node.js - the code working right but i still get Error: Can't set headers after they are sent -


i working on code protect node.js login script brute fore attacks add this (express-rate-limit) code , worked , result want after redirect happen error massage

error: can't set headers after sent. @ validateheader (_http_outgoing.js:504:11) @ serverresponse.setheader (_http_outgoing.js:511:3) @ object.handler (/opt/lampp/htdocs/x/chessmult/regtest/using-passport-with-sequelize-and-mysql-master/node_modules/express-rate-limit/lib/express-rate-limit.js:25:17) @ /opt/lampp/htdocs/x/chessmult/regtest/using-passport-with-sequelize-and-mysql-master/node_modules/express-rate-limit/lib/express-rate-limit.js:79:30 @ memorystore.incr (/opt/lampp/htdocs/x/chessmult/regtest/using-passport-with-sequelize-and-mysql-master/node_modules/express-rate-limit/lib/memory-store.js:12:7)

i tried using 

return

with res.redirect still error code 

var ratelimit = require('express-rate-limit');    var loginacclimiter = new ratelimit({   windowms: 60*60*1000, // 1 hour window    delayafter: 1, // begin slowing down responses after first request    delayms: 3*1000, // slow down subsequent responses 3 seconds per request    max: 1, // start blocking after 5 requests     onlimitreached: (function (req,res) {      req.flash('thelimitlogin', 'error:you maked alot of wrong login not allowed login next hour ');      res.redirect('/signin')       return;         }) });   app.get('/signin', function (req, res, next) { var personlist = []; var personlist2 = [];  var person = {                 'theemaildexist':req.flash('emaildexist'),                 'limitlogin':req.flash('thelimitlogin')                   //'date':rows[i].ptime                 }  var person2 = {                  'theincorrectpass':req.flash('incorrectpass')                  //'date':rows[i].ptime                 }                 //console.log(rows[i].contact);                 personlist.push(person);                 personlist2.push(person2);          //console.log('threq',req.flash('emailmessage'));         res.render('signin',{"personlist": personlist,"personlist2": personlist2})         return;         //res.send();          });   app.post('/signin',loginacclimiter,   passport.authenticate('local-signin',{failureredirect: '/signin',failureflash : true}),   function(req, res,next) {     // if function gets called, authentication successful.     // `req.user` contains authenticated user.     sess = req.session;     sess.email=req.user.email;     res.redirect('/users/' + req.user.email);   });


Comments

Post a Comment

Popular posts from this blog

android - InAppBilling registering BroadcastReceiver in AndroidManifest -

i'm implementing inapp billing in android app. works well, however, i'm trying decouple broadcast receiver activity manifest. suggestion in android's trivialdrive sample: // important: dynamically register broadcast messages updated purchases. // register receiver here instead of <receiver> in manifest // because call getpurchases() @ startup, therefore can ignore // broadcasts sent while app isn't running. // note: registering listener in activity bad idea, done here // because sample. regardless, receiver must registered after // iabhelper setup, before first call getpurchases(). currently there's class extends broadcastreceiver : public class iabbroadcastreceiver extends broadcastreceiver { /** * intent action receiver should filter for. */ public static final string action = "com.android.vending.billing.purchases_updated"; private final iabbroadcastlistener mlistener; public iabbroadcastreceiver(iabbroadcastlistener listener) { m...
Read more

python Tkinter Capturing keyboard events save as one single string -

is possible store keyboard events 1 string? code below stores 1 char , prints it. card reader or bar code reader, contains collection of character/ string not 1 character @ time. goal save char pressed text variable. from tkinter import * root = tk() def key(event): text= event.char text+= event.char print ("pressed", text) def callback(event): frame.focus_set() print ("clicked at", event.x, event.y) frame = frame(root, width=100, height=100) frame.bind("<key>", key) frame.bind("<button-1>", callback) frame.pack() root.mainloop() currently, creating text variable , everytime key() function gets called, , text stores last character typed. you can define text module level variable , , use module level text inside key function - text = '' def key(event): global text text+= event.char print("pressed", text)
Read more

sql server - Why does Linq-to-SQL add unnecessary COUNT()? -

here tables: create table customer ( cid int primary key, name varchar(32) ) create table ord ( oid int primary key, cid int foreign key references customer, address varchar(20) ) here's linq-to-sql statement: var aaa = c in db.customer select new { c, o = c.ord.tolist() }; and here's inexplicable query generated linq-to-sql: select [t0].[cid] [cid], [t0].[name] [name], [t1].[oid] [oid], [t1].[cid] [cid2], [t1].[address] [address], (select count(*) [dbo].[ord] [t2] [t2].[cid] = [t0].[cid]) [value] [dbo].[customer] [t0] left outer join [dbo].[ord] [t1] on [t1].[cid] = [t0].[cid] order [t0].[cid], [t1].[oid] i want understand how rid of count(*) part. it's entirely uncalled for! linq needs count(*) in order determine number of entries returned o = c.ord.tolist() .
Read more