From 031fa5deebb4657261b5a328fcea5e79e699cbdf Mon Sep 17 00:00:00 2001
From: Adam Soltys <asoltys@gmail.com>
Date: Mon, 18 May 2020 16:35:45 -0700
Subject: check for captcha token

---
 routes/users.js | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/routes/users.js b/routes/users.js
index f5c8df03..b01ef90f 100644
--- a/routes/users.js
+++ b/routes/users.js
@@ -83,6 +83,8 @@ app.post("/register", async (req, res) => {
 
   let ip = req.headers["x-forwarded-for"] || req.connection.remoteAddress;
 
+  if (!user.token) return res.status(500).send("Missing captcha token");
+
   let success, score;
   try {
     const url = `https://www.google.com/recaptcha/api/siteverify?secret=${config.captcha}&response=${user.token}&remoteip=${ip}`;
-- 
cgit v1.2.3