GDBrowser/api/messages/sendMessage.js

module.exports = async (app, req, res) => {

  if (req.method !== 'POST') return res.status(405).send("Method not allowed.")

  if (!req.body.targetID) return res.status(400).send("No target ID provided!")
  if (!req.body.message) return res.status(400).send("No message provided!")
  if (!req.body.accountID) return res.status(400).send("No account ID provided!")
  if (!req.body.password) return res.status(400).send("No password provided!")

  let subject = Buffer.from(req.body.subject ? (req.body.color ? "☆" : "") + (req.body.subject.slice(0, 50)) : (req.body.color ? "☆" : "") + "No subject").toString('base64').replace(/\//g, '_').replace(/\+/g, "-")
  let body = app.xor.encrypt(req.body.message.slice(0, 300), 14251)

  let params = req.gdParams({
    accountID: req.body.accountID,
    gjp: app.xor.encrypt(req.body.password, 37526),
    toAccountID: req.body.targetID,
    subject, body,
  })

  req.gdRequest('uploadGJMessage20', params, function (err, resp, body) {
    if (body != 1) return res.status(400).send(`The Geometry Dash servers refused to send the message! Try again later, or make sure your username and password are entered correctly. Last worked: ${app.timeSince(req.id)} ago.`)
    else res.status(200).send('Message sent!')
    app.trackSuccess(req.id)
  })

}