def delete(): if not authenticated(session): abort(403) else: id_task = request.form.get("id_task") if(id_task == None) or (id_task == ""): flash("The task must have an ID!", category="error") return redirect(request.referrer) conn = connection() task = Task.find_by_id(conn, id_task) if not task: flash("The task doesn't exist!", category="error") else: if Task.belongs_to_user(conn, id_task, session['user']['id']): try: Task.delete(conn, id_task) flash("A task was deleted!", category="success") except: flash("There was an error!", category="error") else: flash("You can't access that task!", category="error") return redirect(request.referrer)