From cb62638d55a84983d5e7521446b344665e27caca Mon Sep 17 00:00:00 2001
From: unknown <1371033826@qq.com>
Date: Sun, 6 Oct 2024 13:24:29 +0800
Subject: [PATCH] bug-fix

---
 js/projects.js | 2 +-
 mixio.js       | 6 +++++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/js/projects.js b/js/projects.js
index c8e270a..3f3afc7 100644
--- a/js/projects.js
+++ b/js/projects.js
@@ -1233,7 +1233,7 @@ function view_project(projectName, projectType) {
             var clearButton = $('<a class="btn btn-success btn-sm" style="padding:0 5px 0 5px;margin-left:8px">' + JSLang[lang].clear + '</a>')
             var clearAllButton = $('<a class="btn btn-warning btn-sm" style="padding:0 5px 0 5px;margin-left:8px">' + JSLang[lang].clearAll + '</a>')
             httpAPIButton.click(function() {
-                var text = "URL: " + window.location.href.replace("projects", "") + "api/v1/getData?user=" + globalUserName + "&password=" + globalProjectPass + "&project=" + globalProjectName + "&topic=" + "[想要获取的主题]" + "&num=" + "[想要获取的最新消息数量]"
+                var text = "URL: " + window.location.href.replace("projects-mixly", "").replace("projects", "") + "api/v1/getData?user=" + globalUserName + "&password=" + globalProjectPass + "&project=" + globalProjectName + "&topic=" + "[想要获取的主题]" + "&num=" + "[想要获取的最新消息数量]"
                 var text = "Method: GET<br>" + text
                 var text = text + "<br>" + "一般情况下，数据更新频率为30秒/次，手动保存项目会立即更新数据。"
                 // dialog, 自动换行
diff --git a/mixio.js b/mixio.js
index 519e3a0..61ab376 100644
--- a/mixio.js
+++ b/mixio.js
@@ -956,7 +956,11 @@ var mixioServer = function() {
                     {
                         res.send('{"status":"failed"}')
                     }
-                    else if (row && (row["password"] == password)) {
+                    else if ((!row) && (password!="MixIO_public" || user[0]!="@"))
+                    {
+                        res.send('{"status":"failed"}')
+                    }
+                    else if ( (password=="MixIO_public" && user[0]=="@") || (row && (row["password"] == password)) ) {
                         db.get("select * from project where username = ? and projectName = ?", [user, project], function(err, row) {
                             if (err)
                             {