add comments

form/comment.js

@@ -0,0 +1,33 @@
+import Route from "../route.js";
+import initDb from "../db.js";
+import { randomUUID } from 'node:crypto';
+import { exec } from 'node:child_process';
+import { promisify } from "node:util";
+import auth from "../form/auth.js";
+
+const execP = promisify(exec);
+
+let db = await initDb();
+
+// TODO: rewrite
+let main = new Route([auth], async function (req, res, input) {
+    let { username } = input;
+    let id = randomUUID();
+
+    let { targetType, targetId, content } = req.body;
+    if (!targetType || !targetId || !content || username == '!nobody')
+        return { 'success': false, 'message': 'Some fields are missing' }; // probably should not re-use these strings
+
+    await db.run('INSERT INTO comment (username, targetType, targetId, date, content, id) VALUES (?,?,?,?,?,?)', [
+        username,
+        targetType,
+        targetId,
+        +new Date(),
+        content,
+        id
+    ]);
+
+    res.send({ redir: `?` });
+});
+
+export default main;

form/upload.js

@@ -15,7 +15,7 @@ let main = new Route([auth], async function (req, res, input) {
     let id = randomUUID();
 
     let { title, desc } = req.body;
-    if (!title || !desc || !req.file) return { 'success': false, 'message': 'Some fields are missing' }; // probably should not re-use these strings
+    if (!title || !desc || !req.file || username == '!nobody') return { 'success': false, 'message': 'Some fields are missing' }; // probably should not re-use these strings
 
     let {path} = req.file;