fixed csrf and redirect issues with follow exam

2 files changed, 4 insertions, 2 deletions

diff --git a/routes/index.js b/routes/index.js
index 219b7b7..d631d7b 100644
--- a/routes/index.js
+++ b/routes/index.js
@@ -184,7 +184,8 @@ router.get('/questions/:exam_id', function (req,res) {
                     pageCount : exam.page_count,
                     questionCount : exam.questions_count
                 };
-                res.render('questions', {query: qList, examInfo: examInfo});
+                res.render('questions', {query: qList, examInfo: examInfo, csrfToken: req.csrfToken()});
+                req.session.messages = null;
             });
         }else{
             req.session.messages  = {error : "Could not find exam."};
diff --git a/routes/user.js b/routes/user.js
index 22a30a4..74c5427 100644
--- a/routes/user.js
+++ b/routes/user.js
@@ -350,7 +350,8 @@ router.post('/follow_exam/:examID',function (req, res) {
     }else{
         var message = "Must be logged in to follow an exam!";
         req.session.messages  = {error : message};
-        res.redirect('/questions/' + examID);
+        res.redirect('/questions/' + examId);
+
     }
 });