Stupid-Hack API

app.js

const express = require('express');
const bodyParser = require('body-parser');
const mysql = require('mysql');

const config = {
    host: '157.230.243.208',
    user: 'rathena',
    password: 'P@ssw0rd#123',
    database: 'rathena'
};

const conn = mysql.createConnection(config);

const app = express();
app.use(bodyParser.json());

app.get('/', (req,res) => {
    res.send('hello world');
});

app.post('/command', (req,res) => {
    var body = req.body;
    const sql = `INSERT INTO \`cp_commands\` (\`command\`, \`issuer\`, \`account_id\`, \`done\`, \`timestamp\`) VALUES ('${body.command}', '${body.issuer}', '${body.account_id}', 0, NULL);`
    console.log(sql);
    conn.query(sql);
    res.sendStatus(204);
});

app.listen(8888, () => {
    console.log('application start');
});