customer.views/login()

def login(request):
    if request.method == "POST":
        username = request.POST['username']
        password_input = request.POST['password']
        hashed_password = hashlib.md5(password_input.encode('utf-8')).hexdigest()

        cursor = connection.cursor()
        sql = "SELECT USERNAME,PASSWORD FROM EMPLOYEES WHERE USERNAME = '" + username + "';"
        cursor.execute(sql)
        result = cursor.fetchall()
        cursor.close()
        username_fetched = ""
        password_fetched = ""

        if cursor.rowcount > 0:
            username_fetched = [value[0] for value in result]
            username_fetched = str(username_fetched[0])

            password_fetched = [value[1] for value in result]
            password_fetched = str(password_fetched[0])
        if username_fetched == username:
            if password_fetched == hashed_password:

                create_session(request, username)
                if username[0:2] == "cm":
                    return redirect(administrator_view.show_employees)
                elif username[0:5] == "sales":
                    return redirect(sales_view.load)
                elif username[0:9] == "servicing":
                    return redirect(servicing_view.load_2)
            else:
                messages.error(request, 'Wrong Password')
                return render(request, 'login.html')
        else:
            messages.error(request, 'No username exists')
            return render(request, 'login.html')

    else:
        return render(request, "login.html")