login

from flask import Flask, render_template, request, session, abort,redirect, url_for, escape
from encrypt import encryptdatee,encrypt1namee,encrypt1namea,encryptemail,encryptphone,encryptpassword,encryptnationality,encryptgender
import sqlite3 as sql
import os
import hashlib,binascii

app = Flask(__name__)
app.secret_key = os.urandom(24)
@app.route("/login",methods=['GET','POST'])
def login():
    if request.method == 'POST':
        username = request.form['username']
        password = request.form['password']
        level=request.form['level']
        print(request.method)
       # if request.form['password'] == password and request.form['username'] == username:
          #  session['logged_in'] = True
        conn = sql.connect('alaa2.db', timeout=10)
        conn.row_factory = sql.Row
        cursor = conn.cursor()
        enc_password = encryptpassword(password, 'alaa')
        print(enc_password)
        cursor.execute("SELECT * FROM mydata WHERE username=(?) AND password=(?)", (username, enc_password,))
        if level=="3":
            cursor.execute("SELECT * FROM mydata")
            data = cursor.fetchone()
            conn.commit()
            return render_template('wellcom.html', data=data)
        else:
            cursor.execute("SELECT * FROM mydata WHERE username=(?) AND password=(?)", (username, enc_password,))
            data = cursor.fetchone()
            conn.commit()
            conn.close()
            return render_template('wellcom.html', data=data)
 #       else:
  #          return redirect(url_for('boot'))
    else:
        return render_template('login.html')
@app.route("/sign",methods=['GET','POST'])
def sign():
    if request.method == 'POST':
        print(request.method)
        username = request.form['username']
        password = request.form['password']
        namee = request.form['namee']
        namea = request.form['namea']
        email = request.form['email']
        phone = request.form['phone']
        gender = request.form['gender']
        nationality = request.form['nationality']
        datee = request.form['datee']
        conn = sql.connect('alaa2.db', timeout=10)
        conn.row_factory = sql.Row
        cursor = conn.cursor()
        enc_password = encryptpassword(password, 'alaa')
        enc_phone = encryptphone(phone, 'alaa')
        enc_email = encryptemail(email, 'alaa')
        enc_datee = encryptdatee(datee, 'alaa')
        enc_namee = encrypt1namee(namee, 'alaa')
        enc_gender = encryptgender(gender, 'alaa')
        enc_namea = encrypt1namea(namea, 'alaa')
        enc_nationality =encryptnationality(nationality , 'alaa')
        cursor.execute("INSERT INTO mydata(username, password, namee, namea,email, phone, gender, nationality, datee)""VALUES"
           "(?,?,?,?,?,?,?,?,?)",(username, enc_password, enc_namee, enc_namea, enc_email, enc_phone, enc_gender,enc_nationality, enc_datee,))
        data = {'username': username,'password': password,'namea': namea ,'namee': namee ,
            'email': email,'phone': phone,'gender': gender ,'nationality': nationality,'datee': datee}
        conn.commit()
        conn.close()
        return render_template('sign.html', data=data)
    else:
        return render_template('sign.html')
if __name__ == '__main__':
    app.run(debug=True)