From 3e84c652824cb68ab88e1f338b5d394500a4ae54 Mon Sep 17 00:00:00 2001
From: david <david@socialnerds.org>
Date: Sun, 25 Aug 2013 19:59:06 +0200
Subject: [PATCH] devel..

---
 app.py               | 11 +++++++----
 templates/login.html |  4 ++--
 2 files changed, 9 insertions(+), 6 deletions(-)

diff --git a/app.py b/app.py
index 83e9027..34b3e4e 100755
--- a/app.py
+++ b/app.py
@@ -14,11 +14,14 @@ def index():
 @app.route("/login", methods = ["GET", "POST"])
 def login():
     if request.method == "POST":
-        session["username"] = request.form["username"]
-        if 'login' in request.referrer:
-            return redirect(url_for('index'))
+        if request.form["password"] == "tool":
+            session["username"] = request.form["username"]
+            if 'login' in request.referrer:
+                return redirect(url_for('index'))
+            else:
+                return redirect(request.referrer)
         else:
-            return redirect(request.referrer)
+            return 'Error: Wrong username or password! <a href="login">login</a>'
     return render_template("login.html")
 
 @app.route("/logout")
diff --git a/templates/login.html b/templates/login.html
index 380e750..284d4be 100644
--- a/templates/login.html
+++ b/templates/login.html
@@ -4,8 +4,8 @@
 <h1>Login</h1>
 <b>Please login:</b><br><br>
 <form method="post" action="login">
-username: <input type="text" name="username"><br>
-password: <input type="password" name="password"><br>
+<input type="text" name="username" value="username"><br>
+<input type="password" name="password" value="password"><br>
 <input type="submit" value="login">
 </form>
 {% endblock %}