diff options
| author | HumairAK <humair88@hotmail.com> | 2016-07-27 00:49:21 +0000 |
|---|---|---|
| committer | HumairAK <humair88@hotmail.com> | 2016-07-27 00:49:21 +0000 |
| commit | 7e30cb0b87d8ead0b4746238c533630f252619ef (patch) | |
| tree | a19851ef823fa4c48aea9d267a1cb3c8adbcac84 | |
| parent | 20220f9c3cf0cf8e1efbe850aba4a99f23d9a0cb (diff) | |
fixed csrf and redirect issues with follow exam
| -rw-r--r-- | routes/index.js | 3 | ||||
| -rw-r--r-- | routes/user.js | 3 | ||||
| -rw-r--r-- | views/questions.hbs | 9 |
3 files changed, 11 insertions, 4 deletions
diff --git a/routes/index.js b/routes/index.js index 219b7b7..d631d7b 100644 --- a/routes/index.js +++ b/routes/index.js @@ -184,7 +184,8 @@ router.get('/questions/:exam_id', function (req,res) { pageCount : exam.page_count, questionCount : exam.questions_count }; - res.render('questions', {query: qList, examInfo: examInfo}); + res.render('questions', {query: qList, examInfo: examInfo, csrfToken: req.csrfToken()}); + req.session.messages = null; }); }else{ req.session.messages = {error : "Could not find exam."}; diff --git a/routes/user.js b/routes/user.js index 22a30a4..74c5427 100644 --- a/routes/user.js +++ b/routes/user.js @@ -350,7 +350,8 @@ router.post('/follow_exam/:examID',function (req, res) { }else{ var message = "Must be logged in to follow an exam!"; req.session.messages = {error : message}; - res.redirect('/questions/' + examID); + res.redirect('/questions/' + examId); + } }); diff --git a/views/questions.hbs b/views/questions.hbs index e5bf21d..1d62a2b 100644 --- a/views/questions.hbs +++ b/views/questions.hbs @@ -1,9 +1,14 @@ <main id = 'solutions-main'> <div class = 'search container' id = 'solutions-div'> - <!-- EXAM DETAILS --> + <!-- EXAM DETAILS --> + {{# if messages.error }} + <section class="alert alert-danger custom-Alert"> + <h4>{{ messages.error }}</h4> + </section> + {{/if}} - <form action="/user/follow_exam/{{../examInfo.id}}" method = 'post'> + <form action="/user/follow_exam/{{examInfo.id}}" method = 'post'> <input type="hidden" name="_csrf" value="{{ csrfToken }}"> <button class="col-xs-4 col-sm-2 col-md-2 col-lg-2 col-xs-offset-4 col-sm-offset-5 col-md-offset-2 |