Invalid signup data
'); res.end(); return; } //check if email, username already exists let query = 'SELECT (SELECT COUNT(*) FROM accounts WHERE email = ?) AS email, (SELECT COUNT(*) FROM accounts WHERE username = ?) AS username;'; connection.query(query, [fields.email, fields.username], (err, results) => { if (err) throw err; if (results[0].email !== 0) { res.write('Email already registered!
'); res.end(); return; } if (results[0].username !== 0) { res.write('Username already registered!
'); res.end(); return; } //generate the salt, hash bcrypt.genSalt(11, (err, salt) => { if (err) throw err; bcrypt.hash(fields.password, salt, (err, hash) => { if (err) throw err; //generate a random number as a key let rand = Math.floor(Math.random() * 100000); //save the generated data to the signups table let query = 'REPLACE INTO signups (email, username, salt, hash, verify) VALUES (?, ?, ?, ?, ?);'; connection.query(query, [fields.email, fields.username, salt, hash, rand], (err) => { if (err) throw err; //build the verification email let addr = `http://${process.env.WEB_ADDRESS}/verify?email=${fields.email}&verify=${rand}`; let msg = 'Hello! Please visit the following address to verify your account: '; let msgHtml = `${msg}${addr}
`; //send the verification email sendmail({ from: `signup@${process.env.WEB_ADDRESS}`, to: fields.email, subject: 'Email Verification', text: msg + addr, html: msgHtml }, (err, reply) => { //final check if (err) { res.write(`Something went wrong (did you use a valid email?)
${err}`) res.end(); return; } res.write('Verification email sent!
'); res.end(); }); }) }); }); }); }); } } function verify(connection) { return (req, res) => { //get the saved data let query = 'SELECT email, username, salt, hash, verify FROM signups WHERE email = ?;'; connection.query(query, [req.query.email], (err, results) => { if (err) throw err; //correct number of results if (results.length != 1) { res.write('That account does not exist or this link has already been used.
'); res.end(); return; } //verify the link if (req.query.verify != results[0].verify) { res.write('Verification failed!
'); res.end(); return; } //move the data from signups to accounts let query = 'INSERT INTO accounts (email, username, salt, hash) VALUES (?, ?, ?, ?);'; connection.query(query, [results[0].email, results[0].username, results[0].salt, results[0].hash], (err) => { if (err) throw err; //delete from signups let query = 'DELETE FROM signups WHERE email = ?;'; connection.query(query, [results[0].email], (err) => { if (err) throw err; res.write('Verification succeeded!
'); res.end(); }); }); }); } } module.exports = { signup: signup, verify: verify };