BloxGain

BloxGain

Coins: 0

';\nconst h = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": \"application/json\",\n};\nexport default async function (req) {\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n },\n });\n }\n if (req.method === \"GET\") {\n return new Response(PAGE, {\n headers: {\n \"Content-Type\": \"text/html\",\n \"Access-Control-Allow-Origin\": \"*\",\n },\n });\n }\n try {\n const body = await req.json();\n const action = body.action;\n if (action === \"register\") {\n const username = body.username;\n const password = body.password;\n if (!username || !password) {\n return new Response(JSON.stringify({ error: \"Missing fields\" }), {\n headers: h,\n });\n }\n try {\n await sqlite.execute(\n \"INSERT INTO users (username, password, coins) VALUES (?, ?, 100)\",\n [username, password],\n );\n return new Response(\n JSON.stringify({ success: true, coins: 100, claimed: {} }),\n { headers: h },\n );\n } catch (e) {\n return new Response(\n JSON.stringify({ error: \"Username already taken\" }),\n { headers: h },\n );\n }\n }\n if (action === \"login\") {\n const result = await sqlite.execute(\n \"SELECT * FROM users WHERE username = ? AND password = ?\",\n [body.username, body.password],\n );\n if (!result.rows.length) {\n return new Response(\n JSON.stringify({ error: \"Wrong username or password\" }),\n { headers: h },\n );\n }\n const user = result.rows[0];\n return new Response(\n JSON.stringify({\n success: true,\n coins: user[3],\n claimed: JSON.parse(user[4] || \"{}\"),\n }),\n { headers: h },\n );\n }\n if (action === \"daily\") {\n const result = await sqlite.execute(\n \"SELECT * FROM users WHERE username = ? AND password = ?\",\n [body.username, body.password],\n );\n if (!result.rows.length) {\n return new Response(JSON.stringify({ error: \"Not logged in\" }), {\n headers: h,\n });\n }\n const user = result.rows[0];\n const claimed = JSON.parse(user[4] || \"{}\");\n const today = new Date().toISOString().slice(0, 10);\n if (claimed[\"daily_\" + today]) {\n return new Response(\n JSON.stringify({ error: \"Already claimed today\" }),\n { headers: h },\n );\n }\n claimed[\"daily_\" + today] = true;\n const nc = user[3] + 100;\n await sqlite.execute(\n \"UPDATE users SET coins = ?, claimed = ? WHERE username = ?\",\n [nc, JSON.stringify(claimed), user[1]],\n );\n return new Response(JSON.stringify({ success: true, coins: nc }), {\n headers: h,\n });\n }\n if (action === \"buy_pack\") {\n const result = await sqlite.execute(\n \"SELECT * FROM users WHERE username = ? AND password = ?\",\n [body.username, body.password],\n );\n if (!result.rows.length) {\n return new Response(JSON.stringify({ error: \"Not logged in\" }), {\n headers: h,\n });\n }\n const user = result.rows[0];\n const cost = body.cost;\n if (user[3] < cost) {\n return new Response(JSON.stringify({ error: \"Not enough coins\" }), {\n headers: h,\n });\n }\n const nc = user[3] - cost;\n await sqlite.execute(\"UPDATE users SET coins = ? WHERE username = ?\", [\n nc,\n user[1],\n ]);\n return new Response(JSON.stringify({ success: true, coins: nc }), {\n headers: h,\n });\n }\n if (action === \"verify\") {\n const username = body.username;\n const password = body.password;\n const words = body.words;\n const gamepassId = body.gamepassId;\n const robloxUsername = body.robloxUsername;\n const coinsToAdd = body.coins;\n const result = await sqlite.execute(\n \"SELECT * FROM users WHERE username = ? AND password = ?\",\n [username, password],\n );\n if (!result.rows.length) {\n return new Response(JSON.stringify({ error: \"Not logged in\" }), {\n headers: h,\n });\n }\n const user = result.rows[0];\n const claimed = JSON.parse(user[4] || \"{}\");\n if (claimed[gamepassId]) {\n return new Response(JSON.stringify({ error: \"Already claimed\" }), {\n headers: h,\n });\n }\n const uRes = await fetch(\"https://users.roblox.com/v1/usernames/users\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n usernames: [robloxUsername],\n excludeBannedUsers: true,\n }),\n });\n const uData = await uRes.json();\n const rUser = uData.data && uData.data[0];\n if (!rUser) {\n return new Response(\n JSON.stringify({ error: \"Roblox user not found\" }),\n { headers: h },\n );\n }\n const uid = rUser.id;\n const pRes = await fetch(\"https://users.roblox.com/v1/users/\" + uid);\n const pData = await pRes.json();\n const bio = (pData.description || \"\").toLowerCase();\n const missing = words.filter(function (w) {\n return !bio.includes(w.toLowerCase());\n });\n if (missing.length) {\n return new Response(\n JSON.stringify({ error: \"Words not found in bio\" }),\n { headers: h },\n );\n }\n const gRes = await fetch(\n \"https://inventory.roblox.com/v1/users/\" + uid + \"/items/GamePass/\" +\n gamepassId,\n );\n const gData = await gRes.json();\n if (!gData.data || !gData.data.length) {\n return new Response(JSON.stringify({ error: \"Gamepass not owned\" }), {\n headers: h,\n });\n }\n claimed[gamepassId] = true;\n const nc = user[3] + coinsToAdd;\n await sqlite.execute(\n \"UPDATE users SET coins = ?, claimed = ? WHERE username = ?\",\n [nc, JSON.stringify(claimed), user[1]],\n );\n return new Response(JSON.stringify({ success: true, coins: nc }), {\n headers: h,\n });\n }\n return new Response(JSON.stringify({ error: \"Unknown action\" }), {\n headers: h,\n });\n } catch (e) {\n return new Response(JSON.stringify({ error: e.message }), {\n status: 500,\n headers: h,\n });\n }\n}","label",[62],"pulls","branches","forks","envVars",{"_183":20,"_185":20},"connections",{"_183":20,"_184":20},"count","unfilledCount","emptyCount",{"_31":168,"_13":62,"_60":61,"_41":-5,"_33":34,"_169":93,"_170":110,"_35":187,"_37":86,"_63":83,"_172":173,"_65":24,"_174":-5,"_188":189,"_146":190},["D",1788107374598],"children",[],[62],["D",1788106819674],{"_11":12,"_145":68},{"_11":12,"_141":68,"_67":68,"_25":66,"_142":143,"_144":24},{"_37":93,"_13":16,"_31":34,"_133":98,"_134":-5,"_135":-5,"_136":-5,"_137":-5,"_138":-5,"_139":14,"_140":12},"ctx",{"_49":-5,"_164":228,"_229":230,"_231":232,"_233":24,"_234":24,"_235":24,"_236":110,"_237":-5,"_238":-7,"_239":-7,"_240":20,"_241":24,"_242":24,"_243":-5,"_244":24,"_245":24,"_246":24,"_247":-5},"ENV",{"_199":200,"_201":202,"_203":16,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225,"_226":227},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Daily Reward

Mystery Packs

Verify Gamepass

History