From 40cba26ccee8ee82171f304b69a6fab3fc3761be Mon Sep 17 00:00:00 2001
From: Dan Janosik <janoside@gmail.com>
Date: Wed, 30 Aug 2017 20:02:54 -0400
Subject: [PATCH] Turn off rpc debug terminal if env.debug=false. Fixes #9.

---
 app.js                      |  1 +
 app/env.js                  |  1 +
 routes/baseActionsRouter.js | 12 ++++++++++++
 views/layout.pug            |  3 ++-
 4 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/app.js b/app.js
index cc23c4b..b85c743 100755
--- a/app.js
+++ b/app.js
@@ -44,6 +44,7 @@ app.use(express.static(path.join(__dirname, 'public')));
 app.use(function(req, res, next) {
 	// make session available in templates
 	res.locals.session = req.session;
+	res.locals.debug = env.debug;
 
 	if (env.bitcoind && env.bitcoind.rpc) {
 		req.session.host = env.bitcoind.host;
diff --git a/app/env.js b/app/env.js
index 55abaf4..1630f68 100644
--- a/app/env.js
+++ b/app/env.js
@@ -1,5 +1,6 @@
 module.exports = {
 	cookiePassword: "0x000000000019d6689c085ae165831e934ff763ae46a2a6c172b3f1b60a8ce26f",
+	debug: false,
 
 	// Uncomment "bitcoind" below to automatically connect via RPC.
 	// Otherwise, you can manually connect via the UI.
diff --git a/routes/baseActionsRouter.js b/routes/baseActionsRouter.js
index ee3d100..ef1a135 100644
--- a/routes/baseActionsRouter.js
+++ b/routes/baseActionsRouter.js
@@ -285,10 +285,22 @@ router.get("/tx/:transactionId", function(req, res) {
 });
 
 router.get("/terminal", function(req, res) {
+	if (!env.debug) {
+		res.send("Debug mode is off.");
+
+		return;
+	}
+
 	res.render("terminal");
 });
 
 router.post("/terminal", function(req, res) {
+	if (!env.debug) {
+		res.send("Debug mode is off.");
+
+		return;
+	}
+
 	client.cmd(req.body.cmd, function(err, result, resHeaders) {
 		console.log(result);
 		console.log(err);
diff --git a/views/layout.pug b/views/layout.pug
index 2d32554..c52618d 100644
--- a/views/layout.pug
+++ b/views/layout.pug
@@ -32,7 +32,8 @@ html
 					if (client)
 						ul(class="navbar-nav mr-auto")
 							li(class="nav-item")
-								a(href="/terminal", class="nav-link") RPC Terminal
+								if (debug)
+									a(href="/terminal", class="nav-link") RPC Terminal
 						form(method="post", action="/search", class="form-inline")
 							input(class="form-control form-control-sm mr-sm-2", type="text", name="query", placeholder="block height, block hash, txid", style="width: 300px;")
 							button(class="btn btn-primary btn-sm", type="submit") Search