- create: function(vid, fen, timeControl, players, cb)
- {
- db.serialize(function() {
- let query =
- "INSERT INTO Games"
- + " (vid, fenStart, fen, score, timeControl, created, drawOffer)"
- + " VALUES (" + vid + ",'" + fen + "','" + fen + "','*','"
- + timeControl + "'," + Date.now() + "," + false + ")";
+ checkGameInfo: function(g) {
+ return (
+ g.vid.toString().match(/^[0-9]+$/) &&
+ g.cadence.match(/^[0-9dhms +]+$/) &&
+ g.fen.match(/^[a-zA-Z0-9, /-]*$/) &&
+ g.players.length == 2 &&
+ g.players.every(p => p.id.toString().match(/^[0-9]+$/))
+ );
+ },
+
+ create: function(vid, fen, cadence, players, cb)
+ {
+ db.serialize(function() {
+ let query =
+ "INSERT INTO Games " +
+ "(vid, fenStart, fen, score, cadence, created, drawOffer) " +
+ "VALUES " +
+ "(" + vid + ",'" + fen + "','" + fen + "','*','" + cadence + "'," + Date.now() + ",'')";