lowercase username input in login form
This commit is contained in:
@@ -24,10 +24,12 @@ def log_in():
|
|||||||
@bp.post('/log-in')
|
@bp.post('/log-in')
|
||||||
@redirect_if_logged_in()
|
@redirect_if_logged_in()
|
||||||
def log_in_post():
|
def log_in_post():
|
||||||
user = Users.find({'username': request.form['username']})
|
username = request.form.get('username', default='').lower()
|
||||||
|
user = Users.find({'username': username})
|
||||||
if not user:
|
if not user:
|
||||||
return redirect(url_for('.log_in', error='The username or password you entered is incorrect.'))
|
return redirect(url_for('.log_in', error='The username or password you entered is incorrect.'))
|
||||||
if not verify(user.password_hash, request.form['password']):
|
password = request.form.get('password', default='')
|
||||||
|
if not verify(user.password_hash, password):
|
||||||
return redirect(url_for('.log_in', error='The username or password you entered is incorrect.'))
|
return redirect(url_for('.log_in', error='The username or password you entered is incorrect.'))
|
||||||
|
|
||||||
session['remember'] = request.form.get('remember') == 'on'
|
session['remember'] = request.form.get('remember') == 'on'
|
||||||
|
|||||||
Reference in New Issue
Block a user