diff --git a/server.cjs b/server.cjs index 4496cfe..7616521 100644 --- a/server.cjs +++ b/server.cjs @@ -115,7 +115,7 @@ app.patch("/trigger/api/messages", async (req, res) => { app.delete("/trigger/api/messages", async (req, res) => { const conn = await pool.getConnection(); - const query = `DELETE FROM trigger_database.messages WHERE id = '${req.body.id}'`; + const query = `DELETE FROM trigger_database.messages WHERE id = '${req.body.id}';`; conn .query(query) .then((rows) => { @@ -138,7 +138,7 @@ app.get("/trigger/api/apps", async (req, res) => { app.post("/trigger/api/apps", async (req, res) => { const conn = await pool.getConnection(); - const query = `INSERT INTO trigger_database.apps (name, url, icon, baseUrl, filterName) VALUES ('${sqlEscape(req.body.name)}', '${sqlEscape(req.body.url)}', '${sqlEscape(req.body.icon)}', '${sqlEscape(req.body.baseUrl)}', '${sqlEscape(req.body.filterName)}')`; + const query = `INSERT INTO trigger_database.apps (name, url, icon, baseUrl, filterName) VALUES ('${sqlEscape(req.body.name)}', '${sqlEscape(req.body.url)}', '${sqlEscape(req.body.icon)}', '${sqlEscape(req.body.baseUrl)}', '${sqlEscape(req.body.filterName)}');`; conn .query(query) .then((rows) => { @@ -152,7 +152,7 @@ app.post("/trigger/api/apps", async (req, res) => { app.patch("/trigger/api/apps", async (req, res) => { const conn = await pool.getConnection(); - const query = `UPDATE trigger_database.apps SET name = '${sqlEscape(req.body.name)}', url = '${sqlEscape(req.body.url)}', icon = '${sqlEscape(req.body.icon)}', baseUrl = '${sqlEscape(req.body.baseUrl)}', category = '${sqlEscape(req.body.filterName)}' WHERE id = '${req.body.id}'`; + const query = `UPDATE trigger_database.apps SET name = '${sqlEscape(req.body.name)}', url = '${sqlEscape(req.body.url)}', icon = '${sqlEscape(req.body.icon)}', baseUrl = '${sqlEscape(req.body.baseUrl)}', filterName = '${sqlEscape(req.body.filterName)}' WHERE id = '${req.body.id}';`; conn .query(query) .then((rows) => { @@ -166,7 +166,7 @@ app.patch("/trigger/api/apps", async (req, res) => { app.delete("/trigger/api/apps", async (req, res) => { const conn = await pool.getConnection(); - const query = `DELETE FROM trigger_database.apps WHERE id = '${sqlEscape(req.body.id)}'`; + const query = `DELETE FROM trigger_database.apps WHERE id = '${req.body.id}'`; conn .query(query) .then((rows) => {