def new_deal(): context['page_name'] = 'New Deal' form = DealForm() if form.validate_on_submit(): try: g.conn.execute( 'INSERT INTO deal(addedBy, projectName, \ projectScore, teamScore, projectStatus, industry, memo) \ VALUES (%s, %s, %s, %s, %s, %s, %s)', session['user'], form.projectName.data, form.projectScore.data, form.teamScore.data, form.projectStatus.data, form.industry.data, form.memo.data) return redirect('/success') except Exception: return render_template('new_deal.html', form=form, **context) return render_template('new_deal.html', form=form, **context)
def my_account(): if "auth_field" in session: dbcursor.execute( "SELECT amount FROM stock_tracker WHERE user_id = %s AND symbol = %s", (session['_id'], 'money')) dbres = dbcursor.fetchone() form = DealForm(user_id=session['_id']) if form.validate_on_submit(): place_deal(request.form, session["_id"]) dbcursor.execute( "UPDATE stock_tracker SET amount = amount - %s WHERE symbol = %s AND user_id = %s", (request.form['number'], request.form['symbol'], session['_id'])) db.commit() flash('Deal placed successfully', 'success') return render_template('my.account.html', auth_name=session["auth_field"], funds=dbres[0], form=form) else: return render_template('my.account.html', auth_name=session["auth_field"], funds=dbres[0], form=form)