var express = require('express');
var router = express.Router();
var async = require('async');

var util = require('../utils/util');
var db = require('../utils/database');
var connection = db.connection();

router.get('/login', function (req, res) {
  if (req.session.manager) {
    return res.redirect('/');
  }

  if (req.query.tip == 'error') {
    var tip = 'username or password incorrect!';
  } else {
    var tip = null;
  }
  res.render('login', { tip: tip });
});

router.post('/login', function (req, res) {
  var username = req.body.username;
  var password = req.body.password;
  var sql = 'SELECT * FROM restaurant_accounts WHERE ra_name=?';
  connection.query(sql, [username], function (err, result) {
    if (err) throw err;
    if (result.length == 0) {
      return res.redirect('/manager/login?tip=error');
    }
    var account = result[0];
    if (!util.checkHash(password, account.ra_password)) {
      return res.redirect('/manager/login?tip=error');
    }

    connection.query('SELECT * FROM restaurants WHERE rest_owner_id=?', [account.ra_id], function (err, result) {
      if (err) throw err;
      var restaurant = result[0];
      req.session.manager = {
        id: account.ra_id,
        name: account.ra_name,
        rest_id: restaurant.rest_id,
        rest_name: restaurant.rest_name
      };
      res.redirect('/');
    });
  });
});

router.get('/logout', function (req, res) {
  req.session.destroy();
  res.redirect('/manager/login');
});

module.exports = router;

C:MrestroRESTaurant_backend-masterrest-server>node binwww
Express server listening on port 80
GET / 302 15ms - 72b
GET /manager/login 200 12ms - 989b
GET /css/bootstrap.css 304 5ms
GET /js/jquery.min.js 304 10ms
GET /css/main.css 304 3ms
GET /images/bg.jpg 304 1ms
POST /manager/login 302 23ms - 92b
GET /manager/login?tip=error 304 5ms
GET /css/bootstrap.css 304 2ms
GET /css/main.css 304 3ms
GET /js/jquery.min.js 304 6ms
GET /images/bg.jpg 304 1ms
C:MrestroRESTaurant_backend-masterrest-servernode_modulesmysqllibprotocolParser.js:78
        throw err; // Rethrow non-MySQL errors
        ^

TypeError: must start with number, buffer, array or string
    at fromObject (buffer.js:138:11)
    at new Buffer (buffer.js:65:10)
    at Object.exports.checkHash (C:MrestroRESTaurant_backend-masterrest-serverutilsutil.js:29:14)
    at Query._callback (C:MrestroRESTaurant_backend-masterrest-serverwebmanager.js:32:15)
    at Query.Sequence.end (C:MrestroRESTaurant_backend-masterrest-servernode_modulesmysqllibprotocolsequencesSequence.js:85:24)
    at Query._handleFinalResultPacket (C:MrestroRESTaurant_backend-masterrest-servernode_modulesmysqllibprotocolsequencesQuery.js:144:8)
    at Query.EofPacket (C:MrestroRESTaurant_backend-masterrest-servernode_modulesmysqllibprotocolsequencesQuery.js:128:8)
    at Protocol._parsePacket (C:MrestroRESTaurant_backend-masterrest-servernode_modulesmysqllibprotocolProtocol.js:280:23)
    at Parser.write (C:MrestroRESTaurant_backend-masterrest-servernode_modulesmysqllibprotocolParser.js:74:12)
    at Protocol.write (C:MrestroRESTaurant_backend-masterrest-servernode_modulesmysqllibprotocolProtocol.js:39:16)

C:MrestroRESTaurant_backend-masterrest-server>