lowercase username input in login form

This commit is contained in:
2026-04-17 06:42:44 +03:00
parent 76d600f01d
commit 0e71f597c9

View File

@@ -24,10 +24,12 @@ def log_in():
@bp.post('/log-in') @bp.post('/log-in')
@redirect_if_logged_in() @redirect_if_logged_in()
def log_in_post(): def log_in_post():
user = Users.find({'username': request.form['username']}) username = request.form.get('username', default='').lower()
user = Users.find({'username': username})
if not user: if not user:
return redirect(url_for('.log_in', error='The username or password you entered is incorrect.')) return redirect(url_for('.log_in', error='The username or password you entered is incorrect.'))
if not verify(user.password_hash, request.form['password']): password = request.form.get('password', default='')
if not verify(user.password_hash, password):
return redirect(url_for('.log_in', error='The username or password you entered is incorrect.')) return redirect(url_for('.log_in', error='The username or password you entered is incorrect.'))
session['remember'] = request.form.get('remember') == 'on' session['remember'] = request.form.get('remember') == 'on'