Member registration fixed
This commit is contained in:
@@ -1,8 +1,8 @@
|
||||
import fs from 'fs/promises'
|
||||
import path from 'path'
|
||||
import { requireUserWithAnyRole } from '../../utils/auth.js'
|
||||
import { decryptObject } from '../../utils/encryption.js'
|
||||
import { saveMember } from '../../utils/members.js'
|
||||
import { getServerDataPath } from '../../utils/paths.js'
|
||||
|
||||
export default defineEventHandler(async (event) => {
|
||||
try {
|
||||
@@ -43,9 +43,9 @@ export default defineEventHandler(async (event) => {
|
||||
}
|
||||
|
||||
// nosemgrep: javascript.lang.security.audit.path-traversal.path-join-resolve-traversal.path-join-resolve-traversal
|
||||
const dataDir = path.join(process.cwd(), 'server/data/membership-applications')
|
||||
const dataDir = getServerDataPath('membership-applications')
|
||||
// nosemgrep: javascript.lang.security.audit.path-traversal.path-join-resolve-traversal.path-join-resolve-traversal
|
||||
const filePath = path.join(dataDir, `${id}.json`)
|
||||
const filePath = getServerDataPath('membership-applications', `${id}.json`)
|
||||
|
||||
// Antrag laden
|
||||
const fileContent = await fs.readFile(filePath, 'utf8')
|
||||
@@ -67,6 +67,7 @@ export default defineEventHandler(async (event) => {
|
||||
const newMember = {
|
||||
firstName: decryptedData.vorname,
|
||||
lastName: decryptedData.nachname,
|
||||
geburtsdatum: decryptedData.geburtsdatum,
|
||||
email: decryptedData.email,
|
||||
phone: decryptedData.telefon_privat || decryptedData.telefon_mobil || '',
|
||||
address: `${decryptedData.strasse}, ${decryptedData.plz} ${decryptedData.ort}`,
|
||||
|
||||
Reference in New Issue
Block a user