From f3dcf433371634ba9dda435b4dbf19ceb99fb458 Mon Sep 17 00:00:00 2001 From: unurled Date: Sun, 30 Jan 2022 19:02:46 +0100 Subject: [PATCH] prevent login using bad account --- src/login.js | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/src/login.js b/src/login.js index 4757c8f..2bcac0f 100644 --- a/src/login.js +++ b/src/login.js @@ -10,7 +10,8 @@ router.post('/auth', function(request, response) { let user = User.findOne({ name: username, pass: password }, function(err, results) { - console.log(results.name); + if (results !=null) { + console.log(results.name); if (results.name.length > 0) { request.session.loggedin = true; request.session.username = username; @@ -20,7 +21,10 @@ router.post('/auth', function(request, response) { response.send('Incorrect Username and/or Password!'); } response.end(); - }); + } else { + response.send('Use a registered username Please.') + } + }); } else { response.send('Please enter Username and Password!'); response.end();