javascript - Parse.com - 如何阻止新用户在注册后看到他们不应该看到的内容？

Question

我的用户可以在index.html页面上注册，成功输入详细信息后，他们将被转发到user_home.html页面，其中会向他们显示相关内容。

我遇到的问题是新用户看到了他们不应该看到的内容。我的网站有基于 friend 的逻辑，这限制了用户可以查看的徽章，但是当我的新用户创建帐户时，他们可以看到所有内容。然而，当他们使用自己的详细信息正常登录时，逻辑工作正常。

我不确定我是否存在逻辑差距或需要一些额外的代码来清楚地识别用户？

我错过了什么？

主页代码(内容)

///////////Checks to see if the user is logged in - Refuses access if they are not///////////
var currentUser = Parse.User.current();
if (currentUser) {
} else {
    var uri = encodeURI('http://mysiteurl.com/index.html');
    window.location.href=uri;
}

////////////Queries and returns list of badges belonging to users friends////////////////////


var currentFriendsQuery = new Parse.Query("FriendRequest");
currentFriendsQuery.equalTo("status", "Connected");
var myBadgeQuery = new Parse.Query("myBadges");
myBadgeQuery.include('SentTo');
myBadgeQuery.include('uploadedBy');
myBadgeQuery.matchesKeyInQuery("SentTo", "toUser", currentFriendsQuery);


myBadgeQuery.find({
    success: function (Badgeresults) {
        "use strict";
        var Badges = [];
        for (var i = 0; i < Badgeresults.length; i++) {
            Badges.push({
                imageURL: Badgeresults[i].get('Global_Badges_img'),
                AwardedBy: Badgeresults[i].get('uploadedBy').get('username'),
                AwardedTo: Badgeresults[i].get('SentTo').get('username'),
                badgename: Badgeresults[i].get('BadgeName'),
                category: Badgeresults[i].get('category'),
                comment: Badgeresults[i].get('Comment')


            });

        }

        _.each(Badges, function(item) {
            var wrapper = $('<div></div>');
            wrapper.append('<img class="images responsive-image BadgeImgOutline" src="' + item.imageURL + '" />');
            wrapper.append('<div class="tag badgelabel" >' + item.badgename + '</div>' + '<br>');
            wrapper.append('<div id="category" class="tag categorylabel modal.tag" >' + item.category + '</div>' + '<br>' + '</div>');
            wrapper.append('<div class="tag awardedbylabel">' + item.AwardedBy + '</div>' + '<br>');
            wrapper.append('<div class="tag senttolabel">' + item.AwardedTo + '</div>' + '<br>');
            wrapper.append('<div class="item  fui-chat">' + ' Reason: ' + item.comment + '</div>' + '<div class="wrapper b_seperater"></div>' + '<br>');

            $('#container').append(wrapper);

        });

        collapseIt();

    },
    error: function(error) {
        alert("Error: " + error.code + " " + error.message);
    }
});

注册码

////////////Runs parse after the SignUp button has been clicked by the user////////////////////

$('#SignUp').click(function(e) {
    UserSignUp();
});


function UserSignUp() {

    var user = new Parse.User();
    userFirstname = $('#firstnamesu').val();
    userLastname = $('#lastnamesu').val();
    userUsername = $('#usernamesu').val();
    userGender = $('#gendersu').val();
    Email = $('#emailsu').val();
    PWP = $('#passwordsu').val();

    user.set("FirstName", userFirstname);
    user.set("LastName", userLastname);
    user.set("username", userUsername);
    user.set("gender", userGender);
    user.set("email", Email);
    user.set("password", PWP);


    user.signUp(null, {
        success: function(user) {
            if (!user.existed()) {
                window.location.href = "user_home.html";
            } else {
                alert("NO WAY BUDDY");
            }
        },
        error: function(user, error) {

        }
    });
}

我的徽章 好友请求 使用 Parse.com 和 JavaScript SDK。

Answer 1

请求中没有任何内容将数据限制为当前用户。因此，该请求将始终为任何用户返回相同的内容。

现在，您将返回发送给状态为已连接的人员列表的所有徽章。

您需要更新 currentFriendsQuery，以便它仅查询当前用户。

// We need to do a OR query since the current user can be in FriendRequest.fromUser or FriendRequest.toUser

// Query that match the result for when the current user made a friend request
var fromQuery = new Parse.Query("FriendRequest");
fromQuery.equalTo("fromUser", currentUser);

// Query that match the result for when the current user accepted a friend request
var toQuery = new Parse.Query("FriendRequest");
toQuery.equalTo("toUser", currentUser);

// We now create the main FriendRequest query using the two previous one
var currentFriendsQuery = Parse.Query.or(fromQuery, toQuery);
currentFriendsQuery.equalTo("status", "Connected");

// The rest doesn't change
var myBadgeQuery = new Parse.Query("myBadges");
myBadgeQuery.include('SentTo');
myBadgeQuery.include('uploadedBy');
myBadgeQuery.matchesKeyInQuery("SentTo", "toUser", currentFriendsQuery);