hashing

Author: eniompw

README.md

@@ -5,8 +5,9 @@
 3. [Insert & Select](https://github.com/eniompw/FlaskLogin/blob/master/first_db.py)
 4. [Just Signup](https://github.com/eniompw/FlaskLogin/blob/master/signup.py)
 5. [Signup & Login](https://github.com/eniompw/FlaskLogin/blob/master/signup%26login.py)
-6. [Sessions](https://github.com/eniompw/FlaskLogin/blob/master/sessions.py)
-7. [Full Example](https://github.com/eniompw/FlaskLogin/blob/master/main.py)
+6. [Hashing](https://github.com/eniompw/FlaskLogin/blob/master/hash.py)
+7. [Sessions](https://github.com/eniompw/FlaskLogin/blob/master/sessions.py)
+8. [Full Example](https://github.com/eniompw/FlaskLogin/blob/master/main.py)
 
 * [Forms in Flask](https://github.com/eniompw/FormsInFlask)
 * [Postgres on Heroku](https://github.com/eniompw/FlaskPostgres)

hash.py

@@ -0,0 +1,47 @@
+from flask import Flask, render_template, request
+import sqlite3
+import hashlib
+
+app = Flask(__name__)
+con = sqlite3.connect("Database.db")
+cur = con.cursor()
+cur.execute(""" CREATE TABLE IF NOT EXISTS User(
+                Username VARCHAR(20) NOT NULL PRIMARY KEY,
+                Password VARCHAR(64) NOT NULL);
+            """)
+con.commit()
+con.close()
+
+@app.route("/signup", methods=["GET", "POST"])
+def signup():
+    if request.method == "GET":
+        return render_template("signup.html")
+    else:
+        con = sqlite3.connect("login.db")
+        cur = con.cursor()
+        encoded = request.form['Password'].encode()
+        hash = hashlib.sha256(encoded).hexdigest()
+        cur.execute("INSERT INTO User (Username, Password) VALUES (?,?)",
+                        (request.form['Username'], hash))
+        con.commit()
+        con.close()
+    return "Signup Successful"
+
+@app.route("/", methods=["GET", "POST"])
+def login():
+    if request.method == "GET":
+        return render_template("index.html")
+    else:
+        con = sqlite3.connect('login.db')
+        cur = con.cursor()
+        encoded = request.form['Password'].encode()
+        hash = hashlib.sha256(encoded).hexdigest()
+        cur.execute("SELECT * FROM User WHERE Username=? AND Password=?",
+                        (request.form['Username'], hash))
+        if len(cur.fetchall()) == 0:
+            return "Wrong username and password"
+        else:
+            return "Welcome " + request.form['Username']
+
+if __name__ == "__main__":
+    app.run(debug=True)