96 lines
2.3 KiB
JavaScript
96 lines
2.3 KiB
JavaScript
const express = require('express');
|
|
const mysql = require('mysql2');
|
|
const cors = require('cors');
|
|
const { exec } = require('child_process');
|
|
const app = express();
|
|
const path = require('path');
|
|
|
|
const db = require('./db');
|
|
|
|
app.use(cors());
|
|
app.use(express.json());
|
|
const serveStatic = express.static(path.join(__dirname, '../frontend/dist'));
|
|
|
|
app.post('/api/login', (req, res) => {
|
|
const { username, password } = req.body;
|
|
|
|
// 🚨 INTENTIONALLY VULNERABLE TO SQLi
|
|
const query = `SELECT * FROM users WHERE username = '${username}' AND password = '${password}'`;
|
|
|
|
db.query(query, (err, results) => {
|
|
if (err) {
|
|
return res.status(500).json({
|
|
message: 'Error',
|
|
query: query
|
|
});
|
|
}
|
|
if (results.length > 0) {
|
|
res.json({
|
|
message: 'Login successful',
|
|
query: query
|
|
});
|
|
} else {
|
|
res.status(401).json({
|
|
message: 'Invalid credentials',
|
|
query: query
|
|
});
|
|
}
|
|
});
|
|
});
|
|
|
|
app.post('/api/ping', (req, res) => {
|
|
const { ip } = req.body;
|
|
|
|
// 🚨 INTENTIONALLY VULNERABLE TO COMMAND INJECTION
|
|
const command = `ping -c 4 ${ip}`;
|
|
exec(command, (err, stdout, stderr) => {
|
|
if (err) {
|
|
return res.status(500).json({
|
|
output: stderr,
|
|
command: command
|
|
});
|
|
}
|
|
res.json({
|
|
output: stdout,
|
|
command: command
|
|
});
|
|
});
|
|
});
|
|
|
|
// Endpoint to add a new post
|
|
app.post('/api/posts', (req, res) => {
|
|
const { post } = req.body;
|
|
|
|
if (!post || post.trim() === '') {
|
|
return res.status(400).json({ message: 'Post content cannot be empty' });
|
|
}
|
|
|
|
const query = 'INSERT INTO posts (content) VALUES (?)';
|
|
db.query(query, [post], (err, results) => {
|
|
if (err) {
|
|
return res.status(500).json({ message: 'Error adding post', error: err });
|
|
}
|
|
res.json({ message: 'Post added successfully', postId: results.insertId });
|
|
});
|
|
});
|
|
|
|
// Endpoint to get all posts
|
|
app.get('/api/posts', (req, res) => {
|
|
const query = 'SELECT * FROM posts';
|
|
db.query(query, (err, results) => {
|
|
if (err) {
|
|
return res.status(500).json({ message: 'Error fetching posts', error: err });
|
|
}
|
|
res.json({ posts: results });
|
|
});
|
|
});
|
|
|
|
app.use((req, res, next) => {
|
|
if (!req.path.startsWith('/api')) {
|
|
return serveStatic(req, res, next);
|
|
}
|
|
next();
|
|
});
|
|
|
|
app.listen(5000, () => console.log('Backend running on port 5000'));
|