We should use one instead of find_one to really make sure there's only
one such user in the database
This commit is contained in:
parent
d193896315
commit
b058cf15f0
@ -79,7 +79,7 @@ def login(request):
|
|||||||
login_failed = False
|
login_failed = False
|
||||||
|
|
||||||
if request.method == 'POST' and login_form.validate():
|
if request.method == 'POST' and login_form.validate():
|
||||||
user = request.db.User.find_one(
|
user = request.db.User.one(
|
||||||
{'username': request.POST['username']})
|
{'username': request.POST['username']})
|
||||||
|
|
||||||
if user and user.check_login(request.POST['password']):
|
if user and user.check_login(request.POST['password']):
|
||||||
|
Loading…
x
Reference in New Issue
Block a user