diff --git a/routes/boardRouter.js b/routes/boardRouter.js index cdb8251..97ea60a 100644 --- a/routes/boardRouter.js +++ b/routes/boardRouter.js @@ -101,12 +101,25 @@ router.get('/edit', function(request, response){ // var like_num = 10000; // 좋아요 연결 후 반영하기 var content = result2[0].content; - db.query(`SELECT nickname FROM user WHERE kakaoid = ?;`, [userId], function(err3, result3){ - - var user_id = result3[0].nickname; - var html = board_edit.HTML(title, content, queryData.id) - response.send(html); + db.query(`SELECT nickname FROM user WHERE kakaoid = ?;`, [userId], function(err3, result3){ + + if(!request.isAuthenticated()){ + response.send(''); + }else{ + if( userId !== request.user.kakaoid){ + response.send(''); + }else{ + // var user_id = result3[0].nickname; + + var html = board_edit.HTML(title, content, queryData.id) + response.send(html); + } + } + + }) }); diff --git a/routes/boardUpdateProcessRouter.js b/routes/boardUpdateProcessRouter.js index 6a39cf2..71b99e8 100644 --- a/routes/boardUpdateProcessRouter.js +++ b/routes/boardUpdateProcessRouter.js @@ -4,7 +4,6 @@ const res = require('express/lib/response'); const { fstat } = require('fs'); const router = express.Router(); const mysql = require('mysql'); -const passport = require('passport'); const db = require('../config/db.js'); @@ -15,7 +14,6 @@ router.post('/', function(request, response) { let title = body.title; let content = body.content; - db.query(`UPDATE post SET title=?, content=?, updatedate=? WHERE id=?`, [title, content, null, queryData.id], function(err, result){ if (err) console.error("err : " + err);