Fix security from upstream + console error messages

This commit is contained in:
SillyLossy
2023-03-19 20:23:18 +02:00
parent 379207a3d8
commit 006ffec1f9
8 changed files with 34 additions and 20 deletions

View File

@ -612,24 +612,25 @@ app.post("/editcharacter", urlencodedParser, async function (request, response)
}
});
app.post("/deletecharacter", urlencodedParser, function (request, response) {
if (!request.body) return response.sendStatus(400);
rimraf(charactersPath + request.body.avatar_url, (err) => {
if (!request.body || !request.body.avatar_url) {
return response.sendStatus(400);
}
const avatarPath = charactersPath + request.body.avatar_url;
if (!fs.existsSync(avatarPath)) {
return response.sendStatus(400);
}
fs.rmSync(avatarPath);
let dir_name = request.body.avatar_url;
rimraf(chatsPath + dir_name.replace('.png', ''), (err) => {
if (err) {
response.send(err);
return console.log(err);
} else {
//response.redirect("/");
let dir_name = request.body.avatar_url;
rimraf(chatsPath + dir_name.replace('.png', ''), (err) => {
if (err) {
response.send(err);
return console.log(err);
} else {
//response.redirect("/");
response.send('ok');
}
});
response.send('ok');
}
});
});