Updated vague DB query which could lead to pwned accounts

README.md

@@ -9,7 +9,7 @@ Canopy
 <a href="https://git.ourfore.st/rainbownapkin/canopy/issues" target="_blank"><img src="https://git.ourfore.st/rainbownapkin/canopy/badges/issues/closed.svg"></a>
 <a href="https://www.gnu.org/licenses/agpl-3.0.en.html" target="_blank"><img src="https://img.shields.io/badge/License-AGPL_v3-663366.svg"></a>
 
-0.4-INDEV Hotfix 1
+0.4-INDEV Hotfix 2
 =========
 
 Canopy - /ˈkæ.nə.pi/:

src/controllers/api/account/deleteController.js

@@ -38,7 +38,7 @@ module.exports.post = async function(req, res){
                 return res.send('Invalid Session! Cannot delete account while logged out!'); 
             }
 
-            const userDB = await userModel.findOne(user);
+            const userDB = await userModel.findOne({user: user.user});
 
 
             if(!userDB){

src/controllers/api/account/updateController.js

@@ -46,7 +46,7 @@ module.exports.post = async function(req, res){
             const {field, change} = data;
             const {user} = req.session;
 
-            const userDB = await userModel.findOne(user);
+            const userDB = await userModel.findOne({user: user.user});
             const update = {};
 
 

src/schemas/tokebot/tokeCommandSchema.js

@@ -40,7 +40,7 @@ tokeCommandSchema.pre('save', async function (next){
     if(this.isModified("command")){
         if(server.channelManager != null && 
            server.channelManager.chatHandler != null &&
-           server.channelManager.chatHandler.chatPreprocessor == null){
+           server.channelManager.chatHandler.chatPreprocessor != null){
 
             //Get server tokebot object
             const tokebot = server.channelManager.chatHandler.chatPreprocessor.tokebot;