INNER CODE UNIT · Python

login_query

l4wio/CTF-challenges-by-me · 0x3004/200-XYZBANK/app.py:36

def login_query(params):
	return fetch_one_db(
			'SELECT * FROM {0} WHERE username=%s AND password=%s AND pin=%s'.format(TABLE_USERS)
			,params)

@app.route('/',methods=['GET'])
def index():
	if 'credential' in request.cookies:
		return redirect('/info')
	return render_template('index.html')

@app.route('/logout')
def logout():
	resp = make_response(redirect('/'));
	resp.set_cookie('credential','',expires=0); 
	return resp

@app.route('/login',methods=['POST'])

View source record →