From 25f6a6e4eef8c001749eec655edb5b12b55b6c76 Mon Sep 17 00:00:00 2001 From: ChrisChrome Date: Sat, 6 Sep 2025 06:43:30 -0600 Subject: [PATCH] Possible fix to leading zeros in card nos --- routes/acl.js | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/routes/acl.js b/routes/acl.js index 61256c3..d814c66 100644 --- a/routes/acl.js +++ b/routes/acl.js @@ -78,8 +78,8 @@ router.put('/', async (req, res) => { // Attempt to create new ACL entry. Fail i }); router.get('/edit/:cardNumber', async (req, res) => { // Get ACL entry for editing - const cardNumber = parseInt(req.params.cardNumber); - if (isNaN(cardNumber) || cardNumber <= 0) { + const cardNumber = req.params.cardNumber; + if (!/^\d+$/.test(cardNumber)) { return res.status(400).json({ error: 'Invalid card number' }); } try { @@ -103,8 +103,8 @@ router.get('/edit/:cardNumber', async (req, res) => { // Get ACL entry for editi }); router.patch('/:cardNumber', async (req, res) => { // Update ACL entry. Fail if cardNumber does not exist - const cardNumber = parseInt(req.params.cardNumber); - if (isNaN(cardNumber) || cardNumber <= 0) { + const cardNumber = req.params.cardNumber; + if (!/^\d+$/.test(cardNumber)) { return res.status(400).json({ error: 'Invalid card number' }); } const data = req.body; @@ -157,8 +157,8 @@ router.patch('/:cardNumber', async (req, res) => { // Update ACL entry. Fail if }); router.get('/delete/:cardNumber', async (req, res) => { // Delete ACL entry. Fail if cardNumber does not exist - const cardNumber = parseInt(req.params.cardNumber); - if (isNaN(cardNumber) || cardNumber <= 0) { + const cardNumber = req.params.cardNumber; + if (!/^\d+$/.test(cardNumber)) { return res.status(400).json({ error: 'Invalid card number' }); } try {