Create product

Dockerfile

@@ -1,22 +1,36 @@
-FROM node:19.4.0-bullseye-slim
+FROM golang:1.16-buster AS build
 
-LABEL maintainer="Daniel García (cr0hn) [email protected]"
+WORKDIR /app
 
-ENV STAGE "DOCKER"
+# COPY go.mod .
+# RUN go mod download
 
-RUN apt-get update && apt-get install -y netcat
+# COPY *.go .
 
-# Build app folders
-RUN mkdir /app
-WORKDIR /app
+# RUN go build -o app
+
+# LABEL maintainer="Daniel García (cr0hn) [email protected]"
+
+# ENV STAGE "DOCKER"
+
+# RUN apt-get update && apt-get install -y netcat
+
+# # install vulnerable version of a library
+# RUN apt-get install -y curl=7.64.0-4+deb10u2
+
+# RUN apt-get install -y libssl1.1
+
+# # Build app folders
+# RUN mkdir /app
+# WORKDIR /app
 
-# Install depends
-COPY package.json /app/
-RUN npm install
+# # Install depends
+# COPY package.json /app/
+# RUN npm install
 
-# Bundle code
-COPY . /app
+# # Bundle code
+# COPY . /app
 
-EXPOSE 3000
+# EXPOSE 3000
 
-CMD [ "npm", "start" ]
+# CMD [ "npm", "start" ]

model/products.js

@@ -49,12 +49,23 @@
 
 }
 
+function create(product) {
+    var q = "INSERT INTO products(name, description, price) VALUES('" +
+            product.name + "', '" +
+            product.description + "', '" +
+            product.price +
+            "');";
+
+    return db.one(q);
+}
+
 var actions = {
     "list": list_products,
     "getProduct": getProduct,
     "search": search,
     "purchase": purchase,
-    "getPurchased": get_purcharsed
+    "getPurchased": get_purcharsed,
+    "create": create
 }
 
 module.exports = actions;

routes/products.js

@@ -144,6 +144,25 @@ router.all('/products/buy', function(req, res, next) {
 
 });
 
+router.all('/products/create', function(req, res, next) {
+    let params = null;
+    if (req.method == "GET"){
+        params = url.parse(req.url, true).query;
+    } else {
+        params = req.body;
+    }
+
+    let product = null;
+    product = {
+        name: params.name,
+        description: params.description,
+        price: params.price,
+        image: params.image,
+        username: req.session.user_name
+    }
+
+    db_products.create(product)
+});
 
 
 module.exports = router;