From 8009c157c2cc7fa66aa5bb35eec8de32748d1e6e Mon Sep 17 00:00:00 2001
From: walamana <joniogerg@gmail.com>
Date: Sat, 2 Feb 2019 13:44:00 +0100
Subject: [PATCH] [WIP]

---
 app.js | 37 +++++++++++++++++++++++++++++++++++++
 1 file changed, 37 insertions(+)

diff --git a/app.js b/app.js
index 5dcc064..8d0f28e 100644
--- a/app.js
+++ b/app.js
@@ -165,6 +165,25 @@ app.get("/:user/update", (req, res) => {
 
 });
 
+app.post("/gd/:id/update", (req, res) => {
+    var token = req.body.credentials.token;
+    var user = req.body.credentials.username;
+    var id = req.params.id;
+    var fixed = req.query.fixed == "true";
+
+    validateAdmin(user, token).then(valid => {
+        if(valid){
+            con.query("UPDATE `gottesdienst` SET `FESTGESETZT` = " + (fixed ? 1 : 0) + " WHERE `gottesdienst`.`ID` = " + id + ";", (err, res1) => {
+                console.log("SUCCESSFUL", id, fixed, "UPDATE `gottesdienst` SET `FESTGESETZT` = " + (fixed ? 1 : 0) + " WHERE `gottesdienst`.`ID` = " + id + ";");
+                res.send({success: true});
+            })
+        }else{
+            console.log("Unauthorized not valid");
+            res.send({success: false, error: "Unauthorized"});
+        }
+    });
+})
+
 
 app.get("/gottesdienste", (req, res) => {
     var groupid = req.params.groupid;
@@ -327,6 +346,24 @@ app.post("/add/gottesdienst", (req, res) => {
     // });
 });
 
+app.post("/remove/gottesdienst", (req, res) => {
+    validateAdmin(req.body.credentials.username, req.body.credentials.token).then(success => {
+        if(success){
+            var id = req.body.id;
+
+            con.query("DELETE FROM `gottesdienst` WHERE `ID` = '" + id + "'", (err, result) => {
+                if(err){
+                    res.send(JSON.stringify({success: false}));
+                    return;
+                }
+                res.send(JSON.stringify({success: true}));
+            });
+        }else{
+            res.send(JSON.stringify({err: "Not enough permissions"}));
+        }
+    })
+})
+
 
 var attachToMini = function(mini, pos, then){
     mini.registered = [];