From 7e30cb0b87d8ead0b4746238c533630f252619ef Mon Sep 17 00:00:00 2001 From: HumairAK Date: Tue, 26 Jul 2016 20:49:21 -0400 Subject: fixed csrf and redirect issues with follow exam --- routes/index.js | 3 ++- routes/user.js | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) (limited to 'routes') diff --git a/routes/index.js b/routes/index.js index 219b7b7..d631d7b 100644 --- a/routes/index.js +++ b/routes/index.js @@ -184,7 +184,8 @@ router.get('/questions/:exam_id', function (req,res) { pageCount : exam.page_count, questionCount : exam.questions_count }; - res.render('questions', {query: qList, examInfo: examInfo}); + res.render('questions', {query: qList, examInfo: examInfo, csrfToken: req.csrfToken()}); + req.session.messages = null; }); }else{ req.session.messages = {error : "Could not find exam."}; diff --git a/routes/user.js b/routes/user.js index 22a30a4..74c5427 100644 --- a/routes/user.js +++ b/routes/user.js @@ -350,7 +350,8 @@ router.post('/follow_exam/:examID',function (req, res) { }else{ var message = "Must be logged in to follow an exam!"; req.session.messages = {error : message}; - res.redirect('/questions/' + examID); + res.redirect('/questions/' + examId); + } }); -- cgit v1.2.3