DanielRamirezGe
76 lines
2.1 KiB
JavaScript
76 lines
2.1 KiB
JavaScript
const connection = require('../conf/connection.js');
|
|
const express = require('express');
|
|
const bcrypt = require('bcrypt');
|
|
|
|
var app = express()
|
|
|
|
function query(consulta) {
|
|
return new Promise(function(resolve, reject) {
|
|
connection.query(`${consulta}`, (error, results, files) => {
|
|
if (error) reject(error);
|
|
resolve(results);
|
|
});
|
|
})
|
|
}
|
|
|
|
|
|
function depurado(cadena) {
|
|
if (cadena != null) {
|
|
cadena = cadena.replace(/'/g, "''");
|
|
cadena = cadena.replace(/;/g, "m");
|
|
return cadena;
|
|
|
|
} else
|
|
return null;
|
|
}
|
|
|
|
|
|
app.post('/loggin_admin', async(req, res) => {
|
|
try {
|
|
let data = req.body;
|
|
let usuario = depurado(data.usuario);
|
|
//console.log(usuario, " lksaldksjdlasd");
|
|
let cad = `select * from admin where usuario='${data.usuario}'`;
|
|
let respuesta = query(cad);
|
|
// console.log(respuesta);
|
|
respuesta.then(async r => {
|
|
// console.log(r, r.length);
|
|
if (r.length == 0) {
|
|
res.status(400).json({ error: false, msj: "Usuario o contraseña invalidos" });
|
|
return;
|
|
} else {
|
|
let pass = data.password;
|
|
//console.log(pass);
|
|
let n_pasword = await bcrypt.hash(pass, 10);
|
|
//console.log(data);
|
|
// console.log(n_pasword);
|
|
let ban = bcrypt.compareSync(data.password, r[0].password);
|
|
if (ban == true) {
|
|
res.status(200).json({ error: false, msj: "bienvenido", mesa: r[0].nombre_mesa, id_admin: r[0].id_admin });
|
|
return;
|
|
} else {
|
|
res.status(400).json({ error: false, msj: "Usuario o contraseña invalidos" });
|
|
return;
|
|
}
|
|
|
|
|
|
|
|
}
|
|
|
|
}).catch(err => {
|
|
res.status(400).json({ error: true, msj: err });
|
|
return;
|
|
})
|
|
|
|
|
|
|
|
|
|
} catch (err) {
|
|
console.log("afuera ", err);
|
|
res.status(400).json({ error: true, msj: err });
|
|
return;
|
|
}
|
|
|
|
});
|
|
|
|
module.exports = app |