TheRed-Software/Website
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Fix your code #2

Merged
TheRed merged 1 commit from :main into main 2022-03-09 20:50:58 +00:00
Conversation 2 Commits 1 Files changed 1 +17 -12
1 changed files with 17 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

29
pages/api/submit.js
View file

@ -1,27 +1,32 @@
let amogus = ['127.0.0.1', '1', '192.168.1.254'] const local = ['127.0.0.1', '1', '192.168.1.254'];
export default async function handle(REQ, RES) { const allowed_chars = /^[abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ .,\/?;:'\[\]\{\}\\<>\-_+=*!#$0123456789\^]*$/;
export default async function handle(req, res) {
// Check if IP matches with the local IP // Check if IP matches with the local IP
// if(!amogus.includes(REQ.socket.remoteAddress.split('::ffff:')[1])) { // const ip = req.socket.remoteAddress.split('::ffff:')[1];
// return RES.status(403).send('Forbidden. IP: '+REQ.socket.remoteAddress.split('::ffff:')[1]+'; Your IP in no way is logged!'); // if(!local.includes(ip)) {
// return res.status(403).send('Forbidden. IP: ' + ip + '; Your IP in no way is logged!');
// } // }
if(!/^[abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ .,/?;:'\[\]\{\}\\<>\-_+=*!#$0123456789\^]*$/.test(""+REQ?.body?.text)) return RES.status(400).send("The message you were trying to send contains disallowed symbols!"); const text = req.body?.text;
let RESPONSE = await fetch(process.env.WEBHOOK, { if(!text) return res.status(400).send("Illegal request!");
if(!allowed_chars.test(text)) return res.status(400).send("The message you were trying to send contains disallowed symbols!");
const webhookRes = await fetch(process.env.WEBHOOK, {
method: "POST", method: "POST",
headers: { headers: {
"Content-Type": "application/json" "Content-Type": "application/json"
}, },
body: JSON.stringify({ body: JSON.stringify({
username: "TheRed.SH / User Feedback", username: "TheRed.SH / User Feedback",
content: REQ?.body?.text ?? "The request that was sent was an illegal request!", content: text,
avatar_url: "https://cdn.discordapp.com/avatars/574110505254256640/049c51674d7ccd748ca123556d351da5.webp?size=1024" avatar_url: "https://cdn.discordapp.com/avatars/574110505254256640/049c51674d7ccd748ca123556d351da5.webp?size=1024"
}) })
}) })
if(RESPONSE.ok) { if(webhookRes.ok) {
RES.status(200).send("Your message has been successfully sent!"); res.status(200).send("Your message has been successfully sent!");
await RESPONSE.text().then(i => console.log(i)); webhookRes.text().then(i => console.log(i));
} else { } else {
RES.status(500).send("Error! The message has failed to send!"); res.status(500).send("Error! The message has failed to send!");
await RESPONSE.text().then(i => console.log(i)); webhookRes.text().then(i => console.log(i));
} }
} }