def admin_login():
# get email and password : IN OTHER ITERATIONS WE CAN GET POST from hidden ajax login form
email = request.form['email']
password = request.form['password']
admincode = request.form['admincode']
# if POST used properly passed through Ajax created form in process_login.js .done() function
if request.method == 'POST':
# if login_valid method in user.py class returns TRUE
if Admin.login_valid(email=email, password=password):
# check on admincode code verification HERE
if admincode == '11111':
# start session in admin.py class
Admin.login(email)
return render_template('admin_profile.html', email=session['email'])
return render_template('login_error.html', error='The email or password credentials do not match.')
def login_admin(): # renders the overview page
email = request.form['email']
password = request.form['password']
if Admin.is_login_valid(email, password): # is True
Admin.login(email)
session['email'] = email
else:
session['email'] = "no email"
return "ADMIN NOT FOUND, PLEASE CHECK YOUR CREDENTIALS, OR CONTACT SERVER ADMINISTRATOR"
# collection = 'students'
students = Database.find(collection='students', query={})
# return "HELLO"
return render_template("overview_page.html",
email=session['email'],
students=students)
def admin_login():
if request.method == 'GET':
return render_template(
'admin_login.html', msg='Enter admin username and password'
)
elif request.method == 'POST':
username = request.form['username']
password = request.form['password']
admin = Admin()
if admin.login(username, password):
session['admin'] = username
return redirect(url_for('admin_home'))
else:
return render_template(
'admin_login.html', msg='Invalid Credentials'
)