質問編集履歴

文章の変更

2018/04/24 02:00

投稿

Nippun

スコア1147

test CHANGED Viewed

File without changes

test CHANGED Viewed

@@ -14,8 +14,6 @@
 const router = express.Router();
-const Post = require('./db/db');
 // add article (./views/new.ejs)
@@ -23,10 +21,6 @@
 router.get('/new', function (req, res) {
     res.render('new', {
-        title: 'Add article',
-        reqCsrf: req.csrfToken(),
         errors: req.flash('errors').shift()
@@ -36,263 +30,9 @@
-router.post('/create', function (req) {
-    const post = new Post();
-    post.title = req.body.title;
-    post.content = req.body.content;
-    post.save(function (err) {
-        if(err){ // if there's error
-            req.flash('errors', err.errors);
-            req.redirect('/new');
-        } else { // if not error
-            req.redirect('/');
-        }
-    })
-});
-```
-app.js
-```Javascript
-require('./db/db');
-const createError = require('http-errors');
-const express = require('express');
-const path = require('path');
-const cookieParser = require('cookie-parser');
-const logger = require('morgan');
-const session = require('express-session');
-const csurf = require('csurf');
-const mongoose = require('mongoose');
-const flash = require('connect-flash');
-const methodOverride = require('method-override');
-const bodyParser = require('body-parser');
-const MongoStore = require('connect-mongo')(session);
-const indexRouter = require('./routes/index');
-const usersRouter = require('./routes/users');
-const postRouter = require('./routes/post');
-const app = express();
-const mongoURL = 'mongodb://local';
-mongoose.connect(mongoURL, function (err) {
-    if(err){
-        console.error('mongoDB: error');
-    }else{
-        console.log('Success connect);
-    }
-});
-app.use(methodOverride(function(req, res){
-    if( req.body && typeof req.body === 'object' && '_method' in req.body ){
-        const method = req.body._method;
-        delete req.body._method;
-        return method;
-    }
-}));
-app.use(session({
-    secret: 'a',
-    resave: false,
-    saveUninitialized: false,
-    store: new MongoStore({
-        mongooseConnection: mongoose.connection
-    }),
-    cookie: {
-        httpOnly: false,
-        secure: true,
-        maxage: 1000 * 60 * 30 // 30 minutes
-    }
-}));
-app.use(csurf());
-app.use(flash());
-// view engine setup
-app.set('views', path.join(__dirname, 'views'));
-app.set('view engine', 'ejs');
-app.use(logger('dev'));
-app.use(express.json());
-app.use(bodyParser.json());
-app.use(express.urlencoded({ extended: false }));
-app.use(bodyParser.urlencoded({ extended: false }));
-app.use(cookieParser());
-app.use(express.static(path.join(__dirname, 'public')));
-app.use('/', indexRouter);
-app.use('/users', usersRouter);
-app.use('/post', postRouter);
-app.listen(process.env.PORT || 8000);
-// catch 404 and forward to error handler
-app.use(function(req, res, next) {
-  next(createError(404));
-});
-// error handler
-app.use(function(err, req, res, next) {
-    // set locals, only providing error in development
-    res.locals.message = err.message;
-    res.locals.error = req.app.get('env') === 'development' ? err : {};
-    // render the error page
-    res.status(err.status || 500);
-    res.render('error');
-});
-module.exports = app;
 ```
-new.ejs
-```HTML
-<form action="/create" method="post">
-    <input type="hidden" name="_csrf" value="<%= reqCsrf %>">
-    <p>
-        <input type="text" name="title" value="" size="60">
-        <% if( errors && errors.title ){ %>
-            <strong><%= errors.title.message %></strong>
-        <% } %>
-    </p>
-    <p><textarea name="contents" cols="60" rows="12"></textarea></p>
-    <p><button type="submit">Create</button></p>
-</form>
-<p><a href="/">back to list</a></p>
-```

コードを追加しました。

2018/04/24 02:00

投稿

Nippun

スコア1147

test CHANGED Viewed

File without changes

test CHANGED Viewed

@@ -64,6 +64,8 @@
 ```
+app.js
 ```Javascript
 require('./db/db');

コードを追加しました。

2018/04/23 03:19

投稿

Nippun

スコア1147

test CHANGED Viewed

File without changes

test CHANGED Viewed

@@ -4,7 +4,7 @@
 [このサイトを参考にしました](http://webdesign-dackel.com/2015/09/29/vagrant-node-express4-mongodb/)
+[GitHUb CSRUF](https://github.com/expressjs/csurf)
 index.js
@@ -64,6 +64,204 @@
 ```
+```Javascript
+require('./db/db');
+const createError = require('http-errors');
+const express = require('express');
+const path = require('path');
+const cookieParser = require('cookie-parser');
+const logger = require('morgan');
+const session = require('express-session');
+const csurf = require('csurf');
+const mongoose = require('mongoose');
+const flash = require('connect-flash');
+const methodOverride = require('method-override');
+const bodyParser = require('body-parser');
+const MongoStore = require('connect-mongo')(session);
+const indexRouter = require('./routes/index');
+const usersRouter = require('./routes/users');
+const postRouter = require('./routes/post');
+const app = express();
+const mongoURL = 'mongodb://local';
+mongoose.connect(mongoURL, function (err) {
+    if(err){
+        console.error('mongoDB: error');
+    }else{
+        console.log('Success connect);
+    }
+});
+app.use(methodOverride(function(req, res){
+    if( req.body && typeof req.body === 'object' && '_method' in req.body ){
+        const method = req.body._method;
+        delete req.body._method;
+        return method;
+    }
+}));
+app.use(session({
+    secret: 'a',
+    resave: false,
+    saveUninitialized: false,
+    store: new MongoStore({
+        mongooseConnection: mongoose.connection
+    }),
+    cookie: {
+        httpOnly: false,
+        secure: true,
+        maxage: 1000 * 60 * 30 // 30 minutes
+    }
+}));
+app.use(csurf());
+app.use(flash());
+// view engine setup
+app.set('views', path.join(__dirname, 'views'));
+app.set('view engine', 'ejs');
+app.use(logger('dev'));
+app.use(express.json());
+app.use(bodyParser.json());
+app.use(express.urlencoded({ extended: false }));
+app.use(bodyParser.urlencoded({ extended: false }));
+app.use(cookieParser());
+app.use(express.static(path.join(__dirname, 'public')));
+app.use('/', indexRouter);
+app.use('/users', usersRouter);
+app.use('/post', postRouter);
+app.listen(process.env.PORT || 8000);
+// catch 404 and forward to error handler
+app.use(function(req, res, next) {
+  next(createError(404));
+});
+// error handler
+app.use(function(err, req, res, next) {
+    // set locals, only providing error in development
+    res.locals.message = err.message;
+    res.locals.error = req.app.get('env') === 'development' ? err : {};
+    // render the error page
+    res.status(err.status || 500);
+    res.render('error');
+});
+module.exports = app;
+```
 new.ejs
 ```HTML