Syncing with source

.gitignore

@@ -1 +1,2 @@
-*~
+*~
+app/__pycache__

app/app.py

@@ -48,19 +48,15 @@ def index():
     return flask.render_template("index.html",
                                  bookList = bookQry)
 
-
 @app.route("/about")
 def about():
     return flask.render_template("about.html")
 
-
-
 @app.route("/login", methods=["GET", "POST"])
 def login():
-
     prev = flask.request.args.get("prev")
     if not prev:
-        prev == "index"
+        prev = "index"
 
     if flask.request.method == "POST":
         #Get data
@@ -224,10 +220,12 @@ def updateUser(userId):
     if flask.request.method == "POST":
         logging.warning("------------------------")
         current = flask.request.form.get("current")
+        hashedCurrent = hashlib.sha512(current.encode()).hexdigest()
         password = flask.request.form.get("password")
+        hashedPw = hashlib.sha512(password.encode()).hexdigest()
         if current:
-            if current == thisUser.password:
-                thisUser.password = password
+            if hashedCurrent == thisUser.password:
+                thisUser.password = hashedPw
                 db.session.commit()
             else:
                 flask.flash("Current Password is incorrect")