Mirror/SponsorBlockServer
1
0
Fork 0
mirror of https://github.com/ajayyy/SponsorBlockServer.git synced 2025-12-09 13:07:02 +03:00
Code Issues Packages Projects Releases Wiki Activity

Made the server save a hash of their ip with the data.

Browse Source
This commit is contained in:
Ajay Ramachandran
2019-07-10 22:00:28 -04:00
parent 16b2b22bc0
commit 05da836384
1 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
index.js
View File

@@ -7,6 +7,10 @@ var app = express();
//uuid service //uuid service
var uuidv1 = require('uuid/v1'); var uuidv1 = require('uuid/v1');
//hashing service
var crypto = require('crypto');
var hash = crypto.createHash('sha256');
//load database //load database
var sqlite3 = require('sqlite3').verbose(); var sqlite3 = require('sqlite3').verbose();
var db = new sqlite3.Database('./databases/sponsorTimes.db'); var db = new sqlite3.Database('./databases/sponsorTimes.db');
@@ -55,6 +59,12 @@ app.get('/api/postVideoSponsorTimes', function (req, res) {
let endTime = req.query.endTime; let endTime = req.query.endTime;
let userID = req.query.userID; let userID = req.query.userID;
//x-forwarded-for if this server is behind a proxy
let ip = req.headers['x-forwarded-for'] || req.connection.remoteAddress;
//hash the ip so no one can get it from the database
let hashedIP = hash.update(ip).digest('hex');
if (typeof videoID != 'string' || startTime == undefined || endTime == undefined || userID == undefined) { if (typeof videoID != 'string' || startTime == undefined || endTime == undefined || userID == undefined) {
//invalid request //invalid request
res.sendStatus(400); res.sendStatus(400);
@@ -66,7 +76,7 @@ app.get('/api/postVideoSponsorTimes', function (req, res) {
let UUID = uuidv1(); let UUID = uuidv1();
db.prepare("INSERT INTO sponsorTimes VALUES(?, ?, ?, ?, ?)").run(videoID, startTime, endTime, UUID, userID); db.prepare("INSERT INTO sponsorTimes VALUES(?, ?, ?, ?, ?, ?)").run(videoID, startTime, endTime, UUID, userID, hashedIP);
res.sendStatus(200); res.sendStatus(200);
}); });