From 2bfc10b63edfd578c6204f5e4b439d8f843e1361 Mon Sep 17 00:00:00 2001 From: Michael Foiani Date: Sun, 19 Aug 2018 03:33:30 -0400 Subject: Making small improvements to increase security and make the admin console smoother. --- src/actions/firebaseAdmin.js | 17 ++++++++++++----- src/actions/firebaseFirestore.js | 4 ++-- 2 files changed, 14 insertions(+), 7 deletions(-) (limited to 'src/actions') diff --git a/src/actions/firebaseAdmin.js b/src/actions/firebaseAdmin.js index c322f64..e5cbb23 100644 --- a/src/actions/firebaseAdmin.js +++ b/src/actions/firebaseAdmin.js @@ -84,15 +84,22 @@ export const adminDeleteRequest = (_id, _path) => (dispatch) => { //User triggered events dispatching to middleware -export const adminListener = () => (dispatch) => { +export const adminListener = () => (dispatch, getState) => { document.onkeyup = function(e) { - if(e.altKey && e.which == 65) { - var docRef = firestore.collection('keys').doc('adminKey'); - docRef.get().then((doc) => { + if((e.altKey && e.which == 65) && !getState().firebaseAdmin.isAdmin) { + var docRef = firestore.collection('admin'); + docRef.doc('adminKey').get().then((doc) => { if(prompt('Enter admin password') == doc.data().password) { dispatch(adminControls()); + } else { + alert("Incorrect admin password"); + docRef.doc('loggedData').collection('failedTries').add({ + uid: getState().firebaseAuth.uid, + email: getState().firebaseAuth.userEmail, + day: new Date() + }); } - }); + }); } } } diff --git a/src/actions/firebaseFirestore.js b/src/actions/firebaseFirestore.js index 701a0c3..ff4fcfb 100644 --- a/src/actions/firebaseFirestore.js +++ b/src/actions/firebaseFirestore.js @@ -154,7 +154,7 @@ export const registerComp = (compName) => (dispatch, getState) => { uids: uidArr, emails: emailArr }).then(()=> { - alert("Successfuly registered for " + compName + "."); + alert("Successfuly registered for " + compName.replace(/[0-9]/g, '') + "."); }).catch((error) => { alert(error); }); @@ -163,7 +163,7 @@ export const registerComp = (compName) => (dispatch, getState) => { uids : [uid], emails: [email] }).then(()=> { - alert("Successfuly registered for " + compName + "."); + alert("Successfuly registered for " + compName.replace(/[0-9]/g, '') + "."); }).catch((error) => { alert(error); }); -- cgit v1.2.3-70-g09d2