ""
var salt = randomString(16, "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789")
var password = md5(req.body.password + salt)
db.run("insert into `user` (username, password, salt, verified, question, answer) values(?,?,?,1,?,?)", [req.body.userName, password, salt, req.body.question, req.body.answer], function(err) {
db.run("insert into `user` (username, password, salt, verified, question, answer) values(?,?,?,1,?,?)", [req.body.userName, password, salt, question, answer], function(err) {
if (err)
res.send("Internal Error", 500)
else
@@ -1079,16 +1081,16 @@ var mixioServer = function() {
})
app.post('/resetPassword', function(req, res) {
if (req.body.userName && req.body.password && req.body.question && req.body.answer) {
if (req.body.userName && req.body.oldPassword && req.body.newPassword) {
db.get("select * from `user` where username=?", [req.body.userName], function(err, row) {
if (err)
res.send("Internal Error", 500)
else {
if (row) {
if(row["question"] == req.body.question && row["answer"] == req.body.answer)
if(row["password"] == md5(req.body.oldPassword + row["salt"]))
{
var salt = randomString(16, "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789")
var password = md5(req.body.password + salt)
var password = md5(req.body.newPassword + salt)
db.run("update `user` set password=?,salt=? where username=?", [password, salt, req.body.userName], function(err) {
if (err)
res.send("Internal Error", 500)
@@ -1101,7 +1103,7 @@ var mixioServer = function() {
else
res.send({
"status": "failed",
"reason": "wrong answer"
"reason": "wrong password"
})
} else {
res.send({
@@ -1119,6 +1121,7 @@ var mixioServer = function() {
})
})
app.get('/getDevices', function(req, res) {
if (req.session.userName && req.query.userName) {
var userName = req.query.userName