def login(): account = request.form.get('account', '') password = request.form.get('password', '') Msg = 'Welcome to 1A2B game filed.<br>Please log in to start a game.' #you can put error message here if request.method == 'POST': #push login button db = DB.open_database() userInfo = DB.getUserInfo(db, account) pprint.pprint(userInfo) if password == userInfo[2]: session['username'] = userInfo[3] session['account'] = userInfo[1] session['csrf_token'] = uuid.uuid4().hex return redirect(url_for('index')) else: Msg = 'Please check your account/password' return render_template('login.html', account=account, msg=Msg)