This commit is contained in:
Moe Poi ~ 2021-11-21 14:05:15 +07:00
parent 62baeb4abc
commit 3465ed52c8

View file

@ -238,7 +238,7 @@ router.post("/login", async (req, res) => {
} }
}); });
router.get("/verify-mail", async (req, res) => { router.post("/verify-mail", async (req, res) => {
const conn = db.connect(); const conn = db.connect();
conn.query( conn.query(
'SELECT * FROM users WHERE token ="' + req.query.token + '"', 'SELECT * FROM users WHERE token ="' + req.query.token + '"',
@ -253,6 +253,7 @@ router.get("/verify-mail", async (req, res) => {
if (result[0].verify == 0) { if (result[0].verify == 0) {
var data = { var data = {
verify: 1, verify: 1,
token: randtoken.generate(64),
}; };
db_connect.query( db_connect.query(
'UPDATE users SET ? WHERE email ="' + result[0].email + '"', 'UPDATE users SET ? WHERE email ="' + result[0].email + '"',
@ -400,71 +401,145 @@ router.post("/reset-password", async (req, res) => {
}); });
router.post("/checkout", async (req, res) => { router.post("/checkout", async (req, res) => {
if ( if (!req.query.key) {
!req.body.firstName || res.status(401);
!req.body.lastName || res.json({
!req.body.phoneNumber || message: "Unauthorized",
!req.body.streetAddress1 || });
!req.body.streetAddress2 || } else {
!req.body.region || auth.auth_checker(req.query.key).then((status) => {
!req.body.province || if (status) {
!req.body.city || if (
!req.body.district || !req.body.firstName ||
!req.body.subDistrict || !req.body.lastName ||
!req.body.postalCode || !req.body.phoneNumber ||
!req.body.logistic || !req.body.streetAddress1 ||
!req.body.data !req.body.streetAddress2 ||
) { !req.body.region ||
!req.body.province ||
!req.body.city ||
!req.body.district ||
!req.body.subDistrict ||
!req.body.postalCode ||
!req.body.logistic ||
!req.body.data
) {
res.status(400);
res.json({
message: "Bad Request",
});
} else {
const conn = db.connect();
conn.query(
"SELECT * FROM users WHERE token = ?",
[req.query.key],
async function (error, resp, fields) {
if (error) {
res.status(401);
res.json({
message: "Unauthorized",
});
} else {
var data = {
firstName: req.body.firstName,
lastName: req.body.lastName,
phoneNumber: req.body.phoneNumber,
streetAddress1: req.body.streetAddress1,
streetAddress2: req.body.streetAddress2,
region: req.body.region,
province: req.body.province,
city: req.body.city,
district: req.body.district,
subDistrict: req.body.subDistrict,
postalCode: req.body.postalCode,
logistic: req.body.logistic,
paymentMethod: '-',
data: req.body.data,
userId: resp[0].id,
paid: '0',
status: 'pending'
};
conn.query(
"INSERT INTO transactions SET ?",
data,
function (error, response, fields) {
if (error) {
res.status(400);
res.json({
message: "Bad Request",
});
} else {
conn.query(
'SELECT * FROM transactions WHERE id ="' + response.insertId + '"',
function (err, result) {
if (err) {
res.status(400);
res.json({
message: "Bad Request",
});
} else {
res.status(201);
res.json({
'order_id': result[0].id,
'data': result[0].data
});
}
});
}
}
);
}
}
);
}
} else {
res.status(401);
res.json({
message: "Unauthorized",
});
}
});
}
});
router.get("/subscribe", (req, res) => {
if (!req.query.email) {
res.status(400); res.status(400);
res.json({ res.json({
message: "Bad Request", message: "Bad Request",
}); });
} else { } else {
const conn = db.connect(); const conn = db.connect();
var data = { conn.execute(
firstName: req.body.firstName, "SELECT * FROM `subscribe` WHERE `email` = ?",
lastName: req.body.lastName, [req.query.email],
phoneNumber: req.body.phoneNumber, function (err, results) {
streetAddress1: req.body.streetAddress1, if (!results[0]) {
streetAddress2: req.body.streetAddress2, let data = {
region: req.body.region, email: req.query.email,
province: req.body.province, type: "email"
city: req.body.city, };
district: req.body.district,
subDistrict: req.body.subDistrict,
postalCode: req.body.postalCode,
logistic: req.body.logistic,
paymentMethod: '-',
data: req.body.data,
userId: 14,
paid: '0',
status: 'pending'
};
conn.query(
"INSERT INTO transactions SET ?",
data,
function (error, response, fields) {
if (error) {
res.status(400);
res.json({
message: "Bad Request",
});
} else {
conn.query( conn.query(
'SELECT * FROM transactions WHERE id ="' + response.insertId + '"', "INSERT INTO subscribe SET ?",
function (err, result) { data,
if (err) { function (err, resp) {
res.status(400); if (err) {
res.json({ res.status(400);
message: "Bad Request", res.json({
}); message: "Bad Request",
} else { });
res.status(201); } else {
res.json({ res.status(201);
'order_id': result[0].id, res.json({
'data': result[0].data message: "Success",
}); });
}
} }
);
} else {
res.status(200);
res.json({
message: "Success",
}); });
} }
} }
@ -472,4 +547,5 @@ router.post("/checkout", async (req, res) => {
} }
}); });
module.exports = router; module.exports = router;