From fc3cc6aee7ce7a28539d332902c0f9923d298c71 Mon Sep 17 00:00:00 2001
From: HumairAK <humair88@hotmail.com>
Date: Sun, 24 Jul 2016 23:16:38 -0400
Subject: added all admin panel functionality

---
 routes/user.js | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'routes/user.js')

diff --git a/routes/user.js b/routes/user.js
index f5dab0c..03dc286 100644
--- a/routes/user.js
+++ b/routes/user.js
@@ -207,7 +207,7 @@ router.post('/signin', loggedOut, function(req, res, next) {
 
 });
 
-router.post('/user_profile/send_message', loggedIn, function(req, res, next) {
+router.post('/user_profile/send_message', loggedIn , function(req, res, next) {
     var date = new Date();
     var current_date = date.toString().slice(0, 24);
     var mail_data = {
@@ -232,6 +232,7 @@ router.post('/user_profile/send_message', loggedIn, function(req, res, next) {
     res.redirect('/user/user_profile');
 });
 
+// Authentication check in code
 router.post('/comment/submit/:examID/:qID/:solID', function(req, res, next){
     var examID = req.params.examID;
     var qID = req.params.qID;
@@ -239,7 +240,6 @@ router.post('/comment/submit/:examID/:qID/:solID', function(req, res, next){
     var username = req.user.user_name;
     var solutionID = req.params.solID;
     // Must be a logged in user to access
-    console.log(examID + "," + qID + "," + comment + "," + username + "," + solutionID);
     var fields = [comment, username];
     if(req.isAuthenticated()){
         dbFile.add_comment(solutionID, fields, function(commentAdded, statusMessage){
@@ -257,7 +257,7 @@ router.post('/comment/submit/:examID/:qID/:solID', function(req, res, next){
     }
 });
 
-router.post('/solution/vote/:examID/:qID/:solID', function(req, res, next){
+router.post('/solution/vote/:examID/:qID/:solID', loggedIn, function(req, res, next){
     var vote = req.body.vote;
     var examID = req.params.examID;
     var qID = req.params.qID;
-- 
cgit v1.2.3