fix: not check account is correct

Chinlinlee · Jan 9, 2021 · 8f2ea0d · 8f2ea0d
1 parent 7c893f4
commit 8f2ea0d
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/routes/api/CTE_BOT/controller/post_CTE.js b/routes/api/CTE_BOT/controller/post_CTE.js
@@ -18,6 +18,11 @@ module.exports =  async function (req ,res)
             delete queryParams[element];
         }    
     });
+    let authcode = await School_Auth.Auth(queryParams["username"] , queryParams["password"] , req);
+    let isAuth = authcode.split("_").length >= 2;
+    if (!isAuth) {
+        return res.redirect('/CTE_BOT?error=' + encodeURIComponent('Password_Error'));
+    }
     let first = await fetchCookie("http://system1.ntunhs.edu.tw/intranetasp/evaMain/stLogin.asp" ,{method: 'GET'});