Advertisement
Guest User

Untitled

a guest
Dec 1st, 2015
62
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. /////////////////////////////////////////////
  2. // NodeCMS                                //
  3. // ---------------------------------------//
  4. // @version 0.1                          //
  5. // @authors Meikel Smirnow              //
  6. /////////////////////////////////////////////
  7. var express = require('express');
  8. var mysql = require('mysql');
  9. var phpjs = require('phpjs');
  10. var bodyParser = require('body-parser');
  11. var path = require('path');
  12. var swig  = require('swig');
  13. var session = require('express-session');
  14.  
  15. //Settings
  16. var app = express();
  17. app.use(bodyParser.urlencoded({ extended: false }));
  18. app.use(bodyParser.json());
  19. app.engine('html', swig.renderFile);
  20. app.set('view engine', 'html');
  21. app.set('views', __dirname + '/views');
  22. app.set('view cache', false);
  23. swig.setDefaults({ cache: false });
  24. app.use(session({secret: 'asfasdg2314323asf23asd2'}));
  25.  
  26. var sql = mysql.createConnection({
  27.     host    : '127.0.0.1',
  28.     user    : 'root',
  29.     password: '',
  30.     database: 'test'
  31. });
  32.  
  33. var current_session;
  34.  
  35. // MySQL
  36. sql.connect((error) => {
  37.     if(error) {
  38.         console.log('Couldn\'t connect to the database: ' + error);
  39.         process.exit(0);
  40.     }
  41. });
  42.  
  43. //Define Routes
  44. app.get('/', function(req, res) {
  45.   current_session = req.session;
  46.  
  47.   if(current_session.username && current_session.password) {
  48.     res.redirect('/me');
  49.   }
  50.   else {
  51.     res.sendFile(__dirname + '/views/index.html');
  52.   }
  53. });
  54.  
  55. app.post('/login', function(req, res) {
  56.   var username = req.body.username;
  57.   var password = phpjs.md5(req.body.password);
  58.   current_session = req.session;
  59.  
  60.   var test = sql.query("SELECT * FROM users WHERE username = \"" + mysql.escape(username) + "\" AND password = '" + password + "' LIMIT 1", (error, rows, fields) => {
  61.     if(error) {
  62.       console.log(test);
  63.       console.log('Couldn\'t execute query: ' + error);
  64.       res.end('Couldn\'t execute query: ' + error);
  65.     }
  66.     else {
  67.       if(rows.length > 0) {
  68.         //console.log(test);
  69.         current_session.username = username;
  70.         current_session.password = password;
  71.  
  72.         res.redirect('/me');
  73.       }
  74.     }
  75.   });
  76. });
  77.  
  78. app.get('/me', function(res, req) {
  79.   current_session = req.session;
  80.   /*if(!current_session.username && !current_session.password) {
  81.     res.redirect('/');
  82.   }*/
  83.  
  84.   console.log(req.session);
  85. });
  86.  
  87. var server = app.listen(1337, () => {
  88.     var host = server.address().address;
  89.     var port = server.address().port;
  90.  
  91.     console.log('NodeCMS listening at http://%s:%s', host, port);
  92. });
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement