def post(self, request):
admin_email = request.POST.get('admin-email')
admin_pass = request.POST.get('admin-password')
cursor = connection.cursor()
sql = "SELECT ADMIN_PASSWORD, ADMIN_ID, ADMIN_NAME, ADMIN_EMAIL FROM ADMIN WHERE ADMIN_EMAIL=%s"
cursor.execute(sql, [admin_email])
result = cursor.fetchall()
cursor.close()
try:
fetched_pass = result[0][0]
# hashed_admin_password = hashlib.sha256(admin_pass.encode()).hexdigest()
hashed_admin_password = admin_pass
if fetched_pass == hashed_admin_password:
request.session['admin_id'] = result[0][1]
request.session['auth_token'] = create_auth_token(user_id=result[0][1])
request.session['user_type'] = 'admin'
request.session['user_email'] = result[0][3]
request.session['user_name'] = result[0][2]
return redirect('admin-dashboard-view')
else:
messages.error(request, 'Password did not match. Enter correctly!')
return redirect('admin-login-view')
except:
messages.error(request,'Your email address is not found in our database. Enter it correctly!')
return redirect('admin-login-view')
def post(self, request):
owner_email = request.POST.get('owner-email')
owner_pass = request.POST.get('owner-password')
cursor = connection.cursor()
sql = "SELECT PASSWORD, OWNER_ID, PHOTO_PATH, OWNER_NAME FROM OWNER WHERE EMAIL_ADDRESS=%s"
cursor.execute(sql, [owner_email])
result = cursor.fetchall()
cursor.close()
try:
fetched_pass = result[0][0]
hashed_owner_password = hashlib.sha256(
owner_pass.encode()).hexdigest()
if fetched_pass == hashed_owner_password:
owner_id = result[0][1]
owner_photo = result[0][2]
owner_name = result[0][3]
cursor = connection.cursor()
sql = "SELECT IS_VERIFIED FROM OWNER_EMAIL_VERIFICATION WHERE EMAIL_ADDRESS=%s"
cursor.execute(sql, [owner_email])
verify = cursor.fetchall()
cursor.close()
v = int(verify[0][0])
if v == 0:
messages.error(
request,
'Email has not been verified yet. Please check your email and verify.'
)
return redirect('owner-landing-view')
else:
request.session['owner_id'] = owner_id
request.session['auth_token'] = create_auth_token(owner_id)
request.session['user_type'] = 'owner'
request.session['user_name'] = owner_name
request.session['user_email'] = owner_email
request.session['user_photo'] = owner_photo
return redirect('owner-dashboard-view')
else:
messages.error(request,
'Password did not match. Enter correctly!')
return redirect('owner-landing-view')
except:
messages.error(
request,
'Your email address is not found in our database. Enter it correctly!'
)
return redirect('owner-landing-view')