XSSBook - Home

@@ -28,21 +30,21 @@ function parsePost(post, likes) {

- ${post.author.firstname + ' ' + post.author.lastname} - ${parseDate(new Date(post.time))} + ${author.first + ' ' + author.last} + ${parseDate(new Date(post.date))}

- ${post.content} + ${post.content.replace(/\n/g,'
')}

- ${post.likes} Likes + ${post.likes.length} Likes

- - Like + + Like @@ -76,53 +78,60 @@ function getPost(id) { return -1 } -function like(span) { +async function like(span) { const id = parseInt(span.parentElement.parentElement.getAttribute('postid')) - const index = data.user.likes.indexOf(id) - if (index === -1) { - data.user.likes.push(id) - data.posts[getPost(id)].likes++ + const post = data.posts[getPost(id)] + const index = post.likes.indexOf(data.user.id) + const state = index === -1; + const response = await postlike(id, state) + if (response.status != 200) return; + if (index == -1) { + post.likes.push(data.user.id) } else { - data.user.likes.splice(index, 1) - data.posts[getPost(id)].likes-- + post.likes.splice(index, 1) } - load() + render() } -function comment(event) { +async function comment(event) { event.preventDefault(); const text = event.target.elements.text.value.trim(); if (text.length < 1) return; const id = parseInt(event.target.parentElement.parentElement.parentElement.getAttribute('postid')) var index = getPost(id); - console.log(index) if (index === -1) return; + const response = await postcomment(id, text) + if (response.status != 200) return; + event.target.elements.text.value = ''; data.posts[index].comments.push({ - firstname: data.user.firstname, - lastname: data.user.lastname, + user: data.user.id, content: text }) - load() + render() } -function post(event) { +async function post() { const text = document.getElementById("text").value.trim() + const error = document.getElementsByClassName('error')[0] if (text.length < 1) return; + const response = await createpost(text); + if (response.status != 200) { + error.innerHTML = response.msg + return; + } + error.innerHTML = ''; data.posts.unshift({ id: data.posts[0].id + 1, - author: { - firstname: data.user.firstname, - lastname: data.user.lastname - }, - time: Date.now(), + user: data.user.id, + date: Date.now(), content: text, - likes: 0, + likes: [], comments: [] }) - load() + render() } -function load() { +function render() { const html = `

@@ -131,11 +140,11 @@ function load() {

- ${data.posts.map(p => parsePost(p, data.user.likes)).join('')} + ${data.posts.map(p => parsePost(p)).join('')}

` @@ -152,11 +161,12 @@ function load() {

- ${data.user.firstname + ' ' + data.user.lastname}and ho + ${data.user.first + ' ' + data.user.last} Now

- + +