From 7e30cb0b87d8ead0b4746238c533630f252619ef Mon Sep 17 00:00:00 2001
From: HumairAK <humair88@hotmail.com>
Date: Tue, 26 Jul 2016 20:49:21 -0400
Subject: fixed csrf and redirect issues with follow exam

---
 routes/index.js     | 3 ++-
 routes/user.js      | 3 ++-
 views/questions.hbs | 9 +++++++--
 3 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/routes/index.js b/routes/index.js
index 219b7b7..d631d7b 100644
--- a/routes/index.js
+++ b/routes/index.js
@@ -184,7 +184,8 @@ router.get('/questions/:exam_id', function (req,res) {
                     pageCount : exam.page_count,
                     questionCount : exam.questions_count
                 };
-                res.render('questions', {query: qList, examInfo: examInfo});
+                res.render('questions', {query: qList, examInfo: examInfo, csrfToken: req.csrfToken()});
+                req.session.messages = null;
             });
         }else{
             req.session.messages  = {error : "Could not find exam."};
diff --git a/routes/user.js b/routes/user.js
index 22a30a4..74c5427 100644
--- a/routes/user.js
+++ b/routes/user.js
@@ -350,7 +350,8 @@ router.post('/follow_exam/:examID',function (req, res) {
     }else{
         var message = "Must be logged in to follow an exam!";
         req.session.messages  = {error : message};
-        res.redirect('/questions/' + examID);
+        res.redirect('/questions/' + examId);
+
     }
 });
 
diff --git a/views/questions.hbs b/views/questions.hbs
index e5bf21d..1d62a2b 100644
--- a/views/questions.hbs
+++ b/views/questions.hbs
@@ -1,9 +1,14 @@
 <main id = 'solutions-main'>
     <div class = 'search container' id = 'solutions-div'>
 
-            <!-- EXAM DETAILS -->
+        <!-- EXAM DETAILS -->
+        {{# if messages.error }}
+            <section class="alert alert-danger custom-Alert">
+                <h4>{{ messages.error }}</h4>
+            </section>
+        {{/if}}
 
-        <form action="/user/follow_exam/{{../examInfo.id}}" method = 'post'>
+        <form action="/user/follow_exam/{{examInfo.id}}" method = 'post'>
             <input type="hidden" name="_csrf" value="{{ csrfToken }}">
             <button class="col-xs-4 col-sm-2 col-md-2 col-lg-2
             col-xs-offset-4 col-sm-offset-5 col-md-offset-2
-- 
cgit v1.2.3