125

src/a3d/admin.nim

@@ -13,12 +13,15 @@ proc admin*(ctx: Context): string=
 
 proc adminShow*(ctx: Context, id: int): string=
   var
-    db = newDatabase()
-    orders = db.getOrders(id)
-    user = db.getUserByID(id)
     cookies = ctx.cookies
     adminEmail = cookies.getOrDefault("email", "")
     adminPassword = cookies.getOrDefault("password", "")
+  if adminEmail == "":
+    ctx.redirect("/login")
+  var
+    db = newDatabase()
+    orders = db.getOrders(id)
+    user = db.getUserByID(id)
     admin = db.getUser(adminEmail, adminPassword)
   
   compileTemplateFile(getScriptDir() / "a3a" / "admin" / "show.html")