pjoshi235

Untitled

Feb 22nd, 2019
47
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.72 KB | None | 0 0
  1. @app.route('/register', methods=["GET", "POST"])
  2. def register():
  3. if request.method == 'GET':
  4. return render_template("register.html")
  5. else:
  6. user_name = request.form['user_name']
  7. user_email = request.form['user_email']
  8. user_register_as = request.form['user_register_as']
  9. user_password = request.form['user_password'].encode('utf-8')
  10. hash_password = bcrypt.hashpw(user_password, bcrypt.gensalt())
  11.  
  12. cur = mysql.connection.cursor()
  13. cur.execute("INSERT INTO register (user_name, user_email, user_register_as, user_password) VALUES (%s,%s,%s,%s)",(user_name,user_email,user_register_as,hash_password,))
  14. mysql.connection.commit()
  15. session['user_name'] = request.form['user_name']
  16. session['user_email'] = request.form['user_email']
  17. session['user_register_as'] = request.form['user_register_as']
  18. return redirect(url_for('home'))
  19.  
  20.  
  21. @app.route('/login',methods=["GET","POST"])
  22. def login():
  23. if request.method == 'POST':
  24. user_email = request.form['user_email']
  25. user_password = request.form['user_password'].encode('utf-8')
  26.  
  27.  
  28. curl = mysql.connection.cursor(MySQLdb.cursors.DictCursor)
  29. curl.execute("SELECT * FROM register WHERE user_email=%s",(user_email,))
  30. user = curl.fetchone()
  31. curl.close()
  32.  
  33. if len(user) > 0:
  34. if bcrypt.hashpw(user_password, user["user_password"].encode('utf-8')) == user["user_password"].encode('utf-8'):
  35. session['user_name'] = user['user_name']
  36. session['user_email'] = user['user_email']
  37. session['user_register_as'] = user['user_register_as']
  38. return render_template("home.html")
  39. else:
  40. return "Error password & email not match"
  41. else:
  42. return "Error user not found"
  43. else:
  44. return render_template("login.html")
Add Comment
Please, Sign In to add comment