BloxGain

BloxGain

Coins: 0

';\nconst h = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": \"application/json\",\n};\nexport default async function (req) {\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n },\n });\n }\n if (req.method === \"GET\") {\n return new Response(PAGE, {\n headers: {\n \"Content-Type\": \"text/html\",\n \"Access-Control-Allow-Origin\": \"*\",\n },\n });\n }\n try {\n const body = await req.json();\n const action = body.action;\n if (action === \"register\") {\n const username = body.username;\n const password = body.password;\n if (!username || !password) {\n return new Response(JSON.stringify({ error: \"Missing fields\" }), {\n headers: h,\n });\n }\n try {\n await sqlite.execute(\n \"INSERT INTO users (username, password, coins) VALUES (?, ?, 100)\",\n [username, password],\n );\n return new Response(JSON.stringify({ success: true, coins: 100 }), {\n headers: h,\n });\n } catch (e) {\n return new Response(\n JSON.stringify({ error: \"Username already taken\" }),\n { headers: h },\n );\n }\n }\n if (action === \"login\") {\n const result = await sqlite.execute(\n \"SELECT * FROM users WHERE username = ? AND password = ?\",\n [body.username, body.password],\n );\n if (!result.rows.length) {\n return new Response(\n JSON.stringify({ error: \"Wrong username or password\" }),\n { headers: h },\n );\n }\n const user = result.rows[0];\n return new Response(JSON.stringify({ success: true, coins: user[3] }), {\n headers: h,\n });\n }\n if (action === \"daily\") {\n const result = await sqlite.execute(\n \"SELECT * FROM users WHERE username = ? AND password = ?\",\n [body.username, body.password],\n );\n if (!result.rows.length) {\n return new Response(JSON.stringify({ error: \"Not logged in\" }), {\n headers: h,\n });\n }\n const user = result.rows[0];\n const claimed = JSON.parse(user[4] || \"{}\");\n const today = new Date().toISOString().slice(0, 10);\n if (claimed[\"daily_\" + today]) {\n return new Response(\n JSON.stringify({ error: \"Already claimed today\" }),\n { headers: h },\n );\n }\n claimed[\"daily_\" + today] = true;\n const nc = user[3] + 100;\n await sqlite.execute(\n \"UPDATE users SET coins = ?, claimed = ? WHERE username = ?\",\n [nc, JSON.stringify(claimed), user[1]],\n );\n return new Response(JSON.stringify({ success: true, coins: nc }), {\n headers: h,\n });\n }\n if (action === \"buy_pack\") {\n const result = await sqlite.execute(\n \"SELECT * FROM users WHERE username = ? AND password = ?\",\n [body.username, body.password],\n );\n if (!result.rows.length) {\n return new Response(JSON.stringify({ error: \"Not logged in\" }), {\n headers: h,\n });\n }\n const user = result.rows[0];\n if (user[3] < body.cost) {\n return new Response(JSON.stringify({ error: \"Not enough coins\" }), {\n headers: h,\n });\n }\n const nc = user[3] - body.cost;\n await sqlite.execute(\"UPDATE users SET coins = ? WHERE username = ?\", [\n nc,\n user[1],\n ]);\n return new Response(JSON.stringify({ success: true, coins: nc }), {\n headers: h,\n });\n }\n if (action === \"verify\") {\n const username = body.username;\n const password = body.password;\n const words = body.words;\n const gamepassId = body.gamepassId;\n const robloxUsername = body.robloxUsername;\n const coinsToAdd = body.coins;\n const result = await sqlite.execute(\n \"SELECT * FROM users WHERE username = ? AND password = ?\",\n [username, password],\n );\n if (!result.rows.length) {\n return new Response(JSON.stringify({ error: \"Not logged in\" }), {\n headers: h,\n });\n }\n const user = result.rows[0];\n const claimed = JSON.parse(user[4] || \"{}\");\n if (claimed[gamepassId]) {\n return new Response(JSON.stringify({ error: \"Already claimed\" }), {\n headers: h,\n });\n }\n const uRes = await fetch(\"https://users.roblox.com/v1/usernames/users\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n usernames: [robloxUsername],\n excludeBannedUsers: true,\n }),\n });\n const uData = await uRes.json();\n const rUser = uData.data && uData.data[0];\n if (!rUser) {\n return new Response(\n JSON.stringify({ error: \"Roblox user not found\" }),\n { headers: h },\n );\n }\n const uid = rUser.id;\n const pRes = await fetch(\"https://users.roblox.com/v1/users/\" + uid);\n const pData = await pRes.json();\n const bio = (pData.description || \"\").toLowerCase();\n const missing = words.filter(function (w) {\n return !bio.includes(w.toLowerCase());\n });\n if (missing.length) {\n return new Response(\n JSON.stringify({ error: \"Words not found in bio\" }),\n { headers: h },\n );\n }\n const gRes = await fetch(\n \"https://inventory.roblox.com/v1/users/\" + uid + \"/items/GamePass/\" +\n gamepassId,\n );\n const gData = await gRes.json();\n if (!gData.data || !gData.data.length) {\n return new Response(JSON.stringify({ error: \"Gamepass not owned\" }), {\n headers: h,\n });\n }\n claimed[gamepassId] = true;\n const nc = user[3] + coinsToAdd;\n await sqlite.execute(\n \"UPDATE users SET coins = ?, claimed = ? WHERE username = ?\",\n [nc, JSON.stringify(claimed), user[1]],\n );\n return new Response(JSON.stringify({ success: true, coins: nc }), {\n headers: h,\n });\n }\n return new Response(JSON.stringify({ error: \"Unknown action\" }), {\n headers: h,\n });\n } catch (e) {\n return new Response(JSON.stringify({ error: e.message }), {\n status: 500,\n headers: h,\n });\n }\n}","label",[18],"pulls","branches","forks","envVars",{"_170":26,"_172":26},"connections",{"_170":26,"_171":26},"count","unfilledCount","emptyCount",{"_34":155,"_13":18,"_62":63,"_44":-5,"_36":37,"_156":79,"_157":98,"_38":174,"_40":72,"_64":84,"_159":160,"_66":24,"_161":-5,"_175":176,"_17":177},["D",1788109359830],"children",[],[18],["D",1788109193336],{"_11":12,"_133":69},{"_11":12,"_129":69,"_68":69,"_30":67,"_130":131,"_132":24},{"_40":79,"_13":16,"_34":37,"_121":86,"_122":-5,"_123":-5,"_124":-5,"_125":-5,"_126":-5,"_127":14,"_128":12},"ctx",{"_52":-5,"_152":215,"_216":217,"_218":219,"_220":24,"_221":24,"_222":24,"_223":98,"_224":-5,"_225":-7,"_226":-7,"_227":26,"_228":24,"_229":24,"_230":-5,"_231":24,"_232":24,"_233":24,"_234":-5},"ENV",{"_186":187,"_188":189,"_190":16,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Daily Reward

Mystery Packs

Verify Gamepass

History · main.ts