diff --git a/app.js b/app.js index eadf61888e..a40b25f074 100755 --- a/app.js +++ b/app.js @@ -470,7 +470,7 @@ app.post( storyController.commentOnCommentSubmit ); -app.post( +app.put( '/stories/comment/:id/edit', storyController.commentEdit ); diff --git a/controllers/story.js b/controllers/story.js index 24b11ddba9..8b12c12ca9 100755 --- a/controllers/story.js +++ b/controllers/story.js @@ -424,16 +424,18 @@ exports.commentOnCommentSubmit = function(req, res, next) { }; exports.commentEdit = function(req, res, next){ - if (req.user._id.toString() !== req.body.data.author.userId.toString()) { + //console.log(JSON.stringify(req)); + console.log(JSON.stringify(req.body)); + if (req.user._id.toString() !== req.body.author.userId.toString()) { return next(new Error('Not authorized')); } var data = req.params.id; - var sanitizedBody = sanitizeHtml(req.body.data.body,{ + var sanitizedBody = sanitizeHtml(req.body.body,{ allowedTags: [], allowedAttributes: [] }).replace(/"/g, '"'); - if (req.body.data.body !== sanitizedBody) { + if (req.body.body !== sanitizedBody) { req.flash('errors', { msg: 'HTML is not allowed' }); diff --git a/views/stories/comments.jade b/views/stories/comments.jade index 15d0b2deaf..34f25b7b8b 100755 --- a/views/stories/comments.jade +++ b/views/stories/comments.jade @@ -129,8 +129,10 @@ var submitCommentForEditToCommentHandler = function submitCommentForEditToCommentHandler() { $('#submit-comment-to-edit').unbind('click'); console.log('in comments.jade', originalStoryAuthorEmail); - $.post('/stories/comment/' + commentId + '/edit', - { + + $.ajax({ + type: "PUT", + url: '/stories/comment/' + commentId + '/edit', data: { associatedPost: commentId, originalStoryLink: originalStoryLink, @@ -142,15 +144,15 @@ username: user.profile.username, email: user.email } + }, + dataType: "json", + success: function (msg) { + window.location.reload(); + }, + error: function (err){ + $('#submit-comment-to-edit').bind('click', submitCommentForEditToCommentHandler); } - }) - .fail(function (xhr, textStatus, errorThrown) { - $('#submit-comment-to-edit').bind('click', submitCommentForEditToCommentHandler); - }) - .done(function (data, textStatus, xhr) { - window.location.reload(); }); - }; $('#submit-comment-to-edit').on('click', submitCommentForEditToCommentHandler)