X-Git-Url: https://git.auder.net/?a=blobdiff_plain;f=server%2Froutes%2Fmessages.js;h=441abdb3bcfd97c14aada886108c8c342891aea2;hb=1ad8802192781dde074aa4b9529bd65c405ccc6f;hp=d96cbfa2dd7631267fb2a234a84462166b8b4d27;hpb=99b7a14c6e01c53a49459c8d4681acf6abe635d8;p=vchess.git

diff --git a/server/routes/messages.js b/server/routes/messages.js
index d96cbfa2..441abdb3 100644
--- a/server/routes/messages.js
+++ b/server/routes/messages.js
@@ -1,23 +1,17 @@
-// Router for contact form sending
-
 let router = require("express").Router();
-const mailer = require(__dirname.replace("/routes", "/utils/mailer"));
-const params = require(__dirname.replace("/routes", "/config/parameters"));
+const access = require("../utils/access");
+const sendEmail = require("../utils/mailer");
+const params = require("../config/parameters");
 
 // Send a message through contact form
-router.post("/messages", (req,res,next) => {
-  if (!req.xhr)
-    return res.json({errmsg: "Unauthorized access"});
+router.post("/messages", access.ajax, (req,res) => {
   const from = req.body["email"];
   // Replace potential newline characters in subject
   const subject = req.body["subject"].replace(/\r?\n|\r/g, " ");
-  const body = req.body["content"]; //TODO: sanitize? Why? How?
+  const body = req.body["content"];
 
-  mailer(from, params.mail.contact, subject, body, err => {
-    if (!!err)
-      return res.json({errmsg:err});
-    // OK, everything fine
-    res.json({}); //ignored
+  sendEmail(from, params.mail.contact, subject, body, err => {
+    res.json(err || {});
   });
 });