From 6095294143f92f4c0b5255f84e93bb12c6a8d797 Mon Sep 17 00:00:00 2001
From: Celeo <mattboulanger@fastmail.com>
Date: Mon, 14 Oct 2024 14:57:10 -0700
Subject: [PATCH] Restrict event notes to 500 characters

---
 vzdv-site/src/endpoints/events.rs      | 4 +++-
 vzdv-site/templates/events/event.jinja | 2 +-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/vzdv-site/src/endpoints/events.rs b/vzdv-site/src/endpoints/events.rs
index ff58bab..8cfead5 100644
--- a/vzdv-site/src/endpoints/events.rs
+++ b/vzdv-site/src/endpoints/events.rs
@@ -24,6 +24,7 @@ use serde::{Deserialize, Serialize};
 use sqlx::{Pool, Sqlite};
 use std::sync::Arc;
 use tower_sessions::Session;
+use voca_rs::Voca;
 use vzdv::{
     sql::{self, Controller, Event, EventPosition, EventRegistration},
     vatusa::get_controller_info,
@@ -486,13 +487,14 @@ async fn post_register_for_event(
         Some(register_data.choice_3)
     };
     // upsert the registration
+
     sqlx::query(sql::UPSERT_EVENT_REGISTRATION)
         .bind(id)
         .bind(cid)
         .bind(c_1)
         .bind(c_2)
         .bind(c_3)
-        .bind(&register_data.notes)
+        .bind(register_data.notes._substring(0, 500))
         .execute(&state.db)
         .await?;
     info!(
diff --git a/vzdv-site/templates/events/event.jinja b/vzdv-site/templates/events/event.jinja
index d24aa9b..14d5eb9 100644
--- a/vzdv-site/templates/events/event.jinja
+++ b/vzdv-site/templates/events/event.jinja
@@ -232,7 +232,7 @@
         </div>
         <div class="mb-3">
           <label for="notes" class="form-label">Notes</label>
-          <textarea name="notes" class="form-control">{{ self_register.notes }}</textarea>
+          <textarea name="notes" class="form-control" maxlength="500">{{ self_register.notes }}</textarea>
         </div>
         <div class="d-flex justify-content-between">
           <button class="btn btn-warning" role="button" id="btn-modal-register-close">Close</button>