Skip to content

Add hashing to updateUser() for password changing #3

Merged
merged 1 commit into from Oct 27, 2021
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
6 changes: 4 additions & 2 deletions app/app.py
Expand Up @@ -220,10 +220,12 @@ def updateUser(userId):
if flask.request.method == "POST":
logging.warning("------------------------")
current = flask.request.form.get("current")
hashedCurrent = hashlib.sha512(current.encode()).hexdigest()
password = flask.request.form.get("password")
hashedPw = hashlib.sha512(password.encode()).hexdigest()
if current:
if current == thisUser.password:
thisUser.password = password
if hashedCurrent == thisUser.password:
thisUser.password = hashedPw
db.session.commit()
else:
flask.flash("Current Password is incorrect")
Expand Down